mirror of https://git.rancher.io/charts
[v2.10] Bump gke-operator to v1.10.2-rc.1 (#4944)
Michal Jura
GitHub
parent
2715fc3785
commit
67ff8eb322
Binary file not shown.
Binary file not shown.
|
|
@ -0,0 +1,12 @@
|
|||
annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/release-name: rancher-gke-operator-crd
|
||||
apiVersion: v2
|
||||
appVersion: 1.10.2-rc.1
|
||||
description: GKE Operator CustomResourceDefinitions
|
||||
name: rancher-gke-operator-crd
|
||||
version: 105.2.0+up1.10.2-rc.1
|
||||
|
|
@ -0,0 +1,272 @@
|
|||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
helm.sh/resource-policy: keep
|
||||
name: gkeclusterconfigs.gke.cattle.io
|
||||
spec:
|
||||
group: gke.cattle.io
|
||||
names:
|
||||
kind: GKEClusterConfig
|
||||
plural: gkeclusterconfigs
|
||||
shortNames:
|
||||
- gkecc
|
||||
singular: gkeclusterconfig
|
||||
preserveUnknownFields: false
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
properties:
|
||||
spec:
|
||||
properties:
|
||||
autopilotConfig:
|
||||
nullable: true
|
||||
properties:
|
||||
enabled:
|
||||
type: boolean
|
||||
type: object
|
||||
clusterAddons:
|
||||
nullable: true
|
||||
properties:
|
||||
horizontalPodAutoscaling:
|
||||
type: boolean
|
||||
httpLoadBalancing:
|
||||
type: boolean
|
||||
networkPolicyConfig:
|
||||
type: boolean
|
||||
type: object
|
||||
clusterIpv4Cidr:
|
||||
nullable: true
|
||||
type: string
|
||||
clusterName:
|
||||
nullable: true
|
||||
type: string
|
||||
customerManagedEncryptionKey:
|
||||
nullable: true
|
||||
properties:
|
||||
keyName:
|
||||
nullable: true
|
||||
type: string
|
||||
ringName:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
description:
|
||||
nullable: true
|
||||
type: string
|
||||
enableKubernetesAlpha:
|
||||
nullable: true
|
||||
type: boolean
|
||||
googleCredentialSecret:
|
||||
nullable: true
|
||||
type: string
|
||||
imported:
|
||||
type: boolean
|
||||
ipAllocationPolicy:
|
||||
nullable: true
|
||||
properties:
|
||||
clusterIpv4CidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
clusterSecondaryRangeName:
|
||||
nullable: true
|
||||
type: string
|
||||
createSubnetwork:
|
||||
type: boolean
|
||||
nodeIpv4CidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
servicesIpv4CidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
servicesSecondaryRangeName:
|
||||
nullable: true
|
||||
type: string
|
||||
subnetworkName:
|
||||
nullable: true
|
||||
type: string
|
||||
useIpAliases:
|
||||
type: boolean
|
||||
type: object
|
||||
kubernetesVersion:
|
||||
nullable: true
|
||||
type: string
|
||||
labels:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
locations:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
loggingService:
|
||||
nullable: true
|
||||
type: string
|
||||
maintenanceWindow:
|
||||
nullable: true
|
||||
type: string
|
||||
masterAuthorizedNetworks:
|
||||
nullable: true
|
||||
properties:
|
||||
cidrBlocks:
|
||||
items:
|
||||
properties:
|
||||
cidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
displayName:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
enabled:
|
||||
type: boolean
|
||||
type: object
|
||||
monitoringService:
|
||||
nullable: true
|
||||
type: string
|
||||
network:
|
||||
nullable: true
|
||||
type: string
|
||||
networkPolicyEnabled:
|
||||
nullable: true
|
||||
type: boolean
|
||||
nodePools:
|
||||
items:
|
||||
properties:
|
||||
autoscaling:
|
||||
nullable: true
|
||||
properties:
|
||||
enabled:
|
||||
type: boolean
|
||||
maxNodeCount:
|
||||
type: integer
|
||||
minNodeCount:
|
||||
type: integer
|
||||
type: object
|
||||
config:
|
||||
nullable: true
|
||||
properties:
|
||||
bootDiskKmsKey:
|
||||
nullable: true
|
||||
type: string
|
||||
diskSizeGb:
|
||||
type: integer
|
||||
diskType:
|
||||
nullable: true
|
||||
type: string
|
||||
imageType:
|
||||
nullable: true
|
||||
type: string
|
||||
labels:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
localSsdCount:
|
||||
type: integer
|
||||
machineType:
|
||||
nullable: true
|
||||
type: string
|
||||
oauthScopes:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
preemptible:
|
||||
type: boolean
|
||||
serviceAccount:
|
||||
nullable: true
|
||||
type: string
|
||||
tags:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
taints:
|
||||
items:
|
||||
properties:
|
||||
effect:
|
||||
nullable: true
|
||||
type: string
|
||||
key:
|
||||
nullable: true
|
||||
type: string
|
||||
value:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
type: object
|
||||
initialNodeCount:
|
||||
nullable: true
|
||||
type: integer
|
||||
management:
|
||||
nullable: true
|
||||
properties:
|
||||
autoRepair:
|
||||
type: boolean
|
||||
autoUpgrade:
|
||||
type: boolean
|
||||
type: object
|
||||
maxPodsConstraint:
|
||||
nullable: true
|
||||
type: integer
|
||||
name:
|
||||
nullable: true
|
||||
type: string
|
||||
version:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
privateClusterConfig:
|
||||
nullable: true
|
||||
properties:
|
||||
enablePrivateEndpoint:
|
||||
type: boolean
|
||||
enablePrivateNodes:
|
||||
type: boolean
|
||||
masterIpv4CidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
projectID:
|
||||
nullable: true
|
||||
type: string
|
||||
region:
|
||||
nullable: true
|
||||
type: string
|
||||
subnetwork:
|
||||
nullable: true
|
||||
type: string
|
||||
zone:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
status:
|
||||
properties:
|
||||
failureMessage:
|
||||
nullable: true
|
||||
type: string
|
||||
phase:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
|
|
@ -0,0 +1,20 @@
|
|||
annotations:
|
||||
catalog.cattle.io/auto-install: rancher-gke-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/kube-version: '>= 1.28.0-0 < 1.32.0-0'
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/provides-gvr: gkeclusterconfigs.gke.cattle.io/v1
|
||||
catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.11.0-0'
|
||||
catalog.cattle.io/release-name: rancher-gke-operator
|
||||
catalog.cattle.io/scope: management
|
||||
apiVersion: v2
|
||||
appVersion: 1.10.2-rc.1
|
||||
description: A Helm chart for provisioning GKE clusters
|
||||
home: https://github.com/rancher/gke-operator
|
||||
name: rancher-gke-operator
|
||||
sources:
|
||||
- https://github.com/rancher/gke-operator
|
||||
version: 105.2.0+up1.10.2-rc.1
|
||||
|
|
@ -0,0 +1,4 @@
|
|||
You have deployed the Rancher GKE operator
|
||||
Version: {{ .Chart.AppVersion }}
|
||||
Description: This operator provisions GKE clusters
|
||||
from GKEClusterConfig CRs.
|
||||
|
|
@ -0,0 +1,25 @@
|
|||
{{/* vim: set filetype=mustache: */}}
|
||||
|
||||
{{- define "system_default_registry" -}}
|
||||
{{- if .Values.global.cattle.systemDefaultRegistry -}}
|
||||
{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
|
||||
{{- else -}}
|
||||
{{- "" -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Windows cluster will add default taint for linux nodes,
|
||||
add below linux tolerations to workloads could be scheduled to those linux nodes
|
||||
*/}}
|
||||
{{- define "linux-node-tolerations" -}}
|
||||
- key: "cattle.io/os"
|
||||
value: "linux"
|
||||
effect: "NoSchedule"
|
||||
operator: "Equal"
|
||||
{{- end -}}
|
||||
|
||||
{{- define "linux-node-selector" -}}
|
||||
kubernetes.io/os: linux
|
||||
{{- end -}}
|
||||
|
||||
|
|
@ -0,0 +1,15 @@
|
|||
kind: ClusterRole
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
name: gke-operator
|
||||
namespace: cattle-system
|
||||
rules:
|
||||
- apiGroups: ['']
|
||||
resources: ['secrets']
|
||||
verbs: ['get', 'list', 'create', 'watch']
|
||||
- apiGroups: ['gke.cattle.io']
|
||||
resources: ['gkeclusterconfigs']
|
||||
verbs: ['get', 'list', 'update', 'watch']
|
||||
- apiGroups: ['gke.cattle.io']
|
||||
resources: ['gkeclusterconfigs/status']
|
||||
verbs: ['update']
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: gke-operator
|
||||
namespace: cattle-system
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: gke-operator
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: gke-operator
|
||||
namespace: cattle-system
|
||||
|
|
@ -0,0 +1,69 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: gke-config-operator
|
||||
namespace: cattle-system
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
ke.cattle.io/operator: gke
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
ke.cattle.io/operator: gke
|
||||
spec:
|
||||
nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
|
||||
{{- if .Values.nodeSelector }}
|
||||
{{ toYaml .Values.nodeSelector | indent 8 }}
|
||||
{{- end }}
|
||||
tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
|
||||
{{- if .Values.tolerations }}
|
||||
{{ toYaml .Values.tolerations | indent 8 }}
|
||||
{{- end }}
|
||||
serviceAccountName: gke-operator
|
||||
{{- if .Values.priorityClassName }}
|
||||
priorityClassName: "{{.Values.priorityClassName}}"
|
||||
{{- end }}
|
||||
securityContext:
|
||||
fsGroup: 1007
|
||||
runAsUser: 1007
|
||||
containers:
|
||||
- name: rancher-gke-operator
|
||||
image: '{{ template "system_default_registry" $ }}{{ $.Values.gkeOperator.image.repository }}:{{ $.Values.gkeOperator.image.tag }}'
|
||||
imagePullPolicy: IfNotPresent
|
||||
args: ["-debug={{ .Values.gkeOperator.debug | default false }}"]
|
||||
env:
|
||||
- name: HTTP_PROXY
|
||||
value: {{ .Values.httpProxy }}
|
||||
- name: HTTPS_PROXY
|
||||
value: {{ .Values.httpsProxy }}
|
||||
- name: NO_PROXY
|
||||
value: {{ .Values.noProxy }}
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
readOnlyRootFilesystem: true
|
||||
privileged: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
{{- if .Values.additionalTrustedCAs }}
|
||||
# gke-operator mounts the additional CAs in two places:
|
||||
volumeMounts:
|
||||
# This directory is owned by the gke-operator user so c_rehash works here.
|
||||
- mountPath: /etc/rancher/ssl/ca-additional.pem
|
||||
name: tls-ca-additional-volume
|
||||
subPath: ca-additional.pem
|
||||
readOnly: true
|
||||
# This directory is root-owned so c_rehash doesn't work here,
|
||||
# but the cert is here in case update-ca-certificates is called in the future or by the OS.
|
||||
- mountPath: /etc/pki/trust/anchors/ca-additional.pem
|
||||
name: tls-ca-additional-volume
|
||||
subPath: ca-additional.pem
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: tls-ca-additional-volume
|
||||
secret:
|
||||
defaultMode: 0400
|
||||
secretName: tls-ca-additional
|
||||
{{- end }}
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
namespace: cattle-system
|
||||
name: gke-operator
|
||||
|
|
@ -0,0 +1,23 @@
|
|||
global:
|
||||
cattle:
|
||||
systemDefaultRegistry: ""
|
||||
|
||||
gkeOperator:
|
||||
image:
|
||||
repository: rancher/gke-operator
|
||||
tag: v1.10.2-rc.1
|
||||
debug: false
|
||||
|
||||
httpProxy: ""
|
||||
httpsProxy: ""
|
||||
noProxy: ""
|
||||
additionalTrustedCAs: false
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
##
|
||||
nodeSelector: {}
|
||||
## List of node taints to tolerate (requires Kubernetes >= 1.6)
|
||||
tolerations: []
|
||||
|
||||
## PriorityClassName assigned to deployment.
|
||||
priorityClassName: ""
|
||||
40
index.yaml
40
index.yaml
|
|
@ -13772,6 +13772,30 @@ entries:
|
|||
- assets/rancher-gatekeeper-crd/rancher-gatekeeper-crd-101.0.0+up3.9.0.tgz
|
||||
version: 101.0.0+up3.9.0
|
||||
rancher-gke-operator:
|
||||
- annotations:
|
||||
catalog.cattle.io/auto-install: rancher-gke-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/kube-version: '>= 1.28.0-0 < 1.32.0-0'
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/provides-gvr: gkeclusterconfigs.gke.cattle.io/v1
|
||||
catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.11.0-0'
|
||||
catalog.cattle.io/release-name: rancher-gke-operator
|
||||
catalog.cattle.io/scope: management
|
||||
apiVersion: v2
|
||||
appVersion: 1.10.2-rc.1
|
||||
created: "2025-01-09T13:12:52.982999869+01:00"
|
||||
description: A Helm chart for provisioning GKE clusters
|
||||
digest: bba8e01e2ffa108728ca2a369825219b7d7cdb76272ef6a9b137a543861ddeb2
|
||||
home: https://github.com/rancher/gke-operator
|
||||
name: rancher-gke-operator
|
||||
sources:
|
||||
- https://github.com/rancher/gke-operator
|
||||
urls:
|
||||
- assets/rancher-gke-operator/rancher-gke-operator-105.2.0+up1.10.2-rc.1.tgz
|
||||
version: 105.2.0+up1.10.2-rc.1
|
||||
- annotations:
|
||||
catalog.cattle.io/auto-install: rancher-gke-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
|
|
@ -14277,6 +14301,22 @@ entries:
|
|||
- assets/rancher-gke-operator/rancher-gke-operator-101.0.0+up1.1.5.tgz
|
||||
version: 101.0.0+up1.1.5
|
||||
rancher-gke-operator-crd:
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/release-name: rancher-gke-operator-crd
|
||||
apiVersion: v2
|
||||
appVersion: 1.10.2-rc.1
|
||||
created: "2025-01-09T13:12:55.288857895+01:00"
|
||||
description: GKE Operator CustomResourceDefinitions
|
||||
digest: bf4a2e9980a8c57979f875cc36db113c3f3dac681201014bbea3269a56d93cb7
|
||||
name: rancher-gke-operator-crd
|
||||
urls:
|
||||
- assets/rancher-gke-operator-crd/rancher-gke-operator-crd-105.2.0+up1.10.2-rc.1.tgz
|
||||
version: 105.2.0+up1.10.2-rc.1
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
url: https://github.com/rancher/gke-operator/releases/download/v1.10.1/rancher-gke-operator-crd-1.10.1.tgz
|
||||
version: 105.1.0
|
||||
url: https://github.com/rancher/gke-operator/releases/download/v1.10.2-rc.1/rancher-gke-operator-crd-1.10.2-rc.1.tgz
|
||||
version: 105.2.0
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
url: https://github.com/rancher/gke-operator/releases/download/v1.10.1/rancher-gke-operator-1.10.1.tgz
|
||||
version: 105.1.0
|
||||
url: https://github.com/rancher/gke-operator/releases/download/v1.10.2-rc.1/rancher-gke-operator-1.10.2-rc.1.tgz
|
||||
version: 105.2.0
|
||||
|
|
|
|||
|
|
@ -22,6 +22,10 @@ rancher-cis-benchmark:
|
|||
- 105.1.0+up7.1.1
|
||||
rancher-cis-benchmark-crd:
|
||||
- 105.1.0+up7.1.1
|
||||
rancher-gke-operator:
|
||||
- 105.2.0+up1.10.2-rc.1
|
||||
rancher-gke-operator-crd:
|
||||
- 105.2.0+up1.10.2-rc.1
|
||||
rancher-logging:
|
||||
- 105.2.0-rc.1+up4.10.0
|
||||
rancher-logging-crd:
|
||||
|
|
|
|||
Loading…
Reference in New Issue