diff --git a/Makefile b/Makefile
index bcdcbc035..1ae552810 100644
--- a/Makefile
+++ b/Makefile
@@ -1,8 +1,8 @@
pull-scripts:
./scripts/pull-scripts
-release:
- ./scripts/release-assets
+stage-release:
+ ./scripts/stage-release
TARGETS := prepare patch charts clean sync validate rebase docs
diff --git a/index.yaml b/index.yaml
old mode 100755
new mode 100644
index 6e85deebc..c9c8bc160
--- a/index.yaml
+++ b/index.yaml
@@ -12,90 +12,14 @@ entries:
catalog.cattle.io/release-name: fleet
apiVersion: v2
appVersion: 0.3.5
- created: "2021-04-19T17:18:41.426840009Z"
+ created: "2021-04-21T15:17:43.274267-07:00"
description: Fleet Manager - GitOps at Scale
- digest: 0ef37b499661d5c3998c571bf3e25972b0bbd27b8249c384af313bef36ba6d61
+ digest: f534c6ee948dc9a5ca2a2b9741ea71946708f8eac788572c24e39a24fedeab1e
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet
urls:
- - assets/fleet/fleet-0.3.500-rc05.tgz
- version: 0.3.500-rc05
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-10T01:22:19.627743142Z"
- description: Fleet Manager - GitOps at Scale
- digest: 56fdbfb76993a43c7e7efbc6e480a271b6bf88596163a629a785d6cb8ad37b20
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - assets/fleet/fleet-0.3.500-rc04.tgz
- version: 0.3.500-rc04
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-07T21:48:50.614239531Z"
- description: Fleet Manager - GitOps at Scale
- digest: a583464aed3ed3c6bd5a6d565decbd6e052a2a1176ae54208dc37660bf288010
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - assets/fleet/fleet-0.3.500-rc03.tgz
- version: 0.3.500-rc03
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-06T01:27:24.195359475Z"
- description: Fleet Manager - GitOps at Scale
- digest: 7d0614eaeaf5f1029a245ad6881f97719bf3caa44075901d9290810bb17a207c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - assets/fleet/fleet-0.3.500-rc02.tgz
- version: 0.3.500-rc02
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-03-18T19:39:38.695305781Z"
- description: Fleet Manager - GitOps at Scale
- digest: 443c4a6b34b021406aed20df13848926328afa4790a817c9ada07dc47a8b8e71
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - assets/fleet/fleet-0.3.500-rc01.tgz
- version: 0.3.500-rc01
+ - released/assets/fleet/fleet-0.3.500.tgz
+ version: 0.3.500
- annotations:
catalog.cattle.io/auto-install: fleet-crd=match
catalog.cattle.io/certified: rancher
@@ -107,128 +31,14 @@ entries:
catalog.cattle.io/release-name: fleet
apiVersion: v2
appVersion: 0.3.4
- created: "2021-03-04T09:47:44.975285-08:00"
+ created: "2021-04-21T15:17:43.273722-07:00"
description: Fleet Manager - GitOps at Scale
- digest: 277079329c521f3902a1d350526faa155b96760268841855b066a79c066e1fda
+ digest: 3dc07290740992da2a36c0d0cf2ef3592bcb1e2c5482a37a49336794795944f0
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet
urls:
- - released/assets/fleet/fleet-0.3.400-rc08.tgz
- version: 0.3.400-rc08
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.974668-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 7d9eb26b9a52d271fbb40a4bd5d0771bbef7b7b4e62202db83be9aef6df1b020
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc07.tgz
- version: 0.3.400-rc07
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.974039-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 687574de3226ffeb9f1e0aa113221b1079b8ce4b7388deb9f4db21adf910cd7a
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc06.tgz
- version: 0.3.400-rc06
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.973472-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: cc93d58b20fe2ce8626f93af8a534eb80ee2c9001f1e864981b72c1766cd4ea3
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc05.tgz
- version: 0.3.400-rc05
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.972882-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 118b165bf97d80b203e46b7899f619060e95b73a4e86be39230b6cfa24f37527
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc04.tgz
- version: 0.3.400-rc04
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.972313-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 2c77e45b0d5c39ffbc45889ee92627fc97360fd002b01cf766efc963933d0734
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc03.tgz
- version: 0.3.400-rc03
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.971747-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: fb076be2e7e9d34b6fbb7cf6b975ee8dea69d118a91dbef29c77e3310718843b
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc00.tgz
- version: 0.3.400-rc00
+ - released/assets/fleet/fleet-0.3.400.tgz
+ version: 0.3.400
- annotations:
catalog.cattle.io/auto-install: fleet-crd=match
catalog.cattle.io/certified: rancher
@@ -240,33 +50,14 @@ entries:
catalog.cattle.io/release-name: fleet
apiVersion: v2
appVersion: 0.3.3
- created: "2021-01-15T00:11:30.442452-08:00"
+ created: "2021-04-21T15:17:43.273203-07:00"
description: Fleet Manager - GitOps at Scale
- digest: 466158346d34e38bc22d1df190b8e8d031da76e6b189b104c3db439c84cefa57
+ digest: f33de3f1deb1cdfe0ff8af7cde8919bbe3e594b30e423735caddfcf3117d3224
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet
urls:
- released/assets/fleet/fleet-0.3.300.tgz
version: 0.3.300
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.3-rc1
- created: "2021-01-15T00:11:30.442021-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 92c54b647c650213ed878a3aa37a1b121d773ea3df107eef1cb80ffba4fdd4a8
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.300-rc1.tgz
- version: 0.3.300-rc1
- annotations:
catalog.cattle.io/auto-install: fleet-crd=match
catalog.cattle.io/certified: rancher
@@ -278,71 +69,14 @@ entries:
catalog.cattle.io/release-name: fleet
apiVersion: v2
appVersion: 0.3.2
- created: "2021-01-15T00:11:30.441482-08:00"
+ created: "2021-04-21T15:17:43.272734-07:00"
description: Fleet Manager - GitOps at Scale
- digest: 13435d391c5cbc965b57ef20bc8fcf2d986ff7a3e931b69ee692ab9e1f182cee
+ digest: 7604d7eb2a6ef5b119b0ee102ea528e63db77caff3441bd47c116964ac530887
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet
urls:
- released/assets/fleet/fleet-0.3.200.tgz
version: 0.3.200
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc7
- created: "2021-01-15T00:11:30.441061-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 6bacaf33f64564316e3055a64e2be835e59db11c0e972bf724129f084e2347fe
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.200-rc7.tgz
- version: 0.3.200-rc7
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc6
- created: "2021-01-15T00:11:30.440604-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: a5ed0efb4922ac2095d632c6675bd0c15d12940cf3993eb744259154a7946ee4
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.200-rc6.tgz
- version: 0.3.200-rc6
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.440153-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 8532b8f9ea6cc1a58e75f12f500c50f1e504e2f1cd17dbea5302067f1e97fd8d
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.200-rc5.tgz
- version: 0.3.200-rc5
- annotations:
catalog.cattle.io/auto-install: fleet-crd=match
catalog.cattle.io/certified: rancher
@@ -354,128 +88,14 @@ entries:
catalog.cattle.io/release-name: fleet
apiVersion: v2
appVersion: 0.3.1
- created: "2021-01-15T00:11:30.435867-08:00"
+ created: "2021-04-21T15:17:43.271218-07:00"
description: Fleet Manager - GitOps at Scale
- digest: 2fe3aa2739e02cc80ab57ab538f553caab0c68e4d42c36c878418978378704ee
+ digest: 2b05e7779f54c0bd853594b798662be27043d401ee4df1ef2393d25ae4ebbdb8
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet
urls:
- released/assets/fleet/fleet-0.3.100.tgz
version: 0.3.100
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.439622-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: a4a06fb9cebe9efd606bede697cb3153ac90a525cea85d5669bebfec2bd46b60
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc500.tgz
- version: 0.3.2-rc500
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc4
- created: "2021-01-15T00:11:30.439032-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 2c8db55082443d3001ee73001f2998709eb626d068ea1d01a9a2a876ab1fd6d5
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc400.tgz
- version: 0.3.2-rc400
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc3
- created: "2021-01-15T00:11:30.438375-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 4cb7dc66d8fa56e7c72482a711690c4eec6df2b6039325b7573ff5832db6e2f1
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc300.tgz
- version: 0.3.2-rc300
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc2
- created: "2021-01-15T00:11:30.436873-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 8eb35016316c813edec5b6a23e4e1b2ac977f70422abdaa17b27f04ef583b4a2
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc200.tgz
- version: 0.3.2-rc200
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc1
- created: "2021-01-15T00:11:30.436381-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 2d931594dcc850c2ceddbc670c26ec624275471e827aea89c911a9c69b63680c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc100.tgz
- version: 0.3.2-rc100
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.1-rc2
- created: "2021-01-15T00:11:30.43539-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 8e2d0197e5351976855ab2a353624f83aae1dd20d111c640577c718dbc6e8d3d
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.1-rc200.tgz
- version: 0.3.1-rc200
- annotations:
catalog.cattle.io/auto-install: fleet-crd=match
catalog.cattle.io/certified: rancher
@@ -487,90 +107,14 @@ entries:
catalog.cattle.io/release-name: fleet
apiVersion: v2
appVersion: 0.3.0
- created: "2021-01-15T00:11:30.43486-08:00"
+ created: "2021-04-21T15:17:43.270749-07:00"
description: Fleet Manager - GitOps at Scale
- digest: 2ebf3211667f09636fe3ddedcf3f16527911039ad034234b3096a2d22648f08c
+ digest: 80ebb76232c4d9c17199901ccce179c86d78202872266fdec29c417c78ee1a9d
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet
urls:
- released/assets/fleet/fleet-0.3.000.tgz
version: 0.3.000
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0-rc3
- created: "2021-01-15T00:11:30.434357-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 8c0107095c9bd5fdaf1af65269cc3212e1d3b3cae7fd60310e33ed4f45f60c3e
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.0-rc300.tgz
- version: 0.3.0-rc300
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0-rc2
- created: "2021-01-15T00:11:30.433883-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 4fff27a9b7181abc19c19ed7c976001fd334bc398451c4f8e06f5175a5449b13
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.0-rc200.tgz
- version: 0.3.0-rc200
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0-rc1
- created: "2021-01-15T00:11:30.433435-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 9285c78e83af3aa9c41f78ccda82a629e1e5d0491657c928c70e35cdf398a4a1
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.0-rc100.tgz
- version: 0.3.0-rc100
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0-beta6
- created: "2021-01-15T00:11:30.432981-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: daecd0f635b0d5e9cbe1661a0cbf9fa863559067380c018ee647c0541f036f54
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.0-beta600.tgz
- version: 0.3.0-beta600
fleet-agent:
- annotations:
catalog.cattle.io/certified: rancher
@@ -580,78 +124,14 @@ entries:
catalog.cattle.io/release-name: fleet-agent
apiVersion: v2
appVersion: 0.3.5
- created: "2021-04-19T17:18:41.429573195Z"
+ created: "2021-04-21T15:17:43.277304-07:00"
description: Fleet Manager Agent - GitOps at Scale
- digest: 79834f24e406e61945647546053a87191c05b677ad989cd99e6780bc1e066a93
+ digest: 219941e90f69b539d3d2889684db86c67ef7a1f29a52dc65bfb6e4b43a633b64
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-agent
urls:
- - assets/fleet-agent/fleet-agent-0.3.500-rc05.tgz
- version: 0.3.500-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-10T01:22:19.630553271Z"
- description: Fleet Manager Agent - GitOps at Scale
- digest: b1b7573def4cf7549c16d4b35cd0224f9c318e2c4628b45ee229cbf1dcab2f8c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - assets/fleet-agent/fleet-agent-0.3.500-rc04.tgz
- version: 0.3.500-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-07T21:48:50.616307916Z"
- description: Fleet Manager Agent - GitOps at Scale
- digest: f04117333c5f3ca7b41fa36a089fc2ee6ffba62a41c828677454dab9ca2495f3
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - assets/fleet-agent/fleet-agent-0.3.500-rc03.tgz
- version: 0.3.500-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-06T01:27:24.196753549Z"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 1432bc0719b848dc41794610f905b82a53e485fcc74c7e7778088da60c269dfb
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - assets/fleet-agent/fleet-agent-0.3.500-rc02.tgz
- version: 0.3.500-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-03-18T19:39:38.696249674Z"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 9abb1ab308acf5a714846b4fbf559d71f0914959593d89e58a82eb134a185a4e
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - assets/fleet-agent/fleet-agent-0.3.500-rc01.tgz
- version: 0.3.500-rc01
+ - released/assets/fleet-agent/fleet-agent-0.3.500.tgz
+ version: 0.3.500
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -660,110 +140,14 @@ entries:
catalog.cattle.io/release-name: fleet-agent
apiVersion: v2
appVersion: 0.3.4
- created: "2021-03-04T09:47:44.979264-08:00"
+ created: "2021-04-21T15:17:43.27695-07:00"
description: Fleet Manager Agent - GitOps at Scale
- digest: 92c389d9d8be695fb01d74e9d5522e4a594fe08b1631bf80433a43cfafc12130
+ digest: 59fb278112c907eaf12dd963ded1aa6ae03be09bb795d2129fd35b6888fbd31c
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-agent
urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc08.tgz
- version: 0.3.400-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.978729-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 0309e8373110bc1bccf7822846cb39bfb3090079516fb597fc1bfd315d793bd6
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc07.tgz
- version: 0.3.400-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.978306-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 3ea72c1023795f9f0d5044645ee0daf17728e7c2dfa8e09bad134f068d33e0bd
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc06.tgz
- version: 0.3.400-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.97789-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 0ddcf88f7f969a054e665547afc3d051b6f7e889bdfa9f6117d1b54424bc0121
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc05.tgz
- version: 0.3.400-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.976796-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 361ea8b3e2881fba58c75b4fa8f7a3dcd39e935cf53ffda8d16eae03b24b3e29
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc04.tgz
- version: 0.3.400-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.976184-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: a8b5d0b5f1fa9fca85dcb543141dfc2b69d9f44e6a3f0e985e5d0d89c80abb0b
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc03.tgz
- version: 0.3.400-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.975734-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 4f1e3b1be448bf6a3ce7519dbf4105469ba9ea60432f64ed7717269b4c1db495
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc00.tgz
- version: 0.3.400-rc00
+ - released/assets/fleet-agent/fleet-agent-0.3.400.tgz
+ version: 0.3.400
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -772,30 +156,14 @@ entries:
catalog.cattle.io/release-name: fleet-agent
apiVersion: v2
appVersion: 0.3.3
- created: "2021-01-15T00:11:30.450242-08:00"
+ created: "2021-04-21T15:17:43.276423-07:00"
description: Fleet Manager Agent - GitOps at Scale
- digest: c156f47b7093403a9567dd6607150dcec3d23bbc9089f24826edd255da3de163
+ digest: f92cbe28d99ae754a590e3de5a3226109704c7a69376e1b824b5eb01e3997df3
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-agent
urls:
- released/assets/fleet-agent/fleet-agent-0.3.300.tgz
version: 0.3.300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.3-rc1
- created: "2021-01-15T00:11:30.449607-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 8ba8e519ae4e2597ce1a886fc236a6ba17884c26ee500f099ba25881fe07c472
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.300-rc1.tgz
- version: 0.3.300-rc1
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -804,62 +172,14 @@ entries:
catalog.cattle.io/release-name: fleet-agent
apiVersion: v2
appVersion: 0.3.2
- created: "2021-01-15T00:11:30.449316-08:00"
+ created: "2021-04-21T15:17:43.275293-07:00"
description: Fleet Manager Agent - GitOps at Scale
- digest: d83092027ee970d35edf853bfebe76621e65e98a6451a984018ad50343de7662
+ digest: 2be8d753ca9d2ddc9f0c152a81021b146838223796a497841850486bc26f6457
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-agent
urls:
- released/assets/fleet-agent/fleet-agent-0.3.200.tgz
version: 0.3.200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc7
- created: "2021-01-15T00:11:30.449024-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 64119f4e2708a02f6a7d196289154158a3069078eeb2ff6c4d610ff75553714d
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.200-rc7.tgz
- version: 0.3.200-rc7
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc6
- created: "2021-01-15T00:11:30.448731-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: e4d4cec1d4f3a6cb6de231398213740ab6a63221ad8bb39b92ff359ab203c717
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.200-rc6.tgz
- version: 0.3.200-rc6
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.448438-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 901d1ac62ef11449a3a4322be4c361031901491457b285ea7ae50eb86b294c4d
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.200-rc5.tgz
- version: 0.3.200-rc5
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -868,110 +188,14 @@ entries:
catalog.cattle.io/release-name: fleet-agent
apiVersion: v2
appVersion: 0.3.1
- created: "2021-01-15T00:11:30.44469-08:00"
+ created: "2021-04-21T15:17:43.274969-07:00"
description: Fleet Manager Agent - GitOps at Scale
- digest: 93e1c4ab4accfe23e9367bf0db876c469fa33df306d0c375c4f52cae384a12bd
+ digest: 1913e45bcda723490e3c1c1613f99a328b6414c472f9f7c490c087d7697563f1
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-agent
urls:
- released/assets/fleet-agent/fleet-agent-0.3.100.tgz
version: 0.3.100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.448126-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 89a9c660a7e734b92e355c9cef6bc5ed6ea686a531bd7fbcc9e79740f11ecf97
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc500.tgz
- version: 0.3.2-rc500
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc4
- created: "2021-01-15T00:11:30.447616-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 54b08cdc2b3d82df5f200b7ce248df6fd76fcc6bca65566597277223b392694a
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc400.tgz
- version: 0.3.2-rc400
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc3
- created: "2021-01-15T00:11:30.446262-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 666b0fbd3cd2c66ec0876c4ab38179ff208ae30e6c1f624a9d86c63a94631c4f
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc300.tgz
- version: 0.3.2-rc300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc2
- created: "2021-01-15T00:11:30.445918-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: aabe665aeebc1df39898d541af5584b5c30de7702822690d6a51fe719700974c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc200.tgz
- version: 0.3.2-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc1
- created: "2021-01-15T00:11:30.445594-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: ff1f16b5df2234bab11727a056fd1133266d224739a552827d0c2ba7cce13351
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc100.tgz
- version: 0.3.2-rc100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.1-rc2
- created: "2021-01-15T00:11:30.444372-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 5710e0cd3a6d3c818ced59b6cf486579b5184aadac4dd8088fcac9fe5bb82588
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.1-rc200.tgz
- version: 0.3.1-rc200
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -980,78 +204,14 @@ entries:
catalog.cattle.io/release-name: fleet-agent
apiVersion: v2
appVersion: 0.3.0
- created: "2021-01-15T00:11:30.444055-08:00"
+ created: "2021-04-21T15:17:43.274613-07:00"
description: Fleet Manager Agent - GitOps at Scale
- digest: ecc3783751af209842edc9e4687d01b2a355613b8232d993da9ad36c412ee351
+ digest: 8b517f7d18f2aa1e34e5ac475684752dc8ff46f050cfd2b2d91fd343cab8cf50
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-agent
urls:
- released/assets/fleet-agent/fleet-agent-0.3.000.tgz
version: 0.3.000
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0-rc3
- created: "2021-01-15T00:11:30.443739-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 03d3d03b8ae0b079bca9ef661b5e3468a40056fc921ccca1dd75174c5763de3c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.0-rc300.tgz
- version: 0.3.0-rc300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0-rc2
- created: "2021-01-15T00:11:30.443423-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 751ff49e3a02afa1300ef25a9b98399dfa7aad6f3e7598225e3902890dc6ff59
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.0-rc200.tgz
- version: 0.3.0-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0-rc1
- created: "2021-01-15T00:11:30.443115-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 2f72018aba77b61c891e7ee430086b91a1d822ac276b2a483eeee00a0e32ecd2
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.0-rc100.tgz
- version: 0.3.0-rc100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0-beta6
- created: "2021-01-15T00:11:30.442776-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: c698ce4c2749dfc4134d08ec4522af59022e3c17ebf1eabc8642a6de57d9a378
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.0-beta600.tgz
- version: 0.3.0-beta600
fleet-crd:
- annotations:
catalog.cattle.io/certified: rancher
@@ -1061,78 +221,14 @@ entries:
catalog.cattle.io/release-name: fleet-crd
apiVersion: v2
appVersion: 0.3.5
- created: "2021-04-19T17:18:41.434966663Z"
+ created: "2021-04-21T15:17:43.28141-07:00"
description: Fleet Manager CustomResourceDefinitions
- digest: 1ebf500a7032134e13e35ed17e88a1025efce673cd8b4f433b2459b0f38f2807
+ digest: 7bf82d347fbdb3f4afa7360426d403f750fb62a75e64e442f95a8796a92589d5
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-crd
urls:
- - assets/fleet-crd/fleet-crd-0.3.500-rc05.tgz
- version: 0.3.500-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-10T01:22:19.634532712Z"
- description: Fleet Manager CustomResourceDefinitions
- digest: 97b10b9c6943cdc972a5a69fd96db4a75d4a0543f4588dd733ad4c9824dc5698
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - assets/fleet-crd/fleet-crd-0.3.500-rc04.tgz
- version: 0.3.500-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-07T21:48:50.62203095Z"
- description: Fleet Manager CustomResourceDefinitions
- digest: 92663c8f47355f313050b9043dd528905df6716c5e90bdaade7abe7fe1c15a99
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - assets/fleet-crd/fleet-crd-0.3.500-rc03.tgz
- version: 0.3.500-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-04-06T01:27:24.198922465Z"
- description: Fleet Manager CustomResourceDefinitions
- digest: ee5ae9f179dac626c18ca795b47a9b67ba4317f284c60c5e188d23f02cf5b2a6
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - assets/fleet-crd/fleet-crd-0.3.500-rc02.tgz
- version: 0.3.500-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.5
- created: "2021-03-18T19:39:38.699012554Z"
- description: Fleet Manager CustomResourceDefinitions
- digest: 5a9971ba36b1565f22b4bababd5a5f862d2ca016a626283dfc79b30b8952f00c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - assets/fleet-crd/fleet-crd-0.3.500-rc01.tgz
- version: 0.3.500-rc01
+ - released/assets/fleet-crd/fleet-crd-0.3.500.tgz
+ version: 0.3.500
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -1141,110 +237,14 @@ entries:
catalog.cattle.io/release-name: fleet-crd
apiVersion: v2
appVersion: 0.3.4
- created: "2021-03-04T09:47:44.985982-08:00"
+ created: "2021-04-21T15:17:43.280872-07:00"
description: Fleet Manager CustomResourceDefinitions
- digest: 08a71c3658b502abcac9967992089f06a2e7b945939173ab690109e31c879d78
+ digest: 36c8f232f6d3f2698d0e43d7a95359555f0e8852cfb2c41d901eb09f807d291f
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-crd
urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc08.tgz
- version: 0.3.400-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.985281-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 8dabeedc21780455b4dbdbf963ca9a78a6d075163c61a282832424a552aefaa0
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc07.tgz
- version: 0.3.400-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.984535-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 868f7b6e3caf84cc9d4c911ea03e3a01468ff3e9bb61764c890328e204f3afcc
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc06.tgz
- version: 0.3.400-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.983697-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 43f1202bb4e902d87c991ce6f784eba76bf293cf306ad8f4f86befb1af926c63
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc05.tgz
- version: 0.3.400-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.98195-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: f1f0b41f0361f1dafc601a6b2113dc7956241df6f31392be86c263fab3020141
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc04.tgz
- version: 0.3.400-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.981021-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: c5c909ed053603f81ab58c8292f197fc86cd7abd4c52c1be7fe6fbd971cc9317
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc03.tgz
- version: 0.3.400-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.980036-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: b4bdaa0cf4bd59c0629e22da5822d03f4fe3b588d79ce4f17c85067cb266ea12
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc00.tgz
- version: 0.3.400-rc00
+ - released/assets/fleet-crd/fleet-crd-0.3.400.tgz
+ version: 0.3.400
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -1253,30 +253,14 @@ entries:
catalog.cattle.io/release-name: fleet-crd
apiVersion: v2
appVersion: 0.3.3
- created: "2021-01-15T00:11:30.460625-08:00"
+ created: "2021-04-21T15:17:43.280327-07:00"
description: Fleet Manager CustomResourceDefinitions
- digest: 9f7fd02d05da58beb8e5b10af0f0c22a5355532112f22d0f9150ed6f16e8d738
+ digest: 35bbfc8e2276379965d8671b752530b4b3603cacab9106dad64f37839b2f1342
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-crd
urls:
- released/assets/fleet-crd/fleet-crd-0.3.300.tgz
version: 0.3.300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.3-rc1
- created: "2021-01-15T00:11:30.460163-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 6c71754d009749043486ef5d51293781f0a140c23abc2e5e02b7b3d8a416e7a1
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.300-rc1.tgz
- version: 0.3.300-rc1
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -1285,62 +269,14 @@ entries:
catalog.cattle.io/release-name: fleet-crd
apiVersion: v2
appVersion: 0.3.2
- created: "2021-01-15T00:11:30.459702-08:00"
+ created: "2021-04-21T15:17:43.279062-07:00"
description: Fleet Manager CustomResourceDefinitions
- digest: 170663b6c1b877803057699633b386d17bd8dd29dabe83c60a19fa160572e649
+ digest: 025f0b2ee6f8b709c19ed2676faecba9579c9a14d526d9e16573eb8b98d5bc52
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-crd
urls:
- released/assets/fleet-crd/fleet-crd-0.3.200.tgz
version: 0.3.200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc7
- created: "2021-01-15T00:11:30.459237-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: e189bf956a74e6110d11ca8d333ed2eb8fca6bd38d9ad9f9aca85f50e9d13c44
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.200-rc7.tgz
- version: 0.3.200-rc7
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc6
- created: "2021-01-15T00:11:30.458738-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 910aa180969f7efa7707860d8003a8a8a4d64fa2943a9d35402fba0089ea53d1
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.200-rc6.tgz
- version: 0.3.200-rc6
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.457713-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: f452552ccb8c6ebd3138f24ad70c83936a271a6f1a58c57c1e8f3d7bf2d9428b
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.200-rc5.tgz
- version: 0.3.200-rc5
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -1348,90 +284,14 @@ entries:
catalog.cattle.io/release-name: fleet-crd
apiVersion: v2
appVersion: 0.3.1
- created: "2021-01-15T00:11:30.453908-08:00"
+ created: "2021-04-21T15:17:43.278447-07:00"
description: Fleet Manager CustomResourceDefinitions
- digest: 54dba389fc02e3655fe4e47f05f149f4661440974f57e229d93c3828a6a23f95
+ digest: f47abbbcd5b2ca28dcb8303e01a5562da698ec78423c0dc4aa249e6f6b3b7eb4
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-crd
urls:
- released/assets/fleet-crd/fleet-crd-0.3.100.tgz
version: 0.3.100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.457197-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 1f759371cea4364f8a193815c3f1fdd3a518d6431d0ebf24a274f88ee2793c5c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc500.tgz
- version: 0.3.2-rc500
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc4
- created: "2021-01-15T00:11:30.456675-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 9b6e11bab284ac76e6e287b5912ecbebf1286ad23b703a90050167f9cb47965e
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc400.tgz
- version: 0.3.2-rc400
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc3
- created: "2021-01-15T00:11:30.456173-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 317da5d6523ceb6c34b82f5641ddb18dec5fc96ec841949b535979715463a692
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc300.tgz
- version: 0.3.2-rc300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc2
- created: "2021-01-15T00:11:30.455531-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: e0ce08e0a55def30a2c95edfcfcdfe0ee9ac9f5dc8666ef53626e31cebe4fb4c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc200.tgz
- version: 0.3.2-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc1
- created: "2021-01-15T00:11:30.454478-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: b21e1d17af28400b9aa8960c7ee6d090266114b4811c9c5c507ecc1a662dc30a
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc100.tgz
- version: 0.3.2-rc100
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -1439,74 +299,14 @@ entries:
catalog.cattle.io/release-name: fleet-crd
apiVersion: v2
appVersion: 0.3.0
- created: "2021-01-15T00:11:30.453346-08:00"
+ created: "2021-04-21T15:17:43.277858-07:00"
description: Fleet Manager CustomResourceDefinitions
- digest: 0d24fc1805c045d86894e092454dbf2beffa3ad0ddadd10895f6db7821908715
+ digest: 08e3af78da30602b47b60ebfb8e509703dbedc5b312f6aa3a9e9b0275adca75a
icon: https://charts.rancher.io/assets/logos/fleet.svg
name: fleet-crd
urls:
- released/assets/fleet-crd/fleet-crd-0.3.000.tgz
version: 0.3.000
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0-rc3
- created: "2021-01-15T00:11:30.452862-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: c9b099c6e5e83ab677bc9c38eed6bdbe3f15611c261c2868c38aac24f3628c6f
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.0-rc300.tgz
- version: 0.3.0-rc300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0-rc2
- created: "2021-01-15T00:11:30.452386-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 88e1db58de806e970fc5ee7fbd55dd389ca31360a81a9591b38f551b62157b20
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.0-rc200.tgz
- version: 0.3.0-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0-rc1
- created: "2021-01-15T00:11:30.451433-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 0f037ac5744a26b7a382662121f934417f76484448e19f4d4b931f002df2b888
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.0-rc100.tgz
- version: 0.3.0-rc100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0-beta6
- created: "2021-01-15T00:11:30.45084-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: a053cf9e74fb7f070c9f46127ae5f076c812dc5ae545449fe11212ae5426b85c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.0-beta600.tgz
- version: 0.3.0-beta600
longhorn:
- annotations:
catalog.cattle.io/auto-install: longhorn-crd=match
@@ -1519,9 +319,9 @@ entries:
catalog.cattle.io/ui-component: longhorn
apiVersion: v1
appVersion: v1.1.0
- created: "2021-03-04T09:47:44.988379-08:00"
+ created: "2021-04-21T15:17:43.285501-07:00"
description: Longhorn is a distributed block storage system for Kubernetes.
- digest: c1138d74207f6296f07981ee2daadb9c6f08b1156de297e9b0f56620b5d7bb15
+ digest: 98b46706eb8c7b6261c1aa03f5081429867076f8f8f28ff0e4fb2f7389d66ef3
home: https://github.com/longhorn/longhorn
icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg?sanitize=true
keywords:
@@ -1547,8 +347,8 @@ entries:
- https://github.com/longhorn/longhorn-ui
- https://github.com/longhorn/longhorn-tests
urls:
- - released/assets/longhorn/longhorn-1.1.001-rc01.tgz
- version: 1.1.001-rc01
+ - released/assets/longhorn/longhorn-1.1.001.tgz
+ version: 1.1.001
- annotations:
catalog.cattle.io/auto-install: longhorn-crd=match
catalog.cattle.io/certified: rancher
@@ -1560,50 +360,9 @@ entries:
catalog.cattle.io/ui-component: longhorn
apiVersion: v1
appVersion: v1.1.0
- created: "2021-03-04T09:47:44.987209-08:00"
+ created: "2021-04-21T15:17:43.284457-07:00"
description: Longhorn is a distributed block storage system for Kubernetes.
- digest: 13e6c2b046fb4d24da32f2d685ea51449eaa377a3e57924ef721387b891f8c47
- home: https://github.com/longhorn/longhorn
- icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg?sanitize=true
- keywords:
- - longhorn
- - storage
- - distributed
- - block
- - device
- - iscsi
- kubeVersion: '>=v1.16.0-r0'
- maintainers:
- - email: maintainers@longhorn.io
- name: Longhorn maintainers
- - email: sheng@yasker.org
- name: Sheng Yang
- name: longhorn
- sources:
- - https://github.com/longhorn/longhorn
- - https://github.com/longhorn/longhorn-engine
- - https://github.com/longhorn/longhorn-instance-manager
- - https://github.com/longhorn/longhorn-share-manager
- - https://github.com/longhorn/longhorn-manager
- - https://github.com/longhorn/longhorn-ui
- - https://github.com/longhorn/longhorn-tests
- urls:
- - released/assets/longhorn/longhorn-1.1.001-rc00.tgz
- version: 1.1.001-rc00
- - annotations:
- catalog.cattle.io/auto-install: longhorn-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Longhorn
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
- catalog.cattle.io/release-name: longhorn
- catalog.cattle.io/ui-component: longhorn
- apiVersion: v1
- appVersion: v1.1.0
- created: "2021-01-15T00:11:30.464593-08:00"
- description: Longhorn is a distributed block storage system for Kubernetes.
- digest: 4d9c34af5cb6f983649c0da636853dcb363aa6aed1293bffb11ddfd04180d122
+ digest: aba8166911b39cfe44529c1ff3fd910e437ade64e72f39edc20957442605f619
home: https://github.com/longhorn/longhorn
icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
keywords:
@@ -1642,49 +401,9 @@ entries:
catalog.cattle.io/ui-component: longhorn
apiVersion: v1
appVersion: v1.0.2
- created: "2021-01-15T00:11:30.463634-08:00"
+ created: "2021-04-21T15:17:43.283498-07:00"
description: Longhorn is a distributed block storage system for Kubernetes.
- digest: b5e9f517ae4bf542afd3f9717ad0c81dd3a1a99361a19ce51effe40a4696f045
- home: https://github.com/longhorn/longhorn
- icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
- keywords:
- - longhorn
- - storage
- - distributed
- - block
- - device
- - iscsi
- kubeVersion: '>=v1.14.0-r0'
- maintainers:
- - email: maintainers@longhorn.io
- name: Longhorn maintainers
- - email: sheng@yasker.org
- name: Sheng Yang
- name: longhorn
- sources:
- - https://github.com/longhorn/longhorn
- - https://github.com/longhorn/longhorn-engine
- - https://github.com/longhorn/longhorn-instance-manager
- - https://github.com/longhorn/longhorn-manager
- - https://github.com/longhorn/longhorn-ui
- - https://github.com/longhorn/longhorn-tests
- urls:
- - released/assets/longhorn/longhorn-1.0.202.tgz
- version: 1.0.202
- - annotations:
- catalog.cattle.io/auto-install: longhorn-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Longhorn
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
- catalog.cattle.io/release-name: longhorn
- catalog.cattle.io/ui-component: longhorn
- apiVersion: v1
- appVersion: v1.0.2
- created: "2021-01-15T00:11:30.462831-08:00"
- description: Longhorn is a distributed block storage system for Kubernetes.
- digest: 8ab068f792fac6d4de81fdc6f66a7fa00c7d379e46d6715ee25c3c764f5b95f8
+ digest: b18eda4e4b1170b7e9f488782fb6409da084b5beaa9945a3a3babe39f031e320
home: https://github.com/longhorn/longhorn
icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
keywords:
@@ -1721,9 +440,9 @@ entries:
catalog.cattle.io/ui-component: longhorn
apiVersion: v1
appVersion: v1.0.2
- created: "2021-01-15T00:11:30.461814-08:00"
+ created: "2021-04-21T15:17:43.28266-07:00"
description: Longhorn is a distributed block storage system for Kubernetes.
- digest: 49b5b8341fdc7a39337f20edac1667d1a2f36b579f9cb7ecdc2ebf987e03df3f
+ digest: 66189346fc24f5407f7a11a41faf9913144801a72472151702e28f808d557073
home: https://github.com/longhorn/longhorn
icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
keywords:
@@ -1757,37 +476,23 @@ entries:
catalog.cattle.io/namespace: longhorn-system
catalog.cattle.io/release-name: longhorn-crd
apiVersion: v1
- created: "2021-03-04T09:47:44.988935-08:00"
+ created: "2021-04-21T15:17:43.28677-07:00"
description: Installs the CRDs for longhorn.
- digest: 2dde1bf0c307ab4fddaa36f7fec5c42495e6cd2356605e6fbff816a33303fd4a
+ digest: 305196027ef02e1f01519b99302321fbb48dd5faca8084751758c5954f83f488
name: longhorn-crd
type: application
urls:
- - released/assets/longhorn/longhorn-crd-1.1.001-rc01.tgz
- version: 1.1.001-rc01
+ - released/assets/longhorn/longhorn-crd-1.1.001.tgz
+ version: 1.1.001
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: longhorn-system
catalog.cattle.io/release-name: longhorn-crd
apiVersion: v1
- created: "2021-03-04T09:47:44.988638-08:00"
+ created: "2021-04-21T15:17:43.286563-07:00"
description: Installs the CRDs for longhorn.
- digest: d5433891d9ca259d2eedb2d969adda94fe2e85b89dfa17e58785ef39a7ac0923
- name: longhorn-crd
- type: application
- urls:
- - released/assets/longhorn/longhorn-crd-1.1.001-rc00.tgz
- version: 1.1.001-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/release-name: longhorn-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.46526-08:00"
- description: Installs the CRDs for longhorn.
- digest: 2ca9ca1b7af582f9c0e89684e4624a4d4cfc1484ceee74f3cab9c22c7b4e823f
+ digest: 5d5f3a3493810aa0dfd263757819e00a8a483c5410c5ff4ff61f5d5fee3561b9
name: longhorn-crd
type: application
urls:
@@ -1799,23 +504,9 @@ entries:
catalog.cattle.io/namespace: longhorn-system
catalog.cattle.io/release-name: longhorn-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.465077-08:00"
+ created: "2021-04-21T15:17:43.286363-07:00"
description: Installs the CRDs for longhorn.
- digest: 585f1161f2d231cdfe9abc44c9f7ef257cc217f611a617be76b590a7f6a32350
- name: longhorn-crd
- type: application
- urls:
- - released/assets/longhorn/longhorn-crd-1.0.202.tgz
- version: 1.0.202
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/release-name: longhorn-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.464922-08:00"
- description: Installs the CRDs for longhorn.
- digest: 3b8908fb3dec0f0b70a7775a70fd3f1fc8cb1a4c1b72a7f564e6ccb3c11f94b1
+ digest: 4da0eeeef78a45c8b0111bb66cfca1734088bcd9bb15b8bfd6712b0ab6320ca1
name: longhorn-crd
type: application
urls:
@@ -1827,9 +518,9 @@ entries:
catalog.cattle.io/namespace: longhorn-system
catalog.cattle.io/release-name: longhorn-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.464762-08:00"
+ created: "2021-04-21T15:17:43.286127-07:00"
description: Installs the CRDs for longhorn.
- digest: 815331159012c16c6cd9816a10a38fcf03972d2f3a9f5fc97b8e0f87e937d10b
+ digest: c3fc8df8818d884c9df73999999834cebe41ce6567f60222792c2593ad853d31
name: longhorn-crd
type: application
urls:
@@ -1843,7 +534,7 @@ entries:
catalog.cattle.io/release-name: rancher-alerting-drivers
apiVersion: v2
appVersion: 1.16.0
- created: "2021-04-21T19:30:59.638973174Z"
+ created: "2021-04-21T15:17:43.287633-07:00"
dependencies:
- condition: prom2teams.enabled
name: prom2teams
@@ -1853,66 +544,15 @@ entries:
repository: file://./charts/sachet
description: The manager for third-party webhook receivers used in Prometheus
Alertmanager
- digest: 4e6ae29c5ace7253df6d3ab03f365586dee5886983840252760dd1f4f745c36b
+ digest: c2b4935dbe8dc711267336813fe7e9a1fb6ef6f510603c44359a0ebe2a3883a7
keywords:
- monitoring
- alertmanger
- webhook
name: rancher-alerting-drivers
urls:
- - assets/rancher-alerting-drivers/rancher-alerting-drivers-1.0.100-rc03.tgz
- version: 1.0.100-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Alerting Drivers
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-alerting-drivers
- apiVersion: v2
- appVersion: 1.16.0
- created: "2021-04-15T21:48:24.628282101Z"
- dependencies:
- - condition: prom2teams.enabled
- name: prom2teams
- repository: file://./charts/prom2teams
- - condition: sachet.enabled
- name: sachet
- repository: file://./charts/sachet
- description: The manager for third-party webhook receivers used in Prometheus
- Alertmanager
- digest: c9433565bc0a26dda6db36eea1ea2d6e854577c87e8c7a10c3c68c4fbd9da9d0
- keywords:
- - monitoring
- - alertmanger
- - webhook
- name: rancher-alerting-drivers
- urls:
- - assets/rancher-alerting-drivers/rancher-alerting-drivers-1.0.100-rc02.tgz
- version: 1.0.100-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Alerting Drivers
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-alerting-drivers
- apiVersion: v2
- appVersion: 1.16.0
- created: "2021-04-15T00:36:31.046758531Z"
- dependencies:
- - condition: prom2teams.enabled
- name: prom2teams
- repository: file://./charts/prom2teams
- - condition: sachet.enabled
- name: sachet
- repository: file://./charts/sachet
- description: The manager for third-party webhook receivers used in the Alertmanger
- digest: 17792f352254ecec55f48a1e77ea2f1f73d534b7a56541286c52fb41b7f026b5
- keywords:
- - monitoring
- - alertmanger
- - webhook
- name: rancher-alerting-drivers
- urls:
- - assets/rancher-alerting-drivers/rancher-alerting-drivers-1.0.100-rc01.tgz
- version: 1.0.100-rc01
+ - released/assets/rancher-alerting-drivers/rancher-alerting-drivers-1.0.100.tgz
+ version: 1.0.100
rancher-backup:
- annotations:
catalog.cattle.io/auto-install: rancher-backup-crd=match
@@ -1926,42 +566,18 @@ entries:
catalog.cattle.io/ui-component: rancher-backup
apiVersion: v2
appVersion: 1.0.4
- created: "2021-04-06T18:12:22.566984745Z"
+ created: "2021-04-21T15:17:43.29061-07:00"
description: Provides ability to back up and restore the Rancher application running
on any Kubernetes cluster
- digest: af2c73d66f7808f710d47df3f0e0053a2e500a1c7fe02fd7805bb2b1457d47e6
+ digest: 92f52749b1289e1e8dcbb48183e7e0ab0ef2578af95a51c59447dc49dc6eb4fa
icon: https://charts.rancher.io/assets/logos/backup-restore.svg
keywords:
- applications
- infrastructure
name: rancher-backup
urls:
- - assets/rancher-backup/rancher-backup-1.0.400-rc03.tgz
- version: 1.0.400-rc03
- - annotations:
- catalog.cattle.io/auto-install: rancher-backup-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Rancher Backups
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
- catalog.cattle.io/release-name: rancher-backup
- catalog.cattle.io/scope: management
- catalog.cattle.io/ui-component: rancher-backup
- apiVersion: v2
- appVersion: 1.0.4
- created: "2021-03-19T21:11:36.466433266Z"
- description: Provides ability to back up and restore the Rancher application running
- on any Kubernetes cluster
- digest: 5fd539770144cff99063b15c0e7b07e7fa0d61b906f7f741976d1f9aff56bdfd
- icon: https://charts.rancher.io/assets/logos/backup-restore.svg
- keywords:
- - applications
- - infrastructure
- name: rancher-backup
- urls:
- - assets/rancher-backup/rancher-backup-1.0.400-rc02.tgz
- version: 1.0.400-rc02
+ - released/assets/rancher-backup/rancher-backup-1.0.400.tgz
+ version: 1.0.400
- annotations:
catalog.cattle.io/auto-install: rancher-backup-crd=match
catalog.cattle.io/certified: rancher
@@ -1974,18 +590,18 @@ entries:
catalog.cattle.io/ui-component: rancher-backup
apiVersion: v1
appVersion: v1.0.3
- created: "2021-03-04T09:47:44.990624-08:00"
+ created: "2021-04-21T15:17:43.290137-07:00"
description: Provides ability to back up and restore the Rancher application running
on any Kubernetes cluster
- digest: 7d6296d4c459042bb7f85543691ba807ae03cda6d42db22fcdafd01dbf49edea
+ digest: 21e586d307c78cc6a1321adaa89bef78719f0beca7f181c719cbca27691e6f5a
icon: https://charts.rancher.io/assets/logos/backup-restore.svg
keywords:
- applications
- infrastructure
name: rancher-backup
urls:
- - released/assets/rancher-backup/rancher-backup-1.0.301-rc01.tgz
- version: 1.0.301-rc01
+ - released/assets/rancher-backup/rancher-backup-1.0.301.tgz
+ version: 1.0.301
- annotations:
catalog.cattle.io/auto-install: rancher-backup-crd=match
catalog.cattle.io/certified: rancher
@@ -1998,34 +614,10 @@ entries:
catalog.cattle.io/ui-component: rancher-backup
apiVersion: v1
appVersion: v1.0.3
- created: "2021-03-04T09:47:44.989572-08:00"
+ created: "2021-04-21T15:17:43.289711-07:00"
description: Provides ability to back up and restore the Rancher application running
on any Kubernetes cluster
- digest: 9f44f0901b03b9349242bc2b0e9cb6ec6b3e10f6583f605e3c3d8b87dc5f490c
- icon: https://charts.rancher.io/assets/logos/backup-restore.svg
- keywords:
- - applications
- - infrastructure
- name: rancher-backup
- urls:
- - released/assets/rancher-backup/rancher-backup-1.0.301-rc00.tgz
- version: 1.0.301-rc00
- - annotations:
- catalog.cattle.io/auto-install: rancher-backup-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Rancher Backups
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
- catalog.cattle.io/release-name: rancher-backup
- catalog.cattle.io/scope: management
- catalog.cattle.io/ui-component: rancher-backup
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-01-15T00:11:30.466548-08:00"
- description: Provides ability to back up and restore the Rancher application running
- on any Kubernetes cluster
- digest: 9fe775b7260bad706159af83c256b93662902bfef01cc071f3f3bb780d9e18bc
+ digest: 733d4515a014e6c6d99f73db30d3143f7cef04a870b19a3b2f5eef5b09dbfc55
icon: https://charts.rancher.io/assets/logos/backup-restore.svg
keywords:
- applications
@@ -2046,10 +638,10 @@ entries:
catalog.cattle.io/ui-component: rancher-backup
apiVersion: v1
appVersion: v1.0.2
- created: "2021-01-15T00:11:30.466109-08:00"
+ created: "2021-04-21T15:17:43.289279-07:00"
description: Provides ability to back up and restore the Rancher application running
on any Kubernetes cluster
- digest: 931b45edda48b555f6c5c1179776787b615129f92026658100104e8f9a9012c5
+ digest: bd39f041d51be323dd59dbbb0bae5c21b7ebbdca5f777972080254eb996595b4
icon: https://charts.rancher.io/assets/logos/backup-restore.svg
keywords:
- applications
@@ -2069,10 +661,10 @@ entries:
catalog.cattle.io/ui-component: rancher-backup
apiVersion: v1
appVersion: v1.0.2
- created: "2021-01-15T00:11:30.465667-08:00"
+ created: "2021-04-21T15:17:43.288836-07:00"
description: Provides ability to back up and restore the Rancher application running
on any Kubernetes cluster
- digest: 8c5375832bcb54fb3bc4d708ca22248e381bf1fcde8013a48a0b37d9a60e2375
+ digest: a3a4fcd83c7332bfafe1ee03c17dbdb43765364e97dc19f297884334486196c7
icon: https://charts.rancher.io/assets/logos/backup-restore.svg
keywords:
- applications
@@ -2089,66 +681,37 @@ entries:
catalog.cattle.io/release-name: rancher-backup-crd
apiVersion: v2
appVersion: 1.0.4
- created: "2021-04-15T17:26:22.1833423Z"
+ created: "2021-04-21T15:17:43.291591-07:00"
description: Installs the CRDs for rancher-backup.
- digest: 0c8a620d826dce7c5ef2edffda3b51caf8dbce3f15f412c25e7abc31988b234c
+ digest: e09b3e5d037d604a10365ec814104582c6eccd91af0ed42a738345c57edf903a
name: rancher-backup-crd
type: application
urls:
- - assets/rancher-backup-crd/rancher-backup-crd-1.0.400-rc03.tgz
- version: 1.0.400-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/release-name: rancher-backup-crd
- apiVersion: v2
- appVersion: 1.0.4
- created: "2021-03-19T21:11:36.467133912Z"
- description: Installs the CRDs for rancher-backup.
- digest: caafbea7cdbcc266d2fd3f5e9379fb471a700eef94f2cfc864926aed230a9817
- name: rancher-backup-crd
- type: application
- urls:
- - assets/rancher-backup-crd/rancher-backup-crd-1.0.400-rc02.tgz
- version: 1.0.400-rc02
+ - released/assets/rancher-backup-crd/rancher-backup-crd-1.0.400.tgz
+ version: 1.0.400
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-resources-system
catalog.cattle.io/release-name: rancher-backup-crd
apiVersion: v1
- created: "2021-03-04T09:47:44.99116-08:00"
+ created: "2021-04-21T15:17:43.291396-07:00"
description: Installs the CRDs for rancher-backup.
- digest: bfc3f4d5d64a7989eec4d518c36276acdc21f5fbb98ace02a80678d5caf390d5
+ digest: 3dedeb53130cb1050147156b87c770ab40a023be25f4d3342678eb7d8a33362d
name: rancher-backup-crd
type: application
urls:
- - released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc01.tgz
- version: 1.0.301-rc01
+ - released/assets/rancher-backup/rancher-backup-crd-1.0.301.tgz
+ version: 1.0.301
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-resources-system
catalog.cattle.io/release-name: rancher-backup-crd
apiVersion: v1
- created: "2021-03-04T09:47:44.99088-08:00"
+ created: "2021-04-21T15:17:43.291204-07:00"
description: Installs the CRDs for rancher-backup.
- digest: 472492587c7403c45544ee70a9cdaa6c20afe8367415e35aa934f048a7071eba
- name: rancher-backup-crd
- type: application
- urls:
- - released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc00.tgz
- version: 1.0.301-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/release-name: rancher-backup-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.467126-08:00"
- description: Installs the CRDs for rancher-backup.
- digest: 8d6e14dccabb8477c1e27b3bfbab4f8751252d492152a2ac2640bbbb3ec6d4c4
+ digest: da8413d2ecc169ba43aa5f6f3cb9da45c297140a1af2e702f11c4645f644c7e4
name: rancher-backup-crd
type: application
urls:
@@ -2160,9 +723,9 @@ entries:
catalog.cattle.io/namespace: cattle-resources-system
catalog.cattle.io/release-name: rancher-backup-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.466935-08:00"
+ created: "2021-04-21T15:17:43.291003-07:00"
description: Installs the CRDs for rancher-backup.
- digest: ebf8da7907c5fce5f9dccf4c3fa540f76c296955cd466a15f3f88b41b8f7d3dd
+ digest: b42794ee6663cb35c6f40c1b43ce51f6b82d2f8efe06421c9b2a1cb7cea18503
name: rancher-backup-crd
type: application
urls:
@@ -2174,9 +737,9 @@ entries:
catalog.cattle.io/namespace: cattle-resources-system
catalog.cattle.io/release-name: rancher-backup-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.46675-08:00"
+ created: "2021-04-21T15:17:43.290806-07:00"
description: Installs the CRDs for rancher-backup.
- digest: 7021563a39672f11d7af57f1769da179d3f059d5f2fe9e72c6a1a486a52eed73
+ digest: 4d2cfbd4b413d0a86cd3c94a10a3316c44a668c79730a2a4063933aa0eb6e332
name: rancher-backup-crd
type: application
urls:
@@ -2194,17 +757,17 @@ entries:
catalog.cattle.io/ui-component: rancher-cis-benchmark
apiVersion: v1
appVersion: v1.0.4
- created: "2021-04-09T23:21:12.566741379Z"
+ created: "2021-04-21T15:17:43.295709-07:00"
description: The cis-operator enables running CIS benchmark security scans on
a kubernetes cluster
- digest: 1b2f82001209464614552b9a068c356a3426f46ab859c3dd5e3bbf860259abb2
+ digest: 52aa43c6ae9db78a53d019cf5283e8bcbc38134f91862496c4b2fa2b0c8548b5
icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
keywords:
- security
name: rancher-cis-benchmark
urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402-rc00.tgz
- version: 1.0.402-rc00
+ - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402.tgz
+ version: 1.0.402
- annotations:
catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
catalog.cattle.io/certified: rancher
@@ -2216,61 +779,17 @@ entries:
catalog.cattle.io/ui-component: rancher-cis-benchmark
apiVersion: v1
appVersion: v1.0.4
- created: "2021-04-15T21:24:07.197772144Z"
+ created: "2021-04-21T15:17:43.294596-07:00"
description: The cis-operator enables running CIS benchmark security scans on
a kubernetes cluster
- digest: c244a44f87f1da19aa659da94e4280bac53925594c7f915b39d9ec5a7ca864a2
+ digest: 7df9c288b901b484b58ff44d619169069d0951e283749e20b6049d5dd4b0e289
icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
keywords:
- security
name: rancher-cis-benchmark
urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.400-rc03.tgz
- version: 1.0.400-rc03
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: CIS Benchmark
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.4
- created: "2021-04-12T17:32:41.161236616Z"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: ef5a38f090505b3a993d9e399f7e132b13878c1a987c3d407553d96ad9b71f10
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.400-rc02.tgz
- version: 1.0.400-rc02
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: CIS Benchmark
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.4
- created: "2021-04-06T22:40:50.996509533Z"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: 6cf3883441691b96775bf5ef7a0a8983b4ce147651125ad5351f6d3373ebe236
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.400-rc01.tgz
- version: 1.0.400-rc01
+ - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.400.tgz
+ version: 1.0.400
- annotations:
catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
catalog.cattle.io/certified: rancher
@@ -2282,17 +801,17 @@ entries:
catalog.cattle.io/ui-component: rancher-cis-benchmark
apiVersion: v1
appVersion: v1.0.3
- created: "2021-03-19T19:06:09.747464838Z"
+ created: "2021-04-21T15:17:43.293828-07:00"
description: The cis-operator enables running CIS benchmark security scans on
a kubernetes cluster
- digest: e4e71c09635bf2c56580c7031ba3c0336e1b3376b34049db60e9ceb755a26dbd
+ digest: c548033c5ec3822f2c89f0a1a19e3f4ce063f59a4ee021523642886ec3bf13a2
icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
keywords:
- security
name: rancher-cis-benchmark
urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.400-rc00.tgz
- version: 1.0.400-rc00
+ - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301.tgz
+ version: 1.0.301
- annotations:
catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
catalog.cattle.io/certified: rancher
@@ -2304,54 +823,10 @@ entries:
catalog.cattle.io/ui-component: rancher-cis-benchmark
apiVersion: v1
appVersion: v1.0.3
- created: "2021-03-04T09:47:44.992387-08:00"
+ created: "2021-04-21T15:17:43.293294-07:00"
description: The cis-operator enables running CIS benchmark security scans on
a kubernetes cluster
- digest: 5e389e57302f2f4ee674490e0ca7dcd4d78b2afd0f038d840dac974b77d66ede
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc01.tgz
- version: 1.0.301-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: CIS Benchmark
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-03-04T09:47:44.991803-08:00"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: 6fec0634cd92f79fa192e7860fd99babb104e0350a9007a9923e8439b761ff08
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc00.tgz
- version: 1.0.301-rc00
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: CIS Benchmark
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-01-15T00:11:30.468452-08:00"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: af499c4fbd67e594057e97ac025011c52f0e02d6f7571532b7f5a2b19ed19035
+ digest: 2cce59f4f78b975edd93b0d707c5282fa44a6fa1f19d702ed4be8c221170c8d1
icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
keywords:
- security
@@ -2370,10 +845,10 @@ entries:
catalog.cattle.io/ui-component: rancher-cis-benchmark
apiVersion: v1
appVersion: v1.0.2
- created: "2021-01-15T00:11:30.46796-08:00"
+ created: "2021-04-21T15:17:43.292755-07:00"
description: The cis-operator enables running CIS benchmark security scans on
a kubernetes cluster
- digest: b234bbf851d0c5bf1cb02e51ea647d95d53e9f2302b1e68518eadb694f345a1c
+ digest: b3a6ce49c5e6918a1658f682fdf25e241d9638fde4b8c046a70562c13228c8c0
icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
keywords:
- security
@@ -2391,10 +866,10 @@ entries:
catalog.cattle.io/ui-component: rancher-cis-benchmark
apiVersion: v1
appVersion: v1.0.1
- created: "2021-01-15T00:11:30.46754-08:00"
+ created: "2021-04-21T15:17:43.291987-07:00"
description: The cis-operator enables running CIS benchmark security scans on
a kubernetes cluster
- digest: 0d4ff5981f5ee48fca8a887ab0608888f85f97285175c46d7320c6987f167d4f
+ digest: 407c19666ce5c083c50d8ef2cbc4fbc26b811106bbfc6b3d25a659a593c0aa3c
icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
keywords:
- security
@@ -2409,107 +884,51 @@ entries:
catalog.cattle.io/namespace: cis-operator-system
catalog.cattle.io/release-name: rancher-cis-benchmark-crd
apiVersion: v1
- created: "2021-04-09T23:21:12.567872557Z"
+ created: "2021-04-21T15:17:43.297146-07:00"
description: Installs the CRDs for rancher-cis-benchmark.
- digest: 00e60fe270f74e664daac82396f45704c317cbd3f469f8ec1cd66aa08206484b
+ digest: 6c83ac0192359d5c6e5fa4d64ab8564a42a98d42f26cf6a9c8cfaa1ffd025889
name: rancher-cis-benchmark-crd
type: application
urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.402-rc00.tgz
- version: 1.0.402-rc00
+ - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.402.tgz
+ version: 1.0.402
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cis-operator-system
catalog.cattle.io/release-name: rancher-cis-benchmark-crd
apiVersion: v1
- created: "2021-04-15T21:24:07.199870681Z"
+ created: "2021-04-21T15:17:43.29692-07:00"
description: Installs the CRDs for rancher-cis-benchmark.
- digest: a59c001dfa8b2f6cf30bc02ee90b3cd7d8e514cf9828b1d16226f66a0c4f0451
+ digest: d7b87dd4103e588bba20c87debe41617e75b55752c89d9a3dcc024eff3f775c7
name: rancher-cis-benchmark-crd
type: application
urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.400-rc03.tgz
- version: 1.0.400-rc03
+ - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.400.tgz
+ version: 1.0.400
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cis-operator-system
catalog.cattle.io/release-name: rancher-cis-benchmark-crd
apiVersion: v1
- created: "2021-04-12T17:32:41.163425823Z"
+ created: "2021-04-21T15:17:43.296685-07:00"
description: Installs the CRDs for rancher-cis-benchmark.
- digest: 8c5e8bd0587f16309a9a586914117f613e0e451fc462cee7a1761d16656666ef
+ digest: cabb44716892582bee08bd13c48caa3863c9f53218f2ffa1f1bc123ae7234d5a
name: rancher-cis-benchmark-crd
type: application
urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.400-rc02.tgz
- version: 1.0.400-rc02
+ - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301.tgz
+ version: 1.0.301
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cis-operator-system
catalog.cattle.io/release-name: rancher-cis-benchmark-crd
apiVersion: v1
- created: "2021-04-06T22:40:50.99747654Z"
+ created: "2021-04-21T15:17:43.296387-07:00"
description: Installs the CRDs for rancher-cis-benchmark.
- digest: c45c3c7e9a5500376c75f2c5b96f24c25abc1e0ca98524913a69ba8c0445f776
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.400-rc01.tgz
- version: 1.0.400-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-04-05T19:37:04.719390435Z"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: f60d4f0e1c3d1c0824eb920b825f3d9ccd1b0738953c695acfa215974ac0d334
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.400-rc00.tgz
- version: 1.0.400-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.992822-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: 2fa5d4eb62b76871efccfcdc5c0d4125b1bccc0e2bb498732938ba23ed3bd8fb
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc01.tgz
- version: 1.0.301-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.992608-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: 1f210946fe8e6b3b2b656ea6488536fb942f4ab8202ad6cf265a211e792260b4
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc00.tgz
- version: 1.0.301-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.469354-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: 4a4fbd34ab72796c4780acb6ad99de5dad5f5f54edbd9dad281fc886c3a8b184
+ digest: 20d71a2ae15f77913229f809c4acf5924f988a0cfc09061306d65c45899618ce
name: rancher-cis-benchmark-crd
type: application
urls:
@@ -2521,23 +940,9 @@ entries:
catalog.cattle.io/namespace: cis-operator-system
catalog.cattle.io/release-name: rancher-cis-benchmark-crd
apiVersion: v1
- created: "2021-03-19T19:06:09.747702548Z"
+ created: "2021-04-21T15:17:43.296154-07:00"
description: Installs the CRDs for rancher-cis-benchmark.
- digest: c1c3fe4a892be9bac7f9f262f1df424790110d606b08f6e059381b0681e68dc3
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.300-rc00.tgz
- version: 1.0.300-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.468842-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: 1da104dc221a9772a21e67ef787919cc191d6df3ccdf019f464e3091d6ed0703
+ digest: b12e7bc934602f88087b34540446a2cdc8af5cb30ede6d4d3a48dc29ded1daaa
name: rancher-cis-benchmark-crd
type: application
urls:
@@ -2549,9 +954,9 @@ entries:
catalog.cattle.io/namespace: cis-operator-system
catalog.cattle.io/release-name: rancher-cis-benchmark-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.468647-08:00"
+ created: "2021-04-21T15:17:43.295939-07:00"
description: Installs the CRDs for rancher-cis-benchmark.
- digest: cc33de77923232bda5875b6568522cffe8950e2d9bb3793ee30978c5257f4354
+ digest: 2be8b1e2aa24e83d8b20439d0b0343851fbd32495306d38d5d20c62d95b0a8b5
name: rancher-cis-benchmark-crd
type: application
urls:
@@ -2567,10 +972,10 @@ entries:
catalog.cattle.io/ui-component: rancher-external-ip-webhook
apiVersion: v1
appVersion: v0.1.6
- created: "2021-03-04T09:47:44.994223-08:00"
+ created: "2021-04-21T15:17:43.299354-07:00"
description: |
Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: 7a196d304a2bad5e585fae961188861da5bb84679e576b6882ebf3fd6640137e
+ digest: 14ed8a7f5417a863a325a65d1f9ca1e6a686e36964a1b9bde249abe05d530fad
home: https://github.com/rancher/externalip-webhook
keywords:
- cve
@@ -2584,8 +989,8 @@ entries:
sources:
- https://github.com/rancher/externalip-webhook
urls:
- - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc01.tgz
- version: 0.1.601-rc01
+ - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601.tgz
+ version: 0.1.601
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: External IP Webhook
@@ -2595,38 +1000,10 @@ entries:
catalog.cattle.io/ui-component: rancher-external-ip-webhook
apiVersion: v1
appVersion: v0.1.6
- created: "2021-03-04T09:47:44.993541-08:00"
+ created: "2021-04-21T15:17:43.298627-07:00"
description: |
Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: 6294a812fd938166bfb8f0f9d84d3eeb47f9387040d74837ff0127b89e1850de
- home: https://github.com/rancher/externalip-webhook
- keywords:
- - cve
- - externalip
- - webhook
- - security
- maintainers:
- - email: raul@rancher.com
- name: rawmind0
- name: rancher-external-ip-webhook
- sources:
- - https://github.com/rancher/externalip-webhook
- urls:
- - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc00.tgz
- version: 0.1.601-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: External IP Webhook
- catalog.cattle.io/namespace: cattle-externalip-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-external-ip-webhook
- catalog.cattle.io/ui-component: rancher-external-ip-webhook
- apiVersion: v1
- appVersion: v0.1.6
- created: "2021-01-15T00:11:30.471579-08:00"
- description: |
- Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: 70c430a933e17279605936c73b17cbd192f7f86da0573d6c2a6dbdf745a5c7af
+ digest: 245d80daa0b7c6316217b2ec9df111060fe6762728a5d9adfb163d7afd02fc9b
home: https://github.com/rancher/externalip-webhook
keywords:
- cve
@@ -2642,34 +1019,6 @@ entries:
urls:
- released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.600.tgz
version: 0.1.600
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: External IP Webhook
- catalog.cattle.io/namespace: cattle-externalip-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-external-ip-webhook
- catalog.cattle.io/ui-component: rancher-external-ip-webhook
- apiVersion: v1
- appVersion: v0.1.5
- created: "2021-01-15T00:11:30.47095-08:00"
- description: |
- Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: a272ec4ad785095ed827d087b8976c7f327e1f28a6ab0cdb7a839580487c40fb
- home: https://github.com/rancher/externalip-webhook
- keywords:
- - cve
- - externalip
- - webhook
- - security
- maintainers:
- - email: raul@rancher.com
- name: rawmind0
- name: rancher-external-ip-webhook
- sources:
- - https://github.com/rancher/externalip-webhook
- urls:
- - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.500.tgz
- version: 0.1.500
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: External IP Webhook
@@ -2679,10 +1028,10 @@ entries:
catalog.cattle.io/ui-component: rancher-external-ip-webhook
apiVersion: v1
appVersion: v0.1.4
- created: "2021-01-15T00:11:30.47031-08:00"
+ created: "2021-04-21T15:17:43.297897-07:00"
description: |
Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: 207982df2b8b709b2ac2c9bc9ccda6955bebc6c7866e3531391e7905eafb154e
+ digest: 7fa93b5a3f3e9bd5ebcf0e8cc670441a5fd63dd611ee0843e08a6521fa315838
home: https://github.com/rancher/externalip-webhook
keywords:
- cve
@@ -2710,10 +1059,10 @@ entries:
catalog.cattle.io/ui-component: gatekeeper
apiVersion: v1
appVersion: v3.3.0
- created: "2021-03-19T19:06:09.750843884Z"
+ created: "2021-04-21T15:17:43.302857-07:00"
description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
policy-based control for cloud native environments
- digest: 704bd0ff8114dd0786a67a16d3573d7d96b1abeab6d25a6741e5acaa439595c5
+ digest: 5bc10dd9e274f48ed25eb3e37de512e9f89cb5e9a10f55bfc3ea9dad4b9c04cd
home: https://github.com/open-policy-agent/gatekeeper
icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
keywords:
@@ -2723,8 +1072,8 @@ entries:
sources:
- https://github.com/open-policy-agent/gatekeeper.git
urls:
- - assets/rancher-gatekeeper/rancher-gatekeeper-3.3.001-rc00.tgz
- version: 3.3.001-rc00
+ - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.001.tgz
+ version: 3.3.001
- annotations:
catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
catalog.cattle.io/certified: rancher
@@ -2736,10 +1085,10 @@ entries:
catalog.cattle.io/ui-component: gatekeeper
apiVersion: v1
appVersion: v3.3.0
- created: "2021-03-04T09:47:44.995577-08:00"
+ created: "2021-04-21T15:17:43.302108-07:00"
description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
policy-based control for cloud native environments
- digest: f912c6f2f214dca2e07810c0ca88904c58909f392e10cdf8a9c43dcafaf4de46
+ digest: cdd2cb75ded06543e55124c5086a12c06e323c0398319e8c8984c73e19dd58bc
home: https://github.com/open-policy-agent/gatekeeper
icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
keywords:
@@ -2749,34 +1098,8 @@ entries:
sources:
- https://github.com/open-policy-agent/gatekeeper.git
urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc02.tgz
- version: 3.3.000-rc02
- - annotations:
- catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: OPA Gatekeeper
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
- catalog.cattle.io/release-name: rancher-gatekeeper
- catalog.cattle.io/ui-component: gatekeeper
- apiVersion: v1
- appVersion: v3.3.0
- created: "2021-03-04T09:47:44.994894-08:00"
- description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
- policy-based control for cloud native environments
- digest: 9b6b061a749d2fd7d112753db206e27f472dda6d597fe7f5baea7bf37dcacec2
- home: https://github.com/open-policy-agent/gatekeeper
- icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
- keywords:
- - open policy agent
- - security
- name: rancher-gatekeeper
- sources:
- - https://github.com/open-policy-agent/gatekeeper.git
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc01.tgz
- version: 3.3.000-rc01
+ - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000.tgz
+ version: 3.3.000
- annotations:
catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
catalog.cattle.io/certified: rancher
@@ -2789,10 +1112,10 @@ entries:
catalog.cattle.io/ui-component: gatekeeper
apiVersion: v1
appVersion: v3.2.1
- created: "2021-01-15T00:11:30.47384-08:00"
+ created: "2021-04-21T15:17:43.301331-07:00"
description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
policy-based control for cloud native environments
- digest: f6da9f05a9bf5ffbe59780c578624db93979d6e3c4b3d69e90e5090007aec52d
+ digest: 3d0e961fc109e051f08edacf9e541e5ad1c0c65f046cae72459df0ca4aa22312
home: https://github.com/open-policy-agent/gatekeeper
icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
keywords:
@@ -2804,33 +1127,6 @@ entries:
urls:
- released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.101.tgz
version: 3.2.101
- - annotations:
- catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: OPA Gatekeeper
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
- catalog.cattle.io/release-name: rancher-gatekeeper
- catalog.cattle.io/ui-component: gatekeeper
- apiVersion: v1
- appVersion: v3.2.1
- created: "2021-01-15T00:11:30.473251-08:00"
- description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
- policy-based control for cloud native environments
- digest: 42a1e00cad97b74471506ba628366e005657b71fa38808c438faf239b082bb38
- home: https://github.com/open-policy-agent/gatekeeper
- icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
- keywords:
- - open policy agent
- - security
- name: rancher-gatekeeper
- sources:
- - https://github.com/open-policy-agent/gatekeeper.git
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.100.tgz
- version: 3.2.100
- annotations:
catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
catalog.cattle.io/certified: rancher
@@ -2842,10 +1138,10 @@ entries:
catalog.cattle.io/release-name: rancher-gatekeeper
apiVersion: v1
appVersion: v3.1.1
- created: "2021-01-15T00:11:30.472662-08:00"
+ created: "2021-04-21T15:17:43.300624-07:00"
description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
policy-based control for cloud native environments
- digest: 8fdc03791c93b6d6f6d81edf27988c5a31c3c5bc113da8d8520ec534af087393
+ digest: 36aebc7718e4afd4d9bb65775276d2288eb0de27192d0d290553a7c7087d7f3f
home: https://github.com/open-policy-agent/gatekeeper
icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
keywords:
@@ -2867,10 +1163,10 @@ entries:
catalog.cattle.io/release-name: rancher-gatekeeper
apiVersion: v1
appVersion: v3.1.1
- created: "2021-01-15T00:11:30.472104-08:00"
+ created: "2021-04-21T15:17:43.299986-07:00"
description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
policy-based control for cloud native environments
- digest: 5c0c935a6935ce109015e1b86bb4f435c0fe1aad7ee2ad858e01bae57c3425c1
+ digest: 15a4540b7e32c62157c37cfdb9230ce4b11c5837a2f3734378fcd7ec9c824559
home: https://github.com/open-policy-agent/gatekeeper
icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
keywords:
@@ -2889,42 +1185,28 @@ entries:
catalog.cattle.io/namespace: cattle-gatekeeper-system
catalog.cattle.io/release-name: rancher-gatekeeper-crd
apiVersion: v1
- created: "2021-03-19T19:06:09.751643119Z"
+ created: "2021-04-21T15:17:43.305152-07:00"
description: Installs the CRDs for rancher-gatekeeper.
- digest: 3aa8a1c82e5ba772e1edee2a1c4cc38452eab2e3761a01bbaeea15dead79b03c
+ digest: 6313419fd955e77bc1590b16b3282541003a5842fc5bc40b4567ffd13bad2e55
name: rancher-gatekeeper-crd
type: application
urls:
- - assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.001-rc00.tgz
- version: 3.3.001-rc00
+ - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.001.tgz
+ version: 3.3.001
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-gatekeeper-system
catalog.cattle.io/release-name: rancher-gatekeeper-crd
apiVersion: v1
- created: "2021-03-04T09:47:44.996313-08:00"
+ created: "2021-04-21T15:17:43.304815-07:00"
description: Installs the CRDs for rancher-gatekeeper.
- digest: 03e26e336f2b82b0c09b1191e7cd6cebf5e3c5de46666307e9426e78ef487c18
+ digest: 48a03a80fadacabc507fec107dbed749d94fafbef0d26e4eb37e92c974a7c56b
name: rancher-gatekeeper-crd
type: application
urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc02.tgz
- version: 3.3.000-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/release-name: rancher-gatekeeper-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.995914-08:00"
- description: Installs the CRDs for rancher-gatekeeper.
- digest: ad678c2f7b1bf62c2d3f102847e2bf0920e6e41a6919dce6039385c6e70a8c52
- name: rancher-gatekeeper-crd
- type: application
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc01.tgz
- version: 3.3.000-rc01
+ - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000.tgz
+ version: 3.3.000
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/experimental: "true"
@@ -2932,9 +1214,9 @@ entries:
catalog.cattle.io/namespace: cattle-gatekeeper-system
catalog.cattle.io/release-name: rancher-gatekeeper-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.474788-08:00"
+ created: "2021-04-21T15:17:43.304479-07:00"
description: Installs the CRDs for rancher-gatekeeper.
- digest: 1118f66a1f8f8c192bb1793bcddb0b98af0db43b429df684b916c2e76b51486a
+ digest: 34f449b69d1b50ff1743ae3b1e81553aec3f0a70c8ac7572c60071a8271b53e2
name: rancher-gatekeeper-crd
type: application
urls:
@@ -2947,24 +1229,9 @@ entries:
catalog.cattle.io/namespace: cattle-gatekeeper-system
catalog.cattle.io/release-name: rancher-gatekeeper-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.474498-08:00"
+ created: "2021-04-21T15:17:43.303565-07:00"
description: Installs the CRDs for rancher-gatekeeper.
- digest: 4900e53e49c6bdca47af9b37b3d7a7dfe4e16da027a3aaea69f4a211c5ced3c1
- name: rancher-gatekeeper-crd
- type: application
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.100.tgz
- version: 3.2.100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/release-name: rancher-gatekeeper-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.474283-08:00"
- description: Installs the CRDs for rancher-gatekeeper.
- digest: 25beb2fd49cefa59dfcee5e7a24866eb148ab264ee4c49f368589d3e92d7e269
+ digest: e3da4139207bfa07850db780574a028b5e32c66c1ee57b706fb13fdec5311514
name: rancher-gatekeeper-crd
type: application
urls:
@@ -2977,9 +1244,9 @@ entries:
catalog.cattle.io/namespace: cattle-gatekeeper-system
catalog.cattle.io/release-name: rancher-gatekeeper-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.474068-08:00"
+ created: "2021-04-21T15:17:43.303138-07:00"
description: Installs the CRDs for rancher-gatekeeper.
- digest: ea6fca92a928c90b9539825af19f69378a608e189fcd0f06043b1213bb94cdaf
+ digest: 89d80de1bea71d134b19e6092ae123c08173c172a5201d54b4baa6afedea3855
name: rancher-gatekeeper-crd
type: application
urls:
@@ -2994,9 +1261,9 @@ entries:
catalog.rancher.io/release-name: rancher-grafana
apiVersion: v2
appVersion: 7.4.5
- created: "2021-04-07T19:45:48.128527365Z"
+ created: "2021-04-21T15:17:43.30701-07:00"
description: The leading tool for querying and visualizing time series and metrics.
- digest: 69f23123ec3971f85b620c12778dd63a092daf95feeba3ada0a616b77e0e2ab1
+ digest: f6e7fd0c6148db8e20a986fd7d8cab5865cdce2f2d23bdd1489a28f7210b2ac5
home: https://grafana.net
icon: https://raw.githubusercontent.com/grafana/grafana/master/public/img/logo_transparent_400x.png
kubeVersion: ^1.8.0-0
@@ -3016,11 +1283,11 @@ entries:
- https://github.com/grafana/grafana
type: application
urls:
- - assets/rancher-grafana/rancher-grafana-6.6.401-rc00.tgz
- version: 6.6.401-rc00
+ - released/assets/rancher-grafana/rancher-grafana-6.6.401.tgz
+ version: 6.6.401
rancher-istio:
- annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100-rc01
+ catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: Istio
catalog.cattle.io/namespace: istio-system
@@ -3032,7 +1299,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.9.3
- created: "2021-04-19T16:16:38.168332974Z"
+ created: "2021-04-21T15:17:43.323625-07:00"
dependencies:
- condition: kiali.enabled
name: kiali
@@ -3042,17 +1309,17 @@ entries:
repository: file://./charts/tracing
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: 3059579374a09651dcd2d5ad98c40543fbd0fe840daa8cced51044445508cfa7
+ digest: f5da2c5292b4ecfc72ba48b5ccdb9716df305aa2db7316de146dbd52d8b7f785
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
- infrastructure
name: rancher-istio
urls:
- - assets/rancher-istio-1.9/rancher-istio-1.9.300-rc01.tgz
- version: 1.9.300-rc01
+ - released/assets/rancher-istio-1.9/rancher-istio-1.9.300.tgz
+ version: 1.9.300
- annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100-rc01
+ catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: Istio
catalog.cattle.io/namespace: istio-system
@@ -3064,7 +1331,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.9.2
- created: "2021-04-12T16:14:26.991925247Z"
+ created: "2021-04-21T15:17:43.321342-07:00"
dependencies:
- condition: kiali.enabled
name: kiali
@@ -3074,49 +1341,17 @@ entries:
repository: file://./charts/tracing
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: 5d90dffbb8b4bbb44e11e0754e5f7e729709342fb317da46f46d7f0c001e485e
+ digest: ba78e8e2d4188847e29b19d52ef7d3e534d9a15ed7198f6cdd64f6a89777e71c
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
- infrastructure
name: rancher-istio
urls:
- - assets/rancher-istio-1.9/rancher-istio-1.9.200-rc02.tgz
- version: 1.9.200-rc02
+ - released/assets/rancher-istio-1.9/rancher-istio-1.9.200.tgz
+ version: 1.9.200
- annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.100-rc01
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/requests-cpu: 710m
- catalog.cattle.io/requests-memory: 2314Mi
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.9.2
- created: "2021-04-09T23:52:20.298357002Z"
- dependencies:
- - condition: kiali.enabled
- name: kiali
- repository: file://./charts/kiali
- - condition: tracing.enabled
- name: tracing
- repository: file://./charts/tracing
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: 831b0c704be191da3d0b1db1b0dd1dc8280515d04d4698b95090c5186a70d99c
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - assets/rancher-istio-1.9/rancher-istio-1.9.200-rc01.tgz
- version: 1.9.200-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100-rc01
+ catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: Istio
catalog.cattle.io/namespace: istio-system
@@ -3128,7 +1363,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.8.5
- created: "2021-04-19T16:16:38.160496683Z"
+ created: "2021-04-21T15:17:43.319606-07:00"
dependencies:
- condition: kiali.enabled
name: kiali
@@ -3138,17 +1373,17 @@ entries:
repository: file://./charts/tracing
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: dc5046c45f15be0cfcd219d4d87bc73bd9e50f575260c4918a719c93e5f69c7d
+ digest: c3e7097d65a475fb2850ede67f6be8ded4b66f696b0a5ee2960fbb69da08c666
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
- infrastructure
name: rancher-istio
urls:
- - assets/rancher-istio-1.8/rancher-istio-1.8.500-rc01.tgz
- version: 1.8.500-rc01
+ - released/assets/rancher-istio-1.8/rancher-istio-1.8.500.tgz
+ version: 1.8.500
- annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100-rc01
+ catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: Istio
catalog.cattle.io/namespace: istio-system
@@ -3160,7 +1395,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.8.4
- created: "2021-04-12T16:14:26.984823056Z"
+ created: "2021-04-21T15:17:43.317887-07:00"
dependencies:
- condition: kiali.enabled
name: kiali
@@ -3170,49 +1405,17 @@ entries:
repository: file://./charts/tracing
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: 8ee32e27c2dd471aeb9a3a1c3794738e6d795cad8fc8a92adb8ac74c61d60904
+ digest: 4c3c054bef53e62ba840c3819cf1351d1381d8e2da20bbb959b17f52c3ea6423
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
- infrastructure
name: rancher-istio
urls:
- - assets/rancher-istio-1.8/rancher-istio-1.8.400-rc02.tgz
- version: 1.8.400-rc02
+ - released/assets/rancher-istio-1.8/rancher-istio-1.8.400.tgz
+ version: 1.8.400
- annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.100-rc01
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/requests-cpu: 710m
- catalog.cattle.io/requests-memory: 2314Mi
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.8.4
- created: "2021-04-09T23:52:20.295826839Z"
- dependencies:
- - condition: kiali.enabled
- name: kiali
- repository: file://./charts/kiali
- - condition: tracing.enabled
- name: tracing
- repository: file://./charts/tracing
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: 09298ac04dc8001c41b6c4366a660c8b12c6b52b699205ee0e5941cc20cf9b2a
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - assets/rancher-istio-1.8/rancher-istio-1.8.400-rc01.tgz
- version: 1.8.400-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.100-rc01
+ catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.100
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: Istio
catalog.cattle.io/namespace: istio-system
@@ -3224,7 +1427,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.8.3
- created: "2021-04-08T21:20:12.908647816Z"
+ created: "2021-04-21T15:17:43.316196-07:00"
dependencies:
- condition: kiali.enabled
name: kiali
@@ -3234,17 +1437,17 @@ entries:
repository: file://./charts/tracing
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: d4fd53635e7b3a8bc0c429ecbbb4d1003f854b7c7b94e58bc66f226593431611
+ digest: c2dfe5130b838e4ae62daa5ee72783dee62c4ff93a32393a7598db8e70a11580
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
- infrastructure
name: rancher-istio
urls:
- - assets/rancher-istio-1.8/rancher-istio-1.8.301-rc00.tgz
- version: 1.8.301-rc00
+ - released/assets/rancher-istio-1.8/rancher-istio-1.8.301.tgz
+ version: 1.8.301
- annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.000-rc00
+ catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.000
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: Istio
catalog.cattle.io/namespace: istio-system
@@ -3256,7 +1459,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.8.3
- created: "2021-03-04T09:47:45.001169-08:00"
+ created: "2021-04-21T15:17:43.314487-07:00"
dependencies:
- condition: kiali.enabled
name: kiali
@@ -3266,81 +1469,15 @@ entries:
repository: file://./charts/tracing
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: fae8a77f05769320ce080c28656d5340be16b2fc1997702b444735623e8414c8
+ digest: 3b5fdc7d06c6a3878c47030ff2a9e23ef1ab68ceddcb9fd7290f4e3ef3c99cb0
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
- infrastructure
name: rancher-istio
urls:
- - released/assets/rancher-istio/rancher-istio-1.8.300-rc01.tgz
- version: 1.8.300-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.000-rc00
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/requests-cpu: 710m
- catalog.cattle.io/requests-memory: 2314Mi
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.8.3
- created: "2021-03-04T09:47:44.998358-08:00"
- dependencies:
- - condition: kiali.enabled
- name: kiali
- repository: file://./charts/kiali
- - condition: tracing.enabled
- name: tracing
- repository: file://./charts/tracing
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: e91424e345f8a654658f3f6a2f513aced8b3d65d86b4cda93fe5b4f7e3dbaabe
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.8.300-rc00.tgz
- version: 1.8.300-rc00
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.24.003
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.7.6
- created: "2021-01-15T00:11:30.48261-08:00"
- dependencies:
- - alias: kiali
- condition: kiali.enabled
- name: rancher-kiali-server
- repository: file://../../rancher-kiali-server/charts
- version: 1.24.0
- - alias: tracing
- condition: tracing.enabled
- name: rancher-tracing
- repository: file://../../rancher-tracing/charts
- version: 1.20.001
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: a3a4d39833cb8065099654aac034c344f531c5b0b164a0d1c96bea541d72e5bf
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.7.600.tgz
- version: 1.7.600
+ - released/assets/rancher-istio/rancher-istio-1.8.300.tgz
+ version: 1.8.300
- annotations:
catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.24.003
catalog.cattle.io/certified: rancher
@@ -3352,7 +1489,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.7.3
- created: "2021-01-15T00:11:30.481016-08:00"
+ created: "2021-04-21T15:17:43.31218-07:00"
dependencies:
- alias: kiali
condition: kiali.enabled
@@ -3366,7 +1503,7 @@ entries:
version: 1.20.001
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: 3f32923202198fc41c607b179d194d4b579d790246e0959bf41b82a407bf1786
+ digest: ff28763d01f5b7b366ea0373bd052bbe579f17c009955c88e7cbb5eb66802e84
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
@@ -3386,7 +1523,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.7.3
- created: "2021-01-15T00:11:30.479382-08:00"
+ created: "2021-04-21T15:17:43.310569-07:00"
dependencies:
- alias: kiali
condition: kiali.enabled
@@ -3395,7 +1532,7 @@ entries:
version: 1.24.0
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: 723e0ffa6ab03dde307bcb2848095b91f49d33eae05a4b29c26fe3e4066fc30c
+ digest: 1e4a14509830e72f8a3d10d6d3ffaf72683dc0243e2cd9d067934844163f9f80
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
@@ -3404,35 +1541,6 @@ entries:
urls:
- released/assets/rancher-istio/rancher-istio-1.7.300.tgz
version: 1.7.300
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.23.002
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.7.1
- created: "2021-01-15T00:11:30.478046-08:00"
- dependencies:
- - alias: kiali
- condition: kiali.enabled
- name: rancher-kiali-server
- repository: file://../../rancher-kiali-server/charts
- version: 1.23.0
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: 2aa1870dabf3548c4ef52dde4515ca6b1478d75e052b8154555c43931829250b
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.7.101.tgz
- version: 1.7.101
- annotations:
catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.23.001
catalog.cattle.io/certified: rancher
@@ -3444,7 +1552,7 @@ entries:
catalog.cattle.io/ui-component: istio
apiVersion: v1
appVersion: 1.7.1
- created: "2021-01-15T00:11:30.476142-08:00"
+ created: "2021-04-21T15:17:43.308891-07:00"
dependencies:
- alias: kiali
condition: kiali.enabled
@@ -3453,7 +1561,7 @@ entries:
version: 1.23.0
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
- digest: a6a23976155b1c3375406c00b49c354238aa6b837f3b19bbf360279cef59f9ef
+ digest: 3a7a84aa165a472cf346a4d595ff84ac8190d7f050409b65f2a7168c8307ef28
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
@@ -3473,11 +1581,11 @@ entries:
catalog.rancher.io/release-name: rancher-kiali-server
apiVersion: v2
appVersion: v1.32.0
- created: "2021-04-12T16:14:26.995657395Z"
+ created: "2021-04-21T15:17:43.328384-07:00"
description: Kiali is an open source project for service mesh observability, refer
to https://www.kiali.io for details. This is installed as sub-chart with customized
values in Rancher's Istio.
- digest: 5c936508b33a984898c6c3d791625b4bb8cbab94326cae669c815965be8ee74c
+ digest: c02e1152206293d5743a3e86f2dd39a60e7073c3352dc3caa56b0a35cb9cf56e
home: https://github.com/kiali/kiali
icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
keywords:
@@ -3496,8 +1604,8 @@ entries:
- https://github.com/kiali/kiali-operator
- https://github.com/kiali/helm-charts
urls:
- - assets/rancher-kiali-server/rancher-kiali-server-1.32.100-rc01.tgz
- version: 1.32.100-rc01
+ - released/assets/rancher-kiali-server/rancher-kiali-server-1.32.100.tgz
+ version: 1.32.100
- annotations:
catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
catalog.cattle.io/hidden: "true"
@@ -3508,11 +1616,11 @@ entries:
catalog.rancher.io/release-name: rancher-kiali-server
apiVersion: v2
appVersion: v1.29.0
- created: "2021-04-08T21:20:12.91127232Z"
+ created: "2021-04-21T15:17:43.327569-07:00"
description: Kiali is an open source project for service mesh observability, refer
to https://www.kiali.io for details. This is installed as sub-chart with customized
values in Rancher's Istio.
- digest: bf98263f3c467b94c57687a26e7de82a06835ba45680231a531d6f05ae0c39fd
+ digest: 668221244b6cfd762b15d7d67922bde5096585deff1c3a466ed07b7bfa750a70
home: https://github.com/kiali/kiali
icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
keywords:
@@ -3531,8 +1639,8 @@ entries:
- https://github.com/kiali/kiali-operator
- https://github.com/kiali/helm-charts
urls:
- - assets/rancher-kiali-server/rancher-kiali-server-1.29.100-rc01.tgz
- version: 1.29.100-rc01
+ - released/assets/rancher-kiali-server/rancher-kiali-server-1.29.100.tgz
+ version: 1.29.100
- annotations:
catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
catalog.cattle.io/hidden: "true"
@@ -3543,11 +1651,11 @@ entries:
catalog.rancher.io/release-name: rancher-kiali-server
apiVersion: v2
appVersion: v1.29.0
- created: "2021-03-04T09:47:45.002771-08:00"
+ created: "2021-04-21T15:17:43.326703-07:00"
description: Kiali is an open source project for service mesh observability, refer
to https://www.kiali.io for details. This is installed as sub-chart with customized
values in Rancher's Istio.
- digest: a3f8ceb754dba642cbd5fe638858e7ed18c56b2befc6284107cae9fc1a58dd1d
+ digest: 8cecd60c2fa1ae2dea0c4d3672b7ca73152835bfeb93906113ca4d05c02e9587
home: https://github.com/kiali/kiali
icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
keywords:
@@ -3566,43 +1674,8 @@ entries:
- https://github.com/kiali/kiali-operator
- https://github.com/kiali/helm-charts
urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc01.tgz
- version: 1.29.000-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.29.0
- created: "2021-03-04T09:47:45.00196-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: 280bd0454a03a112e544ecacd5a06b793a627198fa06cf6a6fcea261fc6d9f4c
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc00.tgz
- version: 1.29.000-rc00
+ - released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000.tgz
+ version: 1.29.000
- annotations:
catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
catalog.cattle.io/hidden: "true"
@@ -3613,11 +1686,11 @@ entries:
catalog.rancher.io/release-name: rancher-kiali-server
apiVersion: v2
appVersion: v1.24.0
- created: "2021-01-15T00:11:30.487114-08:00"
+ created: "2021-04-21T15:17:43.325923-07:00"
description: Kiali is an open source project for service mesh observability, refer
to https://www.kiali.io for details. This is installed as sub-chart with customized
values in Rancher's Istio.
- digest: c8a46b8e964f50e93e4add0c0192743339355950862f49b0d2b0131c9c2acd88
+ digest: 2b702639bc1b563fa3e9e0cdb5fff1ca4de696860566f1c863c04fb7ebc06038
home: https://github.com/kiali/kiali
icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
keywords:
@@ -3648,46 +1721,11 @@ entries:
catalog.rancher.io/release-name: rancher-kiali-server
apiVersion: v2
appVersion: v1.24.0
- created: "2021-01-15T00:11:30.48568-08:00"
+ created: "2021-04-21T15:17:43.32517-07:00"
description: Kiali is an open source project for service mesh observability, refer
to https://www.kiali.io for details. This is installed as sub-chart with customized
values in Rancher's Istio.
- digest: be2dd749ebeac4690827fdfac5b986d35ca3e9f9d1e9536ab093bb83da17d130
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.24.002.tgz
- version: 1.24.002
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.24.0
- created: "2021-01-15T00:11:30.484905-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: 5908c10ba62b92ba0f703ce91c2d0442f8e707622cdd7401cadf7cbbe523eb75
+ digest: a86791daaf668b0f67db337a9f37f13d4a836d9bd689401ba2ef8f6e83d9a6a3
home: https://github.com/kiali/kiali
icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
keywords:
@@ -3718,46 +1756,11 @@ entries:
catalog.rancher.io/release-name: rancher-kiali-server
apiVersion: v2
appVersion: v1.23.0
- created: "2021-01-15T00:11:30.48414-08:00"
+ created: "2021-04-21T15:17:43.324387-07:00"
description: Kiali is an open source project for service mesh observability, refer
to https://www.kiali.io for details. This is installed as sub-chart with customized
values in Rancher's Istio.
- digest: 57b9db10136f85d6ca7325e69d6d62ae256293620c2654d5478609e1d78da472
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.23.002.tgz
- version: 1.23.002
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.23.0
- created: "2021-01-15T00:11:30.483373-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: 369f3f444dc357b6f3e574daf63103d556757ee30c9413fa0c1588f1432d899d
+ digest: 0aea4d28b274a7c2549f675c2a3fc1be165ef4acd72676a18ed5f92f1e7a2b1a
home: https://github.com/kiali/kiali
icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
keywords:
@@ -3782,53 +1785,42 @@ entries:
- annotations:
catalog.cattle.io/hidden: "true"
apiVersion: v2
- created: "2021-04-12T16:14:26.996135201Z"
+ created: "2021-04-21T15:17:43.329261-07:00"
description: Installs the CRDs for rancher-kiali-server.
- digest: 79fc00840cdd10b61ae09a3e964d915b10366f1f016fd02919a875469e3e6d0e
+ digest: 83ca0f23b43db63b7610d28d89098a78a9e6f8fea5748fd3dfec45d109f6d815
name: rancher-kiali-server-crd
type: application
urls:
- - assets/rancher-kiali-server/rancher-kiali-server-crd-1.32.100-rc01.tgz
- version: 1.32.100-rc01
+ - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.32.100.tgz
+ version: 1.32.100
- annotations:
catalog.cattle.io/hidden: "true"
apiVersion: v2
- created: "2021-04-09T23:52:20.300629849Z"
+ created: "2021-04-21T15:17:43.329104-07:00"
description: Installs the CRDs for rancher-kiali-server.
- digest: fca33d9256cbede5244784e9f8cf2d6b4ed3556b5cc59ed3178171887560826e
+ digest: 3ebe1e885b239795575270dbd4073408b43fb9158ad04f02937114e5b7ab75c6
name: rancher-kiali-server-crd
type: application
urls:
- - assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.100-rc01.tgz
- version: 1.29.100-rc01
+ - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.100.tgz
+ version: 1.29.100
- annotations:
catalog.cattle.io/hidden: "true"
apiVersion: v2
- created: "2021-03-04T09:47:45.003061-08:00"
+ created: "2021-04-21T15:17:43.328957-07:00"
description: Installs the CRDs for rancher-kiali-server.
- digest: ebe2573bff65881bb5ac4442c1eb88648c942f9bb2340d6c409ac74d467f96b1
+ digest: 4ddd8248707294cb91fdd1c2fd9994417bf265b7f649312e82a4f1a86b60e9b6
name: rancher-kiali-server-crd
type: application
urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc01.tgz
- version: 1.29.000-rc01
+ - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000.tgz
+ version: 1.29.000
- annotations:
catalog.cattle.io/hidden: "true"
apiVersion: v2
- created: "2021-03-04T09:47:45.002922-08:00"
+ created: "2021-04-21T15:17:43.328822-07:00"
description: Installs the CRDs for rancher-kiali-server.
- digest: 07d01d30e02215be110edd55afa1a9e52b3de9592b24151f6450d5f17139e81c
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc00.tgz
- version: 1.29.000-rc00
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-01-15T00:11:30.487854-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: 01aafd54277c2c010d382a92177391abe11c894ac5cdac331699518ba5616a0d
+ digest: c8635521da746674695c7833a5509ee92c615adabd47e511e1dd7c2617a4bf7b
name: rancher-kiali-server-crd
type: application
urls:
@@ -3837,20 +1829,9 @@ entries:
- annotations:
catalog.cattle.io/hidden: "true"
apiVersion: v2
- created: "2021-01-15T00:11:30.487714-08:00"
+ created: "2021-04-21T15:17:43.328683-07:00"
description: Installs the CRDs for rancher-kiali-server.
- digest: d22c5d81a57cf38e56db65a9809167b16688cff39c226f209a8f8c2b616267cd
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.002.tgz
- version: 1.24.002
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-01-15T00:11:30.487574-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: d142e5634dafacd4ade2d93460b2926577ff87e4ba4a1100c1f280e22b8100fd
+ digest: bd55c5af7c26744e91922c6a9463c10e52ba65ddf0cf148107461f2983a71223
name: rancher-kiali-server-crd
type: application
urls:
@@ -3859,20 +1840,9 @@ entries:
- annotations:
catalog.cattle.io/hidden: "true"
apiVersion: v2
- created: "2021-01-15T00:11:30.487426-08:00"
+ created: "2021-04-21T15:17:43.328539-07:00"
description: Installs the CRDs for rancher-kiali-server.
- digest: 2100f0710b74ff80aafb679d626c44033ac77dbc9a050a56f3bb07ad35ac9cb3
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.002.tgz
- version: 1.23.002
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-01-15T00:11:30.487274-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: e78efc9f5d5e5943b851678c563f445128927c4d5608d40ec233944baeee1bf6
+ digest: 5d5ebb3498ac0b64cf1a73d743b0f3f45fd40c0a9ee3b26d94ae60176e523574
name: rancher-kiali-server-crd
type: application
urls:
@@ -3887,9 +1857,9 @@ entries:
catalog.rancher.io/release-name: rancher-kube-state-metrics
apiVersion: v1
appVersion: 1.9.8
- created: "2021-04-07T19:45:48.13399446Z"
+ created: "2021-04-21T15:17:43.330146-07:00"
description: Install kube-state-metrics to generate and expose cluster-level metrics
- digest: d52d15d957bd8add7a1637511b74ebbac7d30104b903f655ba996d703eb6fc37
+ digest: 49cee3cb6cf6e09924801f1a44dfb2a1d8e3f8bcac95b7c4e796211c2d41e41e
home: https://github.com/kubernetes/kube-state-metrics/
keywords:
- metric
@@ -3905,8 +1875,8 @@ entries:
sources:
- https://github.com/kubernetes/kube-state-metrics/
urls:
- - assets/rancher-kube-state-metrics/rancher-kube-state-metrics-2.13.101-rc00.tgz
- version: 2.13.101-rc00
+ - released/assets/rancher-kube-state-metrics/rancher-kube-state-metrics-2.13.101.tgz
+ version: 2.13.101
rancher-logging:
- annotations:
catalog.cattle.io/auto-install: rancher-logging-crd=match
@@ -3918,10 +1888,10 @@ entries:
catalog.cattle.io/ui-component: logging
apiVersion: v1
appVersion: 3.9.4
- created: "2021-04-16T20:03:49.193802604Z"
+ created: "2021-04-21T15:17:43.336208-07:00"
description: Collects and filter logs using highly configurable CRDs. Powered
by Banzai Cloud Logging Operator.
- digest: ab0fecb24b3b53694f21ddc81f52e7eb7b6ed8d7a12dda99969ce93b847a4115
+ digest: 5c6bdf00cc42d58875172344fd141bbfa21917e1ef4d5efad80979d33ffde169
icon: https://charts.rancher.io/assets/logos/logging.svg
keywords:
- logging
@@ -3929,100 +1899,8 @@ entries:
- security
name: rancher-logging
urls:
- - assets/rancher-logging/rancher-logging-3.9.400-rc04.tgz
- version: 3.9.400-rc04
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.4
- created: "2021-04-12T18:41:37.101699289Z"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: e2149c7fa4a8612e80840aed76e33cfebd0170316b7c050a0cc7cf1ab18acff7
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - assets/rancher-logging/rancher-logging-3.9.400-rc03.tgz
- version: 3.9.400-rc03
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.4
- created: "2021-04-06T01:21:46.069869939Z"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: f4714a3b0503729d9b5e4cda0ebe9efd48dd2d8e23afd1b6cb2365e65dc9c3dd
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - assets/rancher-logging/rancher-logging-3.9.400-rc02.tgz
- version: 3.9.400-rc02
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.4
- created: "2021-04-05T22:44:50.101273899Z"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 30d4923f39a8aa6ace97de46f493bccd7eec8237d6dbdb7aec8068040d8c92e3
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - assets/rancher-logging/rancher-logging-3.9.400-rc01.tgz
- version: 3.9.400-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.4
- created: "2021-04-05T21:37:25.589334866Z"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 4ea5580c3e30c9a1243ebcf5461ea1e7ea8d75967539d5f26d46a5b65eaffb0c
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - assets/rancher-logging/rancher-logging-3.9.400-rc00.tgz
- version: 3.9.400-rc00
+ - released/assets/rancher-logging/rancher-logging-3.9.400.tgz
+ version: 3.9.400
- annotations:
catalog.cattle.io/auto-install: rancher-logging-crd=match
catalog.cattle.io/certified: rancher
@@ -4034,10 +1912,10 @@ entries:
catalog.cattle.io/ui-component: logging
apiVersion: v1
appVersion: 3.9.0
- created: "2021-04-02T17:23:23.032662482Z"
+ created: "2021-04-21T15:17:43.335339-07:00"
description: Collects and filter logs using highly configurable CRDs. Powered
by Banzai Cloud Logging Operator.
- digest: 2dcaa4a7e544526058314d32ce5c63daab046205e760ba6dba2541ccc6028f63
+ digest: c5d6f72e600a1710cc3330195604ab4e0bea2d51eaadf4885c63d529842b91ce
icon: https://charts.rancher.io/assets/logos/logging.svg
keywords:
- logging
@@ -4045,8 +1923,8 @@ entries:
- security
name: rancher-logging
urls:
- - assets/rancher-logging/rancher-logging-3.9.002-rc03.tgz
- version: 3.9.002-rc03
+ - released/assets/rancher-logging/rancher-logging-3.9.002.tgz
+ version: 3.9.002
- annotations:
catalog.cattle.io/auto-install: rancher-logging-crd=match
catalog.cattle.io/certified: rancher
@@ -4058,10 +1936,10 @@ entries:
catalog.cattle.io/ui-component: logging
apiVersion: v1
appVersion: 3.9.0
- created: "2021-04-01T20:22:18.03796638Z"
+ created: "2021-04-21T15:17:43.334524-07:00"
description: Collects and filter logs using highly configurable CRDs. Powered
by Banzai Cloud Logging Operator.
- digest: e8f5837404d3c24d8396b0676f21b100d9f2fde1f1c501786b330648986e9d1c
+ digest: 46f4617b0020c4cddcd6a0c3a8f39ac2ff56eebec0b4b4c13b4821bfb1ff411c
icon: https://charts.rancher.io/assets/logos/logging.svg
keywords:
- logging
@@ -4069,8 +1947,8 @@ entries:
- security
name: rancher-logging
urls:
- - assets/rancher-logging/rancher-logging-3.9.002-rc02.tgz
- version: 3.9.002-rc02
+ - released/assets/rancher-logging/rancher-logging-3.9.001.tgz
+ version: 3.9.001
- annotations:
catalog.cattle.io/auto-install: rancher-logging-crd=match
catalog.cattle.io/certified: rancher
@@ -4082,10 +1960,10 @@ entries:
catalog.cattle.io/ui-component: logging
apiVersion: v1
appVersion: 3.9.0
- created: "2021-03-15T19:33:50.86544465Z"
+ created: "2021-04-21T15:17:43.333757-07:00"
description: Collects and filter logs using highly configurable CRDs. Powered
by Banzai Cloud Logging Operator.
- digest: 3d9759eb846b9e8891bc40e1fc6b6fa9f6f998fc66f8a6736f0255f685cc64f8
+ digest: b6b5e0c627f5594033b3558ff1f2d9c01b1f504a53cbc91b4e75d443ef81a784
icon: https://charts.rancher.io/assets/logos/logging.svg
keywords:
- logging
@@ -4093,248 +1971,8 @@ entries:
- security
name: rancher-logging
urls:
- - assets/rancher-logging/rancher-logging-3.9.002-rc01.tgz
- version: 3.9.002-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-12T17:14:00.950736124Z"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: d59d5206ab61e47dcf2ebf20dd72c5bb7dc01e21961aad70df7199a61b510998
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - assets/rancher-logging/rancher-logging-3.9.001-rc08.tgz
- version: 3.9.001-rc08
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.011144-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: e5b5de6aaea6c3a4f3fd60b6045beafdd3e3db3a72278410110faadb8c6e9fd5
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc08.tgz
- version: 3.9.000-rc08
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.010348-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 7e1d1f0e60e7695db920d8960ae4f50f12b2763584c7ae03c5cbf27248490c24
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc07.tgz
- version: 3.9.000-rc07
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.009554-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 90596ebd741c5bd712796d8dd07954663e76e41adad3c8f5177176414d355492
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc06.tgz
- version: 3.9.000-rc06
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.008754-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 261ac9ff48b610df1c610904cb7ff999a619fdcb23620cf90c094adb0e0a1f2e
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc05.tgz
- version: 3.9.000-rc05
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.0078-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 0e2f0b1f53b4e81488ffdd41bb68693e332bf7eaf29488b310f5b7368858c603
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc04.tgz
- version: 3.9.000-rc04
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.006305-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 7f35d0af785c25d20003daf0d0b78a2e72e5b6a9f5e727757ee753c84260ba78
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc03.tgz
- version: 3.9.000-rc03
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.005471-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 9654d484b60c1aa9f999791a83ddc5068ec69b0e3becd61b4198e243be7957af
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc02.tgz
- version: 3.9.000-rc02
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.004669-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 460e6154256f66ea1e91d41a16195aa5c5c16123bf9b3895c2186a8ec69b80f5
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc01.tgz
- version: 3.9.000-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:45.00384-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 8950865836a669a9190792174befffb50ed1bf9b41be2831d63624ff385cf0f7
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc00.tgz
- version: 3.9.000-rc00
+ - released/assets/rancher-logging/rancher-logging-3.9.000.tgz
+ version: 3.9.000
- annotations:
catalog.cattle.io/auto-install: rancher-logging-crd=match
catalog.cattle.io/certified: rancher
@@ -4346,10 +1984,10 @@ entries:
catalog.cattle.io/ui-component: logging
apiVersion: v1
appVersion: 3.8.2
- created: "2021-01-15T00:11:30.4918-08:00"
+ created: "2021-04-21T15:17:43.332942-07:00"
description: Collects and filter logs using highly configurable CRDs. Powered
by Banzai Cloud Logging Operator.
- digest: a27ce10fdf883d5378255e99eddd7a7d5a3a9f6a9b00208ea182d27b98124932
+ digest: 7ec4dfb2441832d22651e9263f4bbdcda9e1f064b9e32c70d0fb7c4f6641331a
icon: https://charts.rancher.io/assets/logos/logging.svg
keywords:
- logging
@@ -4359,54 +1997,6 @@ entries:
urls:
- released/assets/rancher-logging/rancher-logging-3.8.201.tgz
version: 3.8.201
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.8.0
- created: "2021-01-15T00:11:30.491025-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: c643abc8d8fa9a6e86de5aa7f31de1aa427cbc1dbe12854696126f264ab45c5f
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.8.001.tgz
- version: 3.8.001
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.7.3
- created: "2021-01-15T00:11:30.490244-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 825b35e6c8d6e5cb58cc27a83057dcf4b941c1cf9f1685ba8de9a581c50167b4
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.7.301.tgz
- version: 3.7.301
- annotations:
catalog.cattle.io/auto-install: rancher-logging-crd=match
catalog.cattle.io/certified: rancher
@@ -4418,10 +2008,10 @@ entries:
catalog.cattle.io/ui-component: logging
apiVersion: v1
appVersion: 3.6.0
- created: "2021-01-15T00:11:30.489493-08:00"
+ created: "2021-04-21T15:17:43.332199-07:00"
description: Collects and filter logs using highly configurable CRDs. Powered
by Banzai Cloud Logging Operator.
- digest: d759335422822364d842d5b3320eb5984df94ed0aad16e4d33e52c193fa82a7d
+ digest: a89b3a4327484343c59a88949479c106e40b2587df194e18910cf83099291aa6
icon: https://charts.rancher.io/assets/logos/logging.svg
keywords:
- logging
@@ -4441,10 +2031,10 @@ entries:
catalog.cattle.io/ui-component: logging
apiVersion: v1
appVersion: 3.6.0
- created: "2021-01-15T00:11:30.488715-08:00"
+ created: "2021-04-21T15:17:43.331446-07:00"
description: Collects and filter logs using highly configurable CRDs. Powered
by Banzai Cloud Logging Operator.
- digest: 8b20ad589d1cf3e21b0235db0e93d6556aea4b94649a37f97544c65f55839ad2
+ digest: 3f3cd871fe5c6708b3fcdcd7a9f6e87ee41eb8f5505bdaed3f01791ac2bf7faf
icon: https://charts.rancher.io/assets/logos/logging.svg
keywords:
- logging
@@ -4461,261 +2051,65 @@ entries:
catalog.cattle.io/namespace: cattle-logging-system
catalog.cattle.io/release-name: rancher-logging-crd
apiVersion: v1
- created: "2021-04-16T20:03:49.214426724Z"
+ created: "2021-04-21T15:17:43.345691-07:00"
description: Installs the CRDs for rancher-logging.
- digest: 2394c454671389d697576f38532cde477f1f2409c3000245da02a68616d45c84
+ digest: b73e869013770d0f462ac77e70b01d403779ad34de300384e0aca6b0ef644025
name: rancher-logging-crd
type: application
urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.400-rc04.tgz
- version: 3.9.400-rc04
+ - released/assets/rancher-logging/rancher-logging-crd-3.9.400.tgz
+ version: 3.9.400
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-logging-system
catalog.cattle.io/release-name: rancher-logging-crd
apiVersion: v1
- created: "2021-04-12T18:41:37.122146522Z"
+ created: "2021-04-21T15:17:43.343612-07:00"
description: Installs the CRDs for rancher-logging.
- digest: b184b7cd339799440349dec93f8068fb54af108b386c462032ea2a23f3ea6eb6
+ digest: b8f7abc9fc43fbb262a581e6f55a174ff6d4da0ed0896e50cb3be64f5819e04f
name: rancher-logging-crd
type: application
urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.400-rc03.tgz
- version: 3.9.400-rc03
+ - released/assets/rancher-logging/rancher-logging-crd-3.9.002.tgz
+ version: 3.9.002
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-logging-system
catalog.cattle.io/release-name: rancher-logging-crd
apiVersion: v1
- created: "2021-04-06T01:21:46.085881781Z"
+ created: "2021-04-21T15:17:43.342527-07:00"
description: Installs the CRDs for rancher-logging.
- digest: 51b7a28f0e9b297141bba104d0ca6c9766908e8d11bbcd6b829b894057bff970
+ digest: b3d48c89d1f1d4b31e867388148bae2c96c398c9315c5f14fd5b6fc3000e0802
name: rancher-logging-crd
type: application
urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.400-rc02.tgz
- version: 3.9.400-rc02
+ - released/assets/rancher-logging/rancher-logging-crd-3.9.001.tgz
+ version: 3.9.001
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-logging-system
catalog.cattle.io/release-name: rancher-logging-crd
apiVersion: v1
- created: "2021-04-05T22:44:50.116160346Z"
+ created: "2021-04-21T15:17:43.34153-07:00"
description: Installs the CRDs for rancher-logging.
- digest: 05bcc4fdcf49baf692f5cda021e0482c11392c88adff434087142a14f2af780d
+ digest: 2ab6fc36daf86c405b536970d9ed4dcb68f84ac93df7ac3811dd123ba82448bd
name: rancher-logging-crd
type: application
urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.400-rc01.tgz
- version: 3.9.400-rc01
+ - released/assets/rancher-logging/rancher-logging-crd-3.9.000.tgz
+ version: 3.9.000
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-logging-system
catalog.cattle.io/release-name: rancher-logging-crd
apiVersion: v1
- created: "2021-04-05T21:37:25.600140939Z"
+ created: "2021-04-21T15:17:43.339785-07:00"
description: Installs the CRDs for rancher-logging.
- digest: c05caeebb83f8b92a359a4824a5d0b4432060db03f3aef065536d527cac0963d
- name: rancher-logging-crd
- type: application
- urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.400-rc00.tgz
- version: 3.9.400-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-04-02T17:23:23.043909832Z"
- description: Installs the CRDs for rancher-logging.
- digest: 79a92ba93a3e12ab21904a2fbac1af5e02bb383bb0d0870098823ca3a3906d48
- name: rancher-logging-crd
- type: application
- urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.002-rc03.tgz
- version: 3.9.002-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-04-01T20:22:18.045909344Z"
- description: Installs the CRDs for rancher-logging.
- digest: 07a532d77f5dd9659b180a0be6e69d4503a0604be096d60f71f9df3d0d9061fe
- name: rancher-logging-crd
- type: application
- urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.002-rc02.tgz
- version: 3.9.002-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-15T19:33:50.871226689Z"
- description: Installs the CRDs for rancher-logging.
- digest: 458d13cf6ad6f90488dc73a6a96744e8a7b32b15cef8d01647b8eb9e848127d7
- name: rancher-logging-crd
- type: application
- urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.002-rc01.tgz
- version: 3.9.002-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-12T17:14:00.954344407Z"
- description: Installs the CRDs for rancher-logging.
- digest: 41510a9536773fea4e55775d5952bac7244b2980c49def8fbaf87d40e2455e30
- name: rancher-logging-crd
- type: application
- urls:
- - assets/rancher-logging/rancher-logging-crd-3.9.001-rc08.tgz
- version: 3.9.001-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.024289-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 352a9b536b5ba239f601ab34c1eff9d270d94f7f56f56f954dd1373f51345729
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc08.tgz
- version: 3.9.000-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.022557-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 1e60f77e39411099e3014c8b7549d14597c0d46c0d57389c9208c90e38c23608
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc07.tgz
- version: 3.9.000-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.021403-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: c8bec736459bb23bbc1359c54181aa12671908bc67258332843b812527130441
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc06.tgz
- version: 3.9.000-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.019832-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: b18dfb6108edf77d1611c6280fd6d781d35a3087096472ec138816d85636d098
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc05.tgz
- version: 3.9.000-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.018831-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 4dd87f71a05a2412fd2b4766d9ef9c7fb644f117d2dd19b7e39784b2748ff3b7
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc04.tgz
- version: 3.9.000-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.017765-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: fed2e3420bb9e53c2324fff2c8ba0514f3fcaac55b6b92f66b4423b89101172d
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc03.tgz
- version: 3.9.000-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.015616-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: be0b8e51b55a6cf501af15dc549a5c38cf017ad3a473cea04fc020519ba7f844
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc02.tgz
- version: 3.9.000-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.014083-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: b800deea73ac1792fba30d8d8e1bdfd1c3ab44351a4c60a765e1f2af39ca284e
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc01.tgz
- version: 3.9.000-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.012692-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: a2dc007bfb58a8725d054ab1adaaafa72b57680ae8f1e363aaa095970a27f040
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc00.tgz
- version: 3.9.000-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.497347-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 9a8baaed2f02e43b7eacb4c3cbcd6a33f84645b0d0b24f6f73867871dd41db23
+ digest: 351b69ac821716e05b4648f6fe175bfc8b25fee5dc8b7088cc3b77a7d8596b76
name: rancher-logging-crd
type: application
urls:
@@ -4727,37 +2121,9 @@ entries:
catalog.cattle.io/namespace: cattle-logging-system
catalog.cattle.io/release-name: rancher-logging-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.49633-08:00"
+ created: "2021-04-21T15:17:43.338692-07:00"
description: Installs the CRDs for rancher-logging.
- digest: 92eca9fef67bad369b311b07974a05d156546104119f6864ff9c46decb966909
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.8.001.tgz
- version: 3.8.001
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.494828-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 7f85f6ac9eabecaa9cf6e56cd3772b0d604afccc16411b3a61c02ef437ff7c1e
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.7.301.tgz
- version: 3.7.301
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.493957-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: e75790f7d4fc054e757526a2944475a6ff427f6d7b6726ade7a0db28c7fbc986
+ digest: 582846a78f045a48088f355599a0abd62c98ce62698ef7fe59ed2180f2016441
name: rancher-logging-crd
type: application
urls:
@@ -4769,9 +2135,9 @@ entries:
catalog.cattle.io/namespace: cattle-logging-system
catalog.cattle.io/release-name: rancher-logging-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.493121-08:00"
+ created: "2021-04-21T15:17:43.337645-07:00"
description: Installs the CRDs for rancher-logging.
- digest: 4947e5272f4f4f9f227691aa35c8c1bef980fbdde725bac1c358c6fe7229932e
+ digest: 1c24d7465ba9a4ae3613ffad12cea6d6a60df66a9fbf4d0f2674c4efec2616f2
name: rancher-logging-crd
type: application
urls:
@@ -4796,7 +2162,7 @@ entries:
catalog.cattle.io/ui-component: monitoring
apiVersion: v2
appVersion: 0.46.0
- created: "2021-04-21T21:24:45.358266102Z"
+ created: "2021-04-21T15:17:43.365488-07:00"
dependencies:
- condition: grafana.enabled
name: grafana
@@ -4855,7 +2221,7 @@ entries:
description: Collects several related Helm charts, Grafana dashboards, and Prometheus
rules combined with documentation and scripts to provide easy to operate end-to-end
Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 00c5a9ad1ace7750417ed21deb6ba1dca497987d7818ad749414831da9b4420b
+ digest: bdef2a0dc8ea33e51c614ba9ba6f7d16dfcb30c99fa4749eed429893b1ff9727
home: https://github.com/prometheus-operator/kube-prometheus
icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
keywords:
@@ -4883,864 +2249,8 @@ entries:
- https://github.com/prometheus-operator/kube-prometheus
type: application
urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc08.tgz
- version: 14.5.100-rc08
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v2
- appVersion: 0.46.0
- created: "2021-04-14T00:45:28.8835116Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: global.cattle.windows.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: c582850ebf328511230bb5e54e67637b1a67d8f26b60e72c68798cc789ce8742
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- kubeVersion: '>=1.16.0-0'
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc07.tgz
- version: 14.5.100-rc07
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v2
- appVersion: 0.46.0
- created: "2021-04-14T00:36:29.467386958Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: global.cattle.windows.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: d83eace264cab91cb4c126a2ce523e683655a536be09e7eba1cce15dd3403b43
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- kubeVersion: '>=1.16.0-0'
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc06.tgz
- version: 14.5.100-rc06
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v2
- appVersion: 0.46.0
- created: "2021-04-09T23:38:33.605775428Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: global.cattle.windows.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: a2a9228357a52b8fedbb6e229547be80e4d25b500c0eb75f2f6b138ee8bf08bf
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- kubeVersion: '>=1.16.0-0'
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc05.tgz
- version: 14.5.100-rc05
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v2
- appVersion: 0.46.0
- created: "2021-04-09T23:21:12.757524623Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: c312a0114ff600d20cc3ff277246a31fd03645db7185f08760555d99ac7231c2
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- kubeVersion: '>=1.16.0-0'
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc04.tgz
- version: 14.5.100-rc04
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v2
- appVersion: 0.46.0
- created: "2021-04-09T19:01:47.090654763Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: b13ae71d6e417ff96529789ea798c6c4e4cdf95111f9d21955f5cca0ba278d16
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- kubeVersion: '>=1.16.0-0'
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc03.tgz
- version: 14.5.100-rc03
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v2
- appVersion: 0.46.0
- created: "2021-04-09T18:57:12.724760925Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 4e6ec47c084a984ae656a10fc51bbb75cb75e29544a4ff9a73bd1fe1c69b8357
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- kubeVersion: '>=1.16.0-0'
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc02.tgz
- version: 14.5.100-rc02
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v2
- appVersion: 0.46.0
- created: "2021-04-08T17:35:35.036795187Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 0c8c9c9bfaabce4a98ddd1bdf2b5061ffa03836b6596e3412c5a790bd28be209
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- kubeVersion: '>=1.16.0-0'
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc01.tgz
- version: 14.5.100-rc01
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v2
- appVersion: 0.46.0
- created: "2021-04-07T19:45:48.197334994Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 240add26835de08eec696d8d8a02f8ad0a6e3816abe84981ac4c4118b95503fb
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- kubeVersion: '>=1.16.0-0'
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-14.5.100-rc00.tgz
- version: 14.5.100-rc00
+ - released/assets/rancher-monitoring/rancher-monitoring-14.5.100.tgz
+ version: 14.5.100
- annotations:
artifacthub.io/links: |
- name: Chart Source
@@ -5759,7 +2269,7 @@ entries:
catalog.cattle.io/ui-component: monitoring
apiVersion: v1
appVersion: 0.38.1
- created: "2021-04-01T17:13:59.513019601Z"
+ created: "2021-04-21T15:17:43.446934-07:00"
dependencies:
- condition: grafana.enabled
name: grafana
@@ -5818,7 +2328,7 @@ entries:
description: Collects several related Helm charts, Grafana dashboards, and Prometheus
rules combined with documentation and scripts to provide easy to operate end-to-end
Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 3b19da9f6dba9ed6a22253e0c0a89ed7c92a5e51d68265f715a1edd581ef5be4
+ digest: a4cc6951bf9d0c683b0f30ccffa87229e8f6d3a467eef1055b44533e00e594c3
home: https://github.com/prometheus-operator/kube-prometheus
icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
keywords:
@@ -5844,533 +2354,8 @@ entries:
- https://github.com/prometheus-community/helm-charts
- https://github.com/prometheus-operator/kube-prometheus
urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc09.tgz
- version: 9.4.204-rc09
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-04-01T00:24:29.131143915Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 3e6782415cc47a7b900c4e5c57abd578e160c739991d571d94fc7da1f468c16e
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc08.tgz
- version: 9.4.204-rc08
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-29T19:11:34.094148142Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: e7d64d5bd68fe224dc59187410ff5ac4adb99788c1dbf256ef3249f6c37a0734
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc07.tgz
- version: 9.4.204-rc07
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-29T18:50:17.116905752Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 3b24326ffabbf3d4203981deb693b499d6231b71f5a6b73734fe83ce33c2269b
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc06.tgz
- version: 9.4.204-rc06
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-19T19:06:09.93979837Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: de33b0e74170ca8b9eabdac17c44becff154d274dcf09b947994be1c3d5e28bb
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc05.tgz
- version: 9.4.204-rc05
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-15T17:53:22.536978155Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- - condition: windowsExporter.enabled
- name: windowsExporter
- repository: file://./charts/windowsExporter
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: d8fec718599037d90c5a63c9ca9dedfcf3cae69e0a9aae90f75bdf14cebf97f5
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc04.tgz
- version: 9.4.204-rc04
+ - released/assets/rancher-monitoring/rancher-monitoring-9.4.204.tgz
+ version: 9.4.204
- annotations:
artifacthub.io/links: |
- name: Chart Source
@@ -6390,7 +2375,7 @@ entries:
catalog.cattle.io/ui-component: monitoring
apiVersion: v1
appVersion: 0.38.1
- created: "2021-03-11T19:24:36.934227524Z"
+ created: "2021-04-21T15:17:43.426785-07:00"
dependencies:
- condition: grafana.enabled
name: grafana
@@ -6446,7 +2431,7 @@ entries:
description: Collects several related Helm charts, Grafana dashboards, and Prometheus
rules combined with documentation and scripts to provide easy to operate end-to-end
Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 3e14ffafc25dd769c3b80db1102db1f1fa0deb64025bfae0323759e54209d52e
+ digest: 64604ea0359b468c9a768ec484ebfdf3f776da5524571c85dd42bc6e600aeead
home: https://github.com/prometheus-operator/kube-prometheus
icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
keywords:
@@ -6472,826 +2457,8 @@ entries:
- https://github.com/prometheus-community/helm-charts
- https://github.com/prometheus-operator/kube-prometheus
urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc03.tgz
- version: 9.4.204-rc03
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-11T07:21:44.739468733Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: f68e46357300451b582354dd838f80a68cbda4c4f3d2c0adc812096f563f8e4f
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc02.tgz
- version: 9.4.204-rc02
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-09T18:31:06.113312152Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 66b54a77c5fc817d9f0fba7918160a709debba453f3a5705a16a62324ed09235
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc01.tgz
- version: 9.4.204-rc01
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T22:24:38.312011609Z"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: aba45df29197c56e35ff1f0045261cb39efece2c91ce47ffc3e6b2ae70aa3f94
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - assets/rancher-monitoring/rancher-monitoring-9.4.204-rc00.tgz
- version: 9.4.204-rc00
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:45.113244-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 92fe184bf72dc5b21d907a158b4e725f4f688d627e5b63448cd47f5e2ef119e0
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc04.tgz
- version: 9.4.203-rc04
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:45.096879-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 748ab12856c906c69fd6ec1a66369d790fbb53d8e54763cc737f4e0fb6d07998
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc03.tgz
- version: 9.4.203-rc03
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:45.08055-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: b452563b7f643a0b2e48720bc7b0d597e32d2c89764e897e896caac4c7b79154
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc02.tgz
- version: 9.4.203-rc02
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:45.063106-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 381a6a4c07867f5a4a737b49ac1c919ca62d72797054b7bdeeb0f9906acfaa93
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc01.tgz
- version: 9.4.203-rc01
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:45.043037-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 790ea3458c6170db492639981aeca7376b6b825eab4c623646a721f6405f3440
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc00.tgz
- version: 9.4.203-rc00
+ - released/assets/rancher-monitoring/rancher-monitoring-9.4.203.tgz
+ version: 9.4.203
- annotations:
artifacthub.io/links: |
- name: Chart Source
@@ -7309,7 +2476,7 @@ entries:
catalog.cattle.io/ui-component: monitoring
apiVersion: v1
appVersion: 0.38.1
- created: "2021-01-15T00:11:30.543558-08:00"
+ created: "2021-04-21T15:17:43.408432-07:00"
dependencies:
- condition: kubeStateMetrics.enabled
name: kube-state-metrics
@@ -7395,7 +2562,7 @@ entries:
description: Collects several related Helm charts, Grafana dashboards, and Prometheus
rules combined with documentation and scripts to provide easy to operate end-to-end
Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 7e211720b3d489c00426788abec352bc4561dd30c5c502112787a212100c46e7
+ digest: 0e032ffa7397d564f3d00aa7719b62314e25f6e32e723de5db0f312f4a0034de
home: https://github.com/prometheus-operator/kube-prometheus
icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
keywords:
@@ -7438,7 +2605,7 @@ entries:
catalog.cattle.io/ui-component: monitoring
apiVersion: v1
appVersion: 0.38.1
- created: "2021-01-15T00:11:30.528456-08:00"
+ created: "2021-04-21T15:17:43.39281-07:00"
dependencies:
- condition: kubeStateMetrics.enabled
name: kube-state-metrics
@@ -7524,7 +2691,7 @@ entries:
description: Collects several related Helm charts, Grafana dashboards, and Prometheus
rules combined with documentation and scripts to provide easy to operate end-to-end
Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 5b5adac2304f7f7cd7761a269a038b178cc34c48d098829c66e880fa8b4c31a7
+ digest: 36890f0d8ae2f9c4990e61122d727a5df31dbe017f49d6334e7e13fb9c257cd8
home: https://github.com/prometheus-operator/kube-prometheus
icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
keywords:
@@ -7566,7 +2733,7 @@ entries:
catalog.cattle.io/ui-component: monitoring
apiVersion: v1
appVersion: 0.38.1
- created: "2021-01-15T00:11:30.512591-08:00"
+ created: "2021-04-21T15:17:43.379857-07:00"
dependencies:
- condition: kubeStateMetrics.enabled
name: kube-state-metrics
@@ -7662,7 +2829,7 @@ entries:
description: Collects several related Helm charts, Grafana dashboards, and Prometheus
rules combined with documentation and scripts to provide easy to operate end-to-end
Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: a36daf9841b3cd516ed127170d4a9fc85d1d9d1bdfb52128d232803e5276a0b2
+ digest: 4c5845c1ca7c109052ce9cae5deea7dd0bc697cb334ba9d929f4c04f14835957
home: https://github.com/prometheus-operator/kube-prometheus
icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
keywords:
@@ -7695,345 +2862,51 @@ entries:
catalog.cattle.io/namespace: cattle-monitoring-system
catalog.cattle.io/release-name: rancher-monitoring-crd
apiVersion: v1
- created: "2021-04-21T21:24:45.80518334Z"
+ created: "2021-04-21T15:17:43.450977-07:00"
description: Installs the CRDs for rancher-monitoring.
- digest: d8b89b435b7435e2b07c61f60e0fbe456d9a87abf10761ec09f30f39d8da5e0d
+ digest: aed740673c0445e09f4958a9dcda2369c049e64c1ab2b838eb84dbced3973e29
name: rancher-monitoring-crd
type: application
urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc08.tgz
- version: 14.5.100-rc08
+ - released/assets/rancher-monitoring/rancher-monitoring-crd-14.5.100.tgz
+ version: 14.5.100
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-monitoring-system
catalog.cattle.io/release-name: rancher-monitoring-crd
apiVersion: v1
- created: "2021-04-14T00:45:29.22965381Z"
+ created: "2021-04-21T15:17:43.470078-07:00"
description: Installs the CRDs for rancher-monitoring.
- digest: 364443857caa7fe5650f994304a7e6ff1e58ea41bafea99e9003e0bfdacab0d5
+ digest: 037b4064bb46103113f1c591da57efc4959616cfca470742beddab724a28507a
name: rancher-monitoring-crd
type: application
urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc07.tgz
- version: 14.5.100-rc07
+ - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.204.tgz
+ version: 9.4.204
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-monitoring-system
catalog.cattle.io/release-name: rancher-monitoring-crd
apiVersion: v1
- created: "2021-04-14T00:36:29.787938598Z"
+ created: "2021-04-21T15:17:43.466486-07:00"
description: Installs the CRDs for rancher-monitoring.
- digest: ec7cb3a9f1b51ec866885c09962aef7793ba7b47f88f84ab16e32143c8c7dba6
+ digest: 63a81f944774e646f6549c545f7c6b56635218bc135b9421eab224c6139dcbf7
name: rancher-monitoring-crd
type: application
urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc06.tgz
- version: 14.5.100-rc06
+ - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203.tgz
+ version: 9.4.203
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
catalog.cattle.io/namespace: cattle-monitoring-system
catalog.cattle.io/release-name: rancher-monitoring-crd
apiVersion: v1
- created: "2021-04-09T23:38:33.929222266Z"
+ created: "2021-04-21T15:17:43.462778-07:00"
description: Installs the CRDs for rancher-monitoring.
- digest: f04ebf5d7eb8fd7eb8220cbe56c03ece901b92d37b0ac77b240bebb709ce2d82
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc05.tgz
- version: 14.5.100-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-04-09T23:21:13.060766912Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: fb0a9d0a2f0d89323efc158bfec517dc496bac733cd5509b79f4280a564d2ac6
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc04.tgz
- version: 14.5.100-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-04-09T19:01:47.363964786Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 3d60d1156d5a23c991dffdf237ba4c4aa25b4af516804dd1b563411ea9bcfb7b
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc03.tgz
- version: 14.5.100-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-04-09T18:57:13.034996398Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 0cd2c6315cbc1d9852bd48d5fb52ec4784c01cb05fae20f0da8ecd12afd01c71
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc02.tgz
- version: 14.5.100-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-04-08T17:35:35.357876912Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 138559f78af79f702a0f726dec6030b8ed90804d554157b5a63c4a67cc59d527
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc01.tgz
- version: 14.5.100-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-04-07T19:45:48.493958685Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: f5c71f94ad841368b3b88b138efe73c3d5349ec5249dd535606b0fa0b2cbd258
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-14.5.100-rc00.tgz
- version: 14.5.100-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-04-01T17:13:59.563242946Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: a391c51692369e92dbd9cce1eb831ce179a8c43c4badb7cae7e734853cf36e84
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc09.tgz
- version: 9.4.204-rc09
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-04-01T00:24:29.18136558Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 09406ed10fc925cecaf9aac55fda6a499568865cfd65a893a3dfc2cab08f58f0
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc08.tgz
- version: 9.4.204-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-29T19:11:34.132322217Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 82344e6f4b9bbae466037b995d076a068a35a43314f00dc0616e767b7a1b887c
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc07.tgz
- version: 9.4.204-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-29T18:50:17.156704785Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 65ec05d07de3dbc8d0993db237f805f665e33792f5462e34c548ba5a2b49b964
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc06.tgz
- version: 9.4.204-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-19T19:06:09.973523331Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 0b11edae6bf47779275c19e845732f26972c2ef075f5cc36a17b136627c14cef
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc05.tgz
- version: 9.4.204-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-15T17:53:22.567067722Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: f6112dca3c4d7144a9ed6e9ab241985efce5d15df7f1f4587abd9f00d834fc07
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc04.tgz
- version: 9.4.204-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-11T19:24:36.957648484Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: b4f526e853fe683f60c1835e90b2872c7e7b1d02a4e64495a654ef59eec4755f
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc03.tgz
- version: 9.4.204-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-11T07:21:44.755209101Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 3a23783b0d8768bc11317fa90a709407c07e49f34b7a6bbfe55f1c67d82b83f8
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc02.tgz
- version: 9.4.204-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-09T18:31:06.124041014Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: 6c652db827bfcc5a874f9bd8676547ba6c3e845dc04fcb2e8fe3e3ea6f6ded7d
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc01.tgz
- version: 9.4.204-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T22:24:38.317889663Z"
- description: Installs the CRDs for rancher-monitoring.
- digest: f5eccbacc35a9935dc03dc32f929a1ed2c85bdcf7930c493270b1694e715d49a
- name: rancher-monitoring-crd
- type: application
- urls:
- - assets/rancher-monitoring/rancher-monitoring-crd-9.4.204-rc00.tgz
- version: 9.4.204-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.131189-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 94e3ca61ac75aae35d2739dc35b7e2c951ff755918fb946eccca6ad4f2ee153c
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc04.tgz
- version: 9.4.203-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.127453-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 338c5e30cceefa4cae16fe6d4ff545277dde72aec7cb1f48404792f4a2d56f1b
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc03.tgz
- version: 9.4.203-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.124231-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 0ca0dfc59cc434faddbe2ef552b9ab669d8de9c8a574abdfb8a8c3b185445e30
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc02.tgz
- version: 9.4.203-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.120388-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 7ef29171739727ce9a9ee0a1db010c6104c33013855518bc092e85b6d8428242
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc01.tgz
- version: 9.4.203-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:45.117158-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: d9689596a9f3d92ca4752bce94937e41fe6330e7b34f5af4596ff85edec23d68
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc00.tgz
- version: 9.4.203-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.555062-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 31251cec75ee29975f02f00032defce1dbd3cad5ce1dff44a63457fb3c6f475d
+ digest: 60945c2274b7c169ad84240e7facc9aa8d3a0a4e649c3dcd6e6b21f336a257d8
name: rancher-monitoring-crd
type: application
urls:
@@ -8045,9 +2918,9 @@ entries:
catalog.cattle.io/namespace: cattle-monitoring-system
catalog.cattle.io/release-name: rancher-monitoring-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.551045-08:00"
+ created: "2021-04-21T15:17:43.459526-07:00"
description: Installs the CRDs for rancher-monitoring.
- digest: 3e2c6926b5e0384e25d76cc33fee1782c6cf444f4844901105bbfa251b9023ca
+ digest: 09532cc000ee5a78dbda15c879ad1af9f9c2f8bc08db4067a6756df1a0206de3
name: rancher-monitoring-crd
type: application
urls:
@@ -8059,9 +2932,9 @@ entries:
catalog.cattle.io/namespace: cattle-monitoring-system
catalog.cattle.io/release-name: rancher-monitoring-crd
apiVersion: v1
- created: "2021-01-15T00:11:30.547748-08:00"
+ created: "2021-04-21T15:17:43.455615-07:00"
description: Installs the CRDs for rancher-monitoring.
- digest: 1bbc909b84e9c10506c0c2f2ffa074ebfd49d58af2e3a123f802a668d6f78435
+ digest: 101721abb2876816b54234568272d0372c274ed3e4851a9c94077f61fefb8a49
name: rancher-monitoring-crd
type: application
urls:
@@ -8076,9 +2949,9 @@ entries:
catalog.rancher.io/release-name: rancher-node-exporter
apiVersion: v1
appVersion: 1.1.2
- created: "2021-04-07T19:45:48.554527222Z"
+ created: "2021-04-21T15:17:43.470733-07:00"
description: A Helm chart for prometheus node-exporter
- digest: 92884824f6b27ec8193c12ca9fc044b73d90a4fa2a77828cffe4a1f70eeab038
+ digest: 8420dd3a73ca5b9658da3d878d755c470266281bd216f59027175a0c0575e851
home: https://github.com/prometheus/node_exporter/
keywords:
- node-exporter
@@ -8093,8 +2966,8 @@ entries:
sources:
- https://github.com/prometheus/node_exporter/
urls:
- - assets/rancher-node-exporter/rancher-node-exporter-1.16.201-rc00.tgz
- version: 1.16.201-rc00
+ - released/assets/rancher-node-exporter/rancher-node-exporter-1.16.201.tgz
+ version: 1.16.201
rancher-operator:
- annotations:
catalog.cattle.io/auto-install: rancher-operator-crd=match
@@ -8107,67 +2980,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator
apiVersion: v2
appVersion: 0.1.4
- created: "2021-04-10T01:22:20.238571482Z"
+ created: "2021-04-21T15:17:43.472013-07:00"
description: Control Rancher using GitOps
- digest: 11f8951b4213501166fb7e7a92bf88a7b9bc42bee07ab1a7cce3c81c6ce3719f
+ digest: 9217c81bf6e0ff46aae4f53e35699eff092104cf160231d81ec1515c8aba01c2
name: rancher-operator
urls:
- - assets/rancher-operator/rancher-operator-0.1.400-rc04.tgz
- version: 0.1.400-rc04
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.4
- created: "2021-04-09T17:59:11.009006785Z"
- description: Control Rancher using GitOps
- digest: ed678ca8a35ed9972ace87b69bc83deb7cf9c0b56e2f35625d571d03f4db7681
- name: rancher-operator
- urls:
- - assets/rancher-operator/rancher-operator-0.1.400-rc03.tgz
- version: 0.1.400-rc03
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.4
- created: "2021-04-07T00:44:11.378767284Z"
- description: Control Rancher using GitOps
- digest: 26cd58e62c13a3475145b196a7c15b7556ef9a99815b5b3458ef6dc0080f5b80
- name: rancher-operator
- urls:
- - assets/rancher-operator/rancher-operator-0.1.400-rc02.tgz
- version: 0.1.400-rc02
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.4
- created: "2021-04-06T20:03:07.172865613Z"
- description: Control Rancher using GitOps
- digest: cb979672008ecb7decf5bc4b818b17762296a9bcf3b22ce29b10aec0f34b605e
- name: rancher-operator
- urls:
- - assets/rancher-operator/rancher-operator-0.1.400-rc01.tgz
- version: 0.1.400-rc01
+ - released/assets/rancher-operator/rancher-operator-0.1.400.tgz
+ version: 0.1.400
- annotations:
catalog.cattle.io/auto-install: rancher-operator-crd=match
catalog.cattle.io/certified: rancher
@@ -8179,121 +2998,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator
apiVersion: v2
appVersion: 0.1.3
- created: "2021-03-04T09:47:45.132758-08:00"
+ created: "2021-04-21T15:17:43.471792-07:00"
description: Control Rancher using GitOps
- digest: 2656b6dcd24f1fbbdd0775cb09932e18af415bf13c6e873ae35c5dbd384a3abc
+ digest: 73ebe2ffee0dd484246cef9e4eec8b4728a98253803ecebc2abc4bd5700eddc8
name: rancher-operator
urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc08.tgz
- version: 0.1.300-rc08
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.132538-08:00"
- description: Control Rancher using GitOps
- digest: b3ce6f43a280702dc57ef54fafffd59e146bff22d5b3b0607e73ac11be7597c6
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc07.tgz
- version: 0.1.300-rc07
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.132321-08:00"
- description: Control Rancher using GitOps
- digest: 4da0891a485ccab47d970a1b3384c3d260b7f1d336e437991501330d9d7a558f
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc06.tgz
- version: 0.1.300-rc06
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.132096-08:00"
- description: Control Rancher using GitOps
- digest: e22a7299a8219d1a6876472d263679cfad6cd684c0ce1774bd88c604d3823ae0
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc05.tgz
- version: 0.1.300-rc05
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.13188-08:00"
- description: Control Rancher using GitOps
- digest: d8b53650d168a955588b9489488b1af9f285959fc0f60028b6c802a8e192f571
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc04.tgz
- version: 0.1.300-rc04
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.131657-08:00"
- description: Control Rancher using GitOps
- digest: 227cf3caf125ed1f2d3329350fdd8b90a788727e620c2af43d8a2f11e035116d
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc03.tgz
- version: 0.1.300-rc03
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.131436-08:00"
- description: Control Rancher using GitOps
- digest: c65dd65dceee1e0ffa7228b89ecac8b03b03b233c65009dcac778d3792e1698c
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc01.tgz
- version: 0.1.300-rc01
+ - released/assets/rancher-operator/rancher-operator-0.1.300.tgz
+ version: 0.1.300
- annotations:
catalog.cattle.io/auto-install: rancher-operator-crd=match
catalog.cattle.io/certified: rancher
@@ -8305,31 +3016,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator
apiVersion: v2
appVersion: 0.1.2
- created: "2021-01-15T00:11:30.557225-08:00"
+ created: "2021-04-21T15:17:43.471561-07:00"
description: Control Rancher using GitOps
- digest: 8427c5fb912002404267f7c349dac1f51b3fc5160aade214e35e7d5732a3e6d3
+ digest: a431b39ca8d0046829be03765882af1f6676862ea1c301c7721defcfc8461fa9
name: rancher-operator
urls:
- released/assets/rancher-operator/rancher-operator-0.1.200.tgz
version: 0.1.200
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.2-rc2
- created: "2021-01-15T00:11:30.556966-08:00"
- description: Control Rancher using GitOps
- digest: b0341792bfa98f4680bb6099c8bc5a739cd8fab1e7217acceda396cc0d640a26
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.200-rc2.tgz
- version: 0.1.200-rc2
- annotations:
catalog.cattle.io/auto-install: rancher-operator-crd=match
catalog.cattle.io/certified: rancher
@@ -8341,49 +3034,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator
apiVersion: v2
appVersion: 0.1.1
- created: "2021-01-15T00:11:30.555899-08:00"
+ created: "2021-04-21T15:17:43.471239-07:00"
description: Control Rancher using GitOps
- digest: 0a4132fbc7a014ee6e88ac95dc278723c591fe271529d37f529bfe819b8b03f1
+ digest: 3ccc2bdbe07d4cbd710bc1ff9119a9f5acf5bbd9abb38878de214dd99c9b4a52
name: rancher-operator
urls:
- released/assets/rancher-operator/rancher-operator-0.1.100.tgz
version: 0.1.100
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.2-rc2
- created: "2021-01-15T00:11:30.556665-08:00"
- description: Control Rancher using GitOps
- digest: e952722116cf3912eda2f542e2a703e3676983c6fb1b34e056d4e9c3e79d820d
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.2-rc200.tgz
- version: 0.1.2-rc200
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.2-rc1
- created: "2021-01-15T00:11:30.556311-08:00"
- description: Control Rancher using GitOps
- digest: 1aed5f1bef466d930aaf0a715d1b305c366dc84de6b6c06d4f44db93ca40f2b8
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.2-rc100.tgz
- version: 0.1.2-rc100
- annotations:
catalog.cattle.io/auto-install: rancher-operator-crd=match
catalog.cattle.io/certified: rancher
@@ -8395,31 +3052,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator
apiVersion: v2
appVersion: 0.1.0
- created: "2021-01-15T00:11:30.555581-08:00"
+ created: "2021-04-21T15:17:43.471001-07:00"
description: Control Rancher using GitOps
- digest: f7524f717eb372fee5a5044cc473dda94e85125325dbf0a064669ebe206fbed0
+ digest: 77aa64d9f0e5a9573497e0f4ae7fb509f4af4df825b64bce327dc97ac18ac222
name: rancher-operator
urls:
- released/assets/rancher-operator/rancher-operator-0.1.000.tgz
version: 0.1.000
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.0-alpha8
- created: "2021-01-15T00:11:30.555334-08:00"
- description: Control Rancher using GitOps
- digest: d4d2be199ef6c0cd632e59c50e85c73fd80f0a1deebf10a558824d495fb8b723
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.0-alpha800.tgz
- version: 0.1.0-alpha800
rancher-operator-crd:
- annotations:
catalog.cattle.io/certified: rancher
@@ -8429,58 +3068,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator-crd
apiVersion: v2
appVersion: 0.1.4
- created: "2021-04-10T01:22:20.241438111Z"
+ created: "2021-04-21T15:17:43.473832-07:00"
description: Rancher Operator CustomResourceDefinitions
- digest: 66565c595f9acf9968f4ec7144efeb8e1cb4ed5a6a38c2150e28dc919a80d953
+ digest: bbe268442f5fbd5a5615e1587cc6705bcc3208d44aeee31d4554535b5f8d0df5
name: rancher-operator-crd
urls:
- - assets/rancher-operator-crd/rancher-operator-crd-0.1.400-rc04.tgz
- version: 0.1.400-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.4
- created: "2021-04-09T17:59:11.012588219Z"
- description: Rancher Operator CustomResourceDefinitions
- digest: 3a758f1d00e4f891165774a6510a4ec2f7d8c99f11480193b666d2c65d4670c5
- name: rancher-operator-crd
- urls:
- - assets/rancher-operator-crd/rancher-operator-crd-0.1.400-rc03.tgz
- version: 0.1.400-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.4
- created: "2021-04-07T00:44:11.381186296Z"
- description: Rancher Operator CustomResourceDefinitions
- digest: cadf7abfc4f5e12efcc66ece8e2290345789f3e2c192f18d16e532d93cb2a7ee
- name: rancher-operator-crd
- urls:
- - assets/rancher-operator-crd/rancher-operator-crd-0.1.400-rc02.tgz
- version: 0.1.400-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.4
- created: "2021-04-06T20:03:07.174196964Z"
- description: Rancher Operator CustomResourceDefinitions
- digest: ccb9e8dfd344a6113e8406ea686f0d47825f8427f0c71651c5c319f89ad7e730
- name: rancher-operator-crd
- urls:
- - assets/rancher-operator-crd/rancher-operator-crd-0.1.400-rc01.tgz
- version: 0.1.400-rc01
+ - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.400.tgz
+ version: 0.1.400
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -8489,103 +3083,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator-crd
apiVersion: v2
appVersion: 0.1.3
- created: "2021-03-04T09:47:45.136143-08:00"
+ created: "2021-04-21T15:17:43.473425-07:00"
description: Rancher Operator CustomResourceDefinitions
- digest: 4cc60bf056682d2f809a497f04857295e0150662c235bd4ddb7b1764b79285f8
+ digest: b87b2406be42cbe1ca0ba6068bcf3ce16f42227de12997b64ebe6053de221c7d
name: rancher-operator-crd
urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc08.tgz
- version: 0.1.300-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.135739-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 36836da1bb6a195783cb0a25852f559a90e535d909d43220b93546a3343edfa9
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc07.tgz
- version: 0.1.300-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.135329-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: a794c3b33313978a0ca37f192f95d452312d3429f73f385aa8d9c3573cc04c38
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc06.tgz
- version: 0.1.300-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.134935-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 08a8c134a36841aec3caa04ca848e31456ea6e68eba3c1d2f11c87a011de3c9a
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc05.tgz
- version: 0.1.300-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.134525-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: e95190052c50fcfddc8582760f9512dd1eae2ad02682ae024f4d2f8c5de04b17
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc04.tgz
- version: 0.1.300-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.134112-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: f4254f3e706cd8d9526048d1cc64f3d91962b19994f95b30459fed456128cc75
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc03.tgz
- version: 0.1.300-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:45.133455-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 88c0fb8ae620a707ddd889ce2805077d3a51284ce6fe25748526c0a70fb808dc
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc01.tgz
- version: 0.1.300-rc01
+ - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300.tgz
+ version: 0.1.300
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -8594,28 +3098,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator-crd
apiVersion: v2
appVersion: 0.1.2
- created: "2021-01-15T00:11:30.560457-08:00"
+ created: "2021-04-21T15:17:43.473028-07:00"
description: Rancher Operator CustomResourceDefinitions
- digest: 181428fac5cf2576f1c35497c142607be81e19aa96b29976d5142cce9cf84027
+ digest: 383784b8f509d7b8eeee1d46506f73d69f39ad8016915884ff7685ed882280c0
name: rancher-operator-crd
urls:
- released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200.tgz
version: 0.1.200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.2-rc2
- created: "2021-01-15T00:11:30.560063-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 9e832ab034a2e088618f4df7291cff7c432c2212559a4add92bb81c3d6105f37
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200-rc2.tgz
- version: 0.1.200-rc2
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -8623,42 +3112,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator-crd
apiVersion: v2
appVersion: 0.1.1
- created: "2021-01-15T00:11:30.558445-08:00"
+ created: "2021-04-21T15:17:43.472683-07:00"
description: Rancher Operator CustomResourceDefinitions
- digest: 26e61ab160ebf89f91f82e0aa6cbd5378ee3d0436b67c4bdce120467483d7d80
+ digest: 5133ec446717fde0269f25fa85858e17728f59cf054bb7de20099393b503d466
name: rancher-operator-crd
urls:
- released/assets/rancher-operator-crd/rancher-operator-crd-0.1.100.tgz
version: 0.1.100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.2-rc2
- created: "2021-01-15T00:11:30.559476-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: e57f76009845b0bb3ebfd7d972fb41d87687264257235e9d35acc330f341cc1a
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc200.tgz
- version: 0.1.2-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.2-rc1
- created: "2021-01-15T00:11:30.558798-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: a83e65bedd9b916651158896cc38c3d43e063d985e1cfcbbfb291efb7fe3a2f6
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc100.tgz
- version: 0.1.2-rc100
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -8666,27 +3126,13 @@ entries:
catalog.cattle.io/release-name: rancher-operator-crd
apiVersion: v2
appVersion: 0.1.0
- created: "2021-01-15T00:11:30.558084-08:00"
+ created: "2021-04-21T15:17:43.472354-07:00"
description: Rancher Operator CustomResourceDefinitions
- digest: 0ae1a90ebf8306537379912ee8db01c73436862a268ab9d2a1f95563f236007b
+ digest: 209d2cbcad3a3c15c31a2435bdfc46db77e6b6767b5dae1880cb9fc0035ad1fa
name: rancher-operator-crd
urls:
- released/assets/rancher-operator-crd/rancher-operator-crd-0.1.000.tgz
version: 0.1.000
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.0-alpha8
- created: "2021-01-15T00:11:30.557694-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 49c5479777388bde6cd834868ce1e9d664e3f830848dc629dbace9624a2fa07a
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.0-alpha800.tgz
- version: 0.1.0-alpha800
rancher-prom2teams:
- annotations:
catalog.cattle.io/certified: rancher
@@ -8695,41 +3141,13 @@ entries:
catalog.cattle.io/release-name: rancher-prom2teams
apiVersion: v1
appVersion: 3.2.1
- created: "2021-04-21T19:31:00.376394323Z"
+ created: "2021-04-21T15:17:43.474266-07:00"
description: A Helm chart for Prom2Teams based on the upstream https://github.com/idealista/prom2teams
- digest: 95e6b362dc67dc83e0359845ccad06a0d38cfbecf45203e6a4d361eea79f1d8e
+ digest: a8095a1d9ecc199eba61ec3a073bed760cd01670ce575e2b7fb988a6c8fe5341
name: rancher-prom2teams
urls:
- - assets/rancher-prom2teams/rancher-prom2teams-0.2.000-rc03.tgz
- version: 0.2.000-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-prom2teams
- apiVersion: v1
- appVersion: 3.2.1
- created: "2021-04-15T21:48:25.329691963Z"
- description: A Helm chart for Prom2Teams based on the upstream https://github.com/idealista/prom2teams
- digest: caa8a550e34b092781d1bd23a81bbf01b6104a2be02d0c7e054692fbbe8c634f
- name: rancher-prom2teams
- urls:
- - assets/rancher-prom2teams/rancher-prom2teams-0.2.000-rc02.tgz
- version: 0.2.000-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-prom2teams
- apiVersion: v1
- appVersion: 3.2.1
- created: "2021-04-15T00:36:31.780601292Z"
- description: A Helm chart for Prom2Teams based on the upstream https://github.com/idealista/prom2teams
- digest: 8fb5e52c0680129fb8b4c4074567c909b6d8d38c2bff79d5183edf459cea5af3
- name: rancher-prom2teams
- urls:
- - assets/rancher-prom2teams/rancher-prom2teams-0.2.000-rc01.tgz
- version: 0.2.000-rc01
+ - released/assets/rancher-prom2teams/rancher-prom2teams-0.2.000.tgz
+ version: 0.2.000
rancher-prometheus-adapter:
- annotations:
catalog.cattle.io/hidden: "true"
@@ -8739,9 +3157,9 @@ entries:
catalog.rancher.io/release-name: rancher-prometheus-adapter
apiVersion: v1
appVersion: v0.8.3
- created: "2021-04-09T23:21:13.122128036Z"
+ created: "2021-04-21T15:17:43.474985-07:00"
description: A Helm chart for k8s prometheus adapter
- digest: 504c418856052bc1798476b6a9ad3d2efcc5c3591502af296406a732ad2077a8
+ digest: 7aea5a0a8e66a9ad02bcc4ec69350c35d15242524b8052fdf9598bba6bf3f6c9
home: https://github.com/DirectXMan12/k8s-prometheus-adapter
keywords:
- hpa
@@ -8759,38 +3177,8 @@ entries:
- https://github.com/kubernetes/charts
- https://github.com/DirectXMan12/k8s-prometheus-adapter
urls:
- - assets/rancher-prometheus-adapter/rancher-prometheus-adapter-2.12.101-rc01.tgz
- version: 2.12.101-rc01
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-prometheus-adapter
- apiVersion: v1
- appVersion: v0.8.3
- created: "2021-04-07T19:45:48.560309716Z"
- description: A Helm chart for k8s prometheus adapter
- digest: 85bd2042f013a1ac3773084faf6ed72c55cd7b444eff19778cd4c16e507bf2b5
- home: https://github.com/DirectXMan12/k8s-prometheus-adapter
- keywords:
- - hpa
- - metrics
- - prometheus
- - adapter
- maintainers:
- - email: mattias.gees@jetstack.io
- name: mattiasgees
- - name: steven-sheehy
- - email: hfernandez@mesosphere.com
- name: hectorj2f
- name: rancher-prometheus-adapter
- sources:
- - https://github.com/kubernetes/charts
- - https://github.com/DirectXMan12/k8s-prometheus-adapter
- urls:
- - assets/rancher-prometheus-adapter/rancher-prometheus-adapter-2.12.101-rc00.tgz
- version: 2.12.101-rc00
+ - released/assets/rancher-prometheus-adapter/rancher-prometheus-adapter-2.12.101.tgz
+ version: 2.12.101
rancher-pushprox:
- annotations:
catalog.cattle.io/hidden: "true"
@@ -8800,15 +3188,15 @@ entries:
catalog.rancher.io/release-name: rancher-pushprox
apiVersion: v1
appVersion: 0.1.0
- created: "2021-03-04T22:24:38.319811981Z"
+ created: "2021-04-21T15:17:43.477959-07:00"
description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
clients.
- digest: 6ec2982d7ea75f763859c0d6e04c5ea537e21e450894c5e31d1e9fd3efd613dc
+ digest: 709cfe2bdf4036bb22ac660553d837d09d46ae3c650c2d4eb8454a6712fe3cbe
name: rancher-pushprox
type: application
urls:
- - assets/rancher-pushprox/rancher-pushprox-0.1.300-rc00.tgz
- version: 0.1.300-rc00
+ - released/assets/rancher-pushprox/rancher-pushprox-0.1.300.tgz
+ version: 0.1.300
- annotations:
catalog.cattle.io/hidden: "true"
catalog.rancher.io/certified: rancher
@@ -8816,15 +3204,15 @@ entries:
catalog.rancher.io/release-name: rancher-pushprox
apiVersion: v1
appVersion: 0.1.0
- created: "2021-03-04T09:47:45.138198-08:00"
+ created: "2021-04-21T15:17:43.47749-07:00"
description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
clients.
- digest: f66edae0a693decab1d2e1d60f20a3ddcb57fa757cf04368f4269d43ba45e6d8
+ digest: cb9552eb4ee8899ef1af5583c8080c27227dd3b10d919748f2caf79cb8197198
name: rancher-pushprox
type: application
urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc02.tgz
- version: 0.1.201-rc02
+ - released/assets/rancher-pushprox/rancher-pushprox-0.1.201.tgz
+ version: 0.1.201
- annotations:
catalog.cattle.io/hidden: "true"
catalog.rancher.io/certified: rancher
@@ -8832,43 +3220,10 @@ entries:
catalog.rancher.io/release-name: rancher-pushprox
apiVersion: v1
appVersion: 0.1.0
- created: "2021-03-04T09:47:45.137724-08:00"
+ created: "2021-04-21T15:17:43.476409-07:00"
description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
clients.
- digest: 4e990a9eb65941dbe2733310945efca11bc839a2543cb2d2ecc29c5dd3c691e9
- name: rancher-pushprox
- type: application
- urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc01.tgz
- version: 0.1.201-rc01
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-pushprox
- apiVersion: v1
- appVersion: 0.1.0
- created: "2021-03-04T09:47:45.137189-08:00"
- description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
- clients.
- digest: f9e10374f3d86fe4b9a13ec2ce5bd11d3c2d5314262689249cb1f0c4d4e8123f
- name: rancher-pushprox
- type: application
- urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc00.tgz
- version: 0.1.201-rc00
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-pushprox
- apiVersion: v1
- appVersion: 0.1.0
- created: "2021-01-15T00:11:30.561927-08:00"
- description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
- clients.
- digest: bd7fc397cda47c5d5c5e0bd75a906536b195017fd7ed6876e7428230e6c48943
+ digest: a4b3506a74ea6cc4e8c6610cb92451d3072f4f7bac7b503e2dea9423697eaf68
name: rancher-pushprox
type: application
urls:
@@ -8882,10 +3237,10 @@ entries:
catalog.rancher.io/release-name: rancher-pushprox
apiVersion: v1
appVersion: 0.1.0
- created: "2021-01-15T00:11:30.561429-08:00"
+ created: "2021-04-21T15:17:43.475943-07:00"
description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
clients.
- digest: ab34cc49dd50f2b2dbcee36447a3e2efd974bdce004834b0bfb0508a84ffa16c
+ digest: 4b53e4de2aede1f3d63c815ca36bd61f31d38c59769d9982b14aca3bbf575724
name: rancher-pushprox
type: application
urls:
@@ -8899,10 +3254,10 @@ entries:
catalog.rancher.io/release-name: rancher-pushprox
apiVersion: v1
appVersion: 0.1.0
- created: "2021-01-15T00:11:30.560947-08:00"
+ created: "2021-04-21T15:17:43.475479-07:00"
description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
clients.
- digest: d251c28f9e9b732a02e9c394b0d7bf3a3c98c723fb809b5015bd5728f05ee968
+ digest: 73b11a51246c216a7587628fee346541d6b5e82246e11d586b4926254f7999fa
name: rancher-pushprox
type: application
urls:
@@ -8916,44 +3271,14 @@ entries:
catalog.cattle.io/release-name: rancher-sachet
apiVersion: v2
appVersion: 0.2.3
- created: "2021-04-21T19:31:00.381182575Z"
+ created: "2021-04-21T15:17:43.478347-07:00"
description: A Helm chart for Sachet based on the upstream https://github.com/messagebird/sachet
- digest: 9bf4bcf83bf17d0972fbca2c45284b1e010358c841d86bc04300c73bc5fe87eb
+ digest: 2c97d26c9944838012749bacc971e1ed07b54c56cd205c57cf61871d806a759d
name: rancher-sachet
type: application
urls:
- - assets/rancher-sachet/rancher-sachet-1.0.100-rc03.tgz
- version: 1.0.100-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-sachet
- apiVersion: v2
- appVersion: 0.2.3
- created: "2021-04-15T21:48:25.334591671Z"
- description: A Helm chart for Sachet based on the upstream https://github.com/messagebird/sachet
- digest: a861bcec2a0e88f9be44575db013807ca32dbed0c32e2c0f088e3bbd07819f33
- name: rancher-sachet
- type: application
- urls:
- - assets/rancher-sachet/rancher-sachet-1.0.100-rc02.tgz
- version: 1.0.100-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-sachet
- apiVersion: v2
- appVersion: 0.2.3
- created: "2021-04-15T00:36:31.784073176Z"
- description: A Helm chart for Sachet based on the upstream https://github.com/messagebird/sachet
- digest: ed8e6d13d9fb29db5b477bc1876e0f2501d9aacaeb62d333e9033eda40211f65
- name: rancher-sachet
- type: application
- urls:
- - assets/rancher-sachet/rancher-sachet-1.0.100-rc01.tgz
- version: 1.0.100-rc01
+ - released/assets/rancher-sachet/rancher-sachet-1.0.100.tgz
+ version: 1.0.100
rancher-tracing:
- annotations:
catalog.cattle.io/hidden: "true"
@@ -8963,15 +3288,15 @@ entries:
catalog.rancher.io/release-name: rancher-tracing
apiVersion: v1
appVersion: 1.20.0
- created: "2021-04-09T23:52:20.836901295Z"
+ created: "2021-04-21T15:17:43.479475-07:00"
description: A quick start Jaeger Tracing installation using the all-in-one demo.
This is not production qualified. Refer to https://www.jaegertracing.io/ for
details.
- digest: 13b38c2242fa109a77d00cadb23347feac25ada3de37ec54f49bf0421d379b7b
+ digest: 96f1e9f82f4082461fca26d066ef79b477295546d46485e6b31ea7a01afc9522
name: rancher-tracing
urls:
- - assets/rancher-tracing/rancher-tracing-1.20.100-rc01.tgz
- version: 1.20.100-rc01
+ - released/assets/rancher-tracing/rancher-tracing-1.20.100.tgz
+ version: 1.20.100
- annotations:
catalog.cattle.io/hidden: "true"
catalog.cattle.io/os: linux
@@ -8980,15 +3305,15 @@ entries:
catalog.rancher.io/release-name: rancher-tracing
apiVersion: v1
appVersion: 1.20.0
- created: "2021-04-08T21:20:13.414610431Z"
+ created: "2021-04-21T15:17:43.479089-07:00"
description: A quick start Jaeger Tracing installation using the all-in-one demo.
This is not production qualified. Refer to https://www.jaegertracing.io/ for
details.
- digest: f571aec5860233bd1d2e163d37b3cf8a54b19aaf29774a921e53f2559dab022e
+ digest: 509c4d245fb245157d16b643f55aa9437cbfe19e087326b0f609cae58d0b5499
name: rancher-tracing
urls:
- - assets/rancher-tracing/rancher-tracing-1.20.100-rc00.tgz
- version: 1.20.100-rc00
+ - released/assets/rancher-tracing/rancher-tracing-1.20.002.tgz
+ version: 1.20.002
- annotations:
catalog.cattle.io/hidden: "true"
catalog.cattle.io/os: linux
@@ -8997,49 +3322,15 @@ entries:
catalog.rancher.io/release-name: rancher-tracing
apiVersion: v1
appVersion: 1.20.0
- created: "2021-03-04T09:47:45.138598-08:00"
+ created: "2021-04-21T15:17:43.478719-07:00"
description: A quick start Jaeger Tracing installation using the all-in-one demo.
This is not production qualified. Refer to https://www.jaegertracing.io/ for
details.
- digest: d20f48b0bec89328b18304896c3185a3d08b81ce4c09857aa07f4151e2d21375
- name: rancher-tracing
- urls:
- - released/assets/rancher-tracing/rancher-tracing-1.20.002-rc00.tgz
- version: 1.20.002-rc00
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: istio-system
- catalog.rancher.io/release-name: rancher-tracing
- apiVersion: v1
- appVersion: 1.20.0
- created: "2021-01-15T00:11:30.562327-08:00"
- description: A quick start Jaeger Tracing installation using the all-in-one demo.
- This is not production qualified. Refer to https://www.jaegertracing.io/ for
- details.
- digest: bf9ba6be02c6275ca6a3d850d6be8f012233d62f1614173bcf3e95ff84e9c7eb
+ digest: 1a64b24b3b320407191918acef460ceceebb462b01b7a820568e81a81f89e8b9
name: rancher-tracing
urls:
- released/assets/rancher-tracing/rancher-tracing-1.20.001.tgz
version: 1.20.001
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: istio-system
- catalog.rancher.io/release-name: rancher-tracing
- apiVersion: v1
- appVersion: 1.20.0
- created: "2021-03-01T16:56:35.108494-08:00"
- description: A quick start Jaeger Tracing installation using the all-in-one demo.
- This is not production qualified. Refer to https://www.jaegertracing.io/ for
- details.
- digest: dd999b5d6d78ace23520222e1d80c8e3b8298461a15e726bd41ee4eb58068d46
- name: rancher-tracing
- urls:
- - released/assets/rancher-tracing/rancher-tracing-1.20.001-rc00.tgz
- version: 1.20.001-rc00
rancher-vsphere-cpi:
- annotations:
catalog.cattle.io/certified: rancher
@@ -9049,9 +3340,9 @@ entries:
catalog.cattle.io/release-name: vsphere-cpi
apiVersion: v1
appVersion: 1.0.0
- created: "2021-03-04T09:47:45.138966-08:00"
+ created: "2021-04-21T15:17:43.479834-07:00"
description: vSphere Cloud Provider Interface (CPI)
- digest: 092bf7a60582eb190c1212699a9c277e01974d03e78e2121ecf8f6c460e36df7
+ digest: 932e0f16481f28b34d4dd991323da85da272f3d5d4cce28832a7442d4f2ca1f7
icon: https://charts.rancher.io/assets/logos/vsphere-cpi.svg
keywords:
- infrastructure
@@ -9062,8 +3353,8 @@ entries:
sources:
- https://github.com/kubernetes/cloud-provider-vsphere
urls:
- - released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000-rc01.tgz
- version: 1.0.000-rc01
+ - released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000.tgz
+ version: 1.0.000
rancher-vsphere-csi:
- annotations:
catalog.cattle.io/certified: rancher
@@ -9073,9 +3364,9 @@ entries:
catalog.cattle.io/release-name: vsphere-csi
apiVersion: v1
appVersion: 2.1.0
- created: "2021-03-04T09:47:45.139518-08:00"
+ created: "2021-04-21T15:17:43.480358-07:00"
description: vSphere Cloud Storage Interface (CSI)
- digest: 99cee0399a41911b91f24ebecf94bb88ebdfbe3d82503add88afb5885ed4d1b9
+ digest: 20bfaa758a97b0b89c51fefdf70d048a7e06b576932435ac03fc045a295c0535
icon: https://charts.rancher.io/assets/logos/vsphere-csi.svg
keywords:
- infrastructure
@@ -9086,8 +3377,8 @@ entries:
sources:
- https://github.com/kubernetes-sigs/vsphere-csi-driver
urls:
- - released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000-rc01.tgz
- version: 2.1.000-rc01
+ - released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000.tgz
+ version: 2.1.000
rancher-webhook:
- annotations:
catalog.cattle.io/certified: rancher
@@ -9097,28 +3388,13 @@ entries:
catalog.cattle.io/release-name: rancher-webhook
apiVersion: v2
appVersion: 0.1.0
- created: "2021-04-19T22:35:25.814804748Z"
+ created: "2021-04-21T15:17:43.481506-07:00"
description: ValidatingAdmissionWebhook for Rancher types
- digest: 3fb6016b78780b67ebb7a0eb1d9b3a269cbc97c7d079f3b918bc399e299e6392
+ digest: bbf5c7240ecea194295dc15a541192b0c9484269314ab02bc4568b25abc1aff3
name: rancher-webhook
urls:
- - assets/rancher-webhook/rancher-webhook-0.1.000-rc02.tgz
- version: 0.1.000-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0
- created: "2021-04-12T19:25:21.650416035Z"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: 83431cb23bac72a8513a5bc10c5d864eb1ba93e7ebf93e38fdac4a108dd3a1c9
- name: rancher-webhook
- urls:
- - assets/rancher-webhook/rancher-webhook-0.1.000-rc01.tgz
- version: 0.1.000-rc01
+ - released/assets/rancher-webhook/rancher-webhook-0.1.000.tgz
+ version: 0.1.000
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -9127,13 +3403,13 @@ entries:
catalog.cattle.io/release-name: rancher-webhook
apiVersion: v2
appVersion: 0.1.0-beta9
- created: "2021-03-04T09:47:45.139761-08:00"
+ created: "2021-04-21T15:17:43.481275-07:00"
description: ValidatingAdmissionWebhook for Rancher types
- digest: 6eb969054035ae7a3501d3e08b4a2d70ab38203e62fa5efbee16347fed34f653
+ digest: 0d9ac76eff2b6e937e3e15970cd0192acff99a31aa1afa14941029088dc32f76
name: rancher-webhook
urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901-rc00.tgz
- version: 0.1.0-beta901-rc00
+ - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901.tgz
+ version: 0.1.0-beta901
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -9142,28 +3418,13 @@ entries:
catalog.cattle.io/release-name: rancher-webhook
apiVersion: v2
appVersion: 0.1.0-beta9
- created: "2021-01-15T00:11:30.563834-08:00"
+ created: "2021-04-21T15:17:43.48106-07:00"
description: ValidatingAdmissionWebhook for Rancher types
- digest: 7e1a1ba8b4b83740d5b301cd81cd48f5ecd9a0bc7bb2ea8f5f021a22c294cc57
+ digest: 8881f7cf8b50e3b48a967ce8af477c96f986d42d3c1f4bbb8c0bfc09202d23f4
name: rancher-webhook
urls:
- released/assets/rancher-webhook/rancher-webhook-0.1.0-beta900.tgz
version: 0.1.0-beta900
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta8
- created: "2021-01-15T00:11:30.563574-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: a1ce80a2a1b6915ab379624ac2cb49e1ce27a550951dc88b8f3e5668f792e0b5
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta800.tgz
- version: 0.1.0-beta800
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -9172,28 +3433,13 @@ entries:
catalog.cattle.io/release-name: rancher-webhook
apiVersion: v2
appVersion: 0.1.0-beta7
- created: "2021-01-15T00:11:30.563321-08:00"
+ created: "2021-04-21T15:17:43.480832-07:00"
description: ValidatingAdmissionWebhook for Rancher types
- digest: c7f3d94a86a1960a3bb477d5fa7ec1ce2cda1071f8f221fb7a215a0892b31ec2
+ digest: e185c6765de0bb0694d6d12e16c2dcce7f4c785125e614cf6c0020e5982d5f0e
name: rancher-webhook
urls:
- released/assets/rancher-webhook/rancher-webhook-0.1.0-beta700.tgz
version: 0.1.0-beta700
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta6
- created: "2021-01-15T00:11:30.563072-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: d0715c2f02663a29a0d98a27aadd7383c2d90c0507e9e7ce8768e0030240c15c
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta600.tgz
- version: 0.1.0-beta600
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/hidden: "true"
@@ -9202,28 +3448,13 @@ entries:
catalog.cattle.io/release-name: rancher-webhook
apiVersion: v2
appVersion: 0.1.0-beta5
- created: "2021-01-15T00:11:30.562811-08:00"
+ created: "2021-04-21T15:17:43.480599-07:00"
description: ValidatingAdmissionWebhook for Rancher types
- digest: 748ed52b1d17cff221fb5609bb230467f0a16faf5130122ece6781841c2d569e
+ digest: 574407c23b5827bd1d4d4f20609a5dc9d4558d6d29ef179093288a4a730ab8c2
name: rancher-webhook
urls:
- released/assets/rancher-webhook/rancher-webhook-0.1.0-beta500.tgz
version: 0.1.0-beta500
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta3
- created: "2021-01-15T00:11:30.56257-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: 498aabf4bb200fca9d3a66be7d0606701a6be62208776effc83c894e576ed748
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta300.tgz
- version: 0.1.0-beta300
rancher-windows-exporter:
- annotations:
catalog.cattle.io/hidden: "true"
@@ -9233,92 +3464,17 @@ entries:
catalog.rancher.io/release-name: rancher-windows-exporter
apiVersion: v1
appVersion: 0.0.4
- created: "2021-04-14T00:36:29.86189476Z"
+ created: "2021-04-21T15:17:43.48191-07:00"
description: Sets up monitoring metrics from Windows nodes via Prometheus windows-exporter
- digest: 1bf9bd8fb9e8171ea24f5b6321cc16c538f8dc94fa161c9044a033c6452d3089
+ digest: 5581e9e756f86bf5fb9e47b4687fe502d43b8f22f0fcad38ea8b6e379caab5fb
maintainers:
- email: arvind.iyengar@rancher.com
name: aiyengar2
name: rancher-windows-exporter
type: application
urls:
- - assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000-rc04.tgz
- version: 0.1.000-rc04
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: windows
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-windows-exporter
- apiVersion: v1
- appVersion: 0.0.4
- created: "2021-04-01T17:13:59.568391312Z"
- description: Sets up monitoring metrics from Windows nodes via Prometheus windows-exporter
- digest: 22e1e05ee50870cc705e4e31d763994188d97219d50ebebab60de4d97a9d393d
- maintainers:
- - email: arvind.iyengar@rancher.com
- name: aiyengar2
- name: rancher-windows-exporter
- type: application
- urls:
- - assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000-rc03.tgz
- version: 0.1.000-rc03
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: windows
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-windows-exporter
- apiVersion: v1
- appVersion: 0.0.4
- created: "2021-04-01T00:24:29.187539249Z"
- description: Sets up monitoring metrics from Windows nodes via Prometheus windows-exporter
- digest: 64b9687f927aa8b2dfae478f739536e86319a50462a59a9aa4975803564b3163
- maintainers:
- - email: arvind.iyengar@rancher.com
- name: aiyengar2
- name: rancher-windows-exporter
- type: application
- urls:
- - assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000-rc02.tgz
- version: 0.1.000-rc02
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: windows
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-windows-exporter
- apiVersion: v1
- appVersion: 0.0.4
- created: "2021-03-29T19:11:34.137176752Z"
- description: Sets up monitoring metrics from Windows nodes via Prometheus windows-exporter
- digest: f00af930f333b1458152ac6befb0a68f33112a54d5cb8aca6777436f342f50aa
- maintainers:
- - email: arvind.iyengar@rancher.com
- name: aiyengar2
- name: rancher-windows-exporter
- type: application
- urls:
- - assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000-rc01.tgz
- version: 0.1.000-rc01
- - annotations:
- catalog.cattle.io/os: windows
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-windows-exporter
- apiVersion: v1
- appVersion: 0.0.4
- created: "2021-03-15T17:53:22.571790878Z"
- description: Sets up monitoring metrics from Windows nodes via Prometheus windows-exporter
- digest: b90e452266b18882787703a371ff4ac135b51439d022e9e75370f17c7076fc69
- maintainers:
- - email: arvind.iyengar@rancher.com
- name: aiyengar2
- name: rancher-windows-exporter
- type: application
- urls:
- - assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000-rc00.tgz
- version: 0.1.000-rc00
+ - released/assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000.tgz
+ version: 0.1.000
rancher-wins-upgrader:
- annotations:
catalog.cattle.io/certified: rancher
@@ -9327,37 +3483,18 @@ entries:
catalog.cattle.io/release-name: rancher-wins-upgrader
apiVersion: v2
appVersion: 0.1.0
- created: "2021-04-14T00:36:29.863069235Z"
+ created: "2021-04-21T15:17:43.482314-07:00"
description: Manages upgrading the wins server version and configuration across
all of your Windows nodes
- digest: daba3847de46b2af85db462d2f01f43a5d02cdf19ad8377c3966ea8afc1199d6
+ digest: cdc33b05d156e0675fc5a4e19b6839a04945e45c31ea89a0837243d14fbe16f3
maintainers:
- email: arvind.iyengar@suse.com
name: aiyengar2
name: rancher-wins-upgrader
type: application
urls:
- - assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100-rc01.tgz
- version: 0.0.100-rc01
- - annotations:
- catalog.cattle.io/os: windows
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-wins-system
- catalog.rancher.io/release-name: rancher-wins-upgrader
- apiVersion: v2
- appVersion: 0.1.0
- created: "2021-03-15T17:15:15.620518014Z"
- description: Manages upgrading the wins server version and configuration across
- all of your Windows nodes
- digest: 02c0c5e64d4bb535220c4a0027c30519663c94ac3b0c02062628073df8b8457f
- maintainers:
- - email: arvind.iyengar@suse.com
- name: aiyengar2
- name: rancher-wins-upgrader
- type: application
- urls:
- - assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100-rc00.tgz
- version: 0.0.100-rc00
+ - released/assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100.tgz
+ version: 0.0.100
rio:
- annotations:
catalog.cattle.io/certified: rancher
@@ -9369,15 +3506,15 @@ entries:
catalog.cattle.io/requires-gvr: networking.istio.io.virtualservice/v1beta1
apiVersion: v1
appVersion: 0.8.0
- created: "2021-03-04T09:47:45.140116-08:00"
+ created: "2021-04-21T15:17:43.48309-07:00"
description: The application deployment engine for Kubernetes
- digest: af6a84abcd481d2653db91960a69c9e235b619834cf81d0dfbd0f6c5427b7460
+ digest: 8baa5c330cc152b3d3d87f918ed3ff96b927efad412f4b97bd7db90445e28602
home: https://rio.io
icon: https://charts.rancher.io/assets/logos/rio.svg
name: rio
urls:
- - released/assets/rio/rio-0.8.001-rc00.tgz
- version: 0.8.001-rc00
+ - released/assets/rio/rio-0.8.001.tgz
+ version: 0.8.001
- annotations:
catalog.cattle.io/certified: rancher
catalog.cattle.io/display-name: Rio
@@ -9389,107 +3526,13 @@ entries:
catalog.cattle.io/requires-gvr: networking.istio.io.virtualservice/v1beta1
apiVersion: v1
appVersion: 0.8.0
- created: "2021-01-15T00:11:30.564203-08:00"
+ created: "2021-04-21T15:17:43.482694-07:00"
description: The application deployment engine for Kubernetes
- digest: cec586f9ef5202b6030e1fbab082ef45c740ba749f4358f03ce3423acb310663
+ digest: d58ca3b147627fec6d5f4b99fae680f97edaed98967f1fc1914a537dede0d897
home: https://rio.io
icon: https://charts.rancher.io/assets/logos/rio.svg
name: rio
urls:
- released/assets/rio/rio-0.8.000.tgz
version: 0.8.000
- vsphere-cpi:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere CPI
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-cpi
- apiVersion: v1
- appVersion: 1.0.0
- created: "2021-03-03T21:20:36.729288-07:00"
- description: vSphere Cloud Provider Interface (CPI)
- digest: c989b10ab34b891887a3a1220921181aa3e357a1b1917ba2522848050fdab62a
- icon: https://charts.rancher.io/assets/logos/vsphere-cpi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: vsphere-cpi
- sources:
- - https://github.com/kubernetes/cloud-provider-vsphere
- urls:
- - released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc01.tgz
- version: 1.0.000-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere Cloud Provider Interface (CPI)
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-cpi
- apiVersion: v1
- appVersion: 1.0.0
- created: "2021-03-03T21:20:31.221637-07:00"
- description: vSphere CPI driver
- digest: d78e5350401a9ae6ec67c160b4e7776eebda56a46756b0e6a38c9a2cc913c194
- icon: https://charts.rancher.io/assets/logos/vsphere-cpi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: vsphere-cpi
- sources:
- - https://github.com/kubernetes/cloud-provider-vsphere
- urls:
- - released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc00.tgz
- version: 1.0.000-rc00
- vsphere-csi:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere CSI
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-csi
- apiVersion: v1
- appVersion: 2.1.0
- created: "2021-03-03T21:20:56.760876-07:00"
- description: vSphere Cloud Storage Interface (CSI)
- digest: 2a7e01ac4e05b4224c077c438e5e9a292840040659830ec7d8f9a07829c5b873
- icon: https://charts.rancher.io/assets/logos/vsphere-csi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: vsphere-csi
- sources:
- - https://github.com/kubernetes-sigs/vsphere-csi-driver
- urls:
- - released/assets/vsphere-csi/vsphere-csi-2.1.000-rc01.tgz
- version: 2.1.000-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere Cloud Storage Interface (CSI)
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-csi
- apiVersion: v1
- appVersion: 2.1.0
- created: "2021-03-03T21:20:53.303412-07:00"
- description: vSphere CSI driver
- digest: 42dae1c284c3c79b3c168f01841d0337f0b9d2bf703167374a184341e7d2bd09
- icon: https://charts.rancher.io/assets/logos/vsphere-csi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: vsphere-csi
- sources:
- - https://github.com/kubernetes-sigs/vsphere-csi-driver
- urls:
- - released/assets/vsphere-csi/vsphere-csi-2.1.000-rc00.tgz
- version: 2.1.000-rc00
-generated: "2021-03-04T09:47:44.970939-08:00"
+generated: "2021-04-21T15:17:43.269849-07:00"
diff --git a/released/README.md b/released/README.md
deleted file mode 100755
index 6ff2b27e5..000000000
--- a/released/README.md
+++ /dev/null
@@ -1,5 +0,0 @@
-## Released Assets
-
-This folder contains Helm chart archives for `releaseCandidateVersions` of Helm charts contained within Packages whose `packageVersion` have already been released at charts.rancher.io.
-
-On cutting a release, a Release Captain should run the corresponding `make release` command on this repository to move already released assets into this directory and update the index.yaml with the new chart locations.
\ No newline at end of file
diff --git a/released/assets/README.md b/released/assets/README.md
new file mode 100755
index 000000000..ccf5e5bfd
--- /dev/null
+++ b/released/assets/README.md
@@ -0,0 +1,3 @@
+## Assets
+
+This folder contains Helm chart archives that are served from charts.rancher.io.
\ No newline at end of file
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.0-beta600.tgz b/released/assets/fleet-agent/fleet-agent-0.3.0-beta600.tgz
deleted file mode 100644
index 3df630263..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.0-beta600.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.0-rc100.tgz b/released/assets/fleet-agent/fleet-agent-0.3.0-rc100.tgz
deleted file mode 100644
index c60204431..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.0-rc100.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.0-rc200.tgz b/released/assets/fleet-agent/fleet-agent-0.3.0-rc200.tgz
deleted file mode 100644
index 8028d851a..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.0-rc200.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.0-rc300.tgz b/released/assets/fleet-agent/fleet-agent-0.3.0-rc300.tgz
deleted file mode 100644
index 0caf229e1..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.0-rc300.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.000.tgz b/released/assets/fleet-agent/fleet-agent-0.3.000.tgz
index 8a3994e9f..ab117189d 100644
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.000.tgz and b/released/assets/fleet-agent/fleet-agent-0.3.000.tgz differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.1-rc200.tgz b/released/assets/fleet-agent/fleet-agent-0.3.1-rc200.tgz
deleted file mode 100644
index 1df0ebc42..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.1-rc200.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.100.tgz b/released/assets/fleet-agent/fleet-agent-0.3.100.tgz
index 31baa83e7..4b0f4f651 100644
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.100.tgz and b/released/assets/fleet-agent/fleet-agent-0.3.100.tgz differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.2-rc100.tgz b/released/assets/fleet-agent/fleet-agent-0.3.2-rc100.tgz
deleted file mode 100644
index 7cd3d983b..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.2-rc100.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.2-rc200.tgz b/released/assets/fleet-agent/fleet-agent-0.3.2-rc200.tgz
deleted file mode 100644
index c5902fe30..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.2-rc200.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.2-rc300.tgz b/released/assets/fleet-agent/fleet-agent-0.3.2-rc300.tgz
deleted file mode 100644
index 1cfdebca3..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.2-rc300.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.2-rc400.tgz b/released/assets/fleet-agent/fleet-agent-0.3.2-rc400.tgz
deleted file mode 100644
index 0854e52ac..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.2-rc400.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.2-rc500.tgz b/released/assets/fleet-agent/fleet-agent-0.3.2-rc500.tgz
deleted file mode 100644
index 660fd4063..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.2-rc500.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.200-rc5.tgz b/released/assets/fleet-agent/fleet-agent-0.3.200-rc5.tgz
deleted file mode 100644
index e392dad49..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.200-rc5.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.200-rc6.tgz b/released/assets/fleet-agent/fleet-agent-0.3.200-rc6.tgz
deleted file mode 100644
index 807059ed1..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.200-rc6.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.200-rc7.tgz b/released/assets/fleet-agent/fleet-agent-0.3.200-rc7.tgz
deleted file mode 100644
index 3b470f998..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.200-rc7.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.200.tgz b/released/assets/fleet-agent/fleet-agent-0.3.200.tgz
index a302c3f3d..0ce284876 100644
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.200.tgz and b/released/assets/fleet-agent/fleet-agent-0.3.200.tgz differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.300-rc1.tgz b/released/assets/fleet-agent/fleet-agent-0.3.300-rc1.tgz
deleted file mode 100644
index a1eda71c7..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.300-rc1.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.300.tgz b/released/assets/fleet-agent/fleet-agent-0.3.300.tgz
index be6405f28..4d315165b 100644
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.300.tgz and b/released/assets/fleet-agent/fleet-agent-0.3.300.tgz differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.400-rc00.tgz b/released/assets/fleet-agent/fleet-agent-0.3.400-rc00.tgz
deleted file mode 100755
index a3502cb4f..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.400-rc00.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.400-rc03.tgz b/released/assets/fleet-agent/fleet-agent-0.3.400-rc03.tgz
deleted file mode 100755
index 4a90c3d58..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.400-rc03.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.400-rc04.tgz b/released/assets/fleet-agent/fleet-agent-0.3.400-rc04.tgz
deleted file mode 100755
index 4f59ebe4e..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.400-rc04.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.400-rc05.tgz b/released/assets/fleet-agent/fleet-agent-0.3.400-rc05.tgz
deleted file mode 100755
index 8cc15b576..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.400-rc05.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.400-rc06.tgz b/released/assets/fleet-agent/fleet-agent-0.3.400-rc06.tgz
deleted file mode 100755
index e07b272fe..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.400-rc06.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.400-rc07.tgz b/released/assets/fleet-agent/fleet-agent-0.3.400-rc07.tgz
deleted file mode 100755
index 136bc4fed..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.400-rc07.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.400-rc08.tgz b/released/assets/fleet-agent/fleet-agent-0.3.400-rc08.tgz
deleted file mode 100755
index 55dd9220e..000000000
Binary files a/released/assets/fleet-agent/fleet-agent-0.3.400-rc08.tgz and /dev/null differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.400.tgz b/released/assets/fleet-agent/fleet-agent-0.3.400.tgz
new file mode 100755
index 000000000..fb2d54a67
Binary files /dev/null and b/released/assets/fleet-agent/fleet-agent-0.3.400.tgz differ
diff --git a/released/assets/fleet-agent/fleet-agent-0.3.500.tgz b/released/assets/fleet-agent/fleet-agent-0.3.500.tgz
new file mode 100755
index 000000000..ad3b3c698
Binary files /dev/null and b/released/assets/fleet-agent/fleet-agent-0.3.500.tgz differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.0-beta600.tgz b/released/assets/fleet-crd/fleet-crd-0.3.0-beta600.tgz
deleted file mode 100644
index 262d8bce1..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.0-beta600.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.0-rc100.tgz b/released/assets/fleet-crd/fleet-crd-0.3.0-rc100.tgz
deleted file mode 100644
index 733535b81..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.0-rc100.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.0-rc200.tgz b/released/assets/fleet-crd/fleet-crd-0.3.0-rc200.tgz
deleted file mode 100644
index 7515000f1..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.0-rc200.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.0-rc300.tgz b/released/assets/fleet-crd/fleet-crd-0.3.0-rc300.tgz
deleted file mode 100644
index e96387fd1..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.0-rc300.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.000.tgz b/released/assets/fleet-crd/fleet-crd-0.3.000.tgz
index d3a084659..c4341599d 100644
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.000.tgz and b/released/assets/fleet-crd/fleet-crd-0.3.000.tgz differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.100.tgz b/released/assets/fleet-crd/fleet-crd-0.3.100.tgz
index e3a334500..e0869233d 100644
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.100.tgz and b/released/assets/fleet-crd/fleet-crd-0.3.100.tgz differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.2-rc100.tgz b/released/assets/fleet-crd/fleet-crd-0.3.2-rc100.tgz
deleted file mode 100644
index 865aa3d6a..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.2-rc100.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.2-rc200.tgz b/released/assets/fleet-crd/fleet-crd-0.3.2-rc200.tgz
deleted file mode 100644
index 70bf1bbb4..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.2-rc200.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.2-rc300.tgz b/released/assets/fleet-crd/fleet-crd-0.3.2-rc300.tgz
deleted file mode 100644
index 6b0682a0d..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.2-rc300.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.2-rc400.tgz b/released/assets/fleet-crd/fleet-crd-0.3.2-rc400.tgz
deleted file mode 100644
index a1d80de82..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.2-rc400.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.2-rc500.tgz b/released/assets/fleet-crd/fleet-crd-0.3.2-rc500.tgz
deleted file mode 100644
index a1231cf5e..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.2-rc500.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.200-rc5.tgz b/released/assets/fleet-crd/fleet-crd-0.3.200-rc5.tgz
deleted file mode 100644
index 0a1ca7d27..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.200-rc5.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.200-rc6.tgz b/released/assets/fleet-crd/fleet-crd-0.3.200-rc6.tgz
deleted file mode 100644
index 9ba39ce84..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.200-rc6.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.200-rc7.tgz b/released/assets/fleet-crd/fleet-crd-0.3.200-rc7.tgz
deleted file mode 100644
index b3dce05d2..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.200-rc7.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.200.tgz b/released/assets/fleet-crd/fleet-crd-0.3.200.tgz
index 861d52f1a..ff4056995 100644
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.200.tgz and b/released/assets/fleet-crd/fleet-crd-0.3.200.tgz differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.300-rc1.tgz b/released/assets/fleet-crd/fleet-crd-0.3.300-rc1.tgz
deleted file mode 100644
index d23e4faea..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.300-rc1.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.300.tgz b/released/assets/fleet-crd/fleet-crd-0.3.300.tgz
index b33ced188..412aa3e66 100644
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.300.tgz and b/released/assets/fleet-crd/fleet-crd-0.3.300.tgz differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.400-rc00.tgz b/released/assets/fleet-crd/fleet-crd-0.3.400-rc00.tgz
deleted file mode 100755
index 90f9f57aa..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.400-rc00.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.400-rc03.tgz b/released/assets/fleet-crd/fleet-crd-0.3.400-rc03.tgz
deleted file mode 100755
index 515a28bae..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.400-rc03.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.400-rc04.tgz b/released/assets/fleet-crd/fleet-crd-0.3.400-rc04.tgz
deleted file mode 100755
index c772e348b..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.400-rc04.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.400-rc05.tgz b/released/assets/fleet-crd/fleet-crd-0.3.400-rc05.tgz
deleted file mode 100755
index 7937a27ae..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.400-rc05.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.400-rc06.tgz b/released/assets/fleet-crd/fleet-crd-0.3.400-rc06.tgz
deleted file mode 100755
index 6c3f1e738..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.400-rc06.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.400-rc07.tgz b/released/assets/fleet-crd/fleet-crd-0.3.400-rc07.tgz
deleted file mode 100755
index 5ceed99b8..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.400-rc07.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.400-rc08.tgz b/released/assets/fleet-crd/fleet-crd-0.3.400-rc08.tgz
deleted file mode 100755
index 2a22eda01..000000000
Binary files a/released/assets/fleet-crd/fleet-crd-0.3.400-rc08.tgz and /dev/null differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.400.tgz b/released/assets/fleet-crd/fleet-crd-0.3.400.tgz
new file mode 100755
index 000000000..c1974f4e2
Binary files /dev/null and b/released/assets/fleet-crd/fleet-crd-0.3.400.tgz differ
diff --git a/released/assets/fleet-crd/fleet-crd-0.3.500.tgz b/released/assets/fleet-crd/fleet-crd-0.3.500.tgz
new file mode 100755
index 000000000..f9a4dec9b
Binary files /dev/null and b/released/assets/fleet-crd/fleet-crd-0.3.500.tgz differ
diff --git a/released/assets/fleet/fleet-0.3.0-beta600.tgz b/released/assets/fleet/fleet-0.3.0-beta600.tgz
deleted file mode 100644
index 9aa327777..000000000
Binary files a/released/assets/fleet/fleet-0.3.0-beta600.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.0-rc100.tgz b/released/assets/fleet/fleet-0.3.0-rc100.tgz
deleted file mode 100644
index 743739f32..000000000
Binary files a/released/assets/fleet/fleet-0.3.0-rc100.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.0-rc200.tgz b/released/assets/fleet/fleet-0.3.0-rc200.tgz
deleted file mode 100644
index a2478c0c9..000000000
Binary files a/released/assets/fleet/fleet-0.3.0-rc200.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.0-rc300.tgz b/released/assets/fleet/fleet-0.3.0-rc300.tgz
deleted file mode 100644
index fd40206f4..000000000
Binary files a/released/assets/fleet/fleet-0.3.0-rc300.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.000.tgz b/released/assets/fleet/fleet-0.3.000.tgz
index 49d651145..0b9167db0 100644
Binary files a/released/assets/fleet/fleet-0.3.000.tgz and b/released/assets/fleet/fleet-0.3.000.tgz differ
diff --git a/released/assets/fleet/fleet-0.3.1-rc200.tgz b/released/assets/fleet/fleet-0.3.1-rc200.tgz
deleted file mode 100644
index 5983e4d4b..000000000
Binary files a/released/assets/fleet/fleet-0.3.1-rc200.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.100.tgz b/released/assets/fleet/fleet-0.3.100.tgz
index 694227163..993853258 100644
Binary files a/released/assets/fleet/fleet-0.3.100.tgz and b/released/assets/fleet/fleet-0.3.100.tgz differ
diff --git a/released/assets/fleet/fleet-0.3.2-rc100.tgz b/released/assets/fleet/fleet-0.3.2-rc100.tgz
deleted file mode 100644
index 5c2cf2485..000000000
Binary files a/released/assets/fleet/fleet-0.3.2-rc100.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.2-rc200.tgz b/released/assets/fleet/fleet-0.3.2-rc200.tgz
deleted file mode 100644
index 3ebfef925..000000000
Binary files a/released/assets/fleet/fleet-0.3.2-rc200.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.2-rc300.tgz b/released/assets/fleet/fleet-0.3.2-rc300.tgz
deleted file mode 100644
index d8aab832e..000000000
Binary files a/released/assets/fleet/fleet-0.3.2-rc300.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.2-rc400.tgz b/released/assets/fleet/fleet-0.3.2-rc400.tgz
deleted file mode 100644
index dc5dcb382..000000000
Binary files a/released/assets/fleet/fleet-0.3.2-rc400.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.2-rc500.tgz b/released/assets/fleet/fleet-0.3.2-rc500.tgz
deleted file mode 100644
index c8859bece..000000000
Binary files a/released/assets/fleet/fleet-0.3.2-rc500.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.200-rc5.tgz b/released/assets/fleet/fleet-0.3.200-rc5.tgz
deleted file mode 100644
index ed8e8d958..000000000
Binary files a/released/assets/fleet/fleet-0.3.200-rc5.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.200-rc6.tgz b/released/assets/fleet/fleet-0.3.200-rc6.tgz
deleted file mode 100644
index 2fd0f7362..000000000
Binary files a/released/assets/fleet/fleet-0.3.200-rc6.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.200-rc7.tgz b/released/assets/fleet/fleet-0.3.200-rc7.tgz
deleted file mode 100644
index 0100c0214..000000000
Binary files a/released/assets/fleet/fleet-0.3.200-rc7.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.200.tgz b/released/assets/fleet/fleet-0.3.200.tgz
index d20ff575a..35946b921 100644
Binary files a/released/assets/fleet/fleet-0.3.200.tgz and b/released/assets/fleet/fleet-0.3.200.tgz differ
diff --git a/released/assets/fleet/fleet-0.3.300-rc1.tgz b/released/assets/fleet/fleet-0.3.300-rc1.tgz
deleted file mode 100644
index 6f2504af5..000000000
Binary files a/released/assets/fleet/fleet-0.3.300-rc1.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.300.tgz b/released/assets/fleet/fleet-0.3.300.tgz
index 53c2fb4dc..1b0e41c04 100644
Binary files a/released/assets/fleet/fleet-0.3.300.tgz and b/released/assets/fleet/fleet-0.3.300.tgz differ
diff --git a/released/assets/fleet/fleet-0.3.400-rc00.tgz b/released/assets/fleet/fleet-0.3.400-rc00.tgz
deleted file mode 100755
index 7de530a9d..000000000
Binary files a/released/assets/fleet/fleet-0.3.400-rc00.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.400-rc03.tgz b/released/assets/fleet/fleet-0.3.400-rc03.tgz
deleted file mode 100755
index 7fc4ee4f8..000000000
Binary files a/released/assets/fleet/fleet-0.3.400-rc03.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.400-rc04.tgz b/released/assets/fleet/fleet-0.3.400-rc04.tgz
deleted file mode 100755
index 434a9231c..000000000
Binary files a/released/assets/fleet/fleet-0.3.400-rc04.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.400-rc05.tgz b/released/assets/fleet/fleet-0.3.400-rc05.tgz
deleted file mode 100755
index 068335fff..000000000
Binary files a/released/assets/fleet/fleet-0.3.400-rc05.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.400-rc06.tgz b/released/assets/fleet/fleet-0.3.400-rc06.tgz
deleted file mode 100755
index bb284d027..000000000
Binary files a/released/assets/fleet/fleet-0.3.400-rc06.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.400-rc07.tgz b/released/assets/fleet/fleet-0.3.400-rc07.tgz
deleted file mode 100755
index da2d7ea19..000000000
Binary files a/released/assets/fleet/fleet-0.3.400-rc07.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.400-rc08.tgz b/released/assets/fleet/fleet-0.3.400-rc08.tgz
deleted file mode 100755
index 6d467d304..000000000
Binary files a/released/assets/fleet/fleet-0.3.400-rc08.tgz and /dev/null differ
diff --git a/released/assets/fleet/fleet-0.3.400.tgz b/released/assets/fleet/fleet-0.3.400.tgz
new file mode 100755
index 000000000..196766493
Binary files /dev/null and b/released/assets/fleet/fleet-0.3.400.tgz differ
diff --git a/released/assets/fleet/fleet-0.3.500.tgz b/released/assets/fleet/fleet-0.3.500.tgz
new file mode 100755
index 000000000..b0d228060
Binary files /dev/null and b/released/assets/fleet/fleet-0.3.500.tgz differ
diff --git a/released/assets/index.yaml b/released/assets/index.yaml
deleted file mode 100644
index 263318fb6..000000000
--- a/released/assets/index.yaml
+++ /dev/null
@@ -1,5339 +0,0 @@
-apiVersion: v1
-entries:
- fleet:
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.616089-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 277079329c521f3902a1d350526faa155b96760268841855b066a79c066e1fda
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc08.tgz
- version: 0.3.400-rc08
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.61556-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 7d9eb26b9a52d271fbb40a4bd5d0771bbef7b7b4e62202db83be9aef6df1b020
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc07.tgz
- version: 0.3.400-rc07
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.615033-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 687574de3226ffeb9f1e0aa113221b1079b8ce4b7388deb9f4db21adf910cd7a
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc06.tgz
- version: 0.3.400-rc06
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.614498-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: cc93d58b20fe2ce8626f93af8a534eb80ee2c9001f1e864981b72c1766cd4ea3
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc05.tgz
- version: 0.3.400-rc05
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.61388-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 118b165bf97d80b203e46b7899f619060e95b73a4e86be39230b6cfa24f37527
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc04.tgz
- version: 0.3.400-rc04
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.613302-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 2c77e45b0d5c39ffbc45889ee92627fc97360fd002b01cf766efc963933d0734
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc03.tgz
- version: 0.3.400-rc03
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.612801-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: fb076be2e7e9d34b6fbb7cf6b975ee8dea69d118a91dbef29c77e3310718843b
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.400-rc00.tgz
- version: 0.3.400-rc00
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.3
- created: "2021-01-15T00:11:30.442452-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 466158346d34e38bc22d1df190b8e8d031da76e6b189b104c3db439c84cefa57
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.300.tgz
- version: 0.3.300
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.3-rc1
- created: "2021-01-15T00:11:30.442021-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 92c54b647c650213ed878a3aa37a1b121d773ea3df107eef1cb80ffba4fdd4a8
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.300-rc1.tgz
- version: 0.3.300-rc1
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2
- created: "2021-01-15T00:11:30.441482-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 13435d391c5cbc965b57ef20bc8fcf2d986ff7a3e931b69ee692ab9e1f182cee
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.200.tgz
- version: 0.3.200
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc7
- created: "2021-01-15T00:11:30.441061-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 6bacaf33f64564316e3055a64e2be835e59db11c0e972bf724129f084e2347fe
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.200-rc7.tgz
- version: 0.3.200-rc7
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc6
- created: "2021-01-15T00:11:30.440604-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: a5ed0efb4922ac2095d632c6675bd0c15d12940cf3993eb744259154a7946ee4
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.200-rc6.tgz
- version: 0.3.200-rc6
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.440153-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 8532b8f9ea6cc1a58e75f12f500c50f1e504e2f1cd17dbea5302067f1e97fd8d
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.200-rc5.tgz
- version: 0.3.200-rc5
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.1
- created: "2021-01-15T00:11:30.435867-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 2fe3aa2739e02cc80ab57ab538f553caab0c68e4d42c36c878418978378704ee
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.100.tgz
- version: 0.3.100
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.439622-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: a4a06fb9cebe9efd606bede697cb3153ac90a525cea85d5669bebfec2bd46b60
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc500.tgz
- version: 0.3.2-rc500
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc4
- created: "2021-01-15T00:11:30.439032-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 2c8db55082443d3001ee73001f2998709eb626d068ea1d01a9a2a876ab1fd6d5
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc400.tgz
- version: 0.3.2-rc400
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc3
- created: "2021-01-15T00:11:30.438375-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 4cb7dc66d8fa56e7c72482a711690c4eec6df2b6039325b7573ff5832db6e2f1
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc300.tgz
- version: 0.3.2-rc300
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc2
- created: "2021-01-15T00:11:30.436873-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 8eb35016316c813edec5b6a23e4e1b2ac977f70422abdaa17b27f04ef583b4a2
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc200.tgz
- version: 0.3.2-rc200
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.2-rc1
- created: "2021-01-15T00:11:30.436381-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 2d931594dcc850c2ceddbc670c26ec624275471e827aea89c911a9c69b63680c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.2-rc100.tgz
- version: 0.3.2-rc100
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.1-rc2
- created: "2021-01-15T00:11:30.43539-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 8e2d0197e5351976855ab2a353624f83aae1dd20d111c640577c718dbc6e8d3d
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.1-rc200.tgz
- version: 0.3.1-rc200
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0
- created: "2021-01-15T00:11:30.43486-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 2ebf3211667f09636fe3ddedcf3f16527911039ad034234b3096a2d22648f08c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.000.tgz
- version: 0.3.000
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0-rc3
- created: "2021-01-15T00:11:30.434357-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 8c0107095c9bd5fdaf1af65269cc3212e1d3b3cae7fd60310e33ed4f45f60c3e
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.0-rc300.tgz
- version: 0.3.0-rc300
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0-rc2
- created: "2021-01-15T00:11:30.433883-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 4fff27a9b7181abc19c19ed7c976001fd334bc398451c4f8e06f5175a5449b13
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.0-rc200.tgz
- version: 0.3.0-rc200
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0-rc1
- created: "2021-01-15T00:11:30.433435-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: 9285c78e83af3aa9c41f78ccda82a629e1e5d0491657c928c70e35cdf398a4a1
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.0-rc100.tgz
- version: 0.3.0-rc100
- - annotations:
- catalog.cattle.io/auto-install: fleet-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
- catalog.cattle.io/release-name: fleet
- apiVersion: v2
- appVersion: 0.3.0-beta6
- created: "2021-01-15T00:11:30.432981-08:00"
- description: Fleet Manager - GitOps at Scale
- digest: daecd0f635b0d5e9cbe1661a0cbf9fa863559067380c018ee647c0541f036f54
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet
- urls:
- - released/assets/fleet/fleet-0.3.0-beta600.tgz
- version: 0.3.0-beta600
- fleet-agent:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.620949-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 92c389d9d8be695fb01d74e9d5522e4a594fe08b1631bf80433a43cfafc12130
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc08.tgz
- version: 0.3.400-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.620584-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 0309e8373110bc1bccf7822846cb39bfb3090079516fb597fc1bfd315d793bd6
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc07.tgz
- version: 0.3.400-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.61921-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 3ea72c1023795f9f0d5044645ee0daf17728e7c2dfa8e09bad134f068d33e0bd
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc06.tgz
- version: 0.3.400-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.618855-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 0ddcf88f7f969a054e665547afc3d051b6f7e889bdfa9f6117d1b54424bc0121
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc05.tgz
- version: 0.3.400-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.61821-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 361ea8b3e2881fba58c75b4fa8f7a3dcd39e935cf53ffda8d16eae03b24b3e29
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc04.tgz
- version: 0.3.400-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.617834-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: a8b5d0b5f1fa9fca85dcb543141dfc2b69d9f44e6a3f0e985e5d0d89c80abb0b
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc03.tgz
- version: 0.3.400-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.617371-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 4f1e3b1be448bf6a3ce7519dbf4105469ba9ea60432f64ed7717269b4c1db495
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.400-rc00.tgz
- version: 0.3.400-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.3
- created: "2021-01-15T00:11:30.450242-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: c156f47b7093403a9567dd6607150dcec3d23bbc9089f24826edd255da3de163
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.300.tgz
- version: 0.3.300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.3-rc1
- created: "2021-01-15T00:11:30.449607-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 8ba8e519ae4e2597ce1a886fc236a6ba17884c26ee500f099ba25881fe07c472
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.300-rc1.tgz
- version: 0.3.300-rc1
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2
- created: "2021-01-15T00:11:30.449316-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: d83092027ee970d35edf853bfebe76621e65e98a6451a984018ad50343de7662
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.200.tgz
- version: 0.3.200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc7
- created: "2021-01-15T00:11:30.449024-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 64119f4e2708a02f6a7d196289154158a3069078eeb2ff6c4d610ff75553714d
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.200-rc7.tgz
- version: 0.3.200-rc7
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc6
- created: "2021-01-15T00:11:30.448731-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: e4d4cec1d4f3a6cb6de231398213740ab6a63221ad8bb39b92ff359ab203c717
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.200-rc6.tgz
- version: 0.3.200-rc6
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.448438-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 901d1ac62ef11449a3a4322be4c361031901491457b285ea7ae50eb86b294c4d
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.200-rc5.tgz
- version: 0.3.200-rc5
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.1
- created: "2021-01-15T00:11:30.44469-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 93e1c4ab4accfe23e9367bf0db876c469fa33df306d0c375c4f52cae384a12bd
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.100.tgz
- version: 0.3.100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.448126-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 89a9c660a7e734b92e355c9cef6bc5ed6ea686a531bd7fbcc9e79740f11ecf97
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc500.tgz
- version: 0.3.2-rc500
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc4
- created: "2021-01-15T00:11:30.447616-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 54b08cdc2b3d82df5f200b7ce248df6fd76fcc6bca65566597277223b392694a
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc400.tgz
- version: 0.3.2-rc400
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc3
- created: "2021-01-15T00:11:30.446262-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 666b0fbd3cd2c66ec0876c4ab38179ff208ae30e6c1f624a9d86c63a94631c4f
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc300.tgz
- version: 0.3.2-rc300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc2
- created: "2021-01-15T00:11:30.445918-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: aabe665aeebc1df39898d541af5584b5c30de7702822690d6a51fe719700974c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc200.tgz
- version: 0.3.2-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.2-rc1
- created: "2021-01-15T00:11:30.445594-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: ff1f16b5df2234bab11727a056fd1133266d224739a552827d0c2ba7cce13351
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.2-rc100.tgz
- version: 0.3.2-rc100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.1-rc2
- created: "2021-01-15T00:11:30.444372-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 5710e0cd3a6d3c818ced59b6cf486579b5184aadac4dd8088fcac9fe5bb82588
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.1-rc200.tgz
- version: 0.3.1-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0
- created: "2021-01-15T00:11:30.444055-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: ecc3783751af209842edc9e4687d01b2a355613b8232d993da9ad36c412ee351
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.000.tgz
- version: 0.3.000
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0-rc3
- created: "2021-01-15T00:11:30.443739-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 03d3d03b8ae0b079bca9ef661b5e3468a40056fc921ccca1dd75174c5763de3c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.0-rc300.tgz
- version: 0.3.0-rc300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0-rc2
- created: "2021-01-15T00:11:30.443423-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 751ff49e3a02afa1300ef25a9b98399dfa7aad6f3e7598225e3902890dc6ff59
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.0-rc200.tgz
- version: 0.3.0-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0-rc1
- created: "2021-01-15T00:11:30.443115-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: 2f72018aba77b61c891e7ee430086b91a1d822ac276b2a483eeee00a0e32ecd2
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.0-rc100.tgz
- version: 0.3.0-rc100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-agent
- apiVersion: v2
- appVersion: 0.3.0-beta6
- created: "2021-01-15T00:11:30.442776-08:00"
- description: Fleet Manager Agent - GitOps at Scale
- digest: c698ce4c2749dfc4134d08ec4522af59022e3c17ebf1eabc8642a6de57d9a378
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-agent
- urls:
- - released/assets/fleet-agent/fleet-agent-0.3.0-beta600.tgz
- version: 0.3.0-beta600
- fleet-crd:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.626351-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 08a71c3658b502abcac9967992089f06a2e7b945939173ab690109e31c879d78
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc08.tgz
- version: 0.3.400-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.625717-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 8dabeedc21780455b4dbdbf963ca9a78a6d075163c61a282832424a552aefaa0
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc07.tgz
- version: 0.3.400-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.625156-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 868f7b6e3caf84cc9d4c911ea03e3a01468ff3e9bb61764c890328e204f3afcc
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc06.tgz
- version: 0.3.400-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.624639-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 43f1202bb4e902d87c991ce6f784eba76bf293cf306ad8f4f86befb1af926c63
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc05.tgz
- version: 0.3.400-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.624079-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: f1f0b41f0361f1dafc601a6b2113dc7956241df6f31392be86c263fab3020141
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc04.tgz
- version: 0.3.400-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.622521-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: c5c909ed053603f81ab58c8292f197fc86cd7abd4c52c1be7fe6fbd971cc9317
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc03.tgz
- version: 0.3.400-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.4
- created: "2021-03-04T09:47:44.621885-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: b4bdaa0cf4bd59c0629e22da5822d03f4fe3b588d79ce4f17c85067cb266ea12
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.400-rc00.tgz
- version: 0.3.400-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.3
- created: "2021-01-15T00:11:30.460625-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 9f7fd02d05da58beb8e5b10af0f0c22a5355532112f22d0f9150ed6f16e8d738
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.300.tgz
- version: 0.3.300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.3-rc1
- created: "2021-01-15T00:11:30.460163-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 6c71754d009749043486ef5d51293781f0a140c23abc2e5e02b7b3d8a416e7a1
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.300-rc1.tgz
- version: 0.3.300-rc1
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2
- created: "2021-01-15T00:11:30.459702-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 170663b6c1b877803057699633b386d17bd8dd29dabe83c60a19fa160572e649
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.200.tgz
- version: 0.3.200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc7
- created: "2021-01-15T00:11:30.459237-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: e189bf956a74e6110d11ca8d333ed2eb8fca6bd38d9ad9f9aca85f50e9d13c44
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.200-rc7.tgz
- version: 0.3.200-rc7
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc6
- created: "2021-01-15T00:11:30.458738-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 910aa180969f7efa7707860d8003a8a8a4d64fa2943a9d35402fba0089ea53d1
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.200-rc6.tgz
- version: 0.3.200-rc6
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.457713-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: f452552ccb8c6ebd3138f24ad70c83936a271a6f1a58c57c1e8f3d7bf2d9428b
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.200-rc5.tgz
- version: 0.3.200-rc5
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.1
- created: "2021-01-15T00:11:30.453908-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 54dba389fc02e3655fe4e47f05f149f4661440974f57e229d93c3828a6a23f95
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.100.tgz
- version: 0.3.100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc5
- created: "2021-01-15T00:11:30.457197-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 1f759371cea4364f8a193815c3f1fdd3a518d6431d0ebf24a274f88ee2793c5c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc500.tgz
- version: 0.3.2-rc500
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc4
- created: "2021-01-15T00:11:30.456675-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 9b6e11bab284ac76e6e287b5912ecbebf1286ad23b703a90050167f9cb47965e
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc400.tgz
- version: 0.3.2-rc400
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc3
- created: "2021-01-15T00:11:30.456173-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 317da5d6523ceb6c34b82f5641ddb18dec5fc96ec841949b535979715463a692
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc300.tgz
- version: 0.3.2-rc300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc2
- created: "2021-01-15T00:11:30.455531-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: e0ce08e0a55def30a2c95edfcfcdfe0ee9ac9f5dc8666ef53626e31cebe4fb4c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc200.tgz
- version: 0.3.2-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.2-rc1
- created: "2021-01-15T00:11:30.454478-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: b21e1d17af28400b9aa8960c7ee6d090266114b4811c9c5c507ecc1a662dc30a
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.2-rc100.tgz
- version: 0.3.2-rc100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0
- created: "2021-01-15T00:11:30.453346-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 0d24fc1805c045d86894e092454dbf2beffa3ad0ddadd10895f6db7821908715
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.000.tgz
- version: 0.3.000
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0-rc3
- created: "2021-01-15T00:11:30.452862-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: c9b099c6e5e83ab677bc9c38eed6bdbe3f15611c261c2868c38aac24f3628c6f
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.0-rc300.tgz
- version: 0.3.0-rc300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0-rc2
- created: "2021-01-15T00:11:30.452386-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 88e1db58de806e970fc5ee7fbd55dd389ca31360a81a9591b38f551b62157b20
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.0-rc200.tgz
- version: 0.3.0-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0-rc1
- created: "2021-01-15T00:11:30.451433-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: 0f037ac5744a26b7a382662121f934417f76484448e19f4d4b931f002df2b888
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.0-rc100.tgz
- version: 0.3.0-rc100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: fleet-system
- catalog.cattle.io/release-name: fleet-crd
- apiVersion: v2
- appVersion: 0.3.0-beta6
- created: "2021-01-15T00:11:30.45084-08:00"
- description: Fleet Manager CustomResourceDefinitions
- digest: a053cf9e74fb7f070c9f46127ae5f076c812dc5ae545449fe11212ae5426b85c
- icon: https://charts.rancher.io/assets/logos/fleet.svg
- name: fleet-crd
- urls:
- - released/assets/fleet-crd/fleet-crd-0.3.0-beta600.tgz
- version: 0.3.0-beta600
- longhorn:
- - annotations:
- catalog.cattle.io/auto-install: longhorn-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Longhorn
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
- catalog.cattle.io/release-name: longhorn
- catalog.cattle.io/ui-component: longhorn
- apiVersion: v1
- appVersion: v1.1.0
- created: "2021-03-04T09:47:44.629488-08:00"
- description: Longhorn is a distributed block storage system for Kubernetes.
- digest: c1138d74207f6296f07981ee2daadb9c6f08b1156de297e9b0f56620b5d7bb15
- home: https://github.com/longhorn/longhorn
- icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg?sanitize=true
- keywords:
- - longhorn
- - storage
- - distributed
- - block
- - device
- - iscsi
- kubeVersion: '>=v1.16.0-r0'
- maintainers:
- - email: maintainers@longhorn.io
- name: Longhorn maintainers
- - email: sheng@yasker.org
- name: Sheng Yang
- name: longhorn
- sources:
- - https://github.com/longhorn/longhorn
- - https://github.com/longhorn/longhorn-engine
- - https://github.com/longhorn/longhorn-instance-manager
- - https://github.com/longhorn/longhorn-share-manager
- - https://github.com/longhorn/longhorn-manager
- - https://github.com/longhorn/longhorn-ui
- - https://github.com/longhorn/longhorn-tests
- urls:
- - released/assets/longhorn/longhorn-1.1.001-rc01.tgz
- version: 1.1.001-rc01
- - annotations:
- catalog.cattle.io/auto-install: longhorn-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Longhorn
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
- catalog.cattle.io/release-name: longhorn
- catalog.cattle.io/ui-component: longhorn
- apiVersion: v1
- appVersion: v1.1.0
- created: "2021-03-04T09:47:44.628491-08:00"
- description: Longhorn is a distributed block storage system for Kubernetes.
- digest: 13e6c2b046fb4d24da32f2d685ea51449eaa377a3e57924ef721387b891f8c47
- home: https://github.com/longhorn/longhorn
- icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg?sanitize=true
- keywords:
- - longhorn
- - storage
- - distributed
- - block
- - device
- - iscsi
- kubeVersion: '>=v1.16.0-r0'
- maintainers:
- - email: maintainers@longhorn.io
- name: Longhorn maintainers
- - email: sheng@yasker.org
- name: Sheng Yang
- name: longhorn
- sources:
- - https://github.com/longhorn/longhorn
- - https://github.com/longhorn/longhorn-engine
- - https://github.com/longhorn/longhorn-instance-manager
- - https://github.com/longhorn/longhorn-share-manager
- - https://github.com/longhorn/longhorn-manager
- - https://github.com/longhorn/longhorn-ui
- - https://github.com/longhorn/longhorn-tests
- urls:
- - released/assets/longhorn/longhorn-1.1.001-rc00.tgz
- version: 1.1.001-rc00
- - annotations:
- catalog.cattle.io/auto-install: longhorn-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Longhorn
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
- catalog.cattle.io/release-name: longhorn
- catalog.cattle.io/ui-component: longhorn
- apiVersion: v1
- appVersion: v1.1.0
- created: "2021-01-15T00:11:30.464593-08:00"
- description: Longhorn is a distributed block storage system for Kubernetes.
- digest: 4d9c34af5cb6f983649c0da636853dcb363aa6aed1293bffb11ddfd04180d122
- home: https://github.com/longhorn/longhorn
- icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
- keywords:
- - longhorn
- - storage
- - distributed
- - block
- - device
- - iscsi
- kubeVersion: '>=v1.16.0-r0'
- maintainers:
- - email: maintainers@longhorn.io
- name: Longhorn maintainers
- - email: sheng@yasker.org
- name: Sheng Yang
- name: longhorn
- sources:
- - https://github.com/longhorn/longhorn
- - https://github.com/longhorn/longhorn-engine
- - https://github.com/longhorn/longhorn-instance-manager
- - https://github.com/longhorn/longhorn-share-manager
- - https://github.com/longhorn/longhorn-manager
- - https://github.com/longhorn/longhorn-ui
- - https://github.com/longhorn/longhorn-tests
- urls:
- - released/assets/longhorn/longhorn-1.1.000.tgz
- version: 1.1.000
- - annotations:
- catalog.cattle.io/auto-install: longhorn-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Longhorn
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
- catalog.cattle.io/release-name: longhorn
- catalog.cattle.io/ui-component: longhorn
- apiVersion: v1
- appVersion: v1.0.2
- created: "2021-01-15T00:11:30.463634-08:00"
- description: Longhorn is a distributed block storage system for Kubernetes.
- digest: b5e9f517ae4bf542afd3f9717ad0c81dd3a1a99361a19ce51effe40a4696f045
- home: https://github.com/longhorn/longhorn
- icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
- keywords:
- - longhorn
- - storage
- - distributed
- - block
- - device
- - iscsi
- kubeVersion: '>=v1.14.0-r0'
- maintainers:
- - email: maintainers@longhorn.io
- name: Longhorn maintainers
- - email: sheng@yasker.org
- name: Sheng Yang
- name: longhorn
- sources:
- - https://github.com/longhorn/longhorn
- - https://github.com/longhorn/longhorn-engine
- - https://github.com/longhorn/longhorn-instance-manager
- - https://github.com/longhorn/longhorn-manager
- - https://github.com/longhorn/longhorn-ui
- - https://github.com/longhorn/longhorn-tests
- urls:
- - released/assets/longhorn/longhorn-1.0.202.tgz
- version: 1.0.202
- - annotations:
- catalog.cattle.io/auto-install: longhorn-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Longhorn
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
- catalog.cattle.io/release-name: longhorn
- catalog.cattle.io/ui-component: longhorn
- apiVersion: v1
- appVersion: v1.0.2
- created: "2021-01-15T00:11:30.462831-08:00"
- description: Longhorn is a distributed block storage system for Kubernetes.
- digest: 8ab068f792fac6d4de81fdc6f66a7fa00c7d379e46d6715ee25c3c764f5b95f8
- home: https://github.com/longhorn/longhorn
- icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
- keywords:
- - longhorn
- - storage
- - distributed
- - block
- - device
- - iscsi
- kubeVersion: '>=v1.14.0-r0'
- maintainers:
- - email: maintainers@longhorn.io
- name: Longhorn maintainers
- - email: sheng@yasker.org
- name: Sheng Yang
- name: longhorn
- sources:
- - https://github.com/longhorn/longhorn
- - https://github.com/longhorn/longhorn-engine
- - https://github.com/longhorn/longhorn-instance-manager
- - https://github.com/longhorn/longhorn-manager
- - https://github.com/longhorn/longhorn-ui
- - https://github.com/longhorn/longhorn-tests
- urls:
- - released/assets/longhorn/longhorn-1.0.201.tgz
- version: 1.0.201
- - annotations:
- catalog.cattle.io/auto-install: longhorn-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
- catalog.cattle.io/release-name: longhorn
- catalog.cattle.io/ui-component: longhorn
- apiVersion: v1
- appVersion: v1.0.2
- created: "2021-01-15T00:11:30.461814-08:00"
- description: Longhorn is a distributed block storage system for Kubernetes.
- digest: 49b5b8341fdc7a39337f20edac1667d1a2f36b579f9cb7ecdc2ebf987e03df3f
- home: https://github.com/longhorn/longhorn
- icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
- keywords:
- - longhorn
- - storage
- - distributed
- - block
- - device
- - iscsi
- kubeVersion: '>=v1.14.0-r0'
- maintainers:
- - email: maintainers@longhorn.io
- name: Longhorn maintainers
- - email: sheng@yasker.org
- name: Sheng Yang
- name: longhorn
- sources:
- - https://github.com/longhorn/longhorn
- - https://github.com/longhorn/longhorn-engine
- - https://github.com/longhorn/longhorn-instance-manager
- - https://github.com/longhorn/longhorn-manager
- - https://github.com/longhorn/longhorn-ui
- - https://github.com/longhorn/longhorn-tests
- urls:
- - released/assets/longhorn/longhorn-1.0.200.tgz
- version: 1.0.200
- longhorn-crd:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/release-name: longhorn-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.62989-08:00"
- description: Installs the CRDs for longhorn.
- digest: 2dde1bf0c307ab4fddaa36f7fec5c42495e6cd2356605e6fbff816a33303fd4a
- name: longhorn-crd
- type: application
- urls:
- - released/assets/longhorn/longhorn-crd-1.1.001-rc01.tgz
- version: 1.1.001-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/release-name: longhorn-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.629703-08:00"
- description: Installs the CRDs for longhorn.
- digest: d5433891d9ca259d2eedb2d969adda94fe2e85b89dfa17e58785ef39a7ac0923
- name: longhorn-crd
- type: application
- urls:
- - released/assets/longhorn/longhorn-crd-1.1.001-rc00.tgz
- version: 1.1.001-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/release-name: longhorn-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.46526-08:00"
- description: Installs the CRDs for longhorn.
- digest: 2ca9ca1b7af582f9c0e89684e4624a4d4cfc1484ceee74f3cab9c22c7b4e823f
- name: longhorn-crd
- type: application
- urls:
- - released/assets/longhorn/longhorn-crd-1.1.000.tgz
- version: 1.1.000
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/release-name: longhorn-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.465077-08:00"
- description: Installs the CRDs for longhorn.
- digest: 585f1161f2d231cdfe9abc44c9f7ef257cc217f611a617be76b590a7f6a32350
- name: longhorn-crd
- type: application
- urls:
- - released/assets/longhorn/longhorn-crd-1.0.202.tgz
- version: 1.0.202
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/release-name: longhorn-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.464922-08:00"
- description: Installs the CRDs for longhorn.
- digest: 3b8908fb3dec0f0b70a7775a70fd3f1fc8cb1a4c1b72a7f564e6ccb3c11f94b1
- name: longhorn-crd
- type: application
- urls:
- - released/assets/longhorn/longhorn-crd-1.0.201.tgz
- version: 1.0.201
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: longhorn-system
- catalog.cattle.io/release-name: longhorn-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.464762-08:00"
- description: Installs the CRDs for longhorn.
- digest: 815331159012c16c6cd9816a10a38fcf03972d2f3a9f5fc97b8e0f87e937d10b
- name: longhorn-crd
- type: application
- urls:
- - released/assets/longhorn/longhorn-crd-1.0.200.tgz
- version: 1.0.200
- rancher-backup:
- - annotations:
- catalog.cattle.io/auto-install: rancher-backup-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Rancher Backups
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
- catalog.cattle.io/release-name: rancher-backup
- catalog.cattle.io/scope: management
- catalog.cattle.io/ui-component: rancher-backup
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-03-04T09:47:44.630746-08:00"
- description: Provides ability to back up and restore the Rancher application running
- on any Kubernetes cluster
- digest: 7d6296d4c459042bb7f85543691ba807ae03cda6d42db22fcdafd01dbf49edea
- icon: https://charts.rancher.io/assets/logos/backup-restore.svg
- keywords:
- - applications
- - infrastructure
- name: rancher-backup
- urls:
- - released/assets/rancher-backup/rancher-backup-1.0.301-rc01.tgz
- version: 1.0.301-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-backup-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Rancher Backups
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
- catalog.cattle.io/release-name: rancher-backup
- catalog.cattle.io/scope: management
- catalog.cattle.io/ui-component: rancher-backup
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-03-04T09:47:44.630323-08:00"
- description: Provides ability to back up and restore the Rancher application running
- on any Kubernetes cluster
- digest: 9f44f0901b03b9349242bc2b0e9cb6ec6b3e10f6583f605e3c3d8b87dc5f490c
- icon: https://charts.rancher.io/assets/logos/backup-restore.svg
- keywords:
- - applications
- - infrastructure
- name: rancher-backup
- urls:
- - released/assets/rancher-backup/rancher-backup-1.0.301-rc00.tgz
- version: 1.0.301-rc00
- - annotations:
- catalog.cattle.io/auto-install: rancher-backup-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Rancher Backups
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
- catalog.cattle.io/release-name: rancher-backup
- catalog.cattle.io/scope: management
- catalog.cattle.io/ui-component: rancher-backup
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-01-15T00:11:30.466548-08:00"
- description: Provides ability to back up and restore the Rancher application running
- on any Kubernetes cluster
- digest: 9fe775b7260bad706159af83c256b93662902bfef01cc071f3f3bb780d9e18bc
- icon: https://charts.rancher.io/assets/logos/backup-restore.svg
- keywords:
- - applications
- - infrastructure
- name: rancher-backup
- urls:
- - released/assets/rancher-backup/rancher-backup-1.0.300.tgz
- version: 1.0.300
- - annotations:
- catalog.cattle.io/auto-install: rancher-backup-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Rancher Backups
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
- catalog.cattle.io/release-name: rancher-backup
- catalog.cattle.io/scope: management
- catalog.cattle.io/ui-component: rancher-backup
- apiVersion: v1
- appVersion: v1.0.2
- created: "2021-01-15T00:11:30.466109-08:00"
- description: Provides ability to back up and restore the Rancher application running
- on any Kubernetes cluster
- digest: 931b45edda48b555f6c5c1179776787b615129f92026658100104e8f9a9012c5
- icon: https://charts.rancher.io/assets/logos/backup-restore.svg
- keywords:
- - applications
- - infrastructure
- name: rancher-backup
- urls:
- - released/assets/rancher-backup/rancher-backup-1.0.201.tgz
- version: 1.0.201
- - annotations:
- catalog.cattle.io/auto-install: rancher-backup-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
- catalog.cattle.io/release-name: rancher-backup
- catalog.cattle.io/scope: management
- catalog.cattle.io/ui-component: rancher-backup
- apiVersion: v1
- appVersion: v1.0.2
- created: "2021-01-15T00:11:30.465667-08:00"
- description: Provides ability to back up and restore the Rancher application running
- on any Kubernetes cluster
- digest: 8c5375832bcb54fb3bc4d708ca22248e381bf1fcde8013a48a0b37d9a60e2375
- icon: https://charts.rancher.io/assets/logos/backup-restore.svg
- keywords:
- - applications
- - infrastructure
- name: rancher-backup
- urls:
- - released/assets/rancher-backup/rancher-backup-1.0.200.tgz
- version: 1.0.200
- rancher-backup-crd:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/release-name: rancher-backup-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.631124-08:00"
- description: Installs the CRDs for rancher-backup.
- digest: bfc3f4d5d64a7989eec4d518c36276acdc21f5fbb98ace02a80678d5caf390d5
- name: rancher-backup-crd
- type: application
- urls:
- - released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc01.tgz
- version: 1.0.301-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/release-name: rancher-backup-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.630938-08:00"
- description: Installs the CRDs for rancher-backup.
- digest: 472492587c7403c45544ee70a9cdaa6c20afe8367415e35aa934f048a7071eba
- name: rancher-backup-crd
- type: application
- urls:
- - released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc00.tgz
- version: 1.0.301-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/release-name: rancher-backup-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.467126-08:00"
- description: Installs the CRDs for rancher-backup.
- digest: 8d6e14dccabb8477c1e27b3bfbab4f8751252d492152a2ac2640bbbb3ec6d4c4
- name: rancher-backup-crd
- type: application
- urls:
- - released/assets/rancher-backup/rancher-backup-crd-1.0.300.tgz
- version: 1.0.300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/release-name: rancher-backup-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.466935-08:00"
- description: Installs the CRDs for rancher-backup.
- digest: ebf8da7907c5fce5f9dccf4c3fa540f76c296955cd466a15f3f88b41b8f7d3dd
- name: rancher-backup-crd
- type: application
- urls:
- - released/assets/rancher-backup/rancher-backup-crd-1.0.201.tgz
- version: 1.0.201
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-resources-system
- catalog.cattle.io/release-name: rancher-backup-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.46675-08:00"
- description: Installs the CRDs for rancher-backup.
- digest: 7021563a39672f11d7af57f1769da179d3f059d5f2fe9e72c6a1a486a52eed73
- name: rancher-backup-crd
- type: application
- urls:
- - released/assets/rancher-backup/rancher-backup-crd-1.0.200.tgz
- version: 1.0.200
- rancher-cis-benchmark:
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: CIS Benchmark
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-03-04T09:47:44.632119-08:00"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: 5e389e57302f2f4ee674490e0ca7dcd4d78b2afd0f038d840dac974b77d66ede
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc01.tgz
- version: 1.0.301-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: CIS Benchmark
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-03-04T09:47:44.631629-08:00"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: 6fec0634cd92f79fa192e7860fd99babb104e0350a9007a9923e8439b761ff08
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc00.tgz
- version: 1.0.301-rc00
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: CIS Benchmark
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.3
- created: "2021-01-15T00:11:30.468452-08:00"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: af499c4fbd67e594057e97ac025011c52f0e02d6f7571532b7f5a2b19ed19035
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.300.tgz
- version: 1.0.300
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: CIS Benchmark
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.2
- created: "2021-01-15T00:11:30.46796-08:00"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: b234bbf851d0c5bf1cb02e51ea647d95d53e9f2302b1e68518eadb694f345a1c
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.200.tgz
- version: 1.0.200
- - annotations:
- catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
- catalog.cattle.io/release-name: rancher-cis-benchmark
- catalog.cattle.io/ui-component: rancher-cis-benchmark
- apiVersion: v1
- appVersion: v1.0.1
- created: "2021-01-15T00:11:30.46754-08:00"
- description: The cis-operator enables running CIS benchmark security scans on
- a kubernetes cluster
- digest: 0d4ff5981f5ee48fca8a887ab0608888f85f97285175c46d7320c6987f167d4f
- icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
- keywords:
- - security
- name: rancher-cis-benchmark
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz
- version: 1.0.100
- rancher-cis-benchmark-crd:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.632511-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: 2fa5d4eb62b76871efccfcdc5c0d4125b1bccc0e2bb498732938ba23ed3bd8fb
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc01.tgz
- version: 1.0.301-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.632321-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: 1f210946fe8e6b3b2b656ea6488536fb942f4ab8202ad6cf265a211e792260b4
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc00.tgz
- version: 1.0.301-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.469354-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: 4a4fbd34ab72796c4780acb6ad99de5dad5f5f54edbd9dad281fc886c3a8b184
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.300.tgz
- version: 1.0.300
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.468842-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: 1da104dc221a9772a21e67ef787919cc191d6df3ccdf019f464e3091d6ed0703
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.200.tgz
- version: 1.0.200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cis-operator-system
- catalog.cattle.io/release-name: rancher-cis-benchmark-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.468647-08:00"
- description: Installs the CRDs for rancher-cis-benchmark.
- digest: cc33de77923232bda5875b6568522cffe8950e2d9bb3793ee30978c5257f4354
- name: rancher-cis-benchmark-crd
- type: application
- urls:
- - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.100.tgz
- version: 1.0.100
- rancher-external-ip-webhook:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: External IP Webhook
- catalog.cattle.io/namespace: cattle-externalip-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-external-ip-webhook
- catalog.cattle.io/ui-component: rancher-external-ip-webhook
- apiVersion: v1
- appVersion: v0.1.6
- created: "2021-03-04T09:47:44.633755-08:00"
- description: |
- Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: 7a196d304a2bad5e585fae961188861da5bb84679e576b6882ebf3fd6640137e
- home: https://github.com/rancher/externalip-webhook
- keywords:
- - cve
- - externalip
- - webhook
- - security
- maintainers:
- - email: raul@rancher.com
- name: rawmind0
- name: rancher-external-ip-webhook
- sources:
- - https://github.com/rancher/externalip-webhook
- urls:
- - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc01.tgz
- version: 0.1.601-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: External IP Webhook
- catalog.cattle.io/namespace: cattle-externalip-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-external-ip-webhook
- catalog.cattle.io/ui-component: rancher-external-ip-webhook
- apiVersion: v1
- appVersion: v0.1.6
- created: "2021-03-04T09:47:44.633141-08:00"
- description: |
- Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: 6294a812fd938166bfb8f0f9d84d3eeb47f9387040d74837ff0127b89e1850de
- home: https://github.com/rancher/externalip-webhook
- keywords:
- - cve
- - externalip
- - webhook
- - security
- maintainers:
- - email: raul@rancher.com
- name: rawmind0
- name: rancher-external-ip-webhook
- sources:
- - https://github.com/rancher/externalip-webhook
- urls:
- - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc00.tgz
- version: 0.1.601-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: External IP Webhook
- catalog.cattle.io/namespace: cattle-externalip-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-external-ip-webhook
- catalog.cattle.io/ui-component: rancher-external-ip-webhook
- apiVersion: v1
- appVersion: v0.1.6
- created: "2021-01-15T00:11:30.471579-08:00"
- description: |
- Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: 70c430a933e17279605936c73b17cbd192f7f86da0573d6c2a6dbdf745a5c7af
- home: https://github.com/rancher/externalip-webhook
- keywords:
- - cve
- - externalip
- - webhook
- - security
- maintainers:
- - email: raul@rancher.com
- name: rawmind0
- name: rancher-external-ip-webhook
- sources:
- - https://github.com/rancher/externalip-webhook
- urls:
- - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.600.tgz
- version: 0.1.600
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: External IP Webhook
- catalog.cattle.io/namespace: cattle-externalip-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-external-ip-webhook
- catalog.cattle.io/ui-component: rancher-external-ip-webhook
- apiVersion: v1
- appVersion: v0.1.5
- created: "2021-01-15T00:11:30.47095-08:00"
- description: |
- Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: a272ec4ad785095ed827d087b8976c7f327e1f28a6ab0cdb7a839580487c40fb
- home: https://github.com/rancher/externalip-webhook
- keywords:
- - cve
- - externalip
- - webhook
- - security
- maintainers:
- - email: raul@rancher.com
- name: rawmind0
- name: rancher-external-ip-webhook
- sources:
- - https://github.com/rancher/externalip-webhook
- urls:
- - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.500.tgz
- version: 0.1.500
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: External IP Webhook
- catalog.cattle.io/namespace: cattle-externalip-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-external-ip-webhook
- catalog.cattle.io/ui-component: rancher-external-ip-webhook
- apiVersion: v1
- appVersion: v0.1.4
- created: "2021-01-15T00:11:30.47031-08:00"
- description: |
- Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
- digest: 207982df2b8b709b2ac2c9bc9ccda6955bebc6c7866e3531391e7905eafb154e
- home: https://github.com/rancher/externalip-webhook
- keywords:
- - cve
- - externalip
- - webhook
- - security
- maintainers:
- - email: raul@rancher.com
- name: rawmind0
- name: rancher-external-ip-webhook
- sources:
- - https://github.com/rancher/externalip-webhook
- urls:
- - released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.400.tgz
- version: 0.1.400
- rancher-gatekeeper:
- - annotations:
- catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: OPA Gatekeeper
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
- catalog.cattle.io/release-name: rancher-gatekeeper
- catalog.cattle.io/ui-component: gatekeeper
- apiVersion: v1
- appVersion: v3.3.0
- created: "2021-03-04T09:47:44.635421-08:00"
- description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
- policy-based control for cloud native environments
- digest: f912c6f2f214dca2e07810c0ca88904c58909f392e10cdf8a9c43dcafaf4de46
- home: https://github.com/open-policy-agent/gatekeeper
- icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
- keywords:
- - open policy agent
- - security
- name: rancher-gatekeeper
- sources:
- - https://github.com/open-policy-agent/gatekeeper.git
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc02.tgz
- version: 3.3.000-rc02
- - annotations:
- catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: OPA Gatekeeper
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
- catalog.cattle.io/release-name: rancher-gatekeeper
- catalog.cattle.io/ui-component: gatekeeper
- apiVersion: v1
- appVersion: v3.3.0
- created: "2021-03-04T09:47:44.634782-08:00"
- description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
- policy-based control for cloud native environments
- digest: 9b6b061a749d2fd7d112753db206e27f472dda6d597fe7f5baea7bf37dcacec2
- home: https://github.com/open-policy-agent/gatekeeper
- icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
- keywords:
- - open policy agent
- - security
- name: rancher-gatekeeper
- sources:
- - https://github.com/open-policy-agent/gatekeeper.git
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc01.tgz
- version: 3.3.000-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: OPA Gatekeeper
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
- catalog.cattle.io/release-name: rancher-gatekeeper
- catalog.cattle.io/ui-component: gatekeeper
- apiVersion: v1
- appVersion: v3.2.1
- created: "2021-01-15T00:11:30.47384-08:00"
- description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
- policy-based control for cloud native environments
- digest: f6da9f05a9bf5ffbe59780c578624db93979d6e3c4b3d69e90e5090007aec52d
- home: https://github.com/open-policy-agent/gatekeeper
- icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
- keywords:
- - open policy agent
- - security
- name: rancher-gatekeeper
- sources:
- - https://github.com/open-policy-agent/gatekeeper.git
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.101.tgz
- version: 3.2.101
- - annotations:
- catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: OPA Gatekeeper
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
- catalog.cattle.io/release-name: rancher-gatekeeper
- catalog.cattle.io/ui-component: gatekeeper
- apiVersion: v1
- appVersion: v3.2.1
- created: "2021-01-15T00:11:30.473251-08:00"
- description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
- policy-based control for cloud native environments
- digest: 42a1e00cad97b74471506ba628366e005657b71fa38808c438faf239b082bb38
- home: https://github.com/open-policy-agent/gatekeeper
- icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
- keywords:
- - open policy agent
- - security
- name: rancher-gatekeeper
- sources:
- - https://github.com/open-policy-agent/gatekeeper.git
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.100.tgz
- version: 3.2.100
- - annotations:
- catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: OPA Gatekeeper
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
- catalog.cattle.io/release-name: rancher-gatekeeper
- apiVersion: v1
- appVersion: v3.1.1
- created: "2021-01-15T00:11:30.472662-08:00"
- description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
- policy-based control for cloud native environments
- digest: 8fdc03791c93b6d6f6d81edf27988c5a31c3c5bc113da8d8520ec534af087393
- home: https://github.com/open-policy-agent/gatekeeper
- icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
- keywords:
- - open policy agent
- - security
- name: rancher-gatekeeper
- sources:
- - https://github.com/open-policy-agent/gatekeeper.git
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.101.tgz
- version: 3.1.101
- - annotations:
- catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
- catalog.cattle.io/release-name: rancher-gatekeeper
- apiVersion: v1
- appVersion: v3.1.1
- created: "2021-01-15T00:11:30.472104-08:00"
- description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
- policy-based control for cloud native environments
- digest: 5c0c935a6935ce109015e1b86bb4f435c0fe1aad7ee2ad858e01bae57c3425c1
- home: https://github.com/open-policy-agent/gatekeeper
- icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
- keywords:
- - open policy agent
- - security
- name: rancher-gatekeeper
- sources:
- - https://github.com/open-policy-agent/gatekeeper.git
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.100.tgz
- version: 3.1.100
- rancher-gatekeeper-crd:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/release-name: rancher-gatekeeper-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.63649-08:00"
- description: Installs the CRDs for rancher-gatekeeper.
- digest: 03e26e336f2b82b0c09b1191e7cd6cebf5e3c5de46666307e9426e78ef487c18
- name: rancher-gatekeeper-crd
- type: application
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc02.tgz
- version: 3.3.000-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/release-name: rancher-gatekeeper-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.636192-08:00"
- description: Installs the CRDs for rancher-gatekeeper.
- digest: ad678c2f7b1bf62c2d3f102847e2bf0920e6e41a6919dce6039385c6e70a8c52
- name: rancher-gatekeeper-crd
- type: application
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc01.tgz
- version: 3.3.000-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/release-name: rancher-gatekeeper-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.474788-08:00"
- description: Installs the CRDs for rancher-gatekeeper.
- digest: 1118f66a1f8f8c192bb1793bcddb0b98af0db43b429df684b916c2e76b51486a
- name: rancher-gatekeeper-crd
- type: application
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.101.tgz
- version: 3.2.101
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/release-name: rancher-gatekeeper-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.474498-08:00"
- description: Installs the CRDs for rancher-gatekeeper.
- digest: 4900e53e49c6bdca47af9b37b3d7a7dfe4e16da027a3aaea69f4a211c5ced3c1
- name: rancher-gatekeeper-crd
- type: application
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.100.tgz
- version: 3.2.100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/release-name: rancher-gatekeeper-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.474283-08:00"
- description: Installs the CRDs for rancher-gatekeeper.
- digest: 25beb2fd49cefa59dfcee5e7a24866eb148ab264ee4c49f368589d3e92d7e269
- name: rancher-gatekeeper-crd
- type: application
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.101.tgz
- version: 3.1.101
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-gatekeeper-system
- catalog.cattle.io/release-name: rancher-gatekeeper-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.474068-08:00"
- description: Installs the CRDs for rancher-gatekeeper.
- digest: ea6fca92a928c90b9539825af19f69378a608e189fcd0f06043b1213bb94cdaf
- name: rancher-gatekeeper-crd
- type: application
- urls:
- - released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.100.tgz
- version: 3.1.100
- rancher-istio:
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.000-rc00
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/requests-cpu: 710m
- catalog.cattle.io/requests-memory: 2314Mi
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.8.3
- created: "2021-03-04T09:47:44.640129-08:00"
- dependencies:
- - condition: kiali.enabled
- name: kiali
- repository: file://./charts/kiali
- - condition: tracing.enabled
- name: tracing
- repository: file://./charts/tracing
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: fae8a77f05769320ce080c28656d5340be16b2fc1997702b444735623e8414c8
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.8.300-rc01.tgz
- version: 1.8.300-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.000-rc00
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/requests-cpu: 710m
- catalog.cattle.io/requests-memory: 2314Mi
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.8.3
- created: "2021-03-04T09:47:44.638495-08:00"
- dependencies:
- - condition: kiali.enabled
- name: kiali
- repository: file://./charts/kiali
- - condition: tracing.enabled
- name: tracing
- repository: file://./charts/tracing
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: e91424e345f8a654658f3f6a2f513aced8b3d65d86b4cda93fe5b4f7e3dbaabe
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.8.300-rc00.tgz
- version: 1.8.300-rc00
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.24.003
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.7.6
- created: "2021-01-15T00:11:30.48261-08:00"
- dependencies:
- - alias: kiali
- condition: kiali.enabled
- name: rancher-kiali-server
- repository: file://../../rancher-kiali-server/charts
- version: 1.24.0
- - alias: tracing
- condition: tracing.enabled
- name: rancher-tracing
- repository: file://../../rancher-tracing/charts
- version: 1.20.001
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: a3a4d39833cb8065099654aac034c344f531c5b0b164a0d1c96bea541d72e5bf
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.7.600.tgz
- version: 1.7.600
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.24.003
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.7.3
- created: "2021-01-15T00:11:30.481016-08:00"
- dependencies:
- - alias: kiali
- condition: kiali.enabled
- name: rancher-kiali-server
- repository: file://../../rancher-kiali-server/charts
- version: 1.24.0
- - alias: tracing
- condition: tracing.enabled
- name: rancher-tracing
- repository: file://../../rancher-tracing/charts
- version: 1.20.001
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: 3f32923202198fc41c607b179d194d4b579d790246e0959bf41b82a407bf1786
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.7.301.tgz
- version: 1.7.301
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.24.001
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Istio
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.7.3
- created: "2021-01-15T00:11:30.479382-08:00"
- dependencies:
- - alias: kiali
- condition: kiali.enabled
- name: rancher-kiali-server
- repository: file://../../rancher-kiali-server/charts
- version: 1.24.0
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: 723e0ffa6ab03dde307bcb2848095b91f49d33eae05a4b29c26fe3e4066fc30c
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.7.300.tgz
- version: 1.7.300
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.23.002
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.7.1
- created: "2021-01-15T00:11:30.478046-08:00"
- dependencies:
- - alias: kiali
- condition: kiali.enabled
- name: rancher-kiali-server
- repository: file://../../rancher-kiali-server/charts
- version: 1.23.0
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: 2aa1870dabf3548c4ef52dde4515ca6b1478d75e052b8154555c43931829250b
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.7.101.tgz
- version: 1.7.101
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.23.001
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/namespace: istio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1
- catalog.cattle.io/release-name: rancher-istio
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/ui-component: istio
- apiVersion: v1
- appVersion: 1.7.1
- created: "2021-01-15T00:11:30.476142-08:00"
- dependencies:
- - alias: kiali
- condition: kiali.enabled
- name: rancher-kiali-server
- repository: file://../../rancher-kiali-server/charts
- version: 1.23.0
- description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
- for details.
- digest: a6a23976155b1c3375406c00b49c354238aa6b837f3b19bbf360279cef59f9ef
- icon: https://charts.rancher.io/assets/logos/istio.svg
- keywords:
- - networking
- - infrastructure
- name: rancher-istio
- urls:
- - released/assets/rancher-istio/rancher-istio-1.7.100.tgz
- version: 1.7.100
- rancher-kiali-server:
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.29.0
- created: "2021-03-04T09:47:44.64267-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: a3f8ceb754dba642cbd5fe638858e7ed18c56b2befc6284107cae9fc1a58dd1d
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc01.tgz
- version: 1.29.000-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.29.0
- created: "2021-03-04T09:47:44.641862-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: 280bd0454a03a112e544ecacd5a06b793a627198fa06cf6a6fcea261fc6d9f4c
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc00.tgz
- version: 1.29.000-rc00
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.24.0
- created: "2021-01-15T00:11:30.487114-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: c8a46b8e964f50e93e4add0c0192743339355950862f49b0d2b0131c9c2acd88
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.24.003.tgz
- version: 1.24.003
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.24.0
- created: "2021-01-15T00:11:30.48568-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: be2dd749ebeac4690827fdfac5b986d35ca3e9f9d1e9536ab093bb83da17d130
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.24.002.tgz
- version: 1.24.002
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.24.0
- created: "2021-01-15T00:11:30.484905-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: 5908c10ba62b92ba0f703ce91c2d0442f8e707622cdd7401cadf7cbbe523eb75
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.24.001.tgz
- version: 1.24.001
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.23.0
- created: "2021-01-15T00:11:30.48414-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: 57b9db10136f85d6ca7325e69d6d62ae256293620c2654d5478609e1d78da472
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.23.002.tgz
- version: 1.23.002
- - annotations:
- catalog.cattle.io/auto-install: rancher-kiali-server-crd=match
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1
- catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1
- catalog.rancher.io/namespace: cattle-istio-system
- catalog.rancher.io/release-name: rancher-kiali-server
- apiVersion: v2
- appVersion: v1.23.0
- created: "2021-01-15T00:11:30.483373-08:00"
- description: Kiali is an open source project for service mesh observability, refer
- to https://www.kiali.io for details. This is installed as sub-chart with customized
- values in Rancher's Istio.
- digest: 369f3f444dc357b6f3e574daf63103d556757ee30c9413fa0c1588f1432d899d
- home: https://github.com/kiali/kiali
- icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png
- keywords:
- - istio
- - kiali
- - networking
- - infrastructure
- maintainers:
- - email: kiali-users@googlegroups.com
- name: Kiali
- url: https://kiali.io
- name: rancher-kiali-server
- sources:
- - https://github.com/kiali/kiali
- - https://github.com/kiali/kiali-ui
- - https://github.com/kiali/kiali-operator
- - https://github.com/kiali/helm-charts
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-1.23.001.tgz
- version: 1.23.001
- rancher-kiali-server-crd:
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-03-04T09:47:44.642973-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: ebe2573bff65881bb5ac4442c1eb88648c942f9bb2340d6c409ac74d467f96b1
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc01.tgz
- version: 1.29.000-rc01
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-03-04T09:47:44.642836-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: 07d01d30e02215be110edd55afa1a9e52b3de9592b24151f6450d5f17139e81c
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc00.tgz
- version: 1.29.000-rc00
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-01-15T00:11:30.487854-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: 01aafd54277c2c010d382a92177391abe11c894ac5cdac331699518ba5616a0d
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.003.tgz
- version: 1.24.003
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-01-15T00:11:30.487714-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: d22c5d81a57cf38e56db65a9809167b16688cff39c226f209a8f8c2b616267cd
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.002.tgz
- version: 1.24.002
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-01-15T00:11:30.487574-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: d142e5634dafacd4ade2d93460b2926577ff87e4ba4a1100c1f280e22b8100fd
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.001.tgz
- version: 1.24.001
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-01-15T00:11:30.487426-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: 2100f0710b74ff80aafb679d626c44033ac77dbc9a050a56f3bb07ad35ac9cb3
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.002.tgz
- version: 1.23.002
- - annotations:
- catalog.cattle.io/hidden: "true"
- apiVersion: v2
- created: "2021-01-15T00:11:30.487274-08:00"
- description: Installs the CRDs for rancher-kiali-server.
- digest: e78efc9f5d5e5943b851678c563f445128927c4d5608d40ec233944baeee1bf6
- name: rancher-kiali-server-crd
- type: application
- urls:
- - released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.001.tgz
- version: 1.23.001
- rancher-logging:
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.651567-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: e5b5de6aaea6c3a4f3fd60b6045beafdd3e3db3a72278410110faadb8c6e9fd5
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc08.tgz
- version: 3.9.000-rc08
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.650777-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 7e1d1f0e60e7695db920d8960ae4f50f12b2763584c7ae03c5cbf27248490c24
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc07.tgz
- version: 3.9.000-rc07
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.649982-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 90596ebd741c5bd712796d8dd07954663e76e41adad3c8f5177176414d355492
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc06.tgz
- version: 3.9.000-rc06
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.649187-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 261ac9ff48b610df1c610904cb7ff999a619fdcb23620cf90c094adb0e0a1f2e
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc05.tgz
- version: 3.9.000-rc05
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.648322-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 0e2f0b1f53b4e81488ffdd41bb68693e332bf7eaf29488b310f5b7368858c603
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc04.tgz
- version: 3.9.000-rc04
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.647412-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 7f35d0af785c25d20003daf0d0b78a2e72e5b6a9f5e727757ee753c84260ba78
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc03.tgz
- version: 3.9.000-rc03
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.646618-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 9654d484b60c1aa9f999791a83ddc5068ec69b0e3becd61b4198e243be7957af
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc02.tgz
- version: 3.9.000-rc02
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.644918-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 460e6154256f66ea1e91d41a16195aa5c5c16123bf9b3895c2186a8ec69b80f5
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc01.tgz
- version: 3.9.000-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.9.0
- created: "2021-03-04T09:47:44.644077-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 8950865836a669a9190792174befffb50ed1bf9b41be2831d63624ff385cf0f7
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.9.000-rc00.tgz
- version: 3.9.000-rc00
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.8.2
- created: "2021-01-15T00:11:30.4918-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: a27ce10fdf883d5378255e99eddd7a7d5a3a9f6a9b00208ea182d27b98124932
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.8.201.tgz
- version: 3.8.201
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.8.0
- created: "2021-01-15T00:11:30.491025-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: c643abc8d8fa9a6e86de5aa7f31de1aa427cbc1dbe12854696126f264ab45c5f
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.8.001.tgz
- version: 3.8.001
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.7.3
- created: "2021-01-15T00:11:30.490244-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 825b35e6c8d6e5cb58cc27a83057dcf4b941c1cf9f1685ba8de9a581c50167b4
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.7.301.tgz
- version: 3.7.301
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Logging
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.6.0
- created: "2021-01-15T00:11:30.489493-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: d759335422822364d842d5b3320eb5984df94ed0aad16e4d33e52c193fa82a7d
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.6.001.tgz
- version: 3.6.001
- - annotations:
- catalog.cattle.io/auto-install: rancher-logging-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: logging.banzaicloud.io.clusterflow/v1beta1
- catalog.cattle.io/release-name: rancher-logging
- catalog.cattle.io/ui-component: logging
- apiVersion: v1
- appVersion: 3.6.0
- created: "2021-01-15T00:11:30.488715-08:00"
- description: Collects and filter logs using highly configurable CRDs. Powered
- by Banzai Cloud Logging Operator.
- digest: 8b20ad589d1cf3e21b0235db0e93d6556aea4b94649a37f97544c65f55839ad2
- icon: https://charts.rancher.io/assets/logos/logging.svg
- keywords:
- - logging
- - monitoring
- - security
- name: rancher-logging
- urls:
- - released/assets/rancher-logging/rancher-logging-3.6.000.tgz
- version: 3.6.000
- rancher-logging-crd:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.66364-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 352a9b536b5ba239f601ab34c1eff9d270d94f7f56f56f954dd1373f51345729
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc08.tgz
- version: 3.9.000-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.661936-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 1e60f77e39411099e3014c8b7549d14597c0d46c0d57389c9208c90e38c23608
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc07.tgz
- version: 3.9.000-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.660939-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: c8bec736459bb23bbc1359c54181aa12671908bc67258332843b812527130441
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc06.tgz
- version: 3.9.000-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.659928-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: b18dfb6108edf77d1611c6280fd6d781d35a3087096472ec138816d85636d098
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc05.tgz
- version: 3.9.000-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.658395-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 4dd87f71a05a2412fd2b4766d9ef9c7fb644f117d2dd19b7e39784b2748ff3b7
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc04.tgz
- version: 3.9.000-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.657406-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: fed2e3420bb9e53c2324fff2c8ba0514f3fcaac55b6b92f66b4423b89101172d
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc03.tgz
- version: 3.9.000-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.655438-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: be0b8e51b55a6cf501af15dc549a5c38cf017ad3a473cea04fc020519ba7f844
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc02.tgz
- version: 3.9.000-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.654197-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: b800deea73ac1792fba30d8d8e1bdfd1c3ab44351a4c60a765e1f2af39ca284e
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc01.tgz
- version: 3.9.000-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.653099-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: a2dc007bfb58a8725d054ab1adaaafa72b57680ae8f1e363aaa095970a27f040
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc00.tgz
- version: 3.9.000-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.497347-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 9a8baaed2f02e43b7eacb4c3cbcd6a33f84645b0d0b24f6f73867871dd41db23
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.8.201.tgz
- version: 3.8.201
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.49633-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 92eca9fef67bad369b311b07974a05d156546104119f6864ff9c46decb966909
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.8.001.tgz
- version: 3.8.001
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.494828-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 7f85f6ac9eabecaa9cf6e56cd3772b0d604afccc16411b3a61c02ef437ff7c1e
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.7.301.tgz
- version: 3.7.301
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.493957-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: e75790f7d4fc054e757526a2944475a6ff427f6d7b6726ade7a0db28c7fbc986
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.6.001.tgz
- version: 3.6.001
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-logging-system
- catalog.cattle.io/release-name: rancher-logging-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.493121-08:00"
- description: Installs the CRDs for rancher-logging.
- digest: 4947e5272f4f4f9f227691aa35c8c1bef980fbdde725bac1c358c6fe7229932e
- name: rancher-logging-crd
- type: application
- urls:
- - released/assets/rancher-logging/rancher-logging-crd-3.6.000.tgz
- version: 3.6.000
- rancher-monitoring:
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:44.761426-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 92fe184bf72dc5b21d907a158b4e725f4f688d627e5b63448cd47f5e2ef119e0
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc04.tgz
- version: 9.4.203-rc04
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:44.737787-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 748ab12856c906c69fd6ec1a66369d790fbb53d8e54763cc737f4e0fb6d07998
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc03.tgz
- version: 9.4.203-rc03
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:44.715461-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: b452563b7f643a0b2e48720bc7b0d597e32d2c89764e897e896caac4c7b79154
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc02.tgz
- version: 9.4.203-rc02
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/requests-cpu: 4500m
- catalog.cattle.io/requests-memory: 4000Mi
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:44.697677-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 381a6a4c07867f5a4a737b49ac1c919ca62d72797054b7bdeeb0f9906acfaa93
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc01.tgz
- version: 9.4.203-rc01
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-03-04T09:47:44.680529-08:00"
- dependencies:
- - condition: grafana.enabled
- name: grafana
- repository: file://./charts/grafana
- - condition: k3sServer.enabled
- name: k3sServer
- repository: file://./charts/k3sServer
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: file://./charts/kube-state-metrics
- - condition: kubeAdmControllerManager.enabled
- name: kubeAdmControllerManager
- repository: file://./charts/kubeAdmControllerManager
- - condition: kubeAdmEtcd.enabled
- name: kubeAdmEtcd
- repository: file://./charts/kubeAdmEtcd
- - condition: kubeAdmProxy.enabled
- name: kubeAdmProxy
- repository: file://./charts/kubeAdmProxy
- - condition: kubeAdmScheduler.enabled
- name: kubeAdmScheduler
- repository: file://./charts/kubeAdmScheduler
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: file://./charts/prometheus-adapter
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: file://./charts/prometheus-node-exporter
- - condition: rke2ControllerManager.enabled
- name: rke2ControllerManager
- repository: file://./charts/rke2ControllerManager
- - condition: rke2Etcd.enabled
- name: rke2Etcd
- repository: file://./charts/rke2Etcd
- - condition: rke2Proxy.enabled
- name: rke2Proxy
- repository: file://./charts/rke2Proxy
- - condition: rke2Scheduler.enabled
- name: rke2Scheduler
- repository: file://./charts/rke2Scheduler
- - condition: rkeControllerManager.enabled
- name: rkeControllerManager
- repository: file://./charts/rkeControllerManager
- - condition: rkeEtcd.enabled
- name: rkeEtcd
- repository: file://./charts/rkeEtcd
- - condition: rkeProxy.enabled
- name: rkeProxy
- repository: file://./charts/rkeProxy
- - condition: rkeScheduler.enabled
- name: rkeScheduler
- repository: file://./charts/rkeScheduler
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 790ea3458c6170db492639981aeca7376b6b825eab4c623646a721f6405f3440
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- - email: arvind.iyengar@suse.com
- name: Arvind
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc00.tgz
- version: 9.4.203-rc00
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-01-15T00:11:30.543558-08:00"
- dependencies:
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: https://charts.helm.sh/stable/
- version: 2.8.14
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: https://prometheus-community.github.io/helm-charts
- version: 1.11.2
- - condition: grafana.enabled
- name: grafana
- repository: https://grafana.github.io/helm-charts
- version: 5.6.4
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: https://prometheus-community.github.io/helm-charts
- version: 2.7.1
- - alias: rkeControllerManager
- condition: rkeControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: rkeScheduler
- condition: rkeScheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: rkeProxy
- condition: rkeProxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: rkeEtcd
- condition: rkeEtcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: k3sServer
- condition: k3sServer.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: kubeAdmControllerManager
- condition: kubeAdmControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: kubeAdmScheduler
- condition: kubeAdmScheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: kubeAdmProxy
- condition: kubeAdmProxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: kubeAdmEtcd
- condition: kubeAdmEtcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: rke2ControllerManager
- condition: rke2ControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: rke2Scheduler
- condition: rke2Scheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: rke2Proxy
- condition: rke2Proxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- - alias: rke2Etcd
- condition: rke2Etcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.2
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 7e211720b3d489c00426788abec352bc4561dd30c5c502112787a212100c46e7
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.202.tgz
- version: 9.4.202
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Monitoring
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-01-15T00:11:30.528456-08:00"
- dependencies:
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: https://kubernetes-charts.storage.googleapis.com/
- version: 2.8.14
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: https://prometheus-community.github.io/helm-charts
- version: 1.11.2
- - condition: grafana.enabled
- name: grafana
- repository: https://grafana.github.io/helm-charts
- version: 5.6.4
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: https://kubernetes-charts.storage.googleapis.com/
- version: 2.4.0
- - alias: rkeControllerManager
- condition: rkeControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: rkeScheduler
- condition: rkeScheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: rkeProxy
- condition: rkeProxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: rkeEtcd
- condition: rkeEtcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: k3sServer
- condition: k3sServer.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: kubeAdmControllerManager
- condition: kubeAdmControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: kubeAdmScheduler
- condition: kubeAdmScheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: kubeAdmProxy
- condition: kubeAdmProxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: kubeAdmEtcd
- condition: kubeAdmEtcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: rke2ControllerManager
- condition: rke2ControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: rke2Scheduler
- condition: rke2Scheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: rke2Proxy
- condition: rke2Proxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- - alias: rke2Etcd
- condition: rke2Etcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.1
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: 5b5adac2304f7f7cd7761a269a038b178cc34c48d098829c66e880fa8b4c31a7
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.201.tgz
- version: 9.4.201
- - annotations:
- artifacthub.io/links: |
- - name: Chart Source
- url: https://github.com/prometheus-community/helm-charts
- - name: Upstream Project
- url: https://github.com/prometheus-operator/kube-prometheus
- artifacthub.io/operator: "true"
- catalog.cattle.io/auto-install: rancher-monitoring-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: monitoring.coreos.com.prometheus/v1
- catalog.cattle.io/release-name: rancher-monitoring
- catalog.cattle.io/ui-component: monitoring
- apiVersion: v1
- appVersion: 0.38.1
- created: "2021-01-15T00:11:30.512591-08:00"
- dependencies:
- - condition: kubeStateMetrics.enabled
- name: kube-state-metrics
- repository: https://kubernetes-charts.storage.googleapis.com/
- version: 2.8.14
- - condition: nodeExporter.enabled
- name: prometheus-node-exporter
- repository: https://prometheus-community.github.io/helm-charts
- version: 1.11.2
- - condition: grafana.enabled
- name: grafana
- repository: https://grafana.github.io/helm-charts
- version: 5.6.4
- - condition: prometheus-adapter.enabled
- name: prometheus-adapter
- repository: https://kubernetes-charts.storage.googleapis.com/
- version: 2.4.0
- - alias: rkeControllerManager
- condition: rkeControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: rkeScheduler
- condition: rkeScheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: rkeProxy
- condition: rkeProxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: rkeEtcd
- condition: rkeEtcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: k3sControllerManager
- condition: k3sControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: k3sScheduler
- condition: k3sScheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: k3sProxy
- condition: k3sProxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: kubeAdmControllerManager
- condition: kubeAdmControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: kubeAdmScheduler
- condition: kubeAdmScheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: kubeAdmProxy
- condition: kubeAdmProxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: kubeAdmEtcd
- condition: kubeAdmEtcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: rke2ControllerManager
- condition: rke2ControllerManager.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: rke2Scheduler
- condition: rke2Scheduler.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: rke2Proxy
- condition: rke2Proxy.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- - alias: rke2Etcd
- condition: rke2Etcd.enabled
- name: rancher-pushprox
- repository: file://../../rancher-pushprox/charts
- version: 0.1.0
- description: Collects several related Helm charts, Grafana dashboards, and Prometheus
- rules combined with documentation and scripts to provide easy to operate end-to-end
- Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
- digest: a36daf9841b3cd516ed127170d4a9fc85d1d9d1bdfb52128d232803e5276a0b2
- home: https://github.com/prometheus-operator/kube-prometheus
- icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
- keywords:
- - operator
- - prometheus
- - kube-prometheus
- - monitoring
- maintainers:
- - name: vsliouniaev
- - name: bismarck
- - email: gianrubio@gmail.com
- name: gianrubio
- - email: github.gkarthiks@gmail.com
- name: gkarthiks
- - email: scott@r6by.com
- name: scottrigby
- - email: miroslav.hadzhiev@gmail.com
- name: Xtigyro
- name: rancher-monitoring
- sources:
- - https://github.com/prometheus-community/helm-charts
- - https://github.com/prometheus-operator/kube-prometheus
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-9.4.200.tgz
- version: 9.4.200
- rancher-monitoring-crd:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.806182-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 94e3ca61ac75aae35d2739dc35b7e2c951ff755918fb946eccca6ad4f2ee153c
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc04.tgz
- version: 9.4.203-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.793445-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 338c5e30cceefa4cae16fe6d4ff545277dde72aec7cb1f48404792f4a2d56f1b
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc03.tgz
- version: 9.4.203-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.78136-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 0ca0dfc59cc434faddbe2ef552b9ab669d8de9c8a574abdfb8a8c3b185445e30
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc02.tgz
- version: 9.4.203-rc02
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.774798-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 7ef29171739727ce9a9ee0a1db010c6104c33013855518bc092e85b6d8428242
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc01.tgz
- version: 9.4.203-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-03-04T09:47:44.767759-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: d9689596a9f3d92ca4752bce94937e41fe6330e7b34f5af4596ff85edec23d68
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc00.tgz
- version: 9.4.203-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.555062-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 31251cec75ee29975f02f00032defce1dbd3cad5ce1dff44a63457fb3c6f475d
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.202.tgz
- version: 9.4.202
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.551045-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 3e2c6926b5e0384e25d76cc33fee1782c6cf444f4844901105bbfa251b9023ca
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.201.tgz
- version: 9.4.201
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-monitoring-system
- catalog.cattle.io/release-name: rancher-monitoring-crd
- apiVersion: v1
- created: "2021-01-15T00:11:30.547748-08:00"
- description: Installs the CRDs for rancher-monitoring.
- digest: 1bbc909b84e9c10506c0c2f2ffa074ebfd49d58af2e3a123f802a668d6f78435
- name: rancher-monitoring-crd
- type: application
- urls:
- - released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.200.tgz
- version: 9.4.200
- rancher-operator:
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.809336-08:00"
- description: Control Rancher using GitOps
- digest: 2656b6dcd24f1fbbdd0775cb09932e18af415bf13c6e873ae35c5dbd384a3abc
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc08.tgz
- version: 0.1.300-rc08
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.808768-08:00"
- description: Control Rancher using GitOps
- digest: b3ce6f43a280702dc57ef54fafffd59e146bff22d5b3b0607e73ac11be7597c6
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc07.tgz
- version: 0.1.300-rc07
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.808357-08:00"
- description: Control Rancher using GitOps
- digest: 4da0891a485ccab47d970a1b3384c3d260b7f1d336e437991501330d9d7a558f
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc06.tgz
- version: 0.1.300-rc06
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.807931-08:00"
- description: Control Rancher using GitOps
- digest: e22a7299a8219d1a6876472d263679cfad6cd684c0ce1774bd88c604d3823ae0
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc05.tgz
- version: 0.1.300-rc05
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.807511-08:00"
- description: Control Rancher using GitOps
- digest: d8b53650d168a955588b9489488b1af9f285959fc0f60028b6c802a8e192f571
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc04.tgz
- version: 0.1.300-rc04
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.807098-08:00"
- description: Control Rancher using GitOps
- digest: 227cf3caf125ed1f2d3329350fdd8b90a788727e620c2af43d8a2f11e035116d
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc03.tgz
- version: 0.1.300-rc03
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.806673-08:00"
- description: Control Rancher using GitOps
- digest: c65dd65dceee1e0ffa7228b89ecac8b03b03b233c65009dcac778d3792e1698c
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.300-rc01.tgz
- version: 0.1.300-rc01
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.2
- created: "2021-01-15T00:11:30.557225-08:00"
- description: Control Rancher using GitOps
- digest: 8427c5fb912002404267f7c349dac1f51b3fc5160aade214e35e7d5732a3e6d3
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.200.tgz
- version: 0.1.200
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.2-rc2
- created: "2021-01-15T00:11:30.556966-08:00"
- description: Control Rancher using GitOps
- digest: b0341792bfa98f4680bb6099c8bc5a739cd8fab1e7217acceda396cc0d640a26
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.200-rc2.tgz
- version: 0.1.200-rc2
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.1
- created: "2021-01-15T00:11:30.555899-08:00"
- description: Control Rancher using GitOps
- digest: 0a4132fbc7a014ee6e88ac95dc278723c591fe271529d37f529bfe819b8b03f1
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.100.tgz
- version: 0.1.100
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.2-rc2
- created: "2021-01-15T00:11:30.556665-08:00"
- description: Control Rancher using GitOps
- digest: e952722116cf3912eda2f542e2a703e3676983c6fb1b34e056d4e9c3e79d820d
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.2-rc200.tgz
- version: 0.1.2-rc200
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.2-rc1
- created: "2021-01-15T00:11:30.556311-08:00"
- description: Control Rancher using GitOps
- digest: 1aed5f1bef466d930aaf0a715d1b305c366dc84de6b6c06d4f44db93ca40f2b8
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.2-rc100.tgz
- version: 0.1.2-rc100
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.0
- created: "2021-01-15T00:11:30.555581-08:00"
- description: Control Rancher using GitOps
- digest: f7524f717eb372fee5a5044cc473dda94e85125325dbf0a064669ebe206fbed0
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.000.tgz
- version: 0.1.000
- - annotations:
- catalog.cattle.io/auto-install: rancher-operator-crd=match
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/provides-gvr: clusters.rancher.cattle.io/v1
- catalog.cattle.io/release-name: rancher-operator
- apiVersion: v2
- appVersion: 0.1.0-alpha8
- created: "2021-01-15T00:11:30.555334-08:00"
- description: Control Rancher using GitOps
- digest: d4d2be199ef6c0cd632e59c50e85c73fd80f0a1deebf10a558824d495fb8b723
- name: rancher-operator
- urls:
- - released/assets/rancher-operator/rancher-operator-0.1.0-alpha800.tgz
- version: 0.1.0-alpha800
- rancher-operator-crd:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.816172-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 4cc60bf056682d2f809a497f04857295e0150662c235bd4ddb7b1764b79285f8
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc08.tgz
- version: 0.1.300-rc08
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.814456-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 36836da1bb6a195783cb0a25852f559a90e535d909d43220b93546a3343edfa9
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc07.tgz
- version: 0.1.300-rc07
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.813228-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: a794c3b33313978a0ca37f192f95d452312d3429f73f385aa8d9c3573cc04c38
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc06.tgz
- version: 0.1.300-rc06
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.812528-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 08a8c134a36841aec3caa04ca848e31456ea6e68eba3c1d2f11c87a011de3c9a
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc05.tgz
- version: 0.1.300-rc05
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.811708-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: e95190052c50fcfddc8582760f9512dd1eae2ad02682ae024f4d2f8c5de04b17
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc04.tgz
- version: 0.1.300-rc04
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.810984-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: f4254f3e706cd8d9526048d1cc64f3d91962b19994f95b30459fed456128cc75
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc03.tgz
- version: 0.1.300-rc03
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.3
- created: "2021-03-04T09:47:44.810159-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 88c0fb8ae620a707ddd889ce2805077d3a51284ce6fe25748526c0a70fb808dc
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc01.tgz
- version: 0.1.300-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.2
- created: "2021-01-15T00:11:30.560457-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 181428fac5cf2576f1c35497c142607be81e19aa96b29976d5142cce9cf84027
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200.tgz
- version: 0.1.200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.2-rc2
- created: "2021-01-15T00:11:30.560063-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 9e832ab034a2e088618f4df7291cff7c432c2212559a4add92bb81c3d6105f37
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200-rc2.tgz
- version: 0.1.200-rc2
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.1
- created: "2021-01-15T00:11:30.558445-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 26e61ab160ebf89f91f82e0aa6cbd5378ee3d0436b67c4bdce120467483d7d80
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.100.tgz
- version: 0.1.100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.2-rc2
- created: "2021-01-15T00:11:30.559476-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: e57f76009845b0bb3ebfd7d972fb41d87687264257235e9d35acc330f341cc1a
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc200.tgz
- version: 0.1.2-rc200
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.2-rc1
- created: "2021-01-15T00:11:30.558798-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: a83e65bedd9b916651158896cc38c3d43e063d985e1cfcbbfb291efb7fe3a2f6
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc100.tgz
- version: 0.1.2-rc100
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.0
- created: "2021-01-15T00:11:30.558084-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 0ae1a90ebf8306537379912ee8db01c73436862a268ab9d2a1f95563f236007b
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.000.tgz
- version: 0.1.000
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rancher-operator-system
- catalog.cattle.io/release-name: rancher-operator-crd
- apiVersion: v2
- appVersion: 0.1.0-alpha8
- created: "2021-01-15T00:11:30.557694-08:00"
- description: Rancher Operator CustomResourceDefinitions
- digest: 49c5479777388bde6cd834868ce1e9d664e3f830848dc629dbace9624a2fa07a
- name: rancher-operator-crd
- urls:
- - released/assets/rancher-operator-crd/rancher-operator-crd-0.1.0-alpha800.tgz
- version: 0.1.0-alpha800
- rancher-pushprox:
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-pushprox
- apiVersion: v1
- appVersion: 0.1.0
- created: "2021-03-04T09:47:44.819452-08:00"
- description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
- clients.
- digest: f66edae0a693decab1d2e1d60f20a3ddcb57fa757cf04368f4269d43ba45e6d8
- name: rancher-pushprox
- type: application
- urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc02.tgz
- version: 0.1.201-rc02
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-pushprox
- apiVersion: v1
- appVersion: 0.1.0
- created: "2021-03-04T09:47:44.818536-08:00"
- description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
- clients.
- digest: 4e990a9eb65941dbe2733310945efca11bc839a2543cb2d2ecc29c5dd3c691e9
- name: rancher-pushprox
- type: application
- urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc01.tgz
- version: 0.1.201-rc01
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-pushprox
- apiVersion: v1
- appVersion: 0.1.0
- created: "2021-03-04T09:47:44.817581-08:00"
- description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
- clients.
- digest: f9e10374f3d86fe4b9a13ec2ce5bd11d3c2d5314262689249cb1f0c4d4e8123f
- name: rancher-pushprox
- type: application
- urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc00.tgz
- version: 0.1.201-rc00
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-pushprox
- apiVersion: v1
- appVersion: 0.1.0
- created: "2021-01-15T00:11:30.561927-08:00"
- description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
- clients.
- digest: bd7fc397cda47c5d5c5e0bd75a906536b195017fd7ed6876e7428230e6c48943
- name: rancher-pushprox
- type: application
- urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.2.tgz
- version: 0.1.2
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-pushprox
- apiVersion: v1
- appVersion: 0.1.0
- created: "2021-01-15T00:11:30.561429-08:00"
- description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
- clients.
- digest: ab34cc49dd50f2b2dbcee36447a3e2efd974bdce004834b0bfb0508a84ffa16c
- name: rancher-pushprox
- type: application
- urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.1.tgz
- version: 0.1.1
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: cattle-monitoring-system
- catalog.rancher.io/release-name: rancher-pushprox
- apiVersion: v1
- appVersion: 0.1.0
- created: "2021-01-15T00:11:30.560947-08:00"
- description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx
- clients.
- digest: d251c28f9e9b732a02e9c394b0d7bf3a3c98c723fb809b5015bd5728f05ee968
- name: rancher-pushprox
- type: application
- urls:
- - released/assets/rancher-pushprox/rancher-pushprox-0.1.0.tgz
- version: 0.1.0
- rancher-tracing:
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: istio-system
- catalog.rancher.io/release-name: rancher-tracing
- apiVersion: v1
- appVersion: 1.20.0
- created: "2021-03-04T09:47:44.820217-08:00"
- description: A quick start Jaeger Tracing installation using the all-in-one demo.
- This is not production qualified. Refer to https://www.jaegertracing.io/ for
- details.
- digest: d20f48b0bec89328b18304896c3185a3d08b81ce4c09857aa07f4151e2d21375
- name: rancher-tracing
- urls:
- - released/assets/rancher-tracing/rancher-tracing-1.20.002-rc00.tgz
- version: 1.20.002-rc00
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: istio-system
- catalog.rancher.io/release-name: rancher-tracing
- apiVersion: v1
- appVersion: 1.20.0
- created: "2021-01-15T00:11:30.562327-08:00"
- description: A quick start Jaeger Tracing installation using the all-in-one demo.
- This is not production qualified. Refer to https://www.jaegertracing.io/ for
- details.
- digest: bf9ba6be02c6275ca6a3d850d6be8f012233d62f1614173bcf3e95ff84e9c7eb
- name: rancher-tracing
- urls:
- - released/assets/rancher-tracing/rancher-tracing-1.20.001.tgz
- version: 1.20.001
- - annotations:
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/os: linux
- catalog.rancher.io/certified: rancher
- catalog.rancher.io/namespace: istio-system
- catalog.rancher.io/release-name: rancher-tracing
- apiVersion: v1
- appVersion: 1.20.0
- created: "2021-03-01T16:56:35.020094-08:00"
- description: A quick start Jaeger Tracing installation using the all-in-one demo.
- This is not production qualified. Refer to https://www.jaegertracing.io/ for
- details.
- digest: dd999b5d6d78ace23520222e1d80c8e3b8298461a15e726bd41ee4eb58068d46
- name: rancher-tracing
- urls:
- - released/assets/rancher-tracing/rancher-tracing-1.20.001-rc00.tgz
- version: 1.20.001-rc00
- rancher-vsphere-cpi:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere CPI
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-cpi
- apiVersion: v1
- appVersion: 1.0.0
- created: "2021-03-04T09:47:44.820918-08:00"
- description: vSphere Cloud Provider Interface (CPI)
- digest: 092bf7a60582eb190c1212699a9c277e01974d03e78e2121ecf8f6c460e36df7
- icon: https://charts.rancher.io/assets/logos/vsphere-cpi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: rancher-vsphere-cpi
- sources:
- - https://github.com/kubernetes/cloud-provider-vsphere
- urls:
- - released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000-rc01.tgz
- version: 1.0.000-rc01
- rancher-vsphere-csi:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere CSI
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-csi
- apiVersion: v1
- appVersion: 2.1.0
- created: "2021-03-04T09:47:44.821954-08:00"
- description: vSphere Cloud Storage Interface (CSI)
- digest: 99cee0399a41911b91f24ebecf94bb88ebdfbe3d82503add88afb5885ed4d1b9
- icon: https://charts.rancher.io/assets/logos/vsphere-csi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: rancher-vsphere-csi
- sources:
- - https://github.com/kubernetes-sigs/vsphere-csi-driver
- urls:
- - released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000-rc01.tgz
- version: 2.1.000-rc01
- rancher-webhook:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta9
- created: "2021-03-04T09:47:44.822413-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: 6eb969054035ae7a3501d3e08b4a2d70ab38203e62fa5efbee16347fed34f653
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901-rc00.tgz
- version: 0.1.0-beta901-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta9
- created: "2021-01-15T00:11:30.563834-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: 7e1a1ba8b4b83740d5b301cd81cd48f5ecd9a0bc7bb2ea8f5f021a22c294cc57
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta900.tgz
- version: 0.1.0-beta900
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta8
- created: "2021-01-15T00:11:30.563574-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: a1ce80a2a1b6915ab379624ac2cb49e1ce27a550951dc88b8f3e5668f792e0b5
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta800.tgz
- version: 0.1.0-beta800
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta7
- created: "2021-01-15T00:11:30.563321-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: c7f3d94a86a1960a3bb477d5fa7ec1ce2cda1071f8f221fb7a215a0892b31ec2
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta700.tgz
- version: 0.1.0-beta700
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta6
- created: "2021-01-15T00:11:30.563072-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: d0715c2f02663a29a0d98a27aadd7383c2d90c0507e9e7ce8768e0030240c15c
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta600.tgz
- version: 0.1.0-beta600
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta5
- created: "2021-01-15T00:11:30.562811-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: 748ed52b1d17cff221fb5609bb230467f0a16faf5130122ece6781841c2d569e
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta500.tgz
- version: 0.1.0-beta500
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/namespace: cattle-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rancher-webhook
- apiVersion: v2
- appVersion: 0.1.0-beta3
- created: "2021-01-15T00:11:30.56257-08:00"
- description: ValidatingAdmissionWebhook for Rancher types
- digest: 498aabf4bb200fca9d3a66be7d0606701a6be62208776effc83c894e576ed748
- name: rancher-webhook
- urls:
- - released/assets/rancher-webhook/rancher-webhook-0.1.0-beta300.tgz
- version: 0.1.0-beta300
- rio:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Rio
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rio-system
- catalog.cattle.io/release-name: rio
- catalog.cattle.io/requires-gvr: networking.istio.io.virtualservice/v1beta1
- apiVersion: v1
- appVersion: 0.8.0
- created: "2021-03-04T09:47:44.823144-08:00"
- description: The application deployment engine for Kubernetes
- digest: af6a84abcd481d2653db91960a69c9e235b619834cf81d0dfbd0f6c5427b7460
- home: https://rio.io
- icon: https://charts.rancher.io/assets/logos/rio.svg
- name: rio
- urls:
- - released/assets/rio/rio-0.8.001-rc00.tgz
- version: 0.8.001-rc00
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: Rio
- catalog.cattle.io/experimental: "true"
- catalog.cattle.io/hidden: "true"
- catalog.cattle.io/namespace: rio-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: rio
- catalog.cattle.io/requires-gvr: networking.istio.io.virtualservice/v1beta1
- apiVersion: v1
- appVersion: 0.8.0
- created: "2021-01-15T00:11:30.564203-08:00"
- description: The application deployment engine for Kubernetes
- digest: cec586f9ef5202b6030e1fbab082ef45c740ba749f4358f03ce3423acb310663
- home: https://rio.io
- icon: https://charts.rancher.io/assets/logos/rio.svg
- name: rio
- urls:
- - released/assets/rio/rio-0.8.000.tgz
- version: 0.8.000
- vsphere-cpi:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere CPI
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-cpi
- apiVersion: v1
- appVersion: 1.0.0
- created: "2021-03-03T21:20:36.659017-07:00"
- description: vSphere Cloud Provider Interface (CPI)
- digest: c989b10ab34b891887a3a1220921181aa3e357a1b1917ba2522848050fdab62a
- icon: https://charts.rancher.io/assets/logos/vsphere-cpi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: vsphere-cpi
- sources:
- - https://github.com/kubernetes/cloud-provider-vsphere
- urls:
- - released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc01.tgz
- version: 1.0.000-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere Cloud Provider Interface (CPI)
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-cpi
- apiVersion: v1
- appVersion: 1.0.0
- created: "2021-03-03T21:20:31.139576-07:00"
- description: vSphere CPI driver
- digest: d78e5350401a9ae6ec67c160b4e7776eebda56a46756b0e6a38c9a2cc913c194
- icon: https://charts.rancher.io/assets/logos/vsphere-cpi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: vsphere-cpi
- sources:
- - https://github.com/kubernetes/cloud-provider-vsphere
- urls:
- - released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc00.tgz
- version: 1.0.000-rc00
- vsphere-csi:
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere CSI
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-csi
- apiVersion: v1
- appVersion: 2.1.0
- created: "2021-03-03T21:20:56.690054-07:00"
- description: vSphere Cloud Storage Interface (CSI)
- digest: 2a7e01ac4e05b4224c077c438e5e9a292840040659830ec7d8f9a07829c5b873
- icon: https://charts.rancher.io/assets/logos/vsphere-csi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: vsphere-csi
- sources:
- - https://github.com/kubernetes-sigs/vsphere-csi-driver
- urls:
- - released/assets/vsphere-csi/vsphere-csi-2.1.000-rc01.tgz
- version: 2.1.000-rc01
- - annotations:
- catalog.cattle.io/certified: rancher
- catalog.cattle.io/display-name: vSphere Cloud Storage Interface (CSI)
- catalog.cattle.io/namespace: kube-system
- catalog.cattle.io/os: linux
- catalog.cattle.io/release-name: vsphere-csi
- apiVersion: v1
- appVersion: 2.1.0
- created: "2021-03-03T21:20:53.231681-07:00"
- description: vSphere CSI driver
- digest: 42dae1c284c3c79b3c168f01841d0337f0b9d2bf703167374a184341e7d2bd09
- icon: https://charts.rancher.io/assets/logos/vsphere-csi.svg
- keywords:
- - infrastructure
- maintainers:
- - email: caleb@rancher.com
- name: Rancher
- name: vsphere-csi
- sources:
- - https://github.com/kubernetes-sigs/vsphere-csi-driver
- urls:
- - released/assets/vsphere-csi/vsphere-csi-2.1.000-rc00.tgz
- version: 2.1.000-rc00
-generated: "2021-03-04T09:47:44.612157-08:00"
diff --git a/released/assets/logos/vsphere-cpi.svg b/released/assets/logos/vsphere-cpi.svg
new file mode 100644
index 000000000..7e22a5fc5
--- /dev/null
+++ b/released/assets/logos/vsphere-cpi.svg
@@ -0,0 +1,23 @@
+
+
+
diff --git a/released/assets/logos/vsphere-csi.svg b/released/assets/logos/vsphere-csi.svg
new file mode 100644
index 000000000..7e22a5fc5
--- /dev/null
+++ b/released/assets/logos/vsphere-csi.svg
@@ -0,0 +1,23 @@
+
+
+
diff --git a/released/assets/longhorn/longhorn-1.0.200.tgz b/released/assets/longhorn/longhorn-1.0.200.tgz
index 8f99dea4d..6a695b018 100644
Binary files a/released/assets/longhorn/longhorn-1.0.200.tgz and b/released/assets/longhorn/longhorn-1.0.200.tgz differ
diff --git a/released/assets/longhorn/longhorn-1.0.201.tgz b/released/assets/longhorn/longhorn-1.0.201.tgz
index 533dd2964..ac9aa44be 100644
Binary files a/released/assets/longhorn/longhorn-1.0.201.tgz and b/released/assets/longhorn/longhorn-1.0.201.tgz differ
diff --git a/released/assets/longhorn/longhorn-1.0.202.tgz b/released/assets/longhorn/longhorn-1.0.202.tgz
deleted file mode 100644
index 81e4efdf2..000000000
Binary files a/released/assets/longhorn/longhorn-1.0.202.tgz and /dev/null differ
diff --git a/released/assets/longhorn/longhorn-1.1.000.tgz b/released/assets/longhorn/longhorn-1.1.000.tgz
index 28283e776..8a909437a 100644
Binary files a/released/assets/longhorn/longhorn-1.1.000.tgz and b/released/assets/longhorn/longhorn-1.1.000.tgz differ
diff --git a/released/assets/longhorn/longhorn-1.1.001-rc00.tgz b/released/assets/longhorn/longhorn-1.1.001-rc00.tgz
deleted file mode 100755
index b1e9f3783..000000000
Binary files a/released/assets/longhorn/longhorn-1.1.001-rc00.tgz and /dev/null differ
diff --git a/released/assets/longhorn/longhorn-1.1.001-rc01.tgz b/released/assets/longhorn/longhorn-1.1.001-rc01.tgz
deleted file mode 100755
index 802b2631b..000000000
Binary files a/released/assets/longhorn/longhorn-1.1.001-rc01.tgz and /dev/null differ
diff --git a/released/assets/longhorn/longhorn-1.1.001.tgz b/released/assets/longhorn/longhorn-1.1.001.tgz
new file mode 100755
index 000000000..beb49a3fe
Binary files /dev/null and b/released/assets/longhorn/longhorn-1.1.001.tgz differ
diff --git a/released/assets/longhorn/longhorn-crd-1.0.200.tgz b/released/assets/longhorn/longhorn-crd-1.0.200.tgz
index 513ac7cab..7a01c2d4b 100644
Binary files a/released/assets/longhorn/longhorn-crd-1.0.200.tgz and b/released/assets/longhorn/longhorn-crd-1.0.200.tgz differ
diff --git a/released/assets/longhorn/longhorn-crd-1.0.201.tgz b/released/assets/longhorn/longhorn-crd-1.0.201.tgz
index 18c2bfd57..66959b432 100644
Binary files a/released/assets/longhorn/longhorn-crd-1.0.201.tgz and b/released/assets/longhorn/longhorn-crd-1.0.201.tgz differ
diff --git a/released/assets/longhorn/longhorn-crd-1.0.202.tgz b/released/assets/longhorn/longhorn-crd-1.0.202.tgz
deleted file mode 100644
index 047a43621..000000000
Binary files a/released/assets/longhorn/longhorn-crd-1.0.202.tgz and /dev/null differ
diff --git a/released/assets/longhorn/longhorn-crd-1.1.000.tgz b/released/assets/longhorn/longhorn-crd-1.1.000.tgz
index dcc014030..6d9fb9e89 100644
Binary files a/released/assets/longhorn/longhorn-crd-1.1.000.tgz and b/released/assets/longhorn/longhorn-crd-1.1.000.tgz differ
diff --git a/released/assets/longhorn/longhorn-crd-1.1.001-rc00.tgz b/released/assets/longhorn/longhorn-crd-1.1.001-rc00.tgz
deleted file mode 100755
index c5799d340..000000000
Binary files a/released/assets/longhorn/longhorn-crd-1.1.001-rc00.tgz and /dev/null differ
diff --git a/released/assets/longhorn/longhorn-crd-1.1.001-rc01.tgz b/released/assets/longhorn/longhorn-crd-1.1.001-rc01.tgz
deleted file mode 100755
index 5872403aa..000000000
Binary files a/released/assets/longhorn/longhorn-crd-1.1.001-rc01.tgz and /dev/null differ
diff --git a/released/assets/longhorn/longhorn-crd-1.1.001.tgz b/released/assets/longhorn/longhorn-crd-1.1.001.tgz
new file mode 100755
index 000000000..3dfe234aa
Binary files /dev/null and b/released/assets/longhorn/longhorn-crd-1.1.001.tgz differ
diff --git a/released/assets/rancher-alerting-drivers/rancher-alerting-drivers-1.0.100.tgz b/released/assets/rancher-alerting-drivers/rancher-alerting-drivers-1.0.100.tgz
new file mode 100755
index 000000000..9ee9fb312
Binary files /dev/null and b/released/assets/rancher-alerting-drivers/rancher-alerting-drivers-1.0.100.tgz differ
diff --git a/released/assets/rancher-backup-crd/rancher-backup-crd-1.0.400.tgz b/released/assets/rancher-backup-crd/rancher-backup-crd-1.0.400.tgz
new file mode 100755
index 000000000..3ba8d42ca
Binary files /dev/null and b/released/assets/rancher-backup-crd/rancher-backup-crd-1.0.400.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-1.0.200.tgz b/released/assets/rancher-backup/rancher-backup-1.0.200.tgz
index 3b986d5ea..9e997cd66 100644
Binary files a/released/assets/rancher-backup/rancher-backup-1.0.200.tgz and b/released/assets/rancher-backup/rancher-backup-1.0.200.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-1.0.201.tgz b/released/assets/rancher-backup/rancher-backup-1.0.201.tgz
index 5af9a64b2..16af46f91 100644
Binary files a/released/assets/rancher-backup/rancher-backup-1.0.201.tgz and b/released/assets/rancher-backup/rancher-backup-1.0.201.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-1.0.300.tgz b/released/assets/rancher-backup/rancher-backup-1.0.300.tgz
index 3a0598e25..1123aeda6 100644
Binary files a/released/assets/rancher-backup/rancher-backup-1.0.300.tgz and b/released/assets/rancher-backup/rancher-backup-1.0.300.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-1.0.301-rc00.tgz b/released/assets/rancher-backup/rancher-backup-1.0.301-rc00.tgz
deleted file mode 100755
index 555b801e6..000000000
Binary files a/released/assets/rancher-backup/rancher-backup-1.0.301-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-backup/rancher-backup-1.0.301-rc01.tgz b/released/assets/rancher-backup/rancher-backup-1.0.301-rc01.tgz
deleted file mode 100755
index 5b81f0bdf..000000000
Binary files a/released/assets/rancher-backup/rancher-backup-1.0.301-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-backup/rancher-backup-1.0.301.tgz b/released/assets/rancher-backup/rancher-backup-1.0.301.tgz
new file mode 100755
index 000000000..258047bb8
Binary files /dev/null and b/released/assets/rancher-backup/rancher-backup-1.0.301.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-1.0.400.tgz b/released/assets/rancher-backup/rancher-backup-1.0.400.tgz
new file mode 100755
index 000000000..446148c4a
Binary files /dev/null and b/released/assets/rancher-backup/rancher-backup-1.0.400.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-crd-1.0.200.tgz b/released/assets/rancher-backup/rancher-backup-crd-1.0.200.tgz
index 72e004526..71debc5df 100644
Binary files a/released/assets/rancher-backup/rancher-backup-crd-1.0.200.tgz and b/released/assets/rancher-backup/rancher-backup-crd-1.0.200.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-crd-1.0.201.tgz b/released/assets/rancher-backup/rancher-backup-crd-1.0.201.tgz
index 179be53d3..cb12b3f3e 100644
Binary files a/released/assets/rancher-backup/rancher-backup-crd-1.0.201.tgz and b/released/assets/rancher-backup/rancher-backup-crd-1.0.201.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-crd-1.0.300.tgz b/released/assets/rancher-backup/rancher-backup-crd-1.0.300.tgz
index 5e64277d8..f35c8c90d 100644
Binary files a/released/assets/rancher-backup/rancher-backup-crd-1.0.300.tgz and b/released/assets/rancher-backup/rancher-backup-crd-1.0.300.tgz differ
diff --git a/released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc00.tgz b/released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc00.tgz
deleted file mode 100755
index dc375196b..000000000
Binary files a/released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc01.tgz b/released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc01.tgz
deleted file mode 100755
index 7e642719d..000000000
Binary files a/released/assets/rancher-backup/rancher-backup-crd-1.0.301-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-backup/rancher-backup-crd-1.0.301.tgz b/released/assets/rancher-backup/rancher-backup-crd-1.0.301.tgz
new file mode 100755
index 000000000..8ad1c1afa
Binary files /dev/null and b/released/assets/rancher-backup/rancher-backup-crd-1.0.301.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz
index 509ca01e1..3f245c1fe 100644
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.200.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.200.tgz
index 62dec5132..850f45090 100644
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.200.tgz and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.200.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.300.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.300.tgz
index 6784b0c42..c4612c6fd 100644
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.300.tgz and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.300.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc00.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc00.tgz
deleted file mode 100755
index 9354c2e9c..000000000
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc01.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc01.tgz
deleted file mode 100755
index be322d512..000000000
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301.tgz
new file mode 100755
index 000000000..f1dd6d76f
Binary files /dev/null and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.301.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.400.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.400.tgz
new file mode 100755
index 000000000..e07aa0f00
Binary files /dev/null and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.400.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402.tgz
new file mode 100755
index 000000000..a776fadf8
Binary files /dev/null and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.100.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.100.tgz
index b47af00f4..69ee1f9d6 100644
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.100.tgz and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.100.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.200.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.200.tgz
index ec2dccd21..8e74b1ec0 100644
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.200.tgz and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.200.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.300.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.300.tgz
index 265511fe0..234a1ee3e 100644
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.300.tgz and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.300.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc00.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc00.tgz
deleted file mode 100755
index 6bafab6e9..000000000
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc01.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc01.tgz
deleted file mode 100755
index bc535a232..000000000
Binary files a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301.tgz
new file mode 100755
index 000000000..ca0b7e385
Binary files /dev/null and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.301.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.400.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.400.tgz
new file mode 100755
index 000000000..b25e271de
Binary files /dev/null and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.400.tgz differ
diff --git a/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.402.tgz b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.402.tgz
new file mode 100755
index 000000000..e6aa6ed2e
Binary files /dev/null and b/released/assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.402.tgz differ
diff --git a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.400.tgz b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.400.tgz
index f8f68a022..6f1afb091 100644
Binary files a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.400.tgz and b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.400.tgz differ
diff --git a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.500.tgz b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.500.tgz
deleted file mode 100644
index 10f17ee42..000000000
Binary files a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.500.tgz and /dev/null differ
diff --git a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.600.tgz b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.600.tgz
index 2fc874df1..3194e2d06 100644
Binary files a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.600.tgz and b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.600.tgz differ
diff --git a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc00.tgz b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc00.tgz
deleted file mode 100755
index a4878e508..000000000
Binary files a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc01.tgz b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc01.tgz
deleted file mode 100755
index 64095de30..000000000
Binary files a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601.tgz b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601.tgz
new file mode 100755
index 000000000..015deabd3
Binary files /dev/null and b/released/assets/rancher-external-ip-webhook/rancher-external-ip-webhook-0.1.601.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.100.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.100.tgz
index e383a70ed..32dddd9b3 100644
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.100.tgz and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.100.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.101.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.101.tgz
index 6bdbecca6..1887c67c5 100644
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.101.tgz and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.1.101.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.100.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.100.tgz
deleted file mode 100644
index bf1c34f73..000000000
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.100.tgz and /dev/null differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.101.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.101.tgz
index 6b798a154..507b3ff8c 100644
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.101.tgz and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.2.101.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc01.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc01.tgz
deleted file mode 100755
index f9630c98c..000000000
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc02.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc02.tgz
deleted file mode 100755
index 4896be137..000000000
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000-rc02.tgz and /dev/null differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000.tgz
new file mode 100755
index 000000000..b90beec08
Binary files /dev/null and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.000.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.001.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.001.tgz
new file mode 100755
index 000000000..8b88017d3
Binary files /dev/null and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-3.3.001.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.100.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.100.tgz
index 2e246e881..47c8637dc 100644
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.100.tgz and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.100.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.101.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.101.tgz
index e8ff3153b..9ac972e5e 100644
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.101.tgz and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.1.101.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.100.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.100.tgz
deleted file mode 100644
index 53486a3fd..000000000
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.100.tgz and /dev/null differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.101.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.101.tgz
index 379a9493a..46e06d282 100644
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.101.tgz and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.2.101.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc01.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc01.tgz
deleted file mode 100755
index a3d0a20d1..000000000
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc02.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc02.tgz
deleted file mode 100755
index f67ae3584..000000000
Binary files a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000-rc02.tgz and /dev/null differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000.tgz
new file mode 100755
index 000000000..6ebf37dc9
Binary files /dev/null and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.000.tgz differ
diff --git a/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.001.tgz b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.001.tgz
new file mode 100755
index 000000000..91bf8e918
Binary files /dev/null and b/released/assets/rancher-gatekeeper/rancher-gatekeeper-crd-3.3.001.tgz differ
diff --git a/released/assets/rancher-grafana/rancher-grafana-6.6.401.tgz b/released/assets/rancher-grafana/rancher-grafana-6.6.401.tgz
new file mode 100755
index 000000000..b2024b4ac
Binary files /dev/null and b/released/assets/rancher-grafana/rancher-grafana-6.6.401.tgz differ
diff --git a/released/assets/rancher-istio-1.8/rancher-istio-1.8.301.tgz b/released/assets/rancher-istio-1.8/rancher-istio-1.8.301.tgz
new file mode 100755
index 000000000..b65aac380
Binary files /dev/null and b/released/assets/rancher-istio-1.8/rancher-istio-1.8.301.tgz differ
diff --git a/released/assets/rancher-istio-1.8/rancher-istio-1.8.400.tgz b/released/assets/rancher-istio-1.8/rancher-istio-1.8.400.tgz
new file mode 100755
index 000000000..aab05dc76
Binary files /dev/null and b/released/assets/rancher-istio-1.8/rancher-istio-1.8.400.tgz differ
diff --git a/released/assets/rancher-istio-1.8/rancher-istio-1.8.500.tgz b/released/assets/rancher-istio-1.8/rancher-istio-1.8.500.tgz
new file mode 100755
index 000000000..06a1642a9
Binary files /dev/null and b/released/assets/rancher-istio-1.8/rancher-istio-1.8.500.tgz differ
diff --git a/released/assets/rancher-istio-1.9/rancher-istio-1.9.200.tgz b/released/assets/rancher-istio-1.9/rancher-istio-1.9.200.tgz
new file mode 100755
index 000000000..759544901
Binary files /dev/null and b/released/assets/rancher-istio-1.9/rancher-istio-1.9.200.tgz differ
diff --git a/released/assets/rancher-istio-1.9/rancher-istio-1.9.300.tgz b/released/assets/rancher-istio-1.9/rancher-istio-1.9.300.tgz
new file mode 100755
index 000000000..945ab826d
Binary files /dev/null and b/released/assets/rancher-istio-1.9/rancher-istio-1.9.300.tgz differ
diff --git a/released/assets/rancher-istio/rancher-istio-1.7.100.tgz b/released/assets/rancher-istio/rancher-istio-1.7.100.tgz
index 777ea80f7..703de7f90 100644
Binary files a/released/assets/rancher-istio/rancher-istio-1.7.100.tgz and b/released/assets/rancher-istio/rancher-istio-1.7.100.tgz differ
diff --git a/released/assets/rancher-istio/rancher-istio-1.7.101.tgz b/released/assets/rancher-istio/rancher-istio-1.7.101.tgz
deleted file mode 100644
index 29f8f2835..000000000
Binary files a/released/assets/rancher-istio/rancher-istio-1.7.101.tgz and /dev/null differ
diff --git a/released/assets/rancher-istio/rancher-istio-1.7.300.tgz b/released/assets/rancher-istio/rancher-istio-1.7.300.tgz
index 643b73ed6..e45b7d003 100644
Binary files a/released/assets/rancher-istio/rancher-istio-1.7.300.tgz and b/released/assets/rancher-istio/rancher-istio-1.7.300.tgz differ
diff --git a/released/assets/rancher-istio/rancher-istio-1.7.301.tgz b/released/assets/rancher-istio/rancher-istio-1.7.301.tgz
index 0870326e9..4c7881e73 100644
Binary files a/released/assets/rancher-istio/rancher-istio-1.7.301.tgz and b/released/assets/rancher-istio/rancher-istio-1.7.301.tgz differ
diff --git a/released/assets/rancher-istio/rancher-istio-1.7.600.tgz b/released/assets/rancher-istio/rancher-istio-1.7.600.tgz
deleted file mode 100644
index d11e24fea..000000000
Binary files a/released/assets/rancher-istio/rancher-istio-1.7.600.tgz and /dev/null differ
diff --git a/released/assets/rancher-istio/rancher-istio-1.8.300-rc00.tgz b/released/assets/rancher-istio/rancher-istio-1.8.300-rc00.tgz
deleted file mode 100755
index 88a046f3a..000000000
Binary files a/released/assets/rancher-istio/rancher-istio-1.8.300-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-istio/rancher-istio-1.8.300-rc01.tgz b/released/assets/rancher-istio/rancher-istio-1.8.300-rc01.tgz
deleted file mode 100755
index f05a3e0a9..000000000
Binary files a/released/assets/rancher-istio/rancher-istio-1.8.300-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-istio/rancher-istio-1.8.300.tgz b/released/assets/rancher-istio/rancher-istio-1.8.300.tgz
new file mode 100755
index 000000000..d65f38d03
Binary files /dev/null and b/released/assets/rancher-istio/rancher-istio-1.8.300.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.23.001.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.23.001.tgz
index 7a37d5503..07acfd8f5 100644
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-1.23.001.tgz and b/released/assets/rancher-kiali-server/rancher-kiali-server-1.23.001.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.23.002.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.23.002.tgz
deleted file mode 100644
index 24f52210c..000000000
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-1.23.002.tgz and /dev/null differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.001.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.001.tgz
index 6a90ae674..8e0bbee40 100644
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.001.tgz and b/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.001.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.002.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.002.tgz
deleted file mode 100644
index fe9faa0d9..000000000
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.002.tgz and /dev/null differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.003.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.003.tgz
index 1cad6ddba..3944887a4 100644
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.003.tgz and b/released/assets/rancher-kiali-server/rancher-kiali-server-1.24.003.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc00.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc00.tgz
deleted file mode 100755
index 902edbec3..000000000
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc01.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc01.tgz
deleted file mode 100755
index 64702d2be..000000000
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000.tgz
new file mode 100755
index 000000000..6ae217f42
Binary files /dev/null and b/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.000.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.100.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.100.tgz
new file mode 100755
index 000000000..550d08672
Binary files /dev/null and b/released/assets/rancher-kiali-server/rancher-kiali-server-1.29.100.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-1.32.100.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-1.32.100.tgz
new file mode 100755
index 000000000..5495756ca
Binary files /dev/null and b/released/assets/rancher-kiali-server/rancher-kiali-server-1.32.100.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.001.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.001.tgz
index ba5185f39..a3fa2a7d7 100644
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.001.tgz and b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.001.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.002.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.002.tgz
deleted file mode 100644
index 3b2a199da..000000000
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.23.002.tgz and /dev/null differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.001.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.001.tgz
index e2280ef1d..0577a3315 100644
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.001.tgz and b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.001.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.002.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.002.tgz
deleted file mode 100644
index 960f6f55c..000000000
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.002.tgz and /dev/null differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.003.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.003.tgz
index 0c771aedf..3a2cb529d 100644
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.003.tgz and b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.24.003.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc00.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc00.tgz
deleted file mode 100755
index 0b35b6862..000000000
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc01.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc01.tgz
deleted file mode 100755
index d4ff8ca43..000000000
Binary files a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000.tgz
new file mode 100755
index 000000000..644914140
Binary files /dev/null and b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.000.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.100.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.100.tgz
new file mode 100755
index 000000000..7a3ea75d3
Binary files /dev/null and b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.29.100.tgz differ
diff --git a/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.32.100.tgz b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.32.100.tgz
new file mode 100755
index 000000000..b77c3d3a7
Binary files /dev/null and b/released/assets/rancher-kiali-server/rancher-kiali-server-crd-1.32.100.tgz differ
diff --git a/released/assets/rancher-kube-state-metrics/rancher-kube-state-metrics-2.13.101.tgz b/released/assets/rancher-kube-state-metrics/rancher-kube-state-metrics-2.13.101.tgz
new file mode 100755
index 000000000..418f14098
Binary files /dev/null and b/released/assets/rancher-kube-state-metrics/rancher-kube-state-metrics-2.13.101.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.6.000.tgz b/released/assets/rancher-logging/rancher-logging-3.6.000.tgz
index ef28ce9d0..6d6ad9545 100644
Binary files a/released/assets/rancher-logging/rancher-logging-3.6.000.tgz and b/released/assets/rancher-logging/rancher-logging-3.6.000.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.6.001.tgz b/released/assets/rancher-logging/rancher-logging-3.6.001.tgz
index f6d0a17e6..50c5cf16f 100644
Binary files a/released/assets/rancher-logging/rancher-logging-3.6.001.tgz and b/released/assets/rancher-logging/rancher-logging-3.6.001.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.7.301.tgz b/released/assets/rancher-logging/rancher-logging-3.7.301.tgz
deleted file mode 100644
index 90ec56c79..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.7.301.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.8.001.tgz b/released/assets/rancher-logging/rancher-logging-3.8.001.tgz
deleted file mode 100644
index 703abfc33..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.8.001.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.8.201.tgz b/released/assets/rancher-logging/rancher-logging-3.8.201.tgz
index 18f274e7c..485d790b9 100644
Binary files a/released/assets/rancher-logging/rancher-logging-3.8.201.tgz and b/released/assets/rancher-logging/rancher-logging-3.8.201.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc00.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc00.tgz
deleted file mode 100755
index 957fd5446..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc01.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc01.tgz
deleted file mode 100755
index 1b468ea36..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc02.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc02.tgz
deleted file mode 100755
index 94af34a82..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc02.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc03.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc03.tgz
deleted file mode 100755
index cb0746dda..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc03.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc04.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc04.tgz
deleted file mode 100755
index 6c69c649a..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc04.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc05.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc05.tgz
deleted file mode 100755
index 9f6ccf229..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc05.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc06.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc06.tgz
deleted file mode 100755
index 6ccb3d7a9..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc06.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc07.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc07.tgz
deleted file mode 100755
index 4afca7566..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc07.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000-rc08.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000-rc08.tgz
deleted file mode 100755
index 6f62332e8..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-3.9.000-rc08.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.000.tgz b/released/assets/rancher-logging/rancher-logging-3.9.000.tgz
new file mode 100755
index 000000000..43caaab12
Binary files /dev/null and b/released/assets/rancher-logging/rancher-logging-3.9.000.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.001.tgz b/released/assets/rancher-logging/rancher-logging-3.9.001.tgz
new file mode 100755
index 000000000..1c5b7ebf7
Binary files /dev/null and b/released/assets/rancher-logging/rancher-logging-3.9.001.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.002.tgz b/released/assets/rancher-logging/rancher-logging-3.9.002.tgz
new file mode 100755
index 000000000..ffe9599f3
Binary files /dev/null and b/released/assets/rancher-logging/rancher-logging-3.9.002.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-3.9.400.tgz b/released/assets/rancher-logging/rancher-logging-3.9.400.tgz
new file mode 100755
index 000000000..3c7aeafe9
Binary files /dev/null and b/released/assets/rancher-logging/rancher-logging-3.9.400.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.6.000.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.6.000.tgz
index c4b2b3d0e..9b6a2c7c1 100644
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.6.000.tgz and b/released/assets/rancher-logging/rancher-logging-crd-3.6.000.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.6.001.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.6.001.tgz
index 37286321e..092e26fd4 100644
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.6.001.tgz and b/released/assets/rancher-logging/rancher-logging-crd-3.6.001.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.7.301.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.7.301.tgz
deleted file mode 100644
index 8a325bb0b..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.7.301.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.8.001.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.8.001.tgz
deleted file mode 100644
index 3ecab4b27..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.8.001.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.8.201.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.8.201.tgz
index 1d97f62af..03fa84872 100644
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.8.201.tgz and b/released/assets/rancher-logging/rancher-logging-crd-3.8.201.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc00.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc00.tgz
deleted file mode 100755
index 3a0a3bf4c..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc01.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc01.tgz
deleted file mode 100755
index 8c5544ad4..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc02.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc02.tgz
deleted file mode 100755
index 8de4e6487..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc02.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc03.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc03.tgz
deleted file mode 100755
index 158031ccd..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc03.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc04.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc04.tgz
deleted file mode 100755
index 637cdcb95..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc04.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc05.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc05.tgz
deleted file mode 100755
index f26bc06f1..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc05.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc06.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc06.tgz
deleted file mode 100755
index 33519f762..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc06.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc07.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc07.tgz
deleted file mode 100755
index 2b6faa6ed..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc07.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc08.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc08.tgz
deleted file mode 100755
index 6945282aa..000000000
Binary files a/released/assets/rancher-logging/rancher-logging-crd-3.9.000-rc08.tgz and /dev/null differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.000.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.000.tgz
new file mode 100755
index 000000000..cea0bf7ab
Binary files /dev/null and b/released/assets/rancher-logging/rancher-logging-crd-3.9.000.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.001.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.001.tgz
new file mode 100755
index 000000000..9aa007ba0
Binary files /dev/null and b/released/assets/rancher-logging/rancher-logging-crd-3.9.001.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.002.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.002.tgz
new file mode 100755
index 000000000..f2e02b6a3
Binary files /dev/null and b/released/assets/rancher-logging/rancher-logging-crd-3.9.002.tgz differ
diff --git a/released/assets/rancher-logging/rancher-logging-crd-3.9.400.tgz b/released/assets/rancher-logging/rancher-logging-crd-3.9.400.tgz
new file mode 100755
index 000000000..c5ff15c43
Binary files /dev/null and b/released/assets/rancher-logging/rancher-logging-crd-3.9.400.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-14.5.100.tgz b/released/assets/rancher-monitoring/rancher-monitoring-14.5.100.tgz
new file mode 100755
index 000000000..ca0a2ab2c
Binary files /dev/null and b/released/assets/rancher-monitoring/rancher-monitoring-14.5.100.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.200.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.200.tgz
index 245841ecf..7cc909dba 100644
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-9.4.200.tgz and b/released/assets/rancher-monitoring/rancher-monitoring-9.4.200.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.201.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.201.tgz
index 9ba139956..c32b52596 100644
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-9.4.201.tgz and b/released/assets/rancher-monitoring/rancher-monitoring-9.4.201.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.202.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.202.tgz
index 341338acc..cbf9ea872 100644
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-9.4.202.tgz and b/released/assets/rancher-monitoring/rancher-monitoring-9.4.202.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc00.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc00.tgz
deleted file mode 100755
index 0b241469f..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc01.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc01.tgz
deleted file mode 100755
index bd463c2a3..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc02.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc02.tgz
deleted file mode 100755
index cb0ac6476..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc02.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc03.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc03.tgz
deleted file mode 100755
index 9a574e6ba..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc03.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc04.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc04.tgz
deleted file mode 100755
index ceebfbc56..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203-rc04.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.203.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.203.tgz
new file mode 100755
index 000000000..fbc6ea9f3
Binary files /dev/null and b/released/assets/rancher-monitoring/rancher-monitoring-9.4.203.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-9.4.204.tgz b/released/assets/rancher-monitoring/rancher-monitoring-9.4.204.tgz
new file mode 100755
index 000000000..be1be2f6b
Binary files /dev/null and b/released/assets/rancher-monitoring/rancher-monitoring-9.4.204.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-14.5.100.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-14.5.100.tgz
new file mode 100755
index 000000000..0811d7e1a
Binary files /dev/null and b/released/assets/rancher-monitoring/rancher-monitoring-crd-14.5.100.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.200.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.200.tgz
index 046d45d06..107ec904c 100644
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.200.tgz and b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.200.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.201.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.201.tgz
index 26517d7af..d44bd338e 100644
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.201.tgz and b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.201.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.202.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.202.tgz
index ed5e71de7..c6db0a3b1 100644
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.202.tgz and b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.202.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc00.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc00.tgz
deleted file mode 100755
index f2994f49c..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc01.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc01.tgz
deleted file mode 100755
index ea95ee011..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc02.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc02.tgz
deleted file mode 100755
index 3213f3e68..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc02.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc03.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc03.tgz
deleted file mode 100755
index f1759dc2b..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc03.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc04.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc04.tgz
deleted file mode 100755
index c771f7a9d..000000000
Binary files a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203-rc04.tgz and /dev/null differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203.tgz
new file mode 100755
index 000000000..61abe98a2
Binary files /dev/null and b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.203.tgz differ
diff --git a/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.204.tgz b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.204.tgz
new file mode 100755
index 000000000..b1158d3fa
Binary files /dev/null and b/released/assets/rancher-monitoring/rancher-monitoring-crd-9.4.204.tgz differ
diff --git a/released/assets/rancher-node-exporter/rancher-node-exporter-1.16.201.tgz b/released/assets/rancher-node-exporter/rancher-node-exporter-1.16.201.tgz
new file mode 100755
index 000000000..1dd6c87b2
Binary files /dev/null and b/released/assets/rancher-node-exporter/rancher-node-exporter-1.16.201.tgz differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.0-alpha800.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.0-alpha800.tgz
deleted file mode 100644
index 8daf0b4dd..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.0-alpha800.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.000.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.000.tgz
index 1f82bb823..0f8d47a98 100644
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.000.tgz and b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.000.tgz differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.100.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.100.tgz
index ea3358670..7f6fca0d0 100644
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.100.tgz and b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.100.tgz differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc100.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc100.tgz
deleted file mode 100644
index 4f1934e80..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc100.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc200.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc200.tgz
deleted file mode 100644
index cd66f36f8..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.2-rc200.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200-rc2.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200-rc2.tgz
deleted file mode 100644
index 65fce374b..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200-rc2.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200.tgz
index c995d0a33..2550ea820 100644
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200.tgz and b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.200.tgz differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc01.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc01.tgz
deleted file mode 100755
index 5b9b0c4b0..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc03.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc03.tgz
deleted file mode 100755
index f094bfeb2..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc03.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc04.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc04.tgz
deleted file mode 100755
index 904932c27..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc04.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc05.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc05.tgz
deleted file mode 100755
index 002e5549f..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc05.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc06.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc06.tgz
deleted file mode 100755
index 563bac822..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc06.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc07.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc07.tgz
deleted file mode 100755
index adb806eeb..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc07.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc08.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc08.tgz
deleted file mode 100755
index 8d94d0c61..000000000
Binary files a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300-rc08.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300.tgz
new file mode 100755
index 000000000..073d30206
Binary files /dev/null and b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.300.tgz differ
diff --git a/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.400.tgz b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.400.tgz
new file mode 100755
index 000000000..15aff0463
Binary files /dev/null and b/released/assets/rancher-operator-crd/rancher-operator-crd-0.1.400.tgz differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.0-alpha800.tgz b/released/assets/rancher-operator/rancher-operator-0.1.0-alpha800.tgz
deleted file mode 100644
index de68be65a..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.0-alpha800.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.000.tgz b/released/assets/rancher-operator/rancher-operator-0.1.000.tgz
index c09004d09..3f60df2b4 100644
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.000.tgz and b/released/assets/rancher-operator/rancher-operator-0.1.000.tgz differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.100.tgz b/released/assets/rancher-operator/rancher-operator-0.1.100.tgz
index c4ff5927b..2c01c4acc 100644
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.100.tgz and b/released/assets/rancher-operator/rancher-operator-0.1.100.tgz differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.2-rc100.tgz b/released/assets/rancher-operator/rancher-operator-0.1.2-rc100.tgz
deleted file mode 100644
index 83ecbb184..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.2-rc100.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.2-rc200.tgz b/released/assets/rancher-operator/rancher-operator-0.1.2-rc200.tgz
deleted file mode 100644
index d22f1224e..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.2-rc200.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.200-rc2.tgz b/released/assets/rancher-operator/rancher-operator-0.1.200-rc2.tgz
deleted file mode 100644
index 37daf3c0e..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.200-rc2.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.200.tgz b/released/assets/rancher-operator/rancher-operator-0.1.200.tgz
index 078c0fb0b..cf340b127 100644
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.200.tgz and b/released/assets/rancher-operator/rancher-operator-0.1.200.tgz differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.300-rc01.tgz b/released/assets/rancher-operator/rancher-operator-0.1.300-rc01.tgz
deleted file mode 100755
index f9600a758..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.300-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.300-rc03.tgz b/released/assets/rancher-operator/rancher-operator-0.1.300-rc03.tgz
deleted file mode 100755
index 0b49112e2..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.300-rc03.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.300-rc04.tgz b/released/assets/rancher-operator/rancher-operator-0.1.300-rc04.tgz
deleted file mode 100755
index eb5cc2a70..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.300-rc04.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.300-rc05.tgz b/released/assets/rancher-operator/rancher-operator-0.1.300-rc05.tgz
deleted file mode 100755
index 3f03d4423..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.300-rc05.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.300-rc06.tgz b/released/assets/rancher-operator/rancher-operator-0.1.300-rc06.tgz
deleted file mode 100755
index 7accfb9e8..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.300-rc06.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.300-rc07.tgz b/released/assets/rancher-operator/rancher-operator-0.1.300-rc07.tgz
deleted file mode 100755
index d671483ff..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.300-rc07.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.300-rc08.tgz b/released/assets/rancher-operator/rancher-operator-0.1.300-rc08.tgz
deleted file mode 100755
index 9330d1446..000000000
Binary files a/released/assets/rancher-operator/rancher-operator-0.1.300-rc08.tgz and /dev/null differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.300.tgz b/released/assets/rancher-operator/rancher-operator-0.1.300.tgz
new file mode 100755
index 000000000..89ee6c239
Binary files /dev/null and b/released/assets/rancher-operator/rancher-operator-0.1.300.tgz differ
diff --git a/released/assets/rancher-operator/rancher-operator-0.1.400.tgz b/released/assets/rancher-operator/rancher-operator-0.1.400.tgz
new file mode 100755
index 000000000..2c0657d5d
Binary files /dev/null and b/released/assets/rancher-operator/rancher-operator-0.1.400.tgz differ
diff --git a/released/assets/rancher-prom2teams/rancher-prom2teams-0.2.000.tgz b/released/assets/rancher-prom2teams/rancher-prom2teams-0.2.000.tgz
new file mode 100755
index 000000000..0dcc56998
Binary files /dev/null and b/released/assets/rancher-prom2teams/rancher-prom2teams-0.2.000.tgz differ
diff --git a/released/assets/rancher-prometheus-adapter/rancher-prometheus-adapter-2.12.101.tgz b/released/assets/rancher-prometheus-adapter/rancher-prometheus-adapter-2.12.101.tgz
new file mode 100755
index 000000000..747deef83
Binary files /dev/null and b/released/assets/rancher-prometheus-adapter/rancher-prometheus-adapter-2.12.101.tgz differ
diff --git a/released/assets/rancher-pushprox/rancher-pushprox-0.1.0.tgz b/released/assets/rancher-pushprox/rancher-pushprox-0.1.0.tgz
index 83ee557bd..722fba877 100644
Binary files a/released/assets/rancher-pushprox/rancher-pushprox-0.1.0.tgz and b/released/assets/rancher-pushprox/rancher-pushprox-0.1.0.tgz differ
diff --git a/released/assets/rancher-pushprox/rancher-pushprox-0.1.1.tgz b/released/assets/rancher-pushprox/rancher-pushprox-0.1.1.tgz
index 743732fb9..4e4581a08 100644
Binary files a/released/assets/rancher-pushprox/rancher-pushprox-0.1.1.tgz and b/released/assets/rancher-pushprox/rancher-pushprox-0.1.1.tgz differ
diff --git a/released/assets/rancher-pushprox/rancher-pushprox-0.1.2.tgz b/released/assets/rancher-pushprox/rancher-pushprox-0.1.2.tgz
index b7aafdc73..b60ae4b37 100644
Binary files a/released/assets/rancher-pushprox/rancher-pushprox-0.1.2.tgz and b/released/assets/rancher-pushprox/rancher-pushprox-0.1.2.tgz differ
diff --git a/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc00.tgz b/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc00.tgz
deleted file mode 100755
index f9673ecae..000000000
Binary files a/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc01.tgz b/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc01.tgz
deleted file mode 100755
index 2033f004b..000000000
Binary files a/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc02.tgz b/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc02.tgz
deleted file mode 100755
index 11d587648..000000000
Binary files a/released/assets/rancher-pushprox/rancher-pushprox-0.1.201-rc02.tgz and /dev/null differ
diff --git a/released/assets/rancher-pushprox/rancher-pushprox-0.1.201.tgz b/released/assets/rancher-pushprox/rancher-pushprox-0.1.201.tgz
new file mode 100755
index 000000000..2dbb29639
Binary files /dev/null and b/released/assets/rancher-pushprox/rancher-pushprox-0.1.201.tgz differ
diff --git a/released/assets/rancher-pushprox/rancher-pushprox-0.1.300.tgz b/released/assets/rancher-pushprox/rancher-pushprox-0.1.300.tgz
new file mode 100755
index 000000000..05c25b59e
Binary files /dev/null and b/released/assets/rancher-pushprox/rancher-pushprox-0.1.300.tgz differ
diff --git a/released/assets/rancher-sachet/rancher-sachet-1.0.100.tgz b/released/assets/rancher-sachet/rancher-sachet-1.0.100.tgz
new file mode 100755
index 000000000..0bb35071c
Binary files /dev/null and b/released/assets/rancher-sachet/rancher-sachet-1.0.100.tgz differ
diff --git a/released/assets/rancher-tracing/rancher-tracing-1.20.001-rc00.tgz b/released/assets/rancher-tracing/rancher-tracing-1.20.001-rc00.tgz
deleted file mode 100755
index 29b7017eb..000000000
Binary files a/released/assets/rancher-tracing/rancher-tracing-1.20.001-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-tracing/rancher-tracing-1.20.001.tgz b/released/assets/rancher-tracing/rancher-tracing-1.20.001.tgz
index 752ecb3f2..cd7626f0d 100644
Binary files a/released/assets/rancher-tracing/rancher-tracing-1.20.001.tgz and b/released/assets/rancher-tracing/rancher-tracing-1.20.001.tgz differ
diff --git a/released/assets/rancher-tracing/rancher-tracing-1.20.002-rc00.tgz b/released/assets/rancher-tracing/rancher-tracing-1.20.002-rc00.tgz
deleted file mode 100755
index 628640406..000000000
Binary files a/released/assets/rancher-tracing/rancher-tracing-1.20.002-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-tracing/rancher-tracing-1.20.002.tgz b/released/assets/rancher-tracing/rancher-tracing-1.20.002.tgz
new file mode 100755
index 000000000..dbf847296
Binary files /dev/null and b/released/assets/rancher-tracing/rancher-tracing-1.20.002.tgz differ
diff --git a/released/assets/rancher-tracing/rancher-tracing-1.20.100.tgz b/released/assets/rancher-tracing/rancher-tracing-1.20.100.tgz
new file mode 100755
index 000000000..4e03203f1
Binary files /dev/null and b/released/assets/rancher-tracing/rancher-tracing-1.20.100.tgz differ
diff --git a/released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000-rc01.tgz b/released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000-rc01.tgz
deleted file mode 100755
index 4ae36a85c..000000000
Binary files a/released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000.tgz b/released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000.tgz
new file mode 100755
index 000000000..55c7f2fcc
Binary files /dev/null and b/released/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.0.000.tgz differ
diff --git a/released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000-rc01.tgz b/released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000-rc01.tgz
deleted file mode 100755
index a95bae69d..000000000
Binary files a/released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000.tgz b/released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000.tgz
new file mode 100755
index 000000000..09c7044fd
Binary files /dev/null and b/released/assets/rancher-vsphere-csi/rancher-vsphere-csi-2.1.000.tgz differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta300.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta300.tgz
deleted file mode 100644
index 20587102f..000000000
Binary files a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta300.tgz and /dev/null differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta500.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta500.tgz
index 895ec88d4..a106cea12 100644
Binary files a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta500.tgz and b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta500.tgz differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta600.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta600.tgz
deleted file mode 100644
index 72053e5c9..000000000
Binary files a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta600.tgz and /dev/null differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta700.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta700.tgz
index 79635516b..f1e46996e 100644
Binary files a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta700.tgz and b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta700.tgz differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta800.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta800.tgz
deleted file mode 100644
index 991627675..000000000
Binary files a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta800.tgz and /dev/null differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta900.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta900.tgz
index 9a2bd2c69..2535be4fb 100644
Binary files a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta900.tgz and b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta900.tgz differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901-rc00.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901-rc00.tgz
deleted file mode 100755
index 88febfd29..000000000
Binary files a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901-rc00.tgz and /dev/null differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901.tgz
new file mode 100755
index 000000000..09f0a67ae
Binary files /dev/null and b/released/assets/rancher-webhook/rancher-webhook-0.1.0-beta901.tgz differ
diff --git a/released/assets/rancher-webhook/rancher-webhook-0.1.000.tgz b/released/assets/rancher-webhook/rancher-webhook-0.1.000.tgz
new file mode 100755
index 000000000..f958933be
Binary files /dev/null and b/released/assets/rancher-webhook/rancher-webhook-0.1.000.tgz differ
diff --git a/released/assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000.tgz b/released/assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000.tgz
new file mode 100755
index 000000000..19bdbc899
Binary files /dev/null and b/released/assets/rancher-windows-exporter/rancher-windows-exporter-0.1.000.tgz differ
diff --git a/released/assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100.tgz b/released/assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100.tgz
new file mode 100755
index 000000000..3a4b21290
Binary files /dev/null and b/released/assets/rancher-wins-upgrader/rancher-wins-upgrader-0.0.100.tgz differ
diff --git a/released/assets/rio/rio-0.8.000.tgz b/released/assets/rio/rio-0.8.000.tgz
index 168c2af22..691ae46eb 100644
Binary files a/released/assets/rio/rio-0.8.000.tgz and b/released/assets/rio/rio-0.8.000.tgz differ
diff --git a/released/assets/rio/rio-0.8.001-rc00.tgz b/released/assets/rio/rio-0.8.001-rc00.tgz
deleted file mode 100755
index 85bf5f081..000000000
Binary files a/released/assets/rio/rio-0.8.001-rc00.tgz and /dev/null differ
diff --git a/released/assets/rio/rio-0.8.001.tgz b/released/assets/rio/rio-0.8.001.tgz
new file mode 100755
index 000000000..f10a96a31
Binary files /dev/null and b/released/assets/rio/rio-0.8.001.tgz differ
diff --git a/released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc00.tgz b/released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc00.tgz
deleted file mode 100755
index d179f3d73..000000000
Binary files a/released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc00.tgz and /dev/null differ
diff --git a/released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc01.tgz b/released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc01.tgz
deleted file mode 100755
index 55a519c87..000000000
Binary files a/released/assets/vsphere-cpi/vsphere-cpi-1.0.000-rc01.tgz and /dev/null differ
diff --git a/released/assets/vsphere-csi/vsphere-csi-2.1.000-rc00.tgz b/released/assets/vsphere-csi/vsphere-csi-2.1.000-rc00.tgz
deleted file mode 100755
index 3ae0c9859..000000000
Binary files a/released/assets/vsphere-csi/vsphere-csi-2.1.000-rc00.tgz and /dev/null differ
diff --git a/released/assets/vsphere-csi/vsphere-csi-2.1.000-rc01.tgz b/released/assets/vsphere-csi/vsphere-csi-2.1.000-rc01.tgz
deleted file mode 100755
index 4d26733b6..000000000
Binary files a/released/assets/vsphere-csi/vsphere-csi-2.1.000-rc01.tgz and /dev/null differ
diff --git a/released/charts/README.md b/released/charts/README.md
new file mode 100755
index 000000000..fdf7ee2c2
--- /dev/null
+++ b/released/charts/README.md
@@ -0,0 +1,3 @@
+## Charts
+
+This folder contains the unarchived Helm charts that are currently being served at charts.rancher.io.
\ No newline at end of file
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/Chart.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/Chart.yaml
new file mode 100644
index 000000000..37dcfb0d8
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/release-name: fleet-agent
+ catalog.cattle.io/os: linux
+apiVersion: v2
+appVersion: 0.3.0
+description: Fleet Manager Agent - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-agent
+version: 0.3.000
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/_helpers.tpl b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/configmap.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/configmap.yaml
new file mode 100644
index 000000000..ce61a8756
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/configmap.yaml
@@ -0,0 +1,12 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: fleet-agent
+data:
+ config: |-
+ {
+ {{ if .Values.labels }}
+ "labels":{{toJson .Values.labels}},
+ {{ end }}
+ "clientID":"{{.Values.clientID}}"
+ }
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/deployment.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/deployment.yaml
new file mode 100644
index 000000000..544e1dab7
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/deployment.yaml
@@ -0,0 +1,22 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-agent
+spec:
+ selector:
+ matchLabels:
+ app: fleet-agent
+ template:
+ metadata:
+ labels:
+ app: fleet-agent
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}'
+ name: fleet-agent
+ serviceAccountName: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/network_policy_allow_all.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/network_policy_allow_all.yaml
new file mode 100644
index 000000000..a72109a06
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ .Values.internal.systemNamespace }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/patch_default_serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/patch_default_serviceaccount.yaml
new file mode 100644
index 000000000..83f2f9783
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-fleet-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: fleet-agent
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ .Values.internal.systemNamespace }}]
+ backoffLimit: 1
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/rbac.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/rbac.yaml
new file mode 100644
index 000000000..805949bf2
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/rbac.yaml
@@ -0,0 +1,25 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-agent-system-fleet-agent-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-agent-system-fleet-agent-role-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-agent-system-fleet-agent-role
+subjects:
+- kind: ServiceAccount
+ name: fleet-agent
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/secret.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/secret.yaml
new file mode 100644
index 000000000..471588204
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/secret.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+data:
+ systemRegistrationNamespace: "{{b64enc .Values.systemRegistrationNamespace}}"
+ clusterNamespace: "{{b64enc .Values.clusterNamespace}}"
+ token: "{{b64enc .Values.token}}"
+ apiServerURL: "{{b64enc .Values.apiServerURL}}"
+ apiServerCA: "{{b64enc .Values.apiServerCA}}"
+kind: Secret
+metadata:
+ name: fleet-agent-bootstrap
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/serviceaccount.yaml
new file mode 100644
index 000000000..73e27f0be
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/templates/validate.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/validate.yaml
new file mode 100644
index 000000000..d53ff1c50
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/templates/validate.yaml
@@ -0,0 +1,11 @@
+{{if ne .Release.Namespace .Values.internal.systemNamespace }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.systemNamespace) }}
+{{end}}
+
+{{if ne .Release.Name .Values.internal.managedReleaseName }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.managedReleaseName) }}
+{{end}}
+
+{{if not .Values.apiServerURL }}
+{{ fail "apiServerURL is required to be set, and most likely also apiServerCA" }}
+{{end}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.000/values.yaml b/released/charts/fleet-agent/fleet-agent/0.3.000/values.yaml
new file mode 100644
index 000000000..7770a8e39
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.000/values.yaml
@@ -0,0 +1,39 @@
+image:
+ repository: rancher/fleet-agent
+ tag: v0.3.0
+
+# The public URL of the Kubernetes API server running the Fleet Manager must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# The the pem encoded value of the CA of the Kubernetes API server running the Fleet Manager.
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# The cluster registration value
+token: ""
+
+# Labels to add to the cluster upon registration only. They are not added after the fact.
+#labels:
+# foo: bar
+
+# The client ID of the cluster to associate with
+clientID: ""
+
+# The namespace of the cluster we are register with
+clusterNamespace: ""
+
+# The namespace containing the clusters registration secrets
+systemRegistrationNamespace: fleet-clusters-system
+
+# Please do not change the below setting unless you really know what you are doing
+internal:
+ systemNamespace: fleet-system
+ managedReleaseName: fleet-agent
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/Chart.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/Chart.yaml
new file mode 100644
index 000000000..954463742
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/release-name: fleet-agent
+ catalog.cattle.io/os: linux
+apiVersion: v2
+appVersion: 0.3.1
+description: Fleet Manager Agent - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-agent
+version: 0.3.100
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/_helpers.tpl b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/configmap.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/configmap.yaml
new file mode 100644
index 000000000..ce61a8756
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/configmap.yaml
@@ -0,0 +1,12 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: fleet-agent
+data:
+ config: |-
+ {
+ {{ if .Values.labels }}
+ "labels":{{toJson .Values.labels}},
+ {{ end }}
+ "clientID":"{{.Values.clientID}}"
+ }
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/deployment.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/deployment.yaml
new file mode 100644
index 000000000..544e1dab7
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/deployment.yaml
@@ -0,0 +1,22 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-agent
+spec:
+ selector:
+ matchLabels:
+ app: fleet-agent
+ template:
+ metadata:
+ labels:
+ app: fleet-agent
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}'
+ name: fleet-agent
+ serviceAccountName: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/network_policy_allow_all.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/network_policy_allow_all.yaml
new file mode 100644
index 000000000..a72109a06
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ .Values.internal.systemNamespace }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/patch_default_serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/patch_default_serviceaccount.yaml
new file mode 100644
index 000000000..83f2f9783
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-fleet-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: fleet-agent
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ .Values.internal.systemNamespace }}]
+ backoffLimit: 1
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/rbac.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/rbac.yaml
new file mode 100644
index 000000000..805949bf2
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/rbac.yaml
@@ -0,0 +1,25 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-agent-system-fleet-agent-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-agent-system-fleet-agent-role-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-agent-system-fleet-agent-role
+subjects:
+- kind: ServiceAccount
+ name: fleet-agent
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/secret.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/secret.yaml
new file mode 100644
index 000000000..471588204
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/secret.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+data:
+ systemRegistrationNamespace: "{{b64enc .Values.systemRegistrationNamespace}}"
+ clusterNamespace: "{{b64enc .Values.clusterNamespace}}"
+ token: "{{b64enc .Values.token}}"
+ apiServerURL: "{{b64enc .Values.apiServerURL}}"
+ apiServerCA: "{{b64enc .Values.apiServerCA}}"
+kind: Secret
+metadata:
+ name: fleet-agent-bootstrap
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/serviceaccount.yaml
new file mode 100644
index 000000000..73e27f0be
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/templates/validate.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/validate.yaml
new file mode 100644
index 000000000..d53ff1c50
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/templates/validate.yaml
@@ -0,0 +1,11 @@
+{{if ne .Release.Namespace .Values.internal.systemNamespace }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.systemNamespace) }}
+{{end}}
+
+{{if ne .Release.Name .Values.internal.managedReleaseName }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.managedReleaseName) }}
+{{end}}
+
+{{if not .Values.apiServerURL }}
+{{ fail "apiServerURL is required to be set, and most likely also apiServerCA" }}
+{{end}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.100/values.yaml b/released/charts/fleet-agent/fleet-agent/0.3.100/values.yaml
new file mode 100644
index 000000000..70a6eebed
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.100/values.yaml
@@ -0,0 +1,39 @@
+image:
+ repository: rancher/fleet-agent
+ tag: v0.3.1
+
+# The public URL of the Kubernetes API server running the Fleet Manager must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# The the pem encoded value of the CA of the Kubernetes API server running the Fleet Manager.
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# The cluster registration value
+token: ""
+
+# Labels to add to the cluster upon registration only. They are not added after the fact.
+#labels:
+# foo: bar
+
+# The client ID of the cluster to associate with
+clientID: ""
+
+# The namespace of the cluster we are register with
+clusterNamespace: ""
+
+# The namespace containing the clusters registration secrets
+systemRegistrationNamespace: fleet-clusters-system
+
+# Please do not change the below setting unless you really know what you are doing
+internal:
+ systemNamespace: fleet-system
+ managedReleaseName: fleet-agent
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/Chart.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/Chart.yaml
new file mode 100644
index 000000000..86afc5c47
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: fleet-agent
+apiVersion: v2
+appVersion: 0.3.2
+description: Fleet Manager Agent - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-agent
+version: 0.3.200
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/_helpers.tpl b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/configmap.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/configmap.yaml
new file mode 100644
index 000000000..ce61a8756
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/configmap.yaml
@@ -0,0 +1,12 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: fleet-agent
+data:
+ config: |-
+ {
+ {{ if .Values.labels }}
+ "labels":{{toJson .Values.labels}},
+ {{ end }}
+ "clientID":"{{.Values.clientID}}"
+ }
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/deployment.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/deployment.yaml
new file mode 100644
index 000000000..544e1dab7
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/deployment.yaml
@@ -0,0 +1,22 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-agent
+spec:
+ selector:
+ matchLabels:
+ app: fleet-agent
+ template:
+ metadata:
+ labels:
+ app: fleet-agent
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}'
+ name: fleet-agent
+ serviceAccountName: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/network_policy_allow_all.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/network_policy_allow_all.yaml
new file mode 100644
index 000000000..a72109a06
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ .Values.internal.systemNamespace }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/patch_default_serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/patch_default_serviceaccount.yaml
new file mode 100644
index 000000000..83f2f9783
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-fleet-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: fleet-agent
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ .Values.internal.systemNamespace }}]
+ backoffLimit: 1
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/rbac.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/rbac.yaml
new file mode 100644
index 000000000..805949bf2
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/rbac.yaml
@@ -0,0 +1,25 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-agent-system-fleet-agent-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-agent-system-fleet-agent-role-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-agent-system-fleet-agent-role
+subjects:
+- kind: ServiceAccount
+ name: fleet-agent
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/secret.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/secret.yaml
new file mode 100644
index 000000000..471588204
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/secret.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+data:
+ systemRegistrationNamespace: "{{b64enc .Values.systemRegistrationNamespace}}"
+ clusterNamespace: "{{b64enc .Values.clusterNamespace}}"
+ token: "{{b64enc .Values.token}}"
+ apiServerURL: "{{b64enc .Values.apiServerURL}}"
+ apiServerCA: "{{b64enc .Values.apiServerCA}}"
+kind: Secret
+metadata:
+ name: fleet-agent-bootstrap
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/serviceaccount.yaml
new file mode 100644
index 000000000..73e27f0be
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/templates/validate.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/validate.yaml
new file mode 100644
index 000000000..d53ff1c50
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/templates/validate.yaml
@@ -0,0 +1,11 @@
+{{if ne .Release.Namespace .Values.internal.systemNamespace }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.systemNamespace) }}
+{{end}}
+
+{{if ne .Release.Name .Values.internal.managedReleaseName }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.managedReleaseName) }}
+{{end}}
+
+{{if not .Values.apiServerURL }}
+{{ fail "apiServerURL is required to be set, and most likely also apiServerCA" }}
+{{end}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.200/values.yaml b/released/charts/fleet-agent/fleet-agent/0.3.200/values.yaml
new file mode 100644
index 000000000..249576d0e
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.200/values.yaml
@@ -0,0 +1,39 @@
+image:
+ repository: rancher/fleet-agent
+ tag: v0.3.2
+
+# The public URL of the Kubernetes API server running the Fleet Manager must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# The the pem encoded value of the CA of the Kubernetes API server running the Fleet Manager.
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# The cluster registration value
+token: ""
+
+# Labels to add to the cluster upon registration only. They are not added after the fact.
+#labels:
+# foo: bar
+
+# The client ID of the cluster to associate with
+clientID: ""
+
+# The namespace of the cluster we are register with
+clusterNamespace: ""
+
+# The namespace containing the clusters registration secrets
+systemRegistrationNamespace: fleet-clusters-system
+
+# Please do not change the below setting unless you really know what you are doing
+internal:
+ systemNamespace: fleet-system
+ managedReleaseName: fleet-agent
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/Chart.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/Chart.yaml
new file mode 100644
index 000000000..6e58d9e3e
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: fleet-agent
+apiVersion: v2
+appVersion: 0.3.3
+description: Fleet Manager Agent - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-agent
+version: 0.3.300
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/_helpers.tpl b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/configmap.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/configmap.yaml
new file mode 100644
index 000000000..ce61a8756
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/configmap.yaml
@@ -0,0 +1,12 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: fleet-agent
+data:
+ config: |-
+ {
+ {{ if .Values.labels }}
+ "labels":{{toJson .Values.labels}},
+ {{ end }}
+ "clientID":"{{.Values.clientID}}"
+ }
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/deployment.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/deployment.yaml
new file mode 100644
index 000000000..544e1dab7
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/deployment.yaml
@@ -0,0 +1,22 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-agent
+spec:
+ selector:
+ matchLabels:
+ app: fleet-agent
+ template:
+ metadata:
+ labels:
+ app: fleet-agent
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}'
+ name: fleet-agent
+ serviceAccountName: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/network_policy_allow_all.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/network_policy_allow_all.yaml
new file mode 100644
index 000000000..a72109a06
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ .Values.internal.systemNamespace }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/patch_default_serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/patch_default_serviceaccount.yaml
new file mode 100644
index 000000000..83f2f9783
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-fleet-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: fleet-agent
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ .Values.internal.systemNamespace }}]
+ backoffLimit: 1
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/rbac.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/rbac.yaml
new file mode 100644
index 000000000..805949bf2
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/rbac.yaml
@@ -0,0 +1,25 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-agent-system-fleet-agent-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-agent-system-fleet-agent-role-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-agent-system-fleet-agent-role
+subjects:
+- kind: ServiceAccount
+ name: fleet-agent
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/secret.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/secret.yaml
new file mode 100644
index 000000000..471588204
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/secret.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+data:
+ systemRegistrationNamespace: "{{b64enc .Values.systemRegistrationNamespace}}"
+ clusterNamespace: "{{b64enc .Values.clusterNamespace}}"
+ token: "{{b64enc .Values.token}}"
+ apiServerURL: "{{b64enc .Values.apiServerURL}}"
+ apiServerCA: "{{b64enc .Values.apiServerCA}}"
+kind: Secret
+metadata:
+ name: fleet-agent-bootstrap
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/serviceaccount.yaml
new file mode 100644
index 000000000..73e27f0be
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/templates/validate.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/validate.yaml
new file mode 100644
index 000000000..d53ff1c50
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/templates/validate.yaml
@@ -0,0 +1,11 @@
+{{if ne .Release.Namespace .Values.internal.systemNamespace }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.systemNamespace) }}
+{{end}}
+
+{{if ne .Release.Name .Values.internal.managedReleaseName }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.managedReleaseName) }}
+{{end}}
+
+{{if not .Values.apiServerURL }}
+{{ fail "apiServerURL is required to be set, and most likely also apiServerCA" }}
+{{end}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.300/values.yaml b/released/charts/fleet-agent/fleet-agent/0.3.300/values.yaml
new file mode 100644
index 000000000..4c5ff6731
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.300/values.yaml
@@ -0,0 +1,39 @@
+image:
+ repository: rancher/fleet-agent
+ tag: v0.3.3
+
+# The public URL of the Kubernetes API server running the Fleet Manager must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# The the pem encoded value of the CA of the Kubernetes API server running the Fleet Manager.
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# The cluster registration value
+token: ""
+
+# Labels to add to the cluster upon registration only. They are not added after the fact.
+#labels:
+# foo: bar
+
+# The client ID of the cluster to associate with
+clientID: ""
+
+# The namespace of the cluster we are register with
+clusterNamespace: ""
+
+# The namespace containing the clusters registration secrets
+systemRegistrationNamespace: fleet-clusters-system
+
+# Please do not change the below setting unless you really know what you are doing
+internal:
+ systemNamespace: fleet-system
+ managedReleaseName: fleet-agent
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/Chart.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/Chart.yaml
new file mode 100755
index 000000000..8da67beb6
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: fleet-agent
+apiVersion: v2
+appVersion: 0.3.4
+description: Fleet Manager Agent - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-agent
+version: 0.3.400
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/_helpers.tpl b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/_helpers.tpl
new file mode 100755
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/configmap.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/configmap.yaml
new file mode 100755
index 000000000..ce61a8756
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/configmap.yaml
@@ -0,0 +1,12 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: fleet-agent
+data:
+ config: |-
+ {
+ {{ if .Values.labels }}
+ "labels":{{toJson .Values.labels}},
+ {{ end }}
+ "clientID":"{{.Values.clientID}}"
+ }
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/deployment.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/deployment.yaml
new file mode 100755
index 000000000..72323dc76
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/deployment.yaml
@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-agent
+spec:
+ selector:
+ matchLabels:
+ app: fleet-agent
+ template:
+ metadata:
+ labels:
+ app: fleet-agent
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}'
+ name: fleet-agent
+ serviceAccountName: fleet-agent
+ {{- with .Values.fleetAgent.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.fleetAgent.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/network_policy_allow_all.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/network_policy_allow_all.yaml
new file mode 100755
index 000000000..a72109a06
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ .Values.internal.systemNamespace }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/patch_default_serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/patch_default_serviceaccount.yaml
new file mode 100755
index 000000000..2448cb4f3
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-fleet-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: fleet-agent
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ .Values.internal.systemNamespace }}]
+ {{- with .Values.kubectl.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.kubectl.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ backoffLimit: 1
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/rbac.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/rbac.yaml
new file mode 100755
index 000000000..805949bf2
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/rbac.yaml
@@ -0,0 +1,25 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-agent-system-fleet-agent-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-agent-system-fleet-agent-role-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-agent-system-fleet-agent-role
+subjects:
+- kind: ServiceAccount
+ name: fleet-agent
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/secret.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/secret.yaml
new file mode 100755
index 000000000..471588204
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/secret.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+data:
+ systemRegistrationNamespace: "{{b64enc .Values.systemRegistrationNamespace}}"
+ clusterNamespace: "{{b64enc .Values.clusterNamespace}}"
+ token: "{{b64enc .Values.token}}"
+ apiServerURL: "{{b64enc .Values.apiServerURL}}"
+ apiServerCA: "{{b64enc .Values.apiServerCA}}"
+kind: Secret
+metadata:
+ name: fleet-agent-bootstrap
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/serviceaccount.yaml
new file mode 100755
index 000000000..73e27f0be
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/templates/validate.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/validate.yaml
new file mode 100755
index 000000000..d53ff1c50
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/templates/validate.yaml
@@ -0,0 +1,11 @@
+{{if ne .Release.Namespace .Values.internal.systemNamespace }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.systemNamespace) }}
+{{end}}
+
+{{if ne .Release.Name .Values.internal.managedReleaseName }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.managedReleaseName) }}
+{{end}}
+
+{{if not .Values.apiServerURL }}
+{{ fail "apiServerURL is required to be set, and most likely also apiServerCA" }}
+{{end}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.400/values.yaml b/released/charts/fleet-agent/fleet-agent/0.3.400/values.yaml
new file mode 100755
index 000000000..22bb74ee8
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.400/values.yaml
@@ -0,0 +1,52 @@
+image:
+ repository: rancher/fleet-agent
+ tag: v0.3.4
+
+# The public URL of the Kubernetes API server running the Fleet Manager must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# The the pem encoded value of the CA of the Kubernetes API server running the Fleet Manager.
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# The cluster registration value
+token: ""
+
+# Labels to add to the cluster upon registration only. They are not added after the fact.
+#labels:
+# foo: bar
+
+# The client ID of the cluster to associate with
+clientID: ""
+
+# The namespace of the cluster we are register with
+clusterNamespace: ""
+
+# The namespace containing the clusters registration secrets
+systemRegistrationNamespace: fleet-clusters-system
+
+# Please do not change the below setting unless you really know what you are doing
+internal:
+ systemNamespace: fleet-system
+ managedReleaseName: fleet-agent
+
+# The nodeSelector and tolerations for the agent deployment
+fleetAgent:
+ nodeSelector: {}
+ tolerations: []
+kubectl:
+ nodeSelector:
+ kubernetes.io/os: linux
+ tolerations:
+ - key: cattle.io/os
+ operator: "Equal"
+ value: "linux"
+ effect: NoSchedule
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/Chart.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/Chart.yaml
new file mode 100755
index 000000000..a93c85e00
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: fleet-agent
+apiVersion: v2
+appVersion: 0.3.5
+description: Fleet Manager Agent - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-agent
+version: 0.3.500
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/_helpers.tpl b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/_helpers.tpl
new file mode 100755
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/configmap.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/configmap.yaml
new file mode 100755
index 000000000..ce61a8756
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/configmap.yaml
@@ -0,0 +1,12 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: fleet-agent
+data:
+ config: |-
+ {
+ {{ if .Values.labels }}
+ "labels":{{toJson .Values.labels}},
+ {{ end }}
+ "clientID":"{{.Values.clientID}}"
+ }
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/deployment.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/deployment.yaml
new file mode 100755
index 000000000..72323dc76
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/deployment.yaml
@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-agent
+spec:
+ selector:
+ matchLabels:
+ app: fleet-agent
+ template:
+ metadata:
+ labels:
+ app: fleet-agent
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}'
+ name: fleet-agent
+ serviceAccountName: fleet-agent
+ {{- with .Values.fleetAgent.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.fleetAgent.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/network_policy_allow_all.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/network_policy_allow_all.yaml
new file mode 100755
index 000000000..a72109a06
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ .Values.internal.systemNamespace }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/patch_default_serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/patch_default_serviceaccount.yaml
new file mode 100755
index 000000000..2448cb4f3
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-fleet-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: fleet-agent
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ .Values.internal.systemNamespace }}]
+ {{- with .Values.kubectl.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.kubectl.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ backoffLimit: 1
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/rbac.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/rbac.yaml
new file mode 100755
index 000000000..805949bf2
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/rbac.yaml
@@ -0,0 +1,25 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-agent-system-fleet-agent-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-agent-system-fleet-agent-role-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-agent-system-fleet-agent-role
+subjects:
+- kind: ServiceAccount
+ name: fleet-agent
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/secret.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/secret.yaml
new file mode 100755
index 000000000..471588204
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/secret.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+data:
+ systemRegistrationNamespace: "{{b64enc .Values.systemRegistrationNamespace}}"
+ clusterNamespace: "{{b64enc .Values.clusterNamespace}}"
+ token: "{{b64enc .Values.token}}"
+ apiServerURL: "{{b64enc .Values.apiServerURL}}"
+ apiServerCA: "{{b64enc .Values.apiServerCA}}"
+kind: Secret
+metadata:
+ name: fleet-agent-bootstrap
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/serviceaccount.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/serviceaccount.yaml
new file mode 100755
index 000000000..73e27f0be
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-agent
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/templates/validate.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/validate.yaml
new file mode 100755
index 000000000..d53ff1c50
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/templates/validate.yaml
@@ -0,0 +1,11 @@
+{{if ne .Release.Namespace .Values.internal.systemNamespace }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.systemNamespace) }}
+{{end}}
+
+{{if ne .Release.Name .Values.internal.managedReleaseName }}
+{{ fail (printf "This chart must be installed in the namespace %s as the release name fleet-agent" .Values.internal.managedReleaseName) }}
+{{end}}
+
+{{if not .Values.apiServerURL }}
+{{ fail "apiServerURL is required to be set, and most likely also apiServerCA" }}
+{{end}}
diff --git a/released/charts/fleet-agent/fleet-agent/0.3.500/values.yaml b/released/charts/fleet-agent/fleet-agent/0.3.500/values.yaml
new file mode 100755
index 000000000..b6799a1e5
--- /dev/null
+++ b/released/charts/fleet-agent/fleet-agent/0.3.500/values.yaml
@@ -0,0 +1,56 @@
+image:
+ repository: rancher/fleet-agent
+ tag: v0.3.5-rc5
+
+# The public URL of the Kubernetes API server running the Fleet Manager must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# The the pem encoded value of the CA of the Kubernetes API server running the Fleet Manager.
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# The cluster registration value
+token: ""
+
+# Labels to add to the cluster upon registration only. They are not added after the fact.
+#labels:
+# foo: bar
+
+# The client ID of the cluster to associate with
+clientID: ""
+
+# The namespace of the cluster we are register with
+clusterNamespace: ""
+
+# The namespace containing the clusters registration secrets
+systemRegistrationNamespace: fleet-clusters-system
+
+# Please do not change the below setting unless you really know what you are doing
+internal:
+ systemNamespace: fleet-system
+ managedReleaseName: fleet-agent
+
+# The nodeSelector and tolerations for the agent deployment
+fleetAgent:
+ nodeSelector: {}
+ tolerations: []
+kubectl:
+ nodeSelector:
+ kubernetes.io/os: linux
+ tolerations:
+ - key: cattle.io/os
+ operator: "Equal"
+ value: "linux"
+ effect: NoSchedule
+ - key: node.cloudprovider.kubernetes.io/uninitialized
+ operator: "Equal"
+ value: "true"
+ effect: NoSchedule
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.20.2
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.000/Chart.yaml b/released/charts/fleet-crd/fleet-crd/0.3.000/Chart.yaml
new file mode 100644
index 000000000..1ede6c2d8
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.000/Chart.yaml
@@ -0,0 +1,11 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/release-name: fleet-crd
+apiVersion: v2
+appVersion: 0.3.0
+description: Fleet Manager CustomResourceDefinitions
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-crd
+version: 0.3.000
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.000/templates/crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.000/templates/crds.yaml
new file mode 100644
index 000000000..2143761d0
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.000/templates/crds.yaml
@@ -0,0 +1,2143 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundles.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Bundle
+ plural: bundles
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ resources:
+ items:
+ properties:
+ content:
+ nullable: true
+ type: string
+ encoding:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ rolloutStrategy:
+ nullable: true
+ properties:
+ autoPartitionSize:
+ nullable: true
+ type: string
+ maxUnavailable:
+ nullable: true
+ type: string
+ maxUnavailablePartitions:
+ nullable: true
+ type: string
+ partitions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxUnavailable:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ targetRestrictions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ nullable: true
+ type: array
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ status:
+ properties:
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ maxNew:
+ type: integer
+ maxUnavailable:
+ type: integer
+ maxUnavailablePartitions:
+ type: integer
+ newlyCreated:
+ type: integer
+ partitions:
+ items:
+ properties:
+ count:
+ type: integer
+ maxUnavailable:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ unavailablePartitions:
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundledeployments.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.deployed
+ name: Deployed
+ type: string
+ - JSONPath: .status.display.monitored
+ name: Monitored
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: BundleDeployment
+ plural: bundledeployments
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ deploymentID:
+ nullable: true
+ type: string
+ options:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ stagedDeploymentID:
+ nullable: true
+ type: string
+ stagedOptions:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ appliedDeploymentID:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ deployed:
+ nullable: true
+ type: string
+ monitored:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nonModified:
+ type: boolean
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ ready:
+ type: boolean
+ release:
+ nullable: true
+ type: string
+ syncGeneration:
+ nullable: true
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundlenamespacemappings.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: BundleNamespaceMapping
+ plural: bundlenamespacemappings
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ bundleSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clustergroups.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: Clusters-Ready
+ type: string
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: ClusterGroup
+ plural: clustergroups
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ clusterCount:
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ nonReadyClusterCount:
+ type: integer
+ nonReadyClusters:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusters.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.display.readyNodes
+ name: Nodes-Ready
+ type: string
+ - JSONPath: .status.display.sampleNode
+ name: Sample-Node
+ type: string
+ - JSONPath: .status.agent.lastSeen
+ name: Last-Seen
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Cluster
+ plural: clusters
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ kubeConfigSecret:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ redeployAgentGeneration:
+ type: integer
+ type: object
+ status:
+ properties:
+ agent:
+ properties:
+ lastSeen:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ nonReadyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ nonReadyNodes:
+ type: integer
+ readyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readyNodes:
+ type: integer
+ type: object
+ agentDeployedGeneration:
+ nullable: true
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyGitRepos:
+ type: integer
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyNodes:
+ nullable: true
+ type: string
+ sampleNode:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ readyGitRepos:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrationtokens.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.secretName
+ name: Secret-Name
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistrationToken
+ plural: clusterregistrationtokens
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ ttl:
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ expires:
+ nullable: true
+ type: string
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitrepos.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.repo
+ name: Repo
+ type: string
+ - JSONPath: .status.commit
+ name: Commit
+ type: string
+ - JSONPath: .status.display.readyBundleDeployments
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: GitRepo
+ plural: gitrepos
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ forceSyncGeneration:
+ type: integer
+ paths:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ paused:
+ type: boolean
+ pollingInterval:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ targetNamespace:
+ nullable: true
+ type: string
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyClusters:
+ type: integer
+ display:
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ readyBundleDeployments:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ gitJobStatus:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ readyClusters:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ resourceErrors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resources:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ id:
+ nullable: true
+ type: string
+ incompleteState:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ perClusterState:
+ items:
+ properties:
+ clusterId:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: object
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrations.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.clusterName
+ name: Cluster-Name
+ type: string
+ - JSONPath: .spec.clusterLabels
+ name: Labels
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistration
+ plural: clusterregistrations
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ clientRandom:
+ nullable: true
+ type: string
+ clusterLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ status:
+ properties:
+ clusterName:
+ nullable: true
+ type: string
+ granted:
+ type: boolean
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitreporestrictions.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .defaultServiceAccount
+ name: Default-ServiceAccount
+ type: string
+ - JSONPath: .allowedServiceAccounts
+ name: Allowed-ServiceAccounts
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: GitRepoRestriction
+ plural: gitreporestrictions
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ allowedClientSecretNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedRepoPatterns:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedServiceAccounts:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ defaultClientSecretName:
+ nullable: true
+ type: string
+ defaultServiceAccount:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: contents.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: Content
+ plural: contents
+ scope: Cluster
+ validation:
+ openAPIV3Schema:
+ properties:
+ content:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.000/templates/gitjobs-crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.000/templates/gitjobs-crds.yaml
new file mode 100644
index 000000000..2c26f79ff
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.000/templates/gitjobs-crds.yaml
@@ -0,0 +1,3208 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitjobs.gitjob.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.git.repo
+ name: REPO
+ type: string
+ - JSONPath: .spec.git.branch
+ name: BRANCH
+ type: string
+ - JSONPath: .status.commit
+ name: COMMIT
+ type: string
+ - JSONPath: .status.jobStatus
+ name: JOBSTATUS
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ group: gitjob.cattle.io
+ names:
+ kind: GitJob
+ plural: gitjobs
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ forceUpdateGeneration:
+ type: integer
+ git:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ insecureSkipTLSVerify:
+ type: boolean
+ provider:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ secret:
+ nullable: true
+ type: string
+ type: object
+ jobSpec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ backoffLimit:
+ nullable: true
+ type: integer
+ completions:
+ nullable: true
+ type: integer
+ manualSelector:
+ nullable: true
+ type: boolean
+ parallelism:
+ nullable: true
+ type: integer
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ template:
+ properties:
+ metadata:
+ properties:
+ annotations:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ creationTimestamp:
+ nullable: true
+ type: string
+ deletionGracePeriodSeconds:
+ nullable: true
+ type: integer
+ deletionTimestamp:
+ nullable: true
+ type: string
+ finalizers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ generateName:
+ nullable: true
+ type: string
+ generation:
+ type: integer
+ labels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ managedFields:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldsType:
+ nullable: true
+ type: string
+ fieldsV1:
+ nullable: true
+ type: object
+ manager:
+ nullable: true
+ type: string
+ operation:
+ nullable: true
+ type: string
+ time:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ ownerReferences:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ blockOwnerDeletion:
+ nullable: true
+ type: boolean
+ controller:
+ nullable: true
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceVersion:
+ nullable: true
+ type: string
+ selfLink:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ spec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ affinity:
+ nullable: true
+ properties:
+ nodeAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ preference:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ nullable: true
+ properties:
+ nodeSelectorTerms:
+ items:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ podAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ podAntiAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ automountServiceAccountToken:
+ nullable: true
+ type: boolean
+ containers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ dnsConfig:
+ nullable: true
+ properties:
+ nameservers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ options:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ searches:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ dnsPolicy:
+ nullable: true
+ type: string
+ enableServiceLinks:
+ nullable: true
+ type: boolean
+ ephemeralContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ targetContainerName:
+ nullable: true
+ type: string
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostAliases:
+ items:
+ properties:
+ hostnames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ ip:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostIPC:
+ type: boolean
+ hostNetwork:
+ type: boolean
+ hostPID:
+ type: boolean
+ hostname:
+ nullable: true
+ type: string
+ imagePullSecrets:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ initContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nodeName:
+ nullable: true
+ type: string
+ nodeSelector:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ overhead:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ preemptionPolicy:
+ nullable: true
+ type: string
+ priority:
+ nullable: true
+ type: integer
+ priorityClassName:
+ nullable: true
+ type: string
+ readinessGates:
+ items:
+ properties:
+ conditionType:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ restartPolicy:
+ nullable: true
+ type: string
+ runtimeClassName:
+ nullable: true
+ type: string
+ schedulerName:
+ nullable: true
+ type: string
+ securityContext:
+ nullable: true
+ properties:
+ fsGroup:
+ nullable: true
+ type: integer
+ fsGroupChangePolicy:
+ nullable: true
+ type: string
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ supplementalGroups:
+ items:
+ type: integer
+ nullable: true
+ type: array
+ sysctls:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ serviceAccountName:
+ nullable: true
+ type: string
+ shareProcessNamespace:
+ nullable: true
+ type: boolean
+ subdomain:
+ nullable: true
+ type: string
+ terminationGracePeriodSeconds:
+ nullable: true
+ type: integer
+ tolerations:
+ items:
+ properties:
+ effect:
+ nullable: true
+ type: string
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ tolerationSeconds:
+ nullable: true
+ type: integer
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ topologySpreadConstraints:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxSkew:
+ type: integer
+ topologyKey:
+ nullable: true
+ type: string
+ whenUnsatisfiable:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumes:
+ items:
+ properties:
+ awsElasticBlockStore:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ azureDisk:
+ nullable: true
+ properties:
+ cachingMode:
+ nullable: true
+ type: string
+ diskName:
+ nullable: true
+ type: string
+ diskURI:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ readOnly:
+ nullable: true
+ type: boolean
+ type: object
+ azureFile:
+ nullable: true
+ properties:
+ readOnly:
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ shareName:
+ nullable: true
+ type: string
+ type: object
+ cephfs:
+ nullable: true
+ properties:
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretFile:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ cinder:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ configMap:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ csi:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ nodePublishSecretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ readOnly:
+ nullable: true
+ type: boolean
+ volumeAttributes:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ emptyDir:
+ nullable: true
+ properties:
+ medium:
+ nullable: true
+ type: string
+ sizeLimit:
+ nullable: true
+ type: string
+ type: object
+ fc:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ lun:
+ nullable: true
+ type: integer
+ readOnly:
+ type: boolean
+ targetWWNs:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ wwids:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ flexVolume:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ options:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ flocker:
+ nullable: true
+ properties:
+ datasetName:
+ nullable: true
+ type: string
+ datasetUUID:
+ nullable: true
+ type: string
+ type: object
+ gcePersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ pdName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ gitRepo:
+ nullable: true
+ properties:
+ directory:
+ nullable: true
+ type: string
+ repository:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ type: object
+ glusterfs:
+ nullable: true
+ properties:
+ endpoints:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ hostPath:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ iscsi:
+ nullable: true
+ properties:
+ chapAuthDiscovery:
+ type: boolean
+ chapAuthSession:
+ type: boolean
+ fsType:
+ nullable: true
+ type: string
+ initiatorName:
+ nullable: true
+ type: string
+ iqn:
+ nullable: true
+ type: string
+ iscsiInterface:
+ nullable: true
+ type: string
+ lun:
+ type: integer
+ portals:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ targetPortal:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ nfs:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ server:
+ nullable: true
+ type: string
+ type: object
+ persistentVolumeClaim:
+ nullable: true
+ properties:
+ claimName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ photonPersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ pdID:
+ nullable: true
+ type: string
+ type: object
+ portworxVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ projected:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ sources:
+ items:
+ properties:
+ configMap:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ secret:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ serviceAccountToken:
+ nullable: true
+ properties:
+ audience:
+ nullable: true
+ type: string
+ expirationSeconds:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ quobyte:
+ nullable: true
+ properties:
+ group:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ registry:
+ nullable: true
+ type: string
+ tenant:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ volume:
+ nullable: true
+ type: string
+ type: object
+ rbd:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ image:
+ nullable: true
+ type: string
+ keyring:
+ nullable: true
+ type: string
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ pool:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ scaleIO:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ gateway:
+ nullable: true
+ type: string
+ protectionDomain:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ sslEnabled:
+ type: boolean
+ storageMode:
+ nullable: true
+ type: string
+ storagePool:
+ nullable: true
+ type: string
+ system:
+ nullable: true
+ type: string
+ volumeName:
+ nullable: true
+ type: string
+ type: object
+ secret:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ optional:
+ nullable: true
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ storageos:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeName:
+ nullable: true
+ type: string
+ volumeNamespace:
+ nullable: true
+ type: string
+ type: object
+ vsphereVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ storagePolicyID:
+ nullable: true
+ type: string
+ storagePolicyName:
+ nullable: true
+ type: string
+ volumePath:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ ttlSecondsAfterFinished:
+ nullable: true
+ type: integer
+ type: object
+ syncInterval:
+ type: integer
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ event:
+ nullable: true
+ type: string
+ hookId:
+ nullable: true
+ type: string
+ jobStatus:
+ nullable: true
+ type: string
+ lastExecutedCommit:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ secretToken:
+ nullable: true
+ type: string
+ updateGeneration:
+ type: integer
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
+
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.100/Chart.yaml b/released/charts/fleet-crd/fleet-crd/0.3.100/Chart.yaml
new file mode 100644
index 000000000..d5dcb53f7
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.100/Chart.yaml
@@ -0,0 +1,11 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/release-name: fleet-crd
+apiVersion: v2
+appVersion: 0.3.1
+description: Fleet Manager CustomResourceDefinitions
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-crd
+version: 0.3.100
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.100/templates/crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.100/templates/crds.yaml
new file mode 100644
index 000000000..2143761d0
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.100/templates/crds.yaml
@@ -0,0 +1,2143 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundles.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Bundle
+ plural: bundles
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ resources:
+ items:
+ properties:
+ content:
+ nullable: true
+ type: string
+ encoding:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ rolloutStrategy:
+ nullable: true
+ properties:
+ autoPartitionSize:
+ nullable: true
+ type: string
+ maxUnavailable:
+ nullable: true
+ type: string
+ maxUnavailablePartitions:
+ nullable: true
+ type: string
+ partitions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxUnavailable:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ targetRestrictions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ nullable: true
+ type: array
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ status:
+ properties:
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ maxNew:
+ type: integer
+ maxUnavailable:
+ type: integer
+ maxUnavailablePartitions:
+ type: integer
+ newlyCreated:
+ type: integer
+ partitions:
+ items:
+ properties:
+ count:
+ type: integer
+ maxUnavailable:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ unavailablePartitions:
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundledeployments.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.deployed
+ name: Deployed
+ type: string
+ - JSONPath: .status.display.monitored
+ name: Monitored
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: BundleDeployment
+ plural: bundledeployments
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ deploymentID:
+ nullable: true
+ type: string
+ options:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ stagedDeploymentID:
+ nullable: true
+ type: string
+ stagedOptions:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ appliedDeploymentID:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ deployed:
+ nullable: true
+ type: string
+ monitored:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nonModified:
+ type: boolean
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ ready:
+ type: boolean
+ release:
+ nullable: true
+ type: string
+ syncGeneration:
+ nullable: true
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundlenamespacemappings.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: BundleNamespaceMapping
+ plural: bundlenamespacemappings
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ bundleSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clustergroups.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: Clusters-Ready
+ type: string
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: ClusterGroup
+ plural: clustergroups
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ clusterCount:
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ nonReadyClusterCount:
+ type: integer
+ nonReadyClusters:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusters.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.display.readyNodes
+ name: Nodes-Ready
+ type: string
+ - JSONPath: .status.display.sampleNode
+ name: Sample-Node
+ type: string
+ - JSONPath: .status.agent.lastSeen
+ name: Last-Seen
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Cluster
+ plural: clusters
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ kubeConfigSecret:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ redeployAgentGeneration:
+ type: integer
+ type: object
+ status:
+ properties:
+ agent:
+ properties:
+ lastSeen:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ nonReadyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ nonReadyNodes:
+ type: integer
+ readyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readyNodes:
+ type: integer
+ type: object
+ agentDeployedGeneration:
+ nullable: true
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyGitRepos:
+ type: integer
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyNodes:
+ nullable: true
+ type: string
+ sampleNode:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ readyGitRepos:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrationtokens.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.secretName
+ name: Secret-Name
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistrationToken
+ plural: clusterregistrationtokens
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ ttl:
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ expires:
+ nullable: true
+ type: string
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitrepos.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.repo
+ name: Repo
+ type: string
+ - JSONPath: .status.commit
+ name: Commit
+ type: string
+ - JSONPath: .status.display.readyBundleDeployments
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: GitRepo
+ plural: gitrepos
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ forceSyncGeneration:
+ type: integer
+ paths:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ paused:
+ type: boolean
+ pollingInterval:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ targetNamespace:
+ nullable: true
+ type: string
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyClusters:
+ type: integer
+ display:
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ readyBundleDeployments:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ gitJobStatus:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ readyClusters:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ resourceErrors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resources:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ id:
+ nullable: true
+ type: string
+ incompleteState:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ perClusterState:
+ items:
+ properties:
+ clusterId:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: object
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrations.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.clusterName
+ name: Cluster-Name
+ type: string
+ - JSONPath: .spec.clusterLabels
+ name: Labels
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistration
+ plural: clusterregistrations
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ clientRandom:
+ nullable: true
+ type: string
+ clusterLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ status:
+ properties:
+ clusterName:
+ nullable: true
+ type: string
+ granted:
+ type: boolean
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitreporestrictions.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .defaultServiceAccount
+ name: Default-ServiceAccount
+ type: string
+ - JSONPath: .allowedServiceAccounts
+ name: Allowed-ServiceAccounts
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: GitRepoRestriction
+ plural: gitreporestrictions
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ allowedClientSecretNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedRepoPatterns:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedServiceAccounts:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ defaultClientSecretName:
+ nullable: true
+ type: string
+ defaultServiceAccount:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: contents.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: Content
+ plural: contents
+ scope: Cluster
+ validation:
+ openAPIV3Schema:
+ properties:
+ content:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.100/templates/gitjobs-crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.100/templates/gitjobs-crds.yaml
new file mode 100644
index 000000000..2c26f79ff
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.100/templates/gitjobs-crds.yaml
@@ -0,0 +1,3208 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitjobs.gitjob.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.git.repo
+ name: REPO
+ type: string
+ - JSONPath: .spec.git.branch
+ name: BRANCH
+ type: string
+ - JSONPath: .status.commit
+ name: COMMIT
+ type: string
+ - JSONPath: .status.jobStatus
+ name: JOBSTATUS
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ group: gitjob.cattle.io
+ names:
+ kind: GitJob
+ plural: gitjobs
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ forceUpdateGeneration:
+ type: integer
+ git:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ insecureSkipTLSVerify:
+ type: boolean
+ provider:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ secret:
+ nullable: true
+ type: string
+ type: object
+ jobSpec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ backoffLimit:
+ nullable: true
+ type: integer
+ completions:
+ nullable: true
+ type: integer
+ manualSelector:
+ nullable: true
+ type: boolean
+ parallelism:
+ nullable: true
+ type: integer
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ template:
+ properties:
+ metadata:
+ properties:
+ annotations:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ creationTimestamp:
+ nullable: true
+ type: string
+ deletionGracePeriodSeconds:
+ nullable: true
+ type: integer
+ deletionTimestamp:
+ nullable: true
+ type: string
+ finalizers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ generateName:
+ nullable: true
+ type: string
+ generation:
+ type: integer
+ labels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ managedFields:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldsType:
+ nullable: true
+ type: string
+ fieldsV1:
+ nullable: true
+ type: object
+ manager:
+ nullable: true
+ type: string
+ operation:
+ nullable: true
+ type: string
+ time:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ ownerReferences:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ blockOwnerDeletion:
+ nullable: true
+ type: boolean
+ controller:
+ nullable: true
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceVersion:
+ nullable: true
+ type: string
+ selfLink:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ spec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ affinity:
+ nullable: true
+ properties:
+ nodeAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ preference:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ nullable: true
+ properties:
+ nodeSelectorTerms:
+ items:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ podAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ podAntiAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ automountServiceAccountToken:
+ nullable: true
+ type: boolean
+ containers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ dnsConfig:
+ nullable: true
+ properties:
+ nameservers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ options:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ searches:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ dnsPolicy:
+ nullable: true
+ type: string
+ enableServiceLinks:
+ nullable: true
+ type: boolean
+ ephemeralContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ targetContainerName:
+ nullable: true
+ type: string
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostAliases:
+ items:
+ properties:
+ hostnames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ ip:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostIPC:
+ type: boolean
+ hostNetwork:
+ type: boolean
+ hostPID:
+ type: boolean
+ hostname:
+ nullable: true
+ type: string
+ imagePullSecrets:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ initContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nodeName:
+ nullable: true
+ type: string
+ nodeSelector:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ overhead:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ preemptionPolicy:
+ nullable: true
+ type: string
+ priority:
+ nullable: true
+ type: integer
+ priorityClassName:
+ nullable: true
+ type: string
+ readinessGates:
+ items:
+ properties:
+ conditionType:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ restartPolicy:
+ nullable: true
+ type: string
+ runtimeClassName:
+ nullable: true
+ type: string
+ schedulerName:
+ nullable: true
+ type: string
+ securityContext:
+ nullable: true
+ properties:
+ fsGroup:
+ nullable: true
+ type: integer
+ fsGroupChangePolicy:
+ nullable: true
+ type: string
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ supplementalGroups:
+ items:
+ type: integer
+ nullable: true
+ type: array
+ sysctls:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ serviceAccountName:
+ nullable: true
+ type: string
+ shareProcessNamespace:
+ nullable: true
+ type: boolean
+ subdomain:
+ nullable: true
+ type: string
+ terminationGracePeriodSeconds:
+ nullable: true
+ type: integer
+ tolerations:
+ items:
+ properties:
+ effect:
+ nullable: true
+ type: string
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ tolerationSeconds:
+ nullable: true
+ type: integer
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ topologySpreadConstraints:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxSkew:
+ type: integer
+ topologyKey:
+ nullable: true
+ type: string
+ whenUnsatisfiable:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumes:
+ items:
+ properties:
+ awsElasticBlockStore:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ azureDisk:
+ nullable: true
+ properties:
+ cachingMode:
+ nullable: true
+ type: string
+ diskName:
+ nullable: true
+ type: string
+ diskURI:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ readOnly:
+ nullable: true
+ type: boolean
+ type: object
+ azureFile:
+ nullable: true
+ properties:
+ readOnly:
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ shareName:
+ nullable: true
+ type: string
+ type: object
+ cephfs:
+ nullable: true
+ properties:
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretFile:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ cinder:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ configMap:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ csi:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ nodePublishSecretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ readOnly:
+ nullable: true
+ type: boolean
+ volumeAttributes:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ emptyDir:
+ nullable: true
+ properties:
+ medium:
+ nullable: true
+ type: string
+ sizeLimit:
+ nullable: true
+ type: string
+ type: object
+ fc:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ lun:
+ nullable: true
+ type: integer
+ readOnly:
+ type: boolean
+ targetWWNs:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ wwids:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ flexVolume:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ options:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ flocker:
+ nullable: true
+ properties:
+ datasetName:
+ nullable: true
+ type: string
+ datasetUUID:
+ nullable: true
+ type: string
+ type: object
+ gcePersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ pdName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ gitRepo:
+ nullable: true
+ properties:
+ directory:
+ nullable: true
+ type: string
+ repository:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ type: object
+ glusterfs:
+ nullable: true
+ properties:
+ endpoints:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ hostPath:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ iscsi:
+ nullable: true
+ properties:
+ chapAuthDiscovery:
+ type: boolean
+ chapAuthSession:
+ type: boolean
+ fsType:
+ nullable: true
+ type: string
+ initiatorName:
+ nullable: true
+ type: string
+ iqn:
+ nullable: true
+ type: string
+ iscsiInterface:
+ nullable: true
+ type: string
+ lun:
+ type: integer
+ portals:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ targetPortal:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ nfs:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ server:
+ nullable: true
+ type: string
+ type: object
+ persistentVolumeClaim:
+ nullable: true
+ properties:
+ claimName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ photonPersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ pdID:
+ nullable: true
+ type: string
+ type: object
+ portworxVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ projected:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ sources:
+ items:
+ properties:
+ configMap:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ secret:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ serviceAccountToken:
+ nullable: true
+ properties:
+ audience:
+ nullable: true
+ type: string
+ expirationSeconds:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ quobyte:
+ nullable: true
+ properties:
+ group:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ registry:
+ nullable: true
+ type: string
+ tenant:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ volume:
+ nullable: true
+ type: string
+ type: object
+ rbd:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ image:
+ nullable: true
+ type: string
+ keyring:
+ nullable: true
+ type: string
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ pool:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ scaleIO:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ gateway:
+ nullable: true
+ type: string
+ protectionDomain:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ sslEnabled:
+ type: boolean
+ storageMode:
+ nullable: true
+ type: string
+ storagePool:
+ nullable: true
+ type: string
+ system:
+ nullable: true
+ type: string
+ volumeName:
+ nullable: true
+ type: string
+ type: object
+ secret:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ optional:
+ nullable: true
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ storageos:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeName:
+ nullable: true
+ type: string
+ volumeNamespace:
+ nullable: true
+ type: string
+ type: object
+ vsphereVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ storagePolicyID:
+ nullable: true
+ type: string
+ storagePolicyName:
+ nullable: true
+ type: string
+ volumePath:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ ttlSecondsAfterFinished:
+ nullable: true
+ type: integer
+ type: object
+ syncInterval:
+ type: integer
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ event:
+ nullable: true
+ type: string
+ hookId:
+ nullable: true
+ type: string
+ jobStatus:
+ nullable: true
+ type: string
+ lastExecutedCommit:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ secretToken:
+ nullable: true
+ type: string
+ updateGeneration:
+ type: integer
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
+
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.200/Chart.yaml b/released/charts/fleet-crd/fleet-crd/0.3.200/Chart.yaml
new file mode 100644
index 000000000..c2c43a18b
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.200/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: fleet-crd
+apiVersion: v2
+appVersion: 0.3.2
+description: Fleet Manager CustomResourceDefinitions
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-crd
+version: 0.3.200
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.200/templates/crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.200/templates/crds.yaml
new file mode 100644
index 000000000..3deffee43
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.200/templates/crds.yaml
@@ -0,0 +1,2168 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundles.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Bundle
+ plural: bundles
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ resources:
+ items:
+ properties:
+ content:
+ nullable: true
+ type: string
+ encoding:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ rolloutStrategy:
+ nullable: true
+ properties:
+ autoPartitionSize:
+ nullable: true
+ type: string
+ maxUnavailable:
+ nullable: true
+ type: string
+ maxUnavailablePartitions:
+ nullable: true
+ type: string
+ partitions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxUnavailable:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ targetRestrictions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ nullable: true
+ type: array
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ status:
+ properties:
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ maxNew:
+ type: integer
+ maxUnavailable:
+ type: integer
+ maxUnavailablePartitions:
+ type: integer
+ newlyCreated:
+ type: integer
+ observedGeneration:
+ type: integer
+ partitions:
+ items:
+ properties:
+ count:
+ type: integer
+ maxUnavailable:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ resourceKey:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ unavailablePartitions:
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundledeployments.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.deployed
+ name: Deployed
+ type: string
+ - JSONPath: .status.display.monitored
+ name: Monitored
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: BundleDeployment
+ plural: bundledeployments
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ deploymentID:
+ nullable: true
+ type: string
+ options:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ stagedDeploymentID:
+ nullable: true
+ type: string
+ stagedOptions:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ appliedDeploymentID:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ deployed:
+ nullable: true
+ type: string
+ monitored:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nonModified:
+ type: boolean
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ ready:
+ type: boolean
+ release:
+ nullable: true
+ type: string
+ syncGeneration:
+ nullable: true
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundlenamespacemappings.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: BundleNamespaceMapping
+ plural: bundlenamespacemappings
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ bundleSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clustergroups.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: Clusters-Ready
+ type: string
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: ClusterGroup
+ plural: clustergroups
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ clusterCount:
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ nonReadyClusterCount:
+ type: integer
+ nonReadyClusters:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusters.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.display.readyNodes
+ name: Nodes-Ready
+ type: string
+ - JSONPath: .status.display.sampleNode
+ name: Sample-Node
+ type: string
+ - JSONPath: .status.agent.lastSeen
+ name: Last-Seen
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Cluster
+ plural: clusters
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ kubeConfigSecret:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ redeployAgentGeneration:
+ type: integer
+ type: object
+ status:
+ properties:
+ agent:
+ properties:
+ lastSeen:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ nonReadyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ nonReadyNodes:
+ type: integer
+ readyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readyNodes:
+ type: integer
+ type: object
+ agentDeployedGeneration:
+ nullable: true
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyGitRepos:
+ type: integer
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyNodes:
+ nullable: true
+ type: string
+ sampleNode:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ readyGitRepos:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrationtokens.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.secretName
+ name: Secret-Name
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistrationToken
+ plural: clusterregistrationtokens
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ ttl:
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ expires:
+ nullable: true
+ type: string
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitrepos.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.repo
+ name: Repo
+ type: string
+ - JSONPath: .status.commit
+ name: Commit
+ type: string
+ - JSONPath: .status.display.readyBundleDeployments
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: GitRepo
+ plural: gitrepos
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ forceSyncGeneration:
+ type: integer
+ insecureSkipTLSVerify:
+ type: boolean
+ paths:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ paused:
+ type: boolean
+ pollingInterval:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ targetNamespace:
+ nullable: true
+ type: string
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyClusters:
+ type: integer
+ display:
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ readyBundleDeployments:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ gitJobStatus:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ readyClusters:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ resourceErrors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resources:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ id:
+ nullable: true
+ type: string
+ incompleteState:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ perClusterState:
+ items:
+ properties:
+ clusterId:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: object
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrations.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.clusterName
+ name: Cluster-Name
+ type: string
+ - JSONPath: .spec.clusterLabels
+ name: Labels
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistration
+ plural: clusterregistrations
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ clientRandom:
+ nullable: true
+ type: string
+ clusterLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ status:
+ properties:
+ clusterName:
+ nullable: true
+ type: string
+ granted:
+ type: boolean
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitreporestrictions.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .defaultServiceAccount
+ name: Default-ServiceAccount
+ type: string
+ - JSONPath: .allowedServiceAccounts
+ name: Allowed-ServiceAccounts
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: GitRepoRestriction
+ plural: gitreporestrictions
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ allowedClientSecretNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedRepoPatterns:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedServiceAccounts:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ defaultClientSecretName:
+ nullable: true
+ type: string
+ defaultServiceAccount:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: contents.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: Content
+ plural: contents
+ scope: Cluster
+ validation:
+ openAPIV3Schema:
+ properties:
+ content:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.200/templates/gitjobs-crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.200/templates/gitjobs-crds.yaml
new file mode 100644
index 000000000..2c26f79ff
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.200/templates/gitjobs-crds.yaml
@@ -0,0 +1,3208 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitjobs.gitjob.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.git.repo
+ name: REPO
+ type: string
+ - JSONPath: .spec.git.branch
+ name: BRANCH
+ type: string
+ - JSONPath: .status.commit
+ name: COMMIT
+ type: string
+ - JSONPath: .status.jobStatus
+ name: JOBSTATUS
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ group: gitjob.cattle.io
+ names:
+ kind: GitJob
+ plural: gitjobs
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ forceUpdateGeneration:
+ type: integer
+ git:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ insecureSkipTLSVerify:
+ type: boolean
+ provider:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ secret:
+ nullable: true
+ type: string
+ type: object
+ jobSpec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ backoffLimit:
+ nullable: true
+ type: integer
+ completions:
+ nullable: true
+ type: integer
+ manualSelector:
+ nullable: true
+ type: boolean
+ parallelism:
+ nullable: true
+ type: integer
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ template:
+ properties:
+ metadata:
+ properties:
+ annotations:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ creationTimestamp:
+ nullable: true
+ type: string
+ deletionGracePeriodSeconds:
+ nullable: true
+ type: integer
+ deletionTimestamp:
+ nullable: true
+ type: string
+ finalizers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ generateName:
+ nullable: true
+ type: string
+ generation:
+ type: integer
+ labels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ managedFields:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldsType:
+ nullable: true
+ type: string
+ fieldsV1:
+ nullable: true
+ type: object
+ manager:
+ nullable: true
+ type: string
+ operation:
+ nullable: true
+ type: string
+ time:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ ownerReferences:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ blockOwnerDeletion:
+ nullable: true
+ type: boolean
+ controller:
+ nullable: true
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceVersion:
+ nullable: true
+ type: string
+ selfLink:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ spec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ affinity:
+ nullable: true
+ properties:
+ nodeAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ preference:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ nullable: true
+ properties:
+ nodeSelectorTerms:
+ items:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ podAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ podAntiAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ automountServiceAccountToken:
+ nullable: true
+ type: boolean
+ containers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ dnsConfig:
+ nullable: true
+ properties:
+ nameservers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ options:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ searches:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ dnsPolicy:
+ nullable: true
+ type: string
+ enableServiceLinks:
+ nullable: true
+ type: boolean
+ ephemeralContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ targetContainerName:
+ nullable: true
+ type: string
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostAliases:
+ items:
+ properties:
+ hostnames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ ip:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostIPC:
+ type: boolean
+ hostNetwork:
+ type: boolean
+ hostPID:
+ type: boolean
+ hostname:
+ nullable: true
+ type: string
+ imagePullSecrets:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ initContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nodeName:
+ nullable: true
+ type: string
+ nodeSelector:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ overhead:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ preemptionPolicy:
+ nullable: true
+ type: string
+ priority:
+ nullable: true
+ type: integer
+ priorityClassName:
+ nullable: true
+ type: string
+ readinessGates:
+ items:
+ properties:
+ conditionType:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ restartPolicy:
+ nullable: true
+ type: string
+ runtimeClassName:
+ nullable: true
+ type: string
+ schedulerName:
+ nullable: true
+ type: string
+ securityContext:
+ nullable: true
+ properties:
+ fsGroup:
+ nullable: true
+ type: integer
+ fsGroupChangePolicy:
+ nullable: true
+ type: string
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ supplementalGroups:
+ items:
+ type: integer
+ nullable: true
+ type: array
+ sysctls:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ serviceAccountName:
+ nullable: true
+ type: string
+ shareProcessNamespace:
+ nullable: true
+ type: boolean
+ subdomain:
+ nullable: true
+ type: string
+ terminationGracePeriodSeconds:
+ nullable: true
+ type: integer
+ tolerations:
+ items:
+ properties:
+ effect:
+ nullable: true
+ type: string
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ tolerationSeconds:
+ nullable: true
+ type: integer
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ topologySpreadConstraints:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxSkew:
+ type: integer
+ topologyKey:
+ nullable: true
+ type: string
+ whenUnsatisfiable:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumes:
+ items:
+ properties:
+ awsElasticBlockStore:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ azureDisk:
+ nullable: true
+ properties:
+ cachingMode:
+ nullable: true
+ type: string
+ diskName:
+ nullable: true
+ type: string
+ diskURI:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ readOnly:
+ nullable: true
+ type: boolean
+ type: object
+ azureFile:
+ nullable: true
+ properties:
+ readOnly:
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ shareName:
+ nullable: true
+ type: string
+ type: object
+ cephfs:
+ nullable: true
+ properties:
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretFile:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ cinder:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ configMap:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ csi:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ nodePublishSecretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ readOnly:
+ nullable: true
+ type: boolean
+ volumeAttributes:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ emptyDir:
+ nullable: true
+ properties:
+ medium:
+ nullable: true
+ type: string
+ sizeLimit:
+ nullable: true
+ type: string
+ type: object
+ fc:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ lun:
+ nullable: true
+ type: integer
+ readOnly:
+ type: boolean
+ targetWWNs:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ wwids:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ flexVolume:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ options:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ flocker:
+ nullable: true
+ properties:
+ datasetName:
+ nullable: true
+ type: string
+ datasetUUID:
+ nullable: true
+ type: string
+ type: object
+ gcePersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ pdName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ gitRepo:
+ nullable: true
+ properties:
+ directory:
+ nullable: true
+ type: string
+ repository:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ type: object
+ glusterfs:
+ nullable: true
+ properties:
+ endpoints:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ hostPath:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ iscsi:
+ nullable: true
+ properties:
+ chapAuthDiscovery:
+ type: boolean
+ chapAuthSession:
+ type: boolean
+ fsType:
+ nullable: true
+ type: string
+ initiatorName:
+ nullable: true
+ type: string
+ iqn:
+ nullable: true
+ type: string
+ iscsiInterface:
+ nullable: true
+ type: string
+ lun:
+ type: integer
+ portals:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ targetPortal:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ nfs:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ server:
+ nullable: true
+ type: string
+ type: object
+ persistentVolumeClaim:
+ nullable: true
+ properties:
+ claimName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ photonPersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ pdID:
+ nullable: true
+ type: string
+ type: object
+ portworxVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ projected:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ sources:
+ items:
+ properties:
+ configMap:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ secret:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ serviceAccountToken:
+ nullable: true
+ properties:
+ audience:
+ nullable: true
+ type: string
+ expirationSeconds:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ quobyte:
+ nullable: true
+ properties:
+ group:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ registry:
+ nullable: true
+ type: string
+ tenant:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ volume:
+ nullable: true
+ type: string
+ type: object
+ rbd:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ image:
+ nullable: true
+ type: string
+ keyring:
+ nullable: true
+ type: string
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ pool:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ scaleIO:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ gateway:
+ nullable: true
+ type: string
+ protectionDomain:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ sslEnabled:
+ type: boolean
+ storageMode:
+ nullable: true
+ type: string
+ storagePool:
+ nullable: true
+ type: string
+ system:
+ nullable: true
+ type: string
+ volumeName:
+ nullable: true
+ type: string
+ type: object
+ secret:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ optional:
+ nullable: true
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ storageos:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeName:
+ nullable: true
+ type: string
+ volumeNamespace:
+ nullable: true
+ type: string
+ type: object
+ vsphereVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ storagePolicyID:
+ nullable: true
+ type: string
+ storagePolicyName:
+ nullable: true
+ type: string
+ volumePath:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ ttlSecondsAfterFinished:
+ nullable: true
+ type: integer
+ type: object
+ syncInterval:
+ type: integer
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ event:
+ nullable: true
+ type: string
+ hookId:
+ nullable: true
+ type: string
+ jobStatus:
+ nullable: true
+ type: string
+ lastExecutedCommit:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ secretToken:
+ nullable: true
+ type: string
+ updateGeneration:
+ type: integer
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
+
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.300/Chart.yaml b/released/charts/fleet-crd/fleet-crd/0.3.300/Chart.yaml
new file mode 100644
index 000000000..047c65ed8
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.300/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: fleet-crd
+apiVersion: v2
+appVersion: 0.3.3
+description: Fleet Manager CustomResourceDefinitions
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-crd
+version: 0.3.300
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.300/templates/crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.300/templates/crds.yaml
new file mode 100644
index 000000000..3deffee43
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.300/templates/crds.yaml
@@ -0,0 +1,2168 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundles.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Bundle
+ plural: bundles
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ resources:
+ items:
+ properties:
+ content:
+ nullable: true
+ type: string
+ encoding:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ rolloutStrategy:
+ nullable: true
+ properties:
+ autoPartitionSize:
+ nullable: true
+ type: string
+ maxUnavailable:
+ nullable: true
+ type: string
+ maxUnavailablePartitions:
+ nullable: true
+ type: string
+ partitions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxUnavailable:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ targetRestrictions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ nullable: true
+ type: array
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ status:
+ properties:
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ maxNew:
+ type: integer
+ maxUnavailable:
+ type: integer
+ maxUnavailablePartitions:
+ type: integer
+ newlyCreated:
+ type: integer
+ observedGeneration:
+ type: integer
+ partitions:
+ items:
+ properties:
+ count:
+ type: integer
+ maxUnavailable:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ resourceKey:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ unavailablePartitions:
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundledeployments.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.deployed
+ name: Deployed
+ type: string
+ - JSONPath: .status.display.monitored
+ name: Monitored
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: BundleDeployment
+ plural: bundledeployments
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ deploymentID:
+ nullable: true
+ type: string
+ options:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ stagedDeploymentID:
+ nullable: true
+ type: string
+ stagedOptions:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ appliedDeploymentID:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ deployed:
+ nullable: true
+ type: string
+ monitored:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nonModified:
+ type: boolean
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ ready:
+ type: boolean
+ release:
+ nullable: true
+ type: string
+ syncGeneration:
+ nullable: true
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundlenamespacemappings.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: BundleNamespaceMapping
+ plural: bundlenamespacemappings
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ bundleSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clustergroups.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: Clusters-Ready
+ type: string
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: ClusterGroup
+ plural: clustergroups
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ clusterCount:
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ nonReadyClusterCount:
+ type: integer
+ nonReadyClusters:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusters.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.display.readyNodes
+ name: Nodes-Ready
+ type: string
+ - JSONPath: .status.display.sampleNode
+ name: Sample-Node
+ type: string
+ - JSONPath: .status.agent.lastSeen
+ name: Last-Seen
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Cluster
+ plural: clusters
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ kubeConfigSecret:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ redeployAgentGeneration:
+ type: integer
+ type: object
+ status:
+ properties:
+ agent:
+ properties:
+ lastSeen:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ nonReadyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ nonReadyNodes:
+ type: integer
+ readyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readyNodes:
+ type: integer
+ type: object
+ agentDeployedGeneration:
+ nullable: true
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyGitRepos:
+ type: integer
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyNodes:
+ nullable: true
+ type: string
+ sampleNode:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ readyGitRepos:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrationtokens.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.secretName
+ name: Secret-Name
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistrationToken
+ plural: clusterregistrationtokens
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ ttl:
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ expires:
+ nullable: true
+ type: string
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitrepos.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.repo
+ name: Repo
+ type: string
+ - JSONPath: .status.commit
+ name: Commit
+ type: string
+ - JSONPath: .status.display.readyBundleDeployments
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: GitRepo
+ plural: gitrepos
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ forceSyncGeneration:
+ type: integer
+ insecureSkipTLSVerify:
+ type: boolean
+ paths:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ paused:
+ type: boolean
+ pollingInterval:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ targetNamespace:
+ nullable: true
+ type: string
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyClusters:
+ type: integer
+ display:
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ readyBundleDeployments:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ gitJobStatus:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ readyClusters:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ resourceErrors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resources:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ id:
+ nullable: true
+ type: string
+ incompleteState:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ perClusterState:
+ items:
+ properties:
+ clusterId:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: object
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrations.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.clusterName
+ name: Cluster-Name
+ type: string
+ - JSONPath: .spec.clusterLabels
+ name: Labels
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistration
+ plural: clusterregistrations
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ clientRandom:
+ nullable: true
+ type: string
+ clusterLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ status:
+ properties:
+ clusterName:
+ nullable: true
+ type: string
+ granted:
+ type: boolean
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitreporestrictions.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .defaultServiceAccount
+ name: Default-ServiceAccount
+ type: string
+ - JSONPath: .allowedServiceAccounts
+ name: Allowed-ServiceAccounts
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: GitRepoRestriction
+ plural: gitreporestrictions
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ allowedClientSecretNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedRepoPatterns:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedServiceAccounts:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ defaultClientSecretName:
+ nullable: true
+ type: string
+ defaultServiceAccount:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: contents.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: Content
+ plural: contents
+ scope: Cluster
+ validation:
+ openAPIV3Schema:
+ properties:
+ content:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.300/templates/gitjobs-crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.300/templates/gitjobs-crds.yaml
new file mode 100644
index 000000000..2c26f79ff
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.300/templates/gitjobs-crds.yaml
@@ -0,0 +1,3208 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitjobs.gitjob.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.git.repo
+ name: REPO
+ type: string
+ - JSONPath: .spec.git.branch
+ name: BRANCH
+ type: string
+ - JSONPath: .status.commit
+ name: COMMIT
+ type: string
+ - JSONPath: .status.jobStatus
+ name: JOBSTATUS
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ group: gitjob.cattle.io
+ names:
+ kind: GitJob
+ plural: gitjobs
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ forceUpdateGeneration:
+ type: integer
+ git:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ insecureSkipTLSVerify:
+ type: boolean
+ provider:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ secret:
+ nullable: true
+ type: string
+ type: object
+ jobSpec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ backoffLimit:
+ nullable: true
+ type: integer
+ completions:
+ nullable: true
+ type: integer
+ manualSelector:
+ nullable: true
+ type: boolean
+ parallelism:
+ nullable: true
+ type: integer
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ template:
+ properties:
+ metadata:
+ properties:
+ annotations:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ creationTimestamp:
+ nullable: true
+ type: string
+ deletionGracePeriodSeconds:
+ nullable: true
+ type: integer
+ deletionTimestamp:
+ nullable: true
+ type: string
+ finalizers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ generateName:
+ nullable: true
+ type: string
+ generation:
+ type: integer
+ labels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ managedFields:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldsType:
+ nullable: true
+ type: string
+ fieldsV1:
+ nullable: true
+ type: object
+ manager:
+ nullable: true
+ type: string
+ operation:
+ nullable: true
+ type: string
+ time:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ ownerReferences:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ blockOwnerDeletion:
+ nullable: true
+ type: boolean
+ controller:
+ nullable: true
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceVersion:
+ nullable: true
+ type: string
+ selfLink:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ spec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ affinity:
+ nullable: true
+ properties:
+ nodeAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ preference:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ nullable: true
+ properties:
+ nodeSelectorTerms:
+ items:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ podAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ podAntiAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ automountServiceAccountToken:
+ nullable: true
+ type: boolean
+ containers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ dnsConfig:
+ nullable: true
+ properties:
+ nameservers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ options:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ searches:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ dnsPolicy:
+ nullable: true
+ type: string
+ enableServiceLinks:
+ nullable: true
+ type: boolean
+ ephemeralContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ targetContainerName:
+ nullable: true
+ type: string
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostAliases:
+ items:
+ properties:
+ hostnames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ ip:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostIPC:
+ type: boolean
+ hostNetwork:
+ type: boolean
+ hostPID:
+ type: boolean
+ hostname:
+ nullable: true
+ type: string
+ imagePullSecrets:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ initContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nodeName:
+ nullable: true
+ type: string
+ nodeSelector:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ overhead:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ preemptionPolicy:
+ nullable: true
+ type: string
+ priority:
+ nullable: true
+ type: integer
+ priorityClassName:
+ nullable: true
+ type: string
+ readinessGates:
+ items:
+ properties:
+ conditionType:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ restartPolicy:
+ nullable: true
+ type: string
+ runtimeClassName:
+ nullable: true
+ type: string
+ schedulerName:
+ nullable: true
+ type: string
+ securityContext:
+ nullable: true
+ properties:
+ fsGroup:
+ nullable: true
+ type: integer
+ fsGroupChangePolicy:
+ nullable: true
+ type: string
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ supplementalGroups:
+ items:
+ type: integer
+ nullable: true
+ type: array
+ sysctls:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ serviceAccountName:
+ nullable: true
+ type: string
+ shareProcessNamespace:
+ nullable: true
+ type: boolean
+ subdomain:
+ nullable: true
+ type: string
+ terminationGracePeriodSeconds:
+ nullable: true
+ type: integer
+ tolerations:
+ items:
+ properties:
+ effect:
+ nullable: true
+ type: string
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ tolerationSeconds:
+ nullable: true
+ type: integer
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ topologySpreadConstraints:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxSkew:
+ type: integer
+ topologyKey:
+ nullable: true
+ type: string
+ whenUnsatisfiable:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumes:
+ items:
+ properties:
+ awsElasticBlockStore:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ azureDisk:
+ nullable: true
+ properties:
+ cachingMode:
+ nullable: true
+ type: string
+ diskName:
+ nullable: true
+ type: string
+ diskURI:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ readOnly:
+ nullable: true
+ type: boolean
+ type: object
+ azureFile:
+ nullable: true
+ properties:
+ readOnly:
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ shareName:
+ nullable: true
+ type: string
+ type: object
+ cephfs:
+ nullable: true
+ properties:
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretFile:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ cinder:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ configMap:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ csi:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ nodePublishSecretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ readOnly:
+ nullable: true
+ type: boolean
+ volumeAttributes:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ emptyDir:
+ nullable: true
+ properties:
+ medium:
+ nullable: true
+ type: string
+ sizeLimit:
+ nullable: true
+ type: string
+ type: object
+ fc:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ lun:
+ nullable: true
+ type: integer
+ readOnly:
+ type: boolean
+ targetWWNs:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ wwids:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ flexVolume:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ options:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ flocker:
+ nullable: true
+ properties:
+ datasetName:
+ nullable: true
+ type: string
+ datasetUUID:
+ nullable: true
+ type: string
+ type: object
+ gcePersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ pdName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ gitRepo:
+ nullable: true
+ properties:
+ directory:
+ nullable: true
+ type: string
+ repository:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ type: object
+ glusterfs:
+ nullable: true
+ properties:
+ endpoints:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ hostPath:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ iscsi:
+ nullable: true
+ properties:
+ chapAuthDiscovery:
+ type: boolean
+ chapAuthSession:
+ type: boolean
+ fsType:
+ nullable: true
+ type: string
+ initiatorName:
+ nullable: true
+ type: string
+ iqn:
+ nullable: true
+ type: string
+ iscsiInterface:
+ nullable: true
+ type: string
+ lun:
+ type: integer
+ portals:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ targetPortal:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ nfs:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ server:
+ nullable: true
+ type: string
+ type: object
+ persistentVolumeClaim:
+ nullable: true
+ properties:
+ claimName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ photonPersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ pdID:
+ nullable: true
+ type: string
+ type: object
+ portworxVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ projected:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ sources:
+ items:
+ properties:
+ configMap:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ secret:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ serviceAccountToken:
+ nullable: true
+ properties:
+ audience:
+ nullable: true
+ type: string
+ expirationSeconds:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ quobyte:
+ nullable: true
+ properties:
+ group:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ registry:
+ nullable: true
+ type: string
+ tenant:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ volume:
+ nullable: true
+ type: string
+ type: object
+ rbd:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ image:
+ nullable: true
+ type: string
+ keyring:
+ nullable: true
+ type: string
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ pool:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ scaleIO:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ gateway:
+ nullable: true
+ type: string
+ protectionDomain:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ sslEnabled:
+ type: boolean
+ storageMode:
+ nullable: true
+ type: string
+ storagePool:
+ nullable: true
+ type: string
+ system:
+ nullable: true
+ type: string
+ volumeName:
+ nullable: true
+ type: string
+ type: object
+ secret:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ optional:
+ nullable: true
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ storageos:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeName:
+ nullable: true
+ type: string
+ volumeNamespace:
+ nullable: true
+ type: string
+ type: object
+ vsphereVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ storagePolicyID:
+ nullable: true
+ type: string
+ storagePolicyName:
+ nullable: true
+ type: string
+ volumePath:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ ttlSecondsAfterFinished:
+ nullable: true
+ type: integer
+ type: object
+ syncInterval:
+ type: integer
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ event:
+ nullable: true
+ type: string
+ hookId:
+ nullable: true
+ type: string
+ jobStatus:
+ nullable: true
+ type: string
+ lastExecutedCommit:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ secretToken:
+ nullable: true
+ type: string
+ updateGeneration:
+ type: integer
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
+
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.400/Chart.yaml b/released/charts/fleet-crd/fleet-crd/0.3.400/Chart.yaml
new file mode 100755
index 000000000..ccbdd2ac6
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.400/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: fleet-crd
+apiVersion: v2
+appVersion: 0.3.4
+description: Fleet Manager CustomResourceDefinitions
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-crd
+version: 0.3.400
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.400/templates/crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.400/templates/crds.yaml
new file mode 100755
index 000000000..7b6775b5e
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.400/templates/crds.yaml
@@ -0,0 +1,2275 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundles.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Bundle
+ plural: bundles
+ singular: bundle
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ jsonPointers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ maxHistory:
+ type: integer
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ resources:
+ items:
+ properties:
+ content:
+ nullable: true
+ type: string
+ encoding:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ rolloutStrategy:
+ nullable: true
+ properties:
+ autoPartitionSize:
+ nullable: true
+ type: string
+ maxUnavailable:
+ nullable: true
+ type: string
+ maxUnavailablePartitions:
+ nullable: true
+ type: string
+ partitions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxUnavailable:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ targetRestrictions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ jsonPointers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ maxHistory:
+ type: integer
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ nullable: true
+ type: array
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ status:
+ properties:
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ maxNew:
+ type: integer
+ maxUnavailable:
+ type: integer
+ maxUnavailablePartitions:
+ type: integer
+ newlyCreated:
+ type: integer
+ observedGeneration:
+ type: integer
+ partitions:
+ items:
+ properties:
+ count:
+ type: integer
+ maxUnavailable:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ resourceKey:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ unavailablePartitions:
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundledeployments.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.deployed
+ name: Deployed
+ type: string
+ - JSONPath: .status.display.monitored
+ name: Monitored
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: BundleDeployment
+ plural: bundledeployments
+ singular: bundledeployment
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ deploymentID:
+ nullable: true
+ type: string
+ options:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ jsonPointers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ maxHistory:
+ type: integer
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ stagedDeploymentID:
+ nullable: true
+ type: string
+ stagedOptions:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ jsonPointers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ maxHistory:
+ type: integer
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ appliedDeploymentID:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ deployed:
+ nullable: true
+ type: string
+ monitored:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nonModified:
+ type: boolean
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ ready:
+ type: boolean
+ release:
+ nullable: true
+ type: string
+ syncGeneration:
+ nullable: true
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundlenamespacemappings.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: BundleNamespaceMapping
+ plural: bundlenamespacemappings
+ singular: bundlenamespacemapping
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ bundleSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clustergroups.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: Clusters-Ready
+ type: string
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: ClusterGroup
+ plural: clustergroups
+ singular: clustergroup
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ clusterCount:
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ nonReadyClusterCount:
+ type: integer
+ nonReadyClusters:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusters.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.display.readyNodes
+ name: Nodes-Ready
+ type: string
+ - JSONPath: .status.display.sampleNode
+ name: Sample-Node
+ type: string
+ - JSONPath: .status.agent.lastSeen
+ name: Last-Seen
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Cluster
+ plural: clusters
+ singular: cluster
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ agentEnvVars:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ clientID:
+ nullable: true
+ type: string
+ kubeConfigSecret:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ redeployAgentGeneration:
+ type: integer
+ type: object
+ status:
+ properties:
+ agent:
+ properties:
+ lastSeen:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ nonReadyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ nonReadyNodes:
+ type: integer
+ readyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readyNodes:
+ type: integer
+ type: object
+ agentDeployedGeneration:
+ nullable: true
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyGitRepos:
+ type: integer
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyNodes:
+ nullable: true
+ type: string
+ sampleNode:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ readyGitRepos:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrationtokens.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.secretName
+ name: Secret-Name
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistrationToken
+ plural: clusterregistrationtokens
+ singular: clusterregistrationtoken
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ ttl:
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ expires:
+ nullable: true
+ type: string
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitrepos.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.repo
+ name: Repo
+ type: string
+ - JSONPath: .status.commit
+ name: Commit
+ type: string
+ - JSONPath: .status.display.readyBundleDeployments
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: GitRepo
+ plural: gitrepos
+ singular: gitrepo
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ forceSyncGeneration:
+ type: integer
+ insecureSkipTLSVerify:
+ type: boolean
+ paths:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ paused:
+ type: boolean
+ pollingInterval:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ targetNamespace:
+ nullable: true
+ type: string
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyClusters:
+ type: integer
+ display:
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ readyBundleDeployments:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ gitJobStatus:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ readyClusters:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ resourceErrors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resources:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ id:
+ nullable: true
+ type: string
+ incompleteState:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ perClusterState:
+ items:
+ properties:
+ clusterId:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: object
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrations.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.clusterName
+ name: Cluster-Name
+ type: string
+ - JSONPath: .spec.clusterLabels
+ name: Labels
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistration
+ plural: clusterregistrations
+ singular: clusterregistration
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ clientRandom:
+ nullable: true
+ type: string
+ clusterLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ status:
+ properties:
+ clusterName:
+ nullable: true
+ type: string
+ granted:
+ type: boolean
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitreporestrictions.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .defaultServiceAccount
+ name: Default-ServiceAccount
+ type: string
+ - JSONPath: .allowedServiceAccounts
+ name: Allowed-ServiceAccounts
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: GitRepoRestriction
+ plural: gitreporestrictions
+ singular: gitreporestriction
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ allowedClientSecretNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedRepoPatterns:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedServiceAccounts:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ defaultClientSecretName:
+ nullable: true
+ type: string
+ defaultServiceAccount:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: contents.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: Content
+ plural: contents
+ singular: content
+ scope: Cluster
+ validation:
+ openAPIV3Schema:
+ properties:
+ content:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.400/templates/gitjobs-crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.400/templates/gitjobs-crds.yaml
new file mode 100755
index 000000000..2c26f79ff
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.400/templates/gitjobs-crds.yaml
@@ -0,0 +1,3208 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitjobs.gitjob.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.git.repo
+ name: REPO
+ type: string
+ - JSONPath: .spec.git.branch
+ name: BRANCH
+ type: string
+ - JSONPath: .status.commit
+ name: COMMIT
+ type: string
+ - JSONPath: .status.jobStatus
+ name: JOBSTATUS
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ group: gitjob.cattle.io
+ names:
+ kind: GitJob
+ plural: gitjobs
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ forceUpdateGeneration:
+ type: integer
+ git:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ insecureSkipTLSVerify:
+ type: boolean
+ provider:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ secret:
+ nullable: true
+ type: string
+ type: object
+ jobSpec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ backoffLimit:
+ nullable: true
+ type: integer
+ completions:
+ nullable: true
+ type: integer
+ manualSelector:
+ nullable: true
+ type: boolean
+ parallelism:
+ nullable: true
+ type: integer
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ template:
+ properties:
+ metadata:
+ properties:
+ annotations:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ creationTimestamp:
+ nullable: true
+ type: string
+ deletionGracePeriodSeconds:
+ nullable: true
+ type: integer
+ deletionTimestamp:
+ nullable: true
+ type: string
+ finalizers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ generateName:
+ nullable: true
+ type: string
+ generation:
+ type: integer
+ labels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ managedFields:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldsType:
+ nullable: true
+ type: string
+ fieldsV1:
+ nullable: true
+ type: object
+ manager:
+ nullable: true
+ type: string
+ operation:
+ nullable: true
+ type: string
+ time:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ ownerReferences:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ blockOwnerDeletion:
+ nullable: true
+ type: boolean
+ controller:
+ nullable: true
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceVersion:
+ nullable: true
+ type: string
+ selfLink:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ spec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ affinity:
+ nullable: true
+ properties:
+ nodeAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ preference:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ nullable: true
+ properties:
+ nodeSelectorTerms:
+ items:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ podAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ podAntiAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ automountServiceAccountToken:
+ nullable: true
+ type: boolean
+ containers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ dnsConfig:
+ nullable: true
+ properties:
+ nameservers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ options:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ searches:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ dnsPolicy:
+ nullable: true
+ type: string
+ enableServiceLinks:
+ nullable: true
+ type: boolean
+ ephemeralContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ targetContainerName:
+ nullable: true
+ type: string
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostAliases:
+ items:
+ properties:
+ hostnames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ ip:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostIPC:
+ type: boolean
+ hostNetwork:
+ type: boolean
+ hostPID:
+ type: boolean
+ hostname:
+ nullable: true
+ type: string
+ imagePullSecrets:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ initContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nodeName:
+ nullable: true
+ type: string
+ nodeSelector:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ overhead:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ preemptionPolicy:
+ nullable: true
+ type: string
+ priority:
+ nullable: true
+ type: integer
+ priorityClassName:
+ nullable: true
+ type: string
+ readinessGates:
+ items:
+ properties:
+ conditionType:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ restartPolicy:
+ nullable: true
+ type: string
+ runtimeClassName:
+ nullable: true
+ type: string
+ schedulerName:
+ nullable: true
+ type: string
+ securityContext:
+ nullable: true
+ properties:
+ fsGroup:
+ nullable: true
+ type: integer
+ fsGroupChangePolicy:
+ nullable: true
+ type: string
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ supplementalGroups:
+ items:
+ type: integer
+ nullable: true
+ type: array
+ sysctls:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ serviceAccountName:
+ nullable: true
+ type: string
+ shareProcessNamespace:
+ nullable: true
+ type: boolean
+ subdomain:
+ nullable: true
+ type: string
+ terminationGracePeriodSeconds:
+ nullable: true
+ type: integer
+ tolerations:
+ items:
+ properties:
+ effect:
+ nullable: true
+ type: string
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ tolerationSeconds:
+ nullable: true
+ type: integer
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ topologySpreadConstraints:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxSkew:
+ type: integer
+ topologyKey:
+ nullable: true
+ type: string
+ whenUnsatisfiable:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumes:
+ items:
+ properties:
+ awsElasticBlockStore:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ azureDisk:
+ nullable: true
+ properties:
+ cachingMode:
+ nullable: true
+ type: string
+ diskName:
+ nullable: true
+ type: string
+ diskURI:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ readOnly:
+ nullable: true
+ type: boolean
+ type: object
+ azureFile:
+ nullable: true
+ properties:
+ readOnly:
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ shareName:
+ nullable: true
+ type: string
+ type: object
+ cephfs:
+ nullable: true
+ properties:
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretFile:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ cinder:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ configMap:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ csi:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ nodePublishSecretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ readOnly:
+ nullable: true
+ type: boolean
+ volumeAttributes:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ emptyDir:
+ nullable: true
+ properties:
+ medium:
+ nullable: true
+ type: string
+ sizeLimit:
+ nullable: true
+ type: string
+ type: object
+ fc:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ lun:
+ nullable: true
+ type: integer
+ readOnly:
+ type: boolean
+ targetWWNs:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ wwids:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ flexVolume:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ options:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ flocker:
+ nullable: true
+ properties:
+ datasetName:
+ nullable: true
+ type: string
+ datasetUUID:
+ nullable: true
+ type: string
+ type: object
+ gcePersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ pdName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ gitRepo:
+ nullable: true
+ properties:
+ directory:
+ nullable: true
+ type: string
+ repository:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ type: object
+ glusterfs:
+ nullable: true
+ properties:
+ endpoints:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ hostPath:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ iscsi:
+ nullable: true
+ properties:
+ chapAuthDiscovery:
+ type: boolean
+ chapAuthSession:
+ type: boolean
+ fsType:
+ nullable: true
+ type: string
+ initiatorName:
+ nullable: true
+ type: string
+ iqn:
+ nullable: true
+ type: string
+ iscsiInterface:
+ nullable: true
+ type: string
+ lun:
+ type: integer
+ portals:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ targetPortal:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ nfs:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ server:
+ nullable: true
+ type: string
+ type: object
+ persistentVolumeClaim:
+ nullable: true
+ properties:
+ claimName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ photonPersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ pdID:
+ nullable: true
+ type: string
+ type: object
+ portworxVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ projected:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ sources:
+ items:
+ properties:
+ configMap:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ secret:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ serviceAccountToken:
+ nullable: true
+ properties:
+ audience:
+ nullable: true
+ type: string
+ expirationSeconds:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ quobyte:
+ nullable: true
+ properties:
+ group:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ registry:
+ nullable: true
+ type: string
+ tenant:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ volume:
+ nullable: true
+ type: string
+ type: object
+ rbd:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ image:
+ nullable: true
+ type: string
+ keyring:
+ nullable: true
+ type: string
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ pool:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ scaleIO:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ gateway:
+ nullable: true
+ type: string
+ protectionDomain:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ sslEnabled:
+ type: boolean
+ storageMode:
+ nullable: true
+ type: string
+ storagePool:
+ nullable: true
+ type: string
+ system:
+ nullable: true
+ type: string
+ volumeName:
+ nullable: true
+ type: string
+ type: object
+ secret:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ optional:
+ nullable: true
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ storageos:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeName:
+ nullable: true
+ type: string
+ volumeNamespace:
+ nullable: true
+ type: string
+ type: object
+ vsphereVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ storagePolicyID:
+ nullable: true
+ type: string
+ storagePolicyName:
+ nullable: true
+ type: string
+ volumePath:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ ttlSecondsAfterFinished:
+ nullable: true
+ type: integer
+ type: object
+ syncInterval:
+ type: integer
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ event:
+ nullable: true
+ type: string
+ hookId:
+ nullable: true
+ type: string
+ jobStatus:
+ nullable: true
+ type: string
+ lastExecutedCommit:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ secretToken:
+ nullable: true
+ type: string
+ updateGeneration:
+ type: integer
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
+
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.500/Chart.yaml b/released/charts/fleet-crd/fleet-crd/0.3.500/Chart.yaml
new file mode 100755
index 000000000..37d67fcf2
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.500/Chart.yaml
@@ -0,0 +1,12 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: fleet-crd
+apiVersion: v2
+appVersion: 0.3.5
+description: Fleet Manager CustomResourceDefinitions
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet-crd
+version: 0.3.500
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.500/templates/crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.500/templates/crds.yaml
new file mode 100755
index 000000000..9fc559d8c
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.500/templates/crds.yaml
@@ -0,0 +1,2314 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundles.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Bundle
+ plural: bundles
+ singular: bundle
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ jsonPointers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ maxHistory:
+ type: integer
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ valuesFiles:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ resources:
+ items:
+ properties:
+ content:
+ nullable: true
+ type: string
+ encoding:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ rolloutStrategy:
+ nullable: true
+ properties:
+ autoPartitionSize:
+ nullable: true
+ type: string
+ maxUnavailable:
+ nullable: true
+ type: string
+ maxUnavailablePartitions:
+ nullable: true
+ type: string
+ partitions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxUnavailable:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ targetRestrictions:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ jsonPointers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ maxHistory:
+ type: integer
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ valuesFiles:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ nullable: true
+ type: array
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ status:
+ properties:
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ maxNew:
+ type: integer
+ maxUnavailable:
+ type: integer
+ maxUnavailablePartitions:
+ type: integer
+ newlyCreated:
+ type: integer
+ observedGeneration:
+ type: integer
+ partitions:
+ items:
+ properties:
+ count:
+ type: integer
+ maxUnavailable:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ resourceKey:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ unavailable:
+ type: integer
+ unavailablePartitions:
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundledeployments.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.deployed
+ name: Deployed
+ type: string
+ - JSONPath: .status.display.monitored
+ name: Monitored
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: BundleDeployment
+ plural: bundledeployments
+ singular: bundledeployment
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ deploymentID:
+ nullable: true
+ type: string
+ options:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ jsonPointers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ maxHistory:
+ type: integer
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ valuesFiles:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ stagedDeploymentID:
+ nullable: true
+ type: string
+ stagedOptions:
+ properties:
+ defaultNamespace:
+ nullable: true
+ type: string
+ diff:
+ nullable: true
+ properties:
+ comparePatches:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ jsonPointers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ operations:
+ items:
+ properties:
+ op:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ forceSyncGeneration:
+ type: integer
+ helm:
+ nullable: true
+ properties:
+ chart:
+ nullable: true
+ type: string
+ force:
+ type: boolean
+ maxHistory:
+ type: integer
+ releaseName:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ takeOwnership:
+ type: boolean
+ timeoutSeconds:
+ type: integer
+ values:
+ nullable: true
+ type: object
+ valuesFiles:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ version:
+ nullable: true
+ type: string
+ type: object
+ kustomize:
+ nullable: true
+ properties:
+ dir:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ yaml:
+ nullable: true
+ properties:
+ overlays:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ appliedDeploymentID:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ deployed:
+ nullable: true
+ type: string
+ monitored:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nonModified:
+ type: boolean
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ ready:
+ type: boolean
+ release:
+ nullable: true
+ type: string
+ syncGeneration:
+ nullable: true
+ type: integer
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: bundlenamespacemappings.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: BundleNamespaceMapping
+ plural: bundlenamespacemappings
+ singular: bundlenamespacemapping
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ bundleSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clustergroups.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyClusters
+ name: Clusters-Ready
+ type: string
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: ClusterGroup
+ plural: clustergroups
+ singular: clustergroup
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ type: object
+ status:
+ properties:
+ clusterCount:
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyClusters:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ nonReadyClusterCount:
+ type: integer
+ nonReadyClusters:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusters.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.display.readyBundles
+ name: Bundles-Ready
+ type: string
+ - JSONPath: .status.display.readyNodes
+ name: Nodes-Ready
+ type: string
+ - JSONPath: .status.display.sampleNode
+ name: Sample-Node
+ type: string
+ - JSONPath: .status.agent.lastSeen
+ name: Last-Seen
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: Cluster
+ plural: clusters
+ singular: cluster
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ agentEnvVars:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ clientID:
+ nullable: true
+ type: string
+ kubeConfigSecret:
+ nullable: true
+ type: string
+ paused:
+ type: boolean
+ redeployAgentGeneration:
+ type: integer
+ type: object
+ status:
+ properties:
+ agent:
+ properties:
+ lastSeen:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ nonReadyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ nonReadyNodes:
+ type: integer
+ readyNodeNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readyNodes:
+ type: integer
+ type: object
+ agentDeployedGeneration:
+ nullable: true
+ type: integer
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyGitRepos:
+ type: integer
+ display:
+ properties:
+ readyBundles:
+ nullable: true
+ type: string
+ readyNodes:
+ nullable: true
+ type: string
+ sampleNode:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ namespace:
+ nullable: true
+ type: string
+ readyGitRepos:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrationtokens.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.secretName
+ name: Secret-Name
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistrationToken
+ plural: clusterregistrationtokens
+ singular: clusterregistrationtoken
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ ttl:
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ expires:
+ nullable: true
+ type: string
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitrepos.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.repo
+ name: Repo
+ type: string
+ - JSONPath: .status.commit
+ name: Commit
+ type: string
+ - JSONPath: .status.display.readyBundleDeployments
+ name: BundleDeployments-Ready
+ type: string
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: fleet.cattle.io
+ names:
+ categories:
+ - fleet
+ kind: GitRepo
+ plural: gitrepos
+ singular: gitrepo
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ forceSyncGeneration:
+ type: integer
+ helmSecretName:
+ nullable: true
+ type: string
+ insecureSkipTLSVerify:
+ type: boolean
+ paths:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ paused:
+ type: boolean
+ pollingInterval:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ serviceAccount:
+ nullable: true
+ type: string
+ targetNamespace:
+ nullable: true
+ type: string
+ targets:
+ items:
+ properties:
+ clusterGroup:
+ nullable: true
+ type: string
+ clusterGroupSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ clusterSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ desiredReadyClusters:
+ type: integer
+ display:
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ readyBundleDeployments:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ type: object
+ gitJobStatus:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ readyClusters:
+ type: integer
+ resourceCounts:
+ properties:
+ desiredReady:
+ type: integer
+ missing:
+ type: integer
+ modified:
+ type: integer
+ notReady:
+ type: integer
+ orphaned:
+ type: integer
+ ready:
+ type: integer
+ unknown:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ resourceErrors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ resources:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ id:
+ nullable: true
+ type: string
+ incompleteState:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ perClusterState:
+ items:
+ properties:
+ clusterId:
+ nullable: true
+ type: string
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: object
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ summary:
+ properties:
+ desiredReady:
+ type: integer
+ errApplied:
+ type: integer
+ modified:
+ type: integer
+ nonReadyResources:
+ items:
+ properties:
+ bundleState:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ modifiedStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ delete:
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ missing:
+ type: boolean
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ patch:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ nonReadyStatus:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ summary:
+ properties:
+ error:
+ type: boolean
+ message:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ notReady:
+ type: integer
+ outOfSync:
+ type: integer
+ pending:
+ type: integer
+ ready:
+ type: integer
+ waitApplied:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterregistrations.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.clusterName
+ name: Cluster-Name
+ type: string
+ - JSONPath: .spec.clusterLabels
+ name: Labels
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: ClusterRegistration
+ plural: clusterregistrations
+ singular: clusterregistration
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clientID:
+ nullable: true
+ type: string
+ clientRandom:
+ nullable: true
+ type: string
+ clusterLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ status:
+ properties:
+ clusterName:
+ nullable: true
+ type: string
+ granted:
+ type: boolean
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitreporestrictions.fleet.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .defaultServiceAccount
+ name: Default-ServiceAccount
+ type: string
+ - JSONPath: .allowedServiceAccounts
+ name: Allowed-ServiceAccounts
+ type: string
+ group: fleet.cattle.io
+ names:
+ kind: GitRepoRestriction
+ plural: gitreporestrictions
+ singular: gitreporestriction
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ allowedClientSecretNames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedRepoPatterns:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ allowedServiceAccounts:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ defaultClientSecretName:
+ nullable: true
+ type: string
+ defaultServiceAccount:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: contents.fleet.cattle.io
+spec:
+ group: fleet.cattle.io
+ names:
+ kind: Content
+ plural: contents
+ singular: content
+ scope: Cluster
+ validation:
+ openAPIV3Schema:
+ properties:
+ content:
+ nullable: true
+ type: string
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/fleet-crd/fleet-crd/0.3.500/templates/gitjobs-crds.yaml b/released/charts/fleet-crd/fleet-crd/0.3.500/templates/gitjobs-crds.yaml
new file mode 100755
index 000000000..2c26f79ff
--- /dev/null
+++ b/released/charts/fleet-crd/fleet-crd/0.3.500/templates/gitjobs-crds.yaml
@@ -0,0 +1,3208 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: gitjobs.gitjob.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.git.repo
+ name: REPO
+ type: string
+ - JSONPath: .spec.git.branch
+ name: BRANCH
+ type: string
+ - JSONPath: .status.commit
+ name: COMMIT
+ type: string
+ - JSONPath: .status.jobStatus
+ name: JOBSTATUS
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ group: gitjob.cattle.io
+ names:
+ kind: GitJob
+ plural: gitjobs
+ scope: Namespaced
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ forceUpdateGeneration:
+ type: integer
+ git:
+ properties:
+ branch:
+ nullable: true
+ type: string
+ caBundle:
+ nullable: true
+ type: string
+ clientSecretName:
+ nullable: true
+ type: string
+ insecureSkipTLSVerify:
+ type: boolean
+ provider:
+ nullable: true
+ type: string
+ repo:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ secret:
+ nullable: true
+ type: string
+ type: object
+ jobSpec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ backoffLimit:
+ nullable: true
+ type: integer
+ completions:
+ nullable: true
+ type: integer
+ manualSelector:
+ nullable: true
+ type: boolean
+ parallelism:
+ nullable: true
+ type: integer
+ selector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ template:
+ properties:
+ metadata:
+ properties:
+ annotations:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ clusterName:
+ nullable: true
+ type: string
+ creationTimestamp:
+ nullable: true
+ type: string
+ deletionGracePeriodSeconds:
+ nullable: true
+ type: integer
+ deletionTimestamp:
+ nullable: true
+ type: string
+ finalizers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ generateName:
+ nullable: true
+ type: string
+ generation:
+ type: integer
+ labels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ managedFields:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldsType:
+ nullable: true
+ type: string
+ fieldsV1:
+ nullable: true
+ type: object
+ manager:
+ nullable: true
+ type: string
+ operation:
+ nullable: true
+ type: string
+ time:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ namespace:
+ nullable: true
+ type: string
+ ownerReferences:
+ items:
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ blockOwnerDeletion:
+ nullable: true
+ type: boolean
+ controller:
+ nullable: true
+ type: boolean
+ kind:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceVersion:
+ nullable: true
+ type: string
+ selfLink:
+ nullable: true
+ type: string
+ uid:
+ nullable: true
+ type: string
+ type: object
+ spec:
+ properties:
+ activeDeadlineSeconds:
+ nullable: true
+ type: integer
+ affinity:
+ nullable: true
+ properties:
+ nodeAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ preference:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ nullable: true
+ properties:
+ nodeSelectorTerms:
+ items:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchFields:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ podAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ podAntiAffinity:
+ nullable: true
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ weight:
+ type: integer
+ type: object
+ nullable: true
+ type: array
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaces:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ topologyKey:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ automountServiceAccountToken:
+ nullable: true
+ type: boolean
+ containers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ dnsConfig:
+ nullable: true
+ properties:
+ nameservers:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ options:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ searches:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ dnsPolicy:
+ nullable: true
+ type: string
+ enableServiceLinks:
+ nullable: true
+ type: boolean
+ ephemeralContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ targetContainerName:
+ nullable: true
+ type: string
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostAliases:
+ items:
+ properties:
+ hostnames:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ ip:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ hostIPC:
+ type: boolean
+ hostNetwork:
+ type: boolean
+ hostPID:
+ type: boolean
+ hostname:
+ nullable: true
+ type: string
+ imagePullSecrets:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ initContainers:
+ items:
+ properties:
+ args:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ env:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ valueFrom:
+ nullable: true
+ properties:
+ configMapKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ secretKeyRef:
+ nullable: true
+ properties:
+ key:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ type: object
+ nullable: true
+ type: array
+ envFrom:
+ items:
+ properties:
+ configMapRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ prefix:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ type: object
+ nullable: true
+ type: array
+ image:
+ nullable: true
+ type: string
+ imagePullPolicy:
+ nullable: true
+ type: string
+ lifecycle:
+ nullable: true
+ properties:
+ postStart:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ preStop:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ type: object
+ livenessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ name:
+ nullable: true
+ type: string
+ ports:
+ items:
+ properties:
+ containerPort:
+ type: integer
+ hostIP:
+ nullable: true
+ type: string
+ hostPort:
+ type: integer
+ name:
+ nullable: true
+ type: string
+ protocol:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ readinessProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ resources:
+ properties:
+ limits:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ requests:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ securityContext:
+ nullable: true
+ properties:
+ allowPrivilegeEscalation:
+ nullable: true
+ type: boolean
+ capabilities:
+ nullable: true
+ properties:
+ add:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ drop:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ privileged:
+ nullable: true
+ type: boolean
+ procMount:
+ nullable: true
+ type: string
+ readOnlyRootFilesystem:
+ nullable: true
+ type: boolean
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ startupProbe:
+ nullable: true
+ properties:
+ exec:
+ nullable: true
+ properties:
+ command:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ failureThreshold:
+ type: integer
+ httpGet:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ httpHeaders:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ scheme:
+ nullable: true
+ type: string
+ type: object
+ initialDelaySeconds:
+ type: integer
+ periodSeconds:
+ type: integer
+ successThreshold:
+ type: integer
+ tcpSocket:
+ nullable: true
+ properties:
+ host:
+ nullable: true
+ type: string
+ port:
+ nullable: true
+ type: string
+ type: object
+ timeoutSeconds:
+ type: integer
+ type: object
+ stdin:
+ type: boolean
+ stdinOnce:
+ type: boolean
+ terminationMessagePath:
+ nullable: true
+ type: string
+ terminationMessagePolicy:
+ nullable: true
+ type: string
+ tty:
+ type: boolean
+ volumeDevices:
+ items:
+ properties:
+ devicePath:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumeMounts:
+ items:
+ properties:
+ mountPath:
+ nullable: true
+ type: string
+ mountPropagation:
+ nullable: true
+ type: string
+ name:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ subPath:
+ nullable: true
+ type: string
+ subPathExpr:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ workingDir:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ nodeName:
+ nullable: true
+ type: string
+ nodeSelector:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ overhead:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ preemptionPolicy:
+ nullable: true
+ type: string
+ priority:
+ nullable: true
+ type: integer
+ priorityClassName:
+ nullable: true
+ type: string
+ readinessGates:
+ items:
+ properties:
+ conditionType:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ restartPolicy:
+ nullable: true
+ type: string
+ runtimeClassName:
+ nullable: true
+ type: string
+ schedulerName:
+ nullable: true
+ type: string
+ securityContext:
+ nullable: true
+ properties:
+ fsGroup:
+ nullable: true
+ type: integer
+ fsGroupChangePolicy:
+ nullable: true
+ type: string
+ runAsGroup:
+ nullable: true
+ type: integer
+ runAsNonRoot:
+ nullable: true
+ type: boolean
+ runAsUser:
+ nullable: true
+ type: integer
+ seLinuxOptions:
+ nullable: true
+ properties:
+ level:
+ nullable: true
+ type: string
+ role:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ type: object
+ supplementalGroups:
+ items:
+ type: integer
+ nullable: true
+ type: array
+ sysctls:
+ items:
+ properties:
+ name:
+ nullable: true
+ type: string
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ windowsOptions:
+ nullable: true
+ properties:
+ gmsaCredentialSpec:
+ nullable: true
+ type: string
+ gmsaCredentialSpecName:
+ nullable: true
+ type: string
+ runAsUserName:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ serviceAccount:
+ nullable: true
+ type: string
+ serviceAccountName:
+ nullable: true
+ type: string
+ shareProcessNamespace:
+ nullable: true
+ type: boolean
+ subdomain:
+ nullable: true
+ type: string
+ terminationGracePeriodSeconds:
+ nullable: true
+ type: integer
+ tolerations:
+ items:
+ properties:
+ effect:
+ nullable: true
+ type: string
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ tolerationSeconds:
+ nullable: true
+ type: integer
+ value:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ topologySpreadConstraints:
+ items:
+ properties:
+ labelSelector:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ operator:
+ nullable: true
+ type: string
+ values:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ maxSkew:
+ type: integer
+ topologyKey:
+ nullable: true
+ type: string
+ whenUnsatisfiable:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ volumes:
+ items:
+ properties:
+ awsElasticBlockStore:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ azureDisk:
+ nullable: true
+ properties:
+ cachingMode:
+ nullable: true
+ type: string
+ diskName:
+ nullable: true
+ type: string
+ diskURI:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ kind:
+ nullable: true
+ type: string
+ readOnly:
+ nullable: true
+ type: boolean
+ type: object
+ azureFile:
+ nullable: true
+ properties:
+ readOnly:
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ shareName:
+ nullable: true
+ type: string
+ type: object
+ cephfs:
+ nullable: true
+ properties:
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretFile:
+ nullable: true
+ type: string
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ cinder:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ configMap:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ csi:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ nodePublishSecretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ readOnly:
+ nullable: true
+ type: boolean
+ volumeAttributes:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ emptyDir:
+ nullable: true
+ properties:
+ medium:
+ nullable: true
+ type: string
+ sizeLimit:
+ nullable: true
+ type: string
+ type: object
+ fc:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ lun:
+ nullable: true
+ type: integer
+ readOnly:
+ type: boolean
+ targetWWNs:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ wwids:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ flexVolume:
+ nullable: true
+ properties:
+ driver:
+ nullable: true
+ type: string
+ fsType:
+ nullable: true
+ type: string
+ options:
+ additionalProperties:
+ nullable: true
+ type: string
+ nullable: true
+ type: object
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ flocker:
+ nullable: true
+ properties:
+ datasetName:
+ nullable: true
+ type: string
+ datasetUUID:
+ nullable: true
+ type: string
+ type: object
+ gcePersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ partition:
+ type: integer
+ pdName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ gitRepo:
+ nullable: true
+ properties:
+ directory:
+ nullable: true
+ type: string
+ repository:
+ nullable: true
+ type: string
+ revision:
+ nullable: true
+ type: string
+ type: object
+ glusterfs:
+ nullable: true
+ properties:
+ endpoints:
+ nullable: true
+ type: string
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ hostPath:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ iscsi:
+ nullable: true
+ properties:
+ chapAuthDiscovery:
+ type: boolean
+ chapAuthSession:
+ type: boolean
+ fsType:
+ nullable: true
+ type: string
+ initiatorName:
+ nullable: true
+ type: string
+ iqn:
+ nullable: true
+ type: string
+ iscsiInterface:
+ nullable: true
+ type: string
+ lun:
+ type: integer
+ portals:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ targetPortal:
+ nullable: true
+ type: string
+ type: object
+ name:
+ nullable: true
+ type: string
+ nfs:
+ nullable: true
+ properties:
+ path:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ server:
+ nullable: true
+ type: string
+ type: object
+ persistentVolumeClaim:
+ nullable: true
+ properties:
+ claimName:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ type: object
+ photonPersistentDisk:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ pdID:
+ nullable: true
+ type: string
+ type: object
+ portworxVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ volumeID:
+ nullable: true
+ type: string
+ type: object
+ projected:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ sources:
+ items:
+ properties:
+ configMap:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ downwardAPI:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ fieldRef:
+ nullable: true
+ properties:
+ apiVersion:
+ nullable: true
+ type: string
+ fieldPath:
+ nullable: true
+ type: string
+ type: object
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ resourceFieldRef:
+ nullable: true
+ properties:
+ containerName:
+ nullable: true
+ type: string
+ divisor:
+ nullable: true
+ type: string
+ resource:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ secret:
+ nullable: true
+ properties:
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ name:
+ nullable: true
+ type: string
+ optional:
+ nullable: true
+ type: boolean
+ type: object
+ serviceAccountToken:
+ nullable: true
+ properties:
+ audience:
+ nullable: true
+ type: string
+ expirationSeconds:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ quobyte:
+ nullable: true
+ properties:
+ group:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ registry:
+ nullable: true
+ type: string
+ tenant:
+ nullable: true
+ type: string
+ user:
+ nullable: true
+ type: string
+ volume:
+ nullable: true
+ type: string
+ type: object
+ rbd:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ image:
+ nullable: true
+ type: string
+ keyring:
+ nullable: true
+ type: string
+ monitors:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ pool:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ user:
+ nullable: true
+ type: string
+ type: object
+ scaleIO:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ gateway:
+ nullable: true
+ type: string
+ protectionDomain:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ sslEnabled:
+ type: boolean
+ storageMode:
+ nullable: true
+ type: string
+ storagePool:
+ nullable: true
+ type: string
+ system:
+ nullable: true
+ type: string
+ volumeName:
+ nullable: true
+ type: string
+ type: object
+ secret:
+ nullable: true
+ properties:
+ defaultMode:
+ nullable: true
+ type: integer
+ items:
+ items:
+ properties:
+ key:
+ nullable: true
+ type: string
+ mode:
+ nullable: true
+ type: integer
+ path:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ optional:
+ nullable: true
+ type: boolean
+ secretName:
+ nullable: true
+ type: string
+ type: object
+ storageos:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ readOnly:
+ type: boolean
+ secretRef:
+ nullable: true
+ properties:
+ name:
+ nullable: true
+ type: string
+ type: object
+ volumeName:
+ nullable: true
+ type: string
+ volumeNamespace:
+ nullable: true
+ type: string
+ type: object
+ vsphereVolume:
+ nullable: true
+ properties:
+ fsType:
+ nullable: true
+ type: string
+ storagePolicyID:
+ nullable: true
+ type: string
+ storagePolicyName:
+ nullable: true
+ type: string
+ volumePath:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ nullable: true
+ type: array
+ type: object
+ type: object
+ ttlSecondsAfterFinished:
+ nullable: true
+ type: integer
+ type: object
+ syncInterval:
+ type: integer
+ type: object
+ status:
+ properties:
+ commit:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ event:
+ nullable: true
+ type: string
+ hookId:
+ nullable: true
+ type: string
+ jobStatus:
+ nullable: true
+ type: string
+ lastExecutedCommit:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ secretToken:
+ nullable: true
+ type: string
+ updateGeneration:
+ type: integer
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
+
diff --git a/released/charts/fleet/fleet/0.3.000/Chart.yaml b/released/charts/fleet/fleet/0.3.000/Chart.yaml
new file mode 100644
index 000000000..193d17d4a
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/Chart.yaml
@@ -0,0 +1,15 @@
+annotations:
+ catalog.cattle.io/auto-install: fleet-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
+ catalog.cattle.io/release-name: fleet
+ catalog.cattle.io/os: linux
+apiVersion: v2
+appVersion: 0.3.0
+description: Fleet Manager - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet
+version: 0.3.000
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/.helmignore b/released/charts/fleet/fleet/0.3.000/charts/gitjob/.helmignore
new file mode 100644
index 000000000..691fa13d6
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/Chart.yaml b/released/charts/fleet/fleet/0.3.000/charts/gitjob/Chart.yaml
new file mode 100644
index 000000000..2141b1935
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v2
+appVersion: 0.1.6
+description: Controller that run jobs based on git events
+name: gitjob
+version: 0.1.6
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/clusterrole.yaml b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/clusterrole.yaml
new file mode 100644
index 000000000..c3ee3ac30
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/clusterrole.yaml
@@ -0,0 +1,44 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: gitjob
+rules:
+ - apiGroups:
+ - "batch"
+ resources:
+ - 'jobs'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'pods'
+ verbs:
+ - 'list'
+ - 'get'
+ - 'watch'
+ - apiGroups:
+ - ""
+ resources:
+ - 'secrets'
+ verbs:
+ - 'list'
+ - 'get'
+ - 'watch'
+ - apiGroups:
+ - ""
+ resources:
+ - 'configmaps'
+ verbs:
+ - 'create'
+ - 'list'
+ - 'get'
+ - 'update'
+ - 'watch'
+ - apiGroups:
+ - "gitjob.cattle.io"
+ resources:
+ - "gitjobs"
+ - "gitjobs/status"
+ verbs:
+ - "*"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/clusterrolebinding.yaml b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..0bf07c4ef
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/clusterrolebinding.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: gitjob-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gitjob
+subjects:
+ - kind: ServiceAccount
+ name: gitjob
+ namespace: {{ .Release.Namespace }}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/deployment.yaml
new file mode 100644
index 000000000..230fcdf55
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/deployment.yaml
@@ -0,0 +1,26 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: gitjob
+spec:
+ selector:
+ matchLabels:
+ app: "gitjob"
+ template:
+ metadata:
+ labels:
+ app: "gitjob"
+ spec:
+ serviceAccountName: gitjob
+ containers:
+ - image: "{{ template "system_default_registry" . }}{{ .Values.gitjob.repository }}:{{ .Values.gitjob.tag }}"
+ name: gitjob
+ command:
+ - gitjob
+ - --tekton-image
+ - "{{ template "system_default_registry" . }}{{ .Values.tekton.repository }}:{{ .Values.tekton.tag }}"
+ env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/service.yaml b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/service.yaml
new file mode 100644
index 000000000..0831a0b12
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: gitjob
+spec:
+ ports:
+ - name: http-80
+ port: 80
+ protocol: TCP
+ targetPort: 80
+ selector:
+ app: "gitjob"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/serviceaccount.yaml
new file mode 100644
index 000000000..5f8aecb04
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: gitjob
diff --git a/released/charts/fleet/fleet/0.3.000/charts/gitjob/values.yaml b/released/charts/fleet/fleet/0.3.000/charts/gitjob/values.yaml
new file mode 100644
index 000000000..8460a4372
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/charts/gitjob/values.yaml
@@ -0,0 +1,11 @@
+gitjob:
+ repository: rancher/gitjob
+ tag: v0.1.6
+
+tekton:
+ repository: rancher/tekton-utils
+ tag: v0.1.0
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
diff --git a/released/charts/fleet/fleet/0.3.000/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.000/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.000/templates/configmap.yaml b/released/charts/fleet/fleet/0.3.000/templates/configmap.yaml
new file mode 100644
index 000000000..c546c4b97
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/templates/configmap.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: fleet-controller
+data:
+ config: |
+ {
+ "agentImage": "{{ template "system_default_registry" . }}{{.Values.agentImage.repository}}:{{.Values.agentImage.tag}}",
+ "agentImagePullPolicy": "{{ .Values.agentImage.imagePullPolicy }}",
+ "apiServerURL": "{{.Values.apiServerURL}}",
+ "apiServerCA": "{{b64enc .Values.apiServerCA}}",
+ "agentCheckinInterval": "{{.Values.agentCheckinInterval}}",
+ "ignoreClusterRegistrationLabels": {{.Values.ignoreClusterRegistrationLabels}},
+ "bootstrap": {
+ "paths": "{{.Values.bootstrap.paths}}",
+ "repo": "{{.Values.bootstrap.repo}}",
+ "secret": "{{.Values.bootstrap.secret}}",
+ "branch": "{{.Values.bootstrap.branch}}",
+ "namespace": "{{.Values.bootstrap.namespace}}",
+ },
+ "webhookReceiverURL": "{{.Values.webhookReceiverURL}}",
+ "githubURLPrefix": "{{.Values.githubURLPrefix}}"
+ }
diff --git a/released/charts/fleet/fleet/0.3.000/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.000/templates/deployment.yaml
new file mode 100644
index 000000000..25c505ad8
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/templates/deployment.yaml
@@ -0,0 +1,23 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-controller
+spec:
+ selector:
+ matchLabels:
+ app: fleet-controller
+ template:
+ metadata:
+ labels:
+ app: fleet-controller
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ name: fleet-controller
+ imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+ serviceAccountName: fleet-controller
diff --git a/released/charts/fleet/fleet/0.3.000/templates/rbac.yaml b/released/charts/fleet/fleet/0.3.000/templates/rbac.yaml
new file mode 100644
index 000000000..59df51b1f
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/templates/rbac.yaml
@@ -0,0 +1,106 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - gitjob.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - fleet.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ - serviceaccounts
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ - configmaps
+ verbs:
+ - '*'
+- apiGroups:
+ - rbac.authorization.k8s.io
+ resources:
+ - clusterroles
+ - clusterrolebindings
+ - roles
+ - rolebindings
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+ namespace: {{.Release.Namespace}}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller-bootstrap
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller-bootstrap
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller-bootstrap
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller-bootstrap
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet/fleet/0.3.000/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.000/templates/serviceaccount.yaml
new file mode 100644
index 000000000..bd99d9958
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/templates/serviceaccount.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller-bootstrap
diff --git a/released/charts/fleet/fleet/0.3.000/values.yaml b/released/charts/fleet/fleet/0.3.000/values.yaml
new file mode 100644
index 000000000..db594aeed
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.000/values.yaml
@@ -0,0 +1,38 @@
+image:
+ repository: rancher/fleet
+ tag: v0.3.0
+ imagePullPolicy: IfNotPresent
+
+agentImage:
+ repository: rancher/fleet-agent
+ tag: v0.3.0
+ imagePullPolicy: IfNotPresent
+
+# For cluster registration the public URL of the Kubernetes API server must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# For cluster registration the pem encoded value of the CA of the Kubernetes API server must be set here
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# A duration string for how often agents should report a heartbeat
+agentCheckinInterval: "15m"
+
+# Whether you want to allow cluster upon registration to specify their labels.
+ignoreClusterRegistrationLabels: false
+
+bootstrap:
+ # The namespace that will be autocreated and the local cluster will be registered in
+ namespace: fleet-local
+ # A repo to add at install time that will deploy to the local cluster. This allows
+ # one to fully bootstrap fleet, it's configuration and all it's downstream clusters
+ # in one shot.
+ repo: ""
+ secret: ""
+ branch: master
+ paths: ""
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.100/Chart.yaml b/released/charts/fleet/fleet/0.3.100/Chart.yaml
new file mode 100644
index 000000000..6f1481d6a
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/Chart.yaml
@@ -0,0 +1,15 @@
+annotations:
+ catalog.cattle.io/auto-install: fleet-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
+ catalog.cattle.io/release-name: fleet
+ catalog.cattle.io/os: linux
+apiVersion: v2
+appVersion: 0.3.1
+description: Fleet Manager - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet
+version: 0.3.100
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/.helmignore b/released/charts/fleet/fleet/0.3.100/charts/gitjob/.helmignore
new file mode 100644
index 000000000..691fa13d6
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/Chart.yaml b/released/charts/fleet/fleet/0.3.100/charts/gitjob/Chart.yaml
new file mode 100644
index 000000000..3fb47c07d
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v2
+appVersion: 0.1.8
+description: Controller that run jobs based on git events
+name: gitjob
+version: 0.1.8
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/clusterrole.yaml b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/clusterrole.yaml
new file mode 100644
index 000000000..c3ee3ac30
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/clusterrole.yaml
@@ -0,0 +1,44 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: gitjob
+rules:
+ - apiGroups:
+ - "batch"
+ resources:
+ - 'jobs'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'pods'
+ verbs:
+ - 'list'
+ - 'get'
+ - 'watch'
+ - apiGroups:
+ - ""
+ resources:
+ - 'secrets'
+ verbs:
+ - 'list'
+ - 'get'
+ - 'watch'
+ - apiGroups:
+ - ""
+ resources:
+ - 'configmaps'
+ verbs:
+ - 'create'
+ - 'list'
+ - 'get'
+ - 'update'
+ - 'watch'
+ - apiGroups:
+ - "gitjob.cattle.io"
+ resources:
+ - "gitjobs"
+ - "gitjobs/status"
+ verbs:
+ - "*"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/clusterrolebinding.yaml b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..0bf07c4ef
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/clusterrolebinding.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: gitjob-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gitjob
+subjects:
+ - kind: ServiceAccount
+ name: gitjob
+ namespace: {{ .Release.Namespace }}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/deployment.yaml
new file mode 100644
index 000000000..230fcdf55
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/deployment.yaml
@@ -0,0 +1,26 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: gitjob
+spec:
+ selector:
+ matchLabels:
+ app: "gitjob"
+ template:
+ metadata:
+ labels:
+ app: "gitjob"
+ spec:
+ serviceAccountName: gitjob
+ containers:
+ - image: "{{ template "system_default_registry" . }}{{ .Values.gitjob.repository }}:{{ .Values.gitjob.tag }}"
+ name: gitjob
+ command:
+ - gitjob
+ - --tekton-image
+ - "{{ template "system_default_registry" . }}{{ .Values.tekton.repository }}:{{ .Values.tekton.tag }}"
+ env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/service.yaml b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/service.yaml
new file mode 100644
index 000000000..0831a0b12
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: gitjob
+spec:
+ ports:
+ - name: http-80
+ port: 80
+ protocol: TCP
+ targetPort: 80
+ selector:
+ app: "gitjob"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/serviceaccount.yaml
new file mode 100644
index 000000000..5f8aecb04
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: gitjob
diff --git a/released/charts/fleet/fleet/0.3.100/charts/gitjob/values.yaml b/released/charts/fleet/fleet/0.3.100/charts/gitjob/values.yaml
new file mode 100644
index 000000000..7949b0ca7
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/charts/gitjob/values.yaml
@@ -0,0 +1,11 @@
+gitjob:
+ repository: rancher/gitjob
+ tag: v0.1.8
+
+tekton:
+ repository: rancher/tekton-utils
+ tag: v0.1.0
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
diff --git a/released/charts/fleet/fleet/0.3.100/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.100/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.100/templates/configmap.yaml b/released/charts/fleet/fleet/0.3.100/templates/configmap.yaml
new file mode 100644
index 000000000..c546c4b97
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/templates/configmap.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: fleet-controller
+data:
+ config: |
+ {
+ "agentImage": "{{ template "system_default_registry" . }}{{.Values.agentImage.repository}}:{{.Values.agentImage.tag}}",
+ "agentImagePullPolicy": "{{ .Values.agentImage.imagePullPolicy }}",
+ "apiServerURL": "{{.Values.apiServerURL}}",
+ "apiServerCA": "{{b64enc .Values.apiServerCA}}",
+ "agentCheckinInterval": "{{.Values.agentCheckinInterval}}",
+ "ignoreClusterRegistrationLabels": {{.Values.ignoreClusterRegistrationLabels}},
+ "bootstrap": {
+ "paths": "{{.Values.bootstrap.paths}}",
+ "repo": "{{.Values.bootstrap.repo}}",
+ "secret": "{{.Values.bootstrap.secret}}",
+ "branch": "{{.Values.bootstrap.branch}}",
+ "namespace": "{{.Values.bootstrap.namespace}}",
+ },
+ "webhookReceiverURL": "{{.Values.webhookReceiverURL}}",
+ "githubURLPrefix": "{{.Values.githubURLPrefix}}"
+ }
diff --git a/released/charts/fleet/fleet/0.3.100/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.100/templates/deployment.yaml
new file mode 100644
index 000000000..25c505ad8
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/templates/deployment.yaml
@@ -0,0 +1,23 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-controller
+spec:
+ selector:
+ matchLabels:
+ app: fleet-controller
+ template:
+ metadata:
+ labels:
+ app: fleet-controller
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ name: fleet-controller
+ imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+ serviceAccountName: fleet-controller
diff --git a/released/charts/fleet/fleet/0.3.100/templates/rbac.yaml b/released/charts/fleet/fleet/0.3.100/templates/rbac.yaml
new file mode 100644
index 000000000..59df51b1f
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/templates/rbac.yaml
@@ -0,0 +1,106 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - gitjob.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - fleet.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ - serviceaccounts
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ - configmaps
+ verbs:
+ - '*'
+- apiGroups:
+ - rbac.authorization.k8s.io
+ resources:
+ - clusterroles
+ - clusterrolebindings
+ - roles
+ - rolebindings
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+ namespace: {{.Release.Namespace}}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller-bootstrap
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller-bootstrap
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller-bootstrap
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller-bootstrap
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet/fleet/0.3.100/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.100/templates/serviceaccount.yaml
new file mode 100644
index 000000000..bd99d9958
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/templates/serviceaccount.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller-bootstrap
diff --git a/released/charts/fleet/fleet/0.3.100/values.yaml b/released/charts/fleet/fleet/0.3.100/values.yaml
new file mode 100644
index 000000000..2563ac25d
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.100/values.yaml
@@ -0,0 +1,38 @@
+image:
+ repository: rancher/fleet
+ tag: v0.3.1
+ imagePullPolicy: IfNotPresent
+
+agentImage:
+ repository: rancher/fleet-agent
+ tag: v0.3.1
+ imagePullPolicy: IfNotPresent
+
+# For cluster registration the public URL of the Kubernetes API server must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# For cluster registration the pem encoded value of the CA of the Kubernetes API server must be set here
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# A duration string for how often agents should report a heartbeat
+agentCheckinInterval: "15m"
+
+# Whether you want to allow cluster upon registration to specify their labels.
+ignoreClusterRegistrationLabels: false
+
+bootstrap:
+ # The namespace that will be autocreated and the local cluster will be registered in
+ namespace: fleet-local
+ # A repo to add at install time that will deploy to the local cluster. This allows
+ # one to fully bootstrap fleet, it's configuration and all it's downstream clusters
+ # in one shot.
+ repo: ""
+ secret: ""
+ branch: master
+ paths: ""
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.200/Chart.yaml b/released/charts/fleet/fleet/0.3.200/Chart.yaml
new file mode 100644
index 000000000..e4806393a
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/Chart.yaml
@@ -0,0 +1,15 @@
+annotations:
+ catalog.cattle.io/auto-install: fleet-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
+ catalog.cattle.io/release-name: fleet
+apiVersion: v2
+appVersion: 0.3.2
+description: Fleet Manager - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet
+version: 0.3.200
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/.helmignore b/released/charts/fleet/fleet/0.3.200/charts/gitjob/.helmignore
new file mode 100644
index 000000000..691fa13d6
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/Chart.yaml b/released/charts/fleet/fleet/0.3.200/charts/gitjob/Chart.yaml
new file mode 100644
index 000000000..7c6c9fcd7
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v2
+appVersion: 0.1.11
+description: Controller that run jobs based on git events
+name: gitjob
+version: 0.1.11
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/clusterrole.yaml b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/clusterrole.yaml
new file mode 100644
index 000000000..bcad90164
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/clusterrole.yaml
@@ -0,0 +1,38 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: gitjob
+rules:
+ - apiGroups:
+ - "batch"
+ resources:
+ - 'jobs'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'pods'
+ verbs:
+ - 'list'
+ - 'get'
+ - 'watch'
+ - apiGroups:
+ - ""
+ resources:
+ - 'secrets'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'configmaps'
+ verbs:
+ - '*'
+ - apiGroups:
+ - "gitjob.cattle.io"
+ resources:
+ - "gitjobs"
+ - "gitjobs/status"
+ verbs:
+ - "*"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/clusterrolebinding.yaml b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..0bf07c4ef
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/clusterrolebinding.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: gitjob-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gitjob
+subjects:
+ - kind: ServiceAccount
+ name: gitjob
+ namespace: {{ .Release.Namespace }}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/deployment.yaml
new file mode 100644
index 000000000..93b549432
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/deployment.yaml
@@ -0,0 +1,34 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: gitjob
+spec:
+ selector:
+ matchLabels:
+ app: "gitjob"
+ template:
+ metadata:
+ labels:
+ app: "gitjob"
+ spec:
+ serviceAccountName: gitjob
+ containers:
+ - image: "{{ template "system_default_registry" . }}{{ .Values.gitjob.repository }}:{{ .Values.gitjob.tag }}"
+ name: gitjob
+ command:
+ - gitjob
+ - --tekton-image
+ - "{{ template "system_default_registry" . }}{{ .Values.tekton.repository }}:{{ .Values.tekton.tag }}"
+ env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+{{- if .Values.proxy }}
+ - name: HTTP_PROXY
+ value: {{ .Values.proxy }}
+ - name: HTTPS_PROXY
+ value: {{ .Values.proxy }}
+ - name: NO_PROXY
+ value: {{ .Values.noProxy }}
+{{- end }}
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/service.yaml b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/service.yaml
new file mode 100644
index 000000000..bf57c1b55
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: gitjob
+spec:
+ ports:
+ - name: http-80
+ port: 80
+ protocol: TCP
+ targetPort: 8080
+ selector:
+ app: "gitjob"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/serviceaccount.yaml
new file mode 100644
index 000000000..5f8aecb04
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: gitjob
diff --git a/released/charts/fleet/fleet/0.3.200/charts/gitjob/values.yaml b/released/charts/fleet/fleet/0.3.200/charts/gitjob/values.yaml
new file mode 100644
index 000000000..9f8f308e9
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/charts/gitjob/values.yaml
@@ -0,0 +1,17 @@
+gitjob:
+ repository: rancher/gitjob
+ tag: v0.1.11
+
+tekton:
+ repository: rancher/tekton-utils
+ tag: v0.1.0
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+# http[s] proxy server
+# proxy: http://@::
+
+# comma separated list of domains or ip addresses that will not use the proxy
+noProxy: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
diff --git a/released/charts/fleet/fleet/0.3.200/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.200/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.200/templates/configmap.yaml b/released/charts/fleet/fleet/0.3.200/templates/configmap.yaml
new file mode 100644
index 000000000..c546c4b97
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/templates/configmap.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: fleet-controller
+data:
+ config: |
+ {
+ "agentImage": "{{ template "system_default_registry" . }}{{.Values.agentImage.repository}}:{{.Values.agentImage.tag}}",
+ "agentImagePullPolicy": "{{ .Values.agentImage.imagePullPolicy }}",
+ "apiServerURL": "{{.Values.apiServerURL}}",
+ "apiServerCA": "{{b64enc .Values.apiServerCA}}",
+ "agentCheckinInterval": "{{.Values.agentCheckinInterval}}",
+ "ignoreClusterRegistrationLabels": {{.Values.ignoreClusterRegistrationLabels}},
+ "bootstrap": {
+ "paths": "{{.Values.bootstrap.paths}}",
+ "repo": "{{.Values.bootstrap.repo}}",
+ "secret": "{{.Values.bootstrap.secret}}",
+ "branch": "{{.Values.bootstrap.branch}}",
+ "namespace": "{{.Values.bootstrap.namespace}}",
+ },
+ "webhookReceiverURL": "{{.Values.webhookReceiverURL}}",
+ "githubURLPrefix": "{{.Values.githubURLPrefix}}"
+ }
diff --git a/released/charts/fleet/fleet/0.3.200/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.200/templates/deployment.yaml
new file mode 100644
index 000000000..25c505ad8
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/templates/deployment.yaml
@@ -0,0 +1,23 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-controller
+spec:
+ selector:
+ matchLabels:
+ app: fleet-controller
+ template:
+ metadata:
+ labels:
+ app: fleet-controller
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ name: fleet-controller
+ imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+ serviceAccountName: fleet-controller
diff --git a/released/charts/fleet/fleet/0.3.200/templates/rbac.yaml b/released/charts/fleet/fleet/0.3.200/templates/rbac.yaml
new file mode 100644
index 000000000..59df51b1f
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/templates/rbac.yaml
@@ -0,0 +1,106 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - gitjob.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - fleet.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ - serviceaccounts
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ - configmaps
+ verbs:
+ - '*'
+- apiGroups:
+ - rbac.authorization.k8s.io
+ resources:
+ - clusterroles
+ - clusterrolebindings
+ - roles
+ - rolebindings
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+ namespace: {{.Release.Namespace}}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller-bootstrap
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller-bootstrap
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller-bootstrap
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller-bootstrap
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet/fleet/0.3.200/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.200/templates/serviceaccount.yaml
new file mode 100644
index 000000000..bd99d9958
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/templates/serviceaccount.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller-bootstrap
diff --git a/released/charts/fleet/fleet/0.3.200/values.yaml b/released/charts/fleet/fleet/0.3.200/values.yaml
new file mode 100644
index 000000000..fb3e231fc
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.200/values.yaml
@@ -0,0 +1,38 @@
+image:
+ repository: rancher/fleet
+ tag: v0.3.2
+ imagePullPolicy: IfNotPresent
+
+agentImage:
+ repository: rancher/fleet-agent
+ tag: v0.3.2
+ imagePullPolicy: IfNotPresent
+
+# For cluster registration the public URL of the Kubernetes API server must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# For cluster registration the pem encoded value of the CA of the Kubernetes API server must be set here
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# A duration string for how often agents should report a heartbeat
+agentCheckinInterval: "15m"
+
+# Whether you want to allow cluster upon registration to specify their labels.
+ignoreClusterRegistrationLabels: false
+
+bootstrap:
+ # The namespace that will be autocreated and the local cluster will be registered in
+ namespace: fleet-local
+ # A repo to add at install time that will deploy to the local cluster. This allows
+ # one to fully bootstrap fleet, it's configuration and all it's downstream clusters
+ # in one shot.
+ repo: ""
+ secret: ""
+ branch: master
+ paths: ""
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.300/Chart.yaml b/released/charts/fleet/fleet/0.3.300/Chart.yaml
new file mode 100644
index 000000000..a6b88e2ff
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/Chart.yaml
@@ -0,0 +1,15 @@
+annotations:
+ catalog.cattle.io/auto-install: fleet-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
+ catalog.cattle.io/release-name: fleet
+apiVersion: v2
+appVersion: 0.3.3
+description: Fleet Manager - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet
+version: 0.3.300
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/.helmignore b/released/charts/fleet/fleet/0.3.300/charts/gitjob/.helmignore
new file mode 100644
index 000000000..691fa13d6
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/Chart.yaml b/released/charts/fleet/fleet/0.3.300/charts/gitjob/Chart.yaml
new file mode 100644
index 000000000..a1d0b9a8f
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v2
+appVersion: 0.1.12
+description: Controller that run jobs based on git events
+name: gitjob
+version: 0.1.12
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/clusterrole.yaml b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/clusterrole.yaml
new file mode 100644
index 000000000..bcad90164
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/clusterrole.yaml
@@ -0,0 +1,38 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: gitjob
+rules:
+ - apiGroups:
+ - "batch"
+ resources:
+ - 'jobs'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'pods'
+ verbs:
+ - 'list'
+ - 'get'
+ - 'watch'
+ - apiGroups:
+ - ""
+ resources:
+ - 'secrets'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'configmaps'
+ verbs:
+ - '*'
+ - apiGroups:
+ - "gitjob.cattle.io"
+ resources:
+ - "gitjobs"
+ - "gitjobs/status"
+ verbs:
+ - "*"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/clusterrolebinding.yaml b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..0bf07c4ef
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/clusterrolebinding.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: gitjob-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gitjob
+subjects:
+ - kind: ServiceAccount
+ name: gitjob
+ namespace: {{ .Release.Namespace }}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/deployment.yaml
new file mode 100644
index 000000000..93b549432
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/deployment.yaml
@@ -0,0 +1,34 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: gitjob
+spec:
+ selector:
+ matchLabels:
+ app: "gitjob"
+ template:
+ metadata:
+ labels:
+ app: "gitjob"
+ spec:
+ serviceAccountName: gitjob
+ containers:
+ - image: "{{ template "system_default_registry" . }}{{ .Values.gitjob.repository }}:{{ .Values.gitjob.tag }}"
+ name: gitjob
+ command:
+ - gitjob
+ - --tekton-image
+ - "{{ template "system_default_registry" . }}{{ .Values.tekton.repository }}:{{ .Values.tekton.tag }}"
+ env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+{{- if .Values.proxy }}
+ - name: HTTP_PROXY
+ value: {{ .Values.proxy }}
+ - name: HTTPS_PROXY
+ value: {{ .Values.proxy }}
+ - name: NO_PROXY
+ value: {{ .Values.noProxy }}
+{{- end }}
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/service.yaml b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/service.yaml
new file mode 100644
index 000000000..bf57c1b55
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: gitjob
+spec:
+ ports:
+ - name: http-80
+ port: 80
+ protocol: TCP
+ targetPort: 8080
+ selector:
+ app: "gitjob"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/serviceaccount.yaml
new file mode 100644
index 000000000..5f8aecb04
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: gitjob
diff --git a/released/charts/fleet/fleet/0.3.300/charts/gitjob/values.yaml b/released/charts/fleet/fleet/0.3.300/charts/gitjob/values.yaml
new file mode 100644
index 000000000..650f62af2
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/charts/gitjob/values.yaml
@@ -0,0 +1,17 @@
+gitjob:
+ repository: rancher/gitjob
+ tag: v0.1.12
+
+tekton:
+ repository: rancher/tekton-utils
+ tag: v0.1.1
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+# http[s] proxy server
+# proxy: http://@::
+
+# comma separated list of domains or ip addresses that will not use the proxy
+noProxy: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
diff --git a/released/charts/fleet/fleet/0.3.300/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.300/templates/_helpers.tpl
new file mode 100644
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.300/templates/configmap.yaml b/released/charts/fleet/fleet/0.3.300/templates/configmap.yaml
new file mode 100644
index 000000000..c546c4b97
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/templates/configmap.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: fleet-controller
+data:
+ config: |
+ {
+ "agentImage": "{{ template "system_default_registry" . }}{{.Values.agentImage.repository}}:{{.Values.agentImage.tag}}",
+ "agentImagePullPolicy": "{{ .Values.agentImage.imagePullPolicy }}",
+ "apiServerURL": "{{.Values.apiServerURL}}",
+ "apiServerCA": "{{b64enc .Values.apiServerCA}}",
+ "agentCheckinInterval": "{{.Values.agentCheckinInterval}}",
+ "ignoreClusterRegistrationLabels": {{.Values.ignoreClusterRegistrationLabels}},
+ "bootstrap": {
+ "paths": "{{.Values.bootstrap.paths}}",
+ "repo": "{{.Values.bootstrap.repo}}",
+ "secret": "{{.Values.bootstrap.secret}}",
+ "branch": "{{.Values.bootstrap.branch}}",
+ "namespace": "{{.Values.bootstrap.namespace}}",
+ },
+ "webhookReceiverURL": "{{.Values.webhookReceiverURL}}",
+ "githubURLPrefix": "{{.Values.githubURLPrefix}}"
+ }
diff --git a/released/charts/fleet/fleet/0.3.300/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.300/templates/deployment.yaml
new file mode 100644
index 000000000..25c505ad8
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/templates/deployment.yaml
@@ -0,0 +1,23 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-controller
+spec:
+ selector:
+ matchLabels:
+ app: fleet-controller
+ template:
+ metadata:
+ labels:
+ app: fleet-controller
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ name: fleet-controller
+ imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+ serviceAccountName: fleet-controller
diff --git a/released/charts/fleet/fleet/0.3.300/templates/rbac.yaml b/released/charts/fleet/fleet/0.3.300/templates/rbac.yaml
new file mode 100644
index 000000000..59df51b1f
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/templates/rbac.yaml
@@ -0,0 +1,106 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - gitjob.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - fleet.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ - serviceaccounts
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ - configmaps
+ verbs:
+ - '*'
+- apiGroups:
+ - rbac.authorization.k8s.io
+ resources:
+ - clusterroles
+ - clusterrolebindings
+ - roles
+ - rolebindings
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+ namespace: {{.Release.Namespace}}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller-bootstrap
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller-bootstrap
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller-bootstrap
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller-bootstrap
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet/fleet/0.3.300/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.300/templates/serviceaccount.yaml
new file mode 100644
index 000000000..bd99d9958
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/templates/serviceaccount.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller-bootstrap
diff --git a/released/charts/fleet/fleet/0.3.300/values.yaml b/released/charts/fleet/fleet/0.3.300/values.yaml
new file mode 100644
index 000000000..36af75dc9
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.300/values.yaml
@@ -0,0 +1,38 @@
+image:
+ repository: rancher/fleet
+ tag: v0.3.3
+ imagePullPolicy: IfNotPresent
+
+agentImage:
+ repository: rancher/fleet-agent
+ tag: v0.3.3
+ imagePullPolicy: IfNotPresent
+
+# For cluster registration the public URL of the Kubernetes API server must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# For cluster registration the pem encoded value of the CA of the Kubernetes API server must be set here
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# A duration string for how often agents should report a heartbeat
+agentCheckinInterval: "15m"
+
+# Whether you want to allow cluster upon registration to specify their labels.
+ignoreClusterRegistrationLabels: false
+
+bootstrap:
+ # The namespace that will be autocreated and the local cluster will be registered in
+ namespace: fleet-local
+ # A repo to add at install time that will deploy to the local cluster. This allows
+ # one to fully bootstrap fleet, it's configuration and all it's downstream clusters
+ # in one shot.
+ repo: ""
+ secret: ""
+ branch: master
+ paths: ""
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.400/Chart.yaml b/released/charts/fleet/fleet/0.3.400/Chart.yaml
new file mode 100755
index 000000000..b62e294de
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/Chart.yaml
@@ -0,0 +1,15 @@
+annotations:
+ catalog.cattle.io/auto-install: fleet-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
+ catalog.cattle.io/release-name: fleet
+apiVersion: v2
+appVersion: 0.3.4
+description: Fleet Manager - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet
+version: 0.3.400
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/.helmignore b/released/charts/fleet/fleet/0.3.400/charts/gitjob/.helmignore
new file mode 100755
index 000000000..691fa13d6
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/Chart.yaml b/released/charts/fleet/fleet/0.3.400/charts/gitjob/Chart.yaml
new file mode 100755
index 000000000..5724324d7
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v2
+appVersion: 0.1.13
+description: Controller that run jobs based on git events
+name: gitjob
+version: 0.1.13
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/_helpers.tpl
new file mode 100755
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/clusterrole.yaml b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/clusterrole.yaml
new file mode 100755
index 000000000..bcad90164
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/clusterrole.yaml
@@ -0,0 +1,38 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: gitjob
+rules:
+ - apiGroups:
+ - "batch"
+ resources:
+ - 'jobs'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'pods'
+ verbs:
+ - 'list'
+ - 'get'
+ - 'watch'
+ - apiGroups:
+ - ""
+ resources:
+ - 'secrets'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'configmaps'
+ verbs:
+ - '*'
+ - apiGroups:
+ - "gitjob.cattle.io"
+ resources:
+ - "gitjobs"
+ - "gitjobs/status"
+ verbs:
+ - "*"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/clusterrolebinding.yaml b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/clusterrolebinding.yaml
new file mode 100755
index 000000000..0bf07c4ef
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/clusterrolebinding.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: gitjob-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gitjob
+subjects:
+ - kind: ServiceAccount
+ name: gitjob
+ namespace: {{ .Release.Namespace }}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/deployment.yaml
new file mode 100755
index 000000000..a12a30d92
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/deployment.yaml
@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: gitjob
+spec:
+ selector:
+ matchLabels:
+ app: "gitjob"
+ template:
+ metadata:
+ labels:
+ app: "gitjob"
+ spec:
+ serviceAccountName: gitjob
+ containers:
+ - image: "{{ template "system_default_registry" . }}{{ .Values.gitjob.repository }}:{{ .Values.gitjob.tag }}"
+ name: gitjob
+ command:
+ - gitjob
+ - --tekton-image
+ - "{{ template "system_default_registry" . }}{{ .Values.tekton.repository }}:{{ .Values.tekton.tag }}"
+ env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ {{- if .Values.proxy }}
+ - name: HTTP_PROXY
+ value: {{ .Values.proxy }}
+ - name: HTTPS_PROXY
+ value: {{ .Values.proxy }}
+ - name: NO_PROXY
+ value: {{ .Values.noProxy }}
+ {{- end }}
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/service.yaml b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/service.yaml
new file mode 100755
index 000000000..bf57c1b55
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: gitjob
+spec:
+ ports:
+ - name: http-80
+ port: 80
+ protocol: TCP
+ targetPort: 8080
+ selector:
+ app: "gitjob"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/serviceaccount.yaml
new file mode 100755
index 000000000..5f8aecb04
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: gitjob
diff --git a/released/charts/fleet/fleet/0.3.400/charts/gitjob/values.yaml b/released/charts/fleet/fleet/0.3.400/charts/gitjob/values.yaml
new file mode 100755
index 000000000..051e88b83
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/charts/gitjob/values.yaml
@@ -0,0 +1,26 @@
+gitjob:
+ repository: rancher/gitjob
+ tag: v0.1.13
+
+tekton:
+ repository: rancher/tekton-utils
+ tag: v0.1.1
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+# http[s] proxy server
+# proxy: http://@::
+
+# comma separated list of domains or ip addresses that will not use the proxy
+noProxy: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
+
+nodeSelector:
+ kubernetes.io/os: linux
+
+tolerations:
+ - key: cattle.io/os
+ operator: "Equal"
+ value: "linux"
+ effect: NoSchedule
diff --git a/released/charts/fleet/fleet/0.3.400/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.400/templates/_helpers.tpl
new file mode 100755
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.400/templates/configmap.yaml b/released/charts/fleet/fleet/0.3.400/templates/configmap.yaml
new file mode 100755
index 000000000..c546c4b97
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/templates/configmap.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: fleet-controller
+data:
+ config: |
+ {
+ "agentImage": "{{ template "system_default_registry" . }}{{.Values.agentImage.repository}}:{{.Values.agentImage.tag}}",
+ "agentImagePullPolicy": "{{ .Values.agentImage.imagePullPolicy }}",
+ "apiServerURL": "{{.Values.apiServerURL}}",
+ "apiServerCA": "{{b64enc .Values.apiServerCA}}",
+ "agentCheckinInterval": "{{.Values.agentCheckinInterval}}",
+ "ignoreClusterRegistrationLabels": {{.Values.ignoreClusterRegistrationLabels}},
+ "bootstrap": {
+ "paths": "{{.Values.bootstrap.paths}}",
+ "repo": "{{.Values.bootstrap.repo}}",
+ "secret": "{{.Values.bootstrap.secret}}",
+ "branch": "{{.Values.bootstrap.branch}}",
+ "namespace": "{{.Values.bootstrap.namespace}}",
+ },
+ "webhookReceiverURL": "{{.Values.webhookReceiverURL}}",
+ "githubURLPrefix": "{{.Values.githubURLPrefix}}"
+ }
diff --git a/released/charts/fleet/fleet/0.3.400/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.400/templates/deployment.yaml
new file mode 100755
index 000000000..c64f94ddb
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/templates/deployment.yaml
@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-controller
+spec:
+ selector:
+ matchLabels:
+ app: fleet-controller
+ template:
+ metadata:
+ labels:
+ app: fleet-controller
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ name: fleet-controller
+ imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+ serviceAccountName: fleet-controller
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/fleet/fleet/0.3.400/templates/rbac.yaml b/released/charts/fleet/fleet/0.3.400/templates/rbac.yaml
new file mode 100755
index 000000000..59df51b1f
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/templates/rbac.yaml
@@ -0,0 +1,106 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - gitjob.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - fleet.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ - serviceaccounts
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ - configmaps
+ verbs:
+ - '*'
+- apiGroups:
+ - rbac.authorization.k8s.io
+ resources:
+ - clusterroles
+ - clusterrolebindings
+ - roles
+ - rolebindings
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+ namespace: {{.Release.Namespace}}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller-bootstrap
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller-bootstrap
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller-bootstrap
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller-bootstrap
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet/fleet/0.3.400/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.400/templates/serviceaccount.yaml
new file mode 100755
index 000000000..bd99d9958
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/templates/serviceaccount.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller-bootstrap
diff --git a/released/charts/fleet/fleet/0.3.400/values.yaml b/released/charts/fleet/fleet/0.3.400/values.yaml
new file mode 100755
index 000000000..726f35877
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.400/values.yaml
@@ -0,0 +1,47 @@
+image:
+ repository: rancher/fleet
+ tag: v0.3.4
+ imagePullPolicy: IfNotPresent
+
+agentImage:
+ repository: rancher/fleet-agent
+ tag: v0.3.4
+ imagePullPolicy: IfNotPresent
+
+# For cluster registration the public URL of the Kubernetes API server must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# For cluster registration the pem encoded value of the CA of the Kubernetes API server must be set here
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# A duration string for how often agents should report a heartbeat
+agentCheckinInterval: "15m"
+
+# Whether you want to allow cluster upon registration to specify their labels.
+ignoreClusterRegistrationLabels: false
+
+bootstrap:
+ # The namespace that will be autocreated and the local cluster will be registered in
+ namespace: fleet-local
+ # A repo to add at install time that will deploy to the local cluster. This allows
+ # one to fully bootstrap fleet, it's configuration and all it's downstream clusters
+ # in one shot.
+ repo: ""
+ secret: ""
+ branch: master
+ paths: ""
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+nodeSelector:
+ kubernetes.io/os: linux
+
+tolerations:
+ - key: cattle.io/os
+ operator: "Equal"
+ value: "linux"
+ effect: NoSchedule
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.500/Chart.yaml b/released/charts/fleet/fleet/0.3.500/Chart.yaml
new file mode 100755
index 000000000..6ab92a3d4
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/Chart.yaml
@@ -0,0 +1,15 @@
+annotations:
+ catalog.cattle.io/auto-install: fleet-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: fleet-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: clusters.fleet.cattle.io/v1alpha1
+ catalog.cattle.io/release-name: fleet
+apiVersion: v2
+appVersion: 0.3.5
+description: Fleet Manager - GitOps at Scale
+icon: https://charts.rancher.io/assets/logos/fleet.svg
+name: fleet
+version: 0.3.500
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/.helmignore b/released/charts/fleet/fleet/0.3.500/charts/gitjob/.helmignore
new file mode 100755
index 000000000..691fa13d6
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/Chart.yaml b/released/charts/fleet/fleet/0.3.500/charts/gitjob/Chart.yaml
new file mode 100755
index 000000000..62e1e0255
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v2
+appVersion: 0.1.15
+description: Controller that run jobs based on git events
+name: gitjob
+version: 0.1.15
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/_helpers.tpl
new file mode 100755
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/clusterrole.yaml b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/clusterrole.yaml
new file mode 100755
index 000000000..bcad90164
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/clusterrole.yaml
@@ -0,0 +1,38 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: gitjob
+rules:
+ - apiGroups:
+ - "batch"
+ resources:
+ - 'jobs'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'pods'
+ verbs:
+ - 'list'
+ - 'get'
+ - 'watch'
+ - apiGroups:
+ - ""
+ resources:
+ - 'secrets'
+ verbs:
+ - '*'
+ - apiGroups:
+ - ""
+ resources:
+ - 'configmaps'
+ verbs:
+ - '*'
+ - apiGroups:
+ - "gitjob.cattle.io"
+ resources:
+ - "gitjobs"
+ - "gitjobs/status"
+ verbs:
+ - "*"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/clusterrolebinding.yaml b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/clusterrolebinding.yaml
new file mode 100755
index 000000000..0bf07c4ef
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/clusterrolebinding.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: gitjob-binding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gitjob
+subjects:
+ - kind: ServiceAccount
+ name: gitjob
+ namespace: {{ .Release.Namespace }}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/deployment.yaml
new file mode 100755
index 000000000..a12a30d92
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/deployment.yaml
@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: gitjob
+spec:
+ selector:
+ matchLabels:
+ app: "gitjob"
+ template:
+ metadata:
+ labels:
+ app: "gitjob"
+ spec:
+ serviceAccountName: gitjob
+ containers:
+ - image: "{{ template "system_default_registry" . }}{{ .Values.gitjob.repository }}:{{ .Values.gitjob.tag }}"
+ name: gitjob
+ command:
+ - gitjob
+ - --tekton-image
+ - "{{ template "system_default_registry" . }}{{ .Values.tekton.repository }}:{{ .Values.tekton.tag }}"
+ env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ {{- if .Values.proxy }}
+ - name: HTTP_PROXY
+ value: {{ .Values.proxy }}
+ - name: HTTPS_PROXY
+ value: {{ .Values.proxy }}
+ - name: NO_PROXY
+ value: {{ .Values.noProxy }}
+ {{- end }}
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/service.yaml b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/service.yaml
new file mode 100755
index 000000000..bf57c1b55
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/service.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: gitjob
+spec:
+ ports:
+ - name: http-80
+ port: 80
+ protocol: TCP
+ targetPort: 8080
+ selector:
+ app: "gitjob"
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/serviceaccount.yaml
new file mode 100755
index 000000000..5f8aecb04
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/templates/serviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: gitjob
diff --git a/released/charts/fleet/fleet/0.3.500/charts/gitjob/values.yaml b/released/charts/fleet/fleet/0.3.500/charts/gitjob/values.yaml
new file mode 100755
index 000000000..90ca446a9
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/charts/gitjob/values.yaml
@@ -0,0 +1,26 @@
+gitjob:
+ repository: rancher/gitjob
+ tag: v0.1.15
+
+tekton:
+ repository: rancher/tekton-utils
+ tag: v0.1.1
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+# http[s] proxy server
+# proxy: http://@::
+
+# comma separated list of domains or ip addresses that will not use the proxy
+noProxy: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local
+
+nodeSelector:
+ kubernetes.io/os: linux
+
+tolerations:
+ - key: cattle.io/os
+ operator: "Equal"
+ value: "linux"
+ effect: NoSchedule
diff --git a/released/charts/fleet/fleet/0.3.500/templates/_helpers.tpl b/released/charts/fleet/fleet/0.3.500/templates/_helpers.tpl
new file mode 100755
index 000000000..f652b5643
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/fleet/fleet/0.3.500/templates/configmap.yaml b/released/charts/fleet/fleet/0.3.500/templates/configmap.yaml
new file mode 100755
index 000000000..c546c4b97
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/templates/configmap.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: fleet-controller
+data:
+ config: |
+ {
+ "agentImage": "{{ template "system_default_registry" . }}{{.Values.agentImage.repository}}:{{.Values.agentImage.tag}}",
+ "agentImagePullPolicy": "{{ .Values.agentImage.imagePullPolicy }}",
+ "apiServerURL": "{{.Values.apiServerURL}}",
+ "apiServerCA": "{{b64enc .Values.apiServerCA}}",
+ "agentCheckinInterval": "{{.Values.agentCheckinInterval}}",
+ "ignoreClusterRegistrationLabels": {{.Values.ignoreClusterRegistrationLabels}},
+ "bootstrap": {
+ "paths": "{{.Values.bootstrap.paths}}",
+ "repo": "{{.Values.bootstrap.repo}}",
+ "secret": "{{.Values.bootstrap.secret}}",
+ "branch": "{{.Values.bootstrap.branch}}",
+ "namespace": "{{.Values.bootstrap.namespace}}",
+ },
+ "webhookReceiverURL": "{{.Values.webhookReceiverURL}}",
+ "githubURLPrefix": "{{.Values.githubURLPrefix}}"
+ }
diff --git a/released/charts/fleet/fleet/0.3.500/templates/deployment.yaml b/released/charts/fleet/fleet/0.3.500/templates/deployment.yaml
new file mode 100755
index 000000000..c64f94ddb
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/templates/deployment.yaml
@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: fleet-controller
+spec:
+ selector:
+ matchLabels:
+ app: fleet-controller
+ template:
+ metadata:
+ labels:
+ app: fleet-controller
+ spec:
+ containers:
+ - env:
+ - name: NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ name: fleet-controller
+ imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
+ serviceAccountName: fleet-controller
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/fleet/fleet/0.3.500/templates/rbac.yaml b/released/charts/fleet/fleet/0.3.500/templates/rbac.yaml
new file mode 100755
index 000000000..59df51b1f
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/templates/rbac.yaml
@@ -0,0 +1,106 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - gitjob.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - fleet.cattle.io
+ resources:
+ - '*'
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ - serviceaccounts
+ verbs:
+ - '*'
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ - configmaps
+ verbs:
+ - '*'
+- apiGroups:
+ - rbac.authorization.k8s.io
+ resources:
+ - clusterroles
+ - clusterrolebindings
+ - roles
+ - rolebindings
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+ namespace: {{.Release.Namespace}}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: fleet-controller
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: fleet-controller
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: fleet-controller
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: fleet-controller-bootstrap
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: fleet-controller-bootstrap
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: fleet-controller-bootstrap
+subjects:
+- kind: ServiceAccount
+ name: fleet-controller-bootstrap
+ namespace: {{.Release.Namespace}}
diff --git a/released/charts/fleet/fleet/0.3.500/templates/serviceaccount.yaml b/released/charts/fleet/fleet/0.3.500/templates/serviceaccount.yaml
new file mode 100755
index 000000000..bd99d9958
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/templates/serviceaccount.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: fleet-controller-bootstrap
diff --git a/released/charts/fleet/fleet/0.3.500/values.yaml b/released/charts/fleet/fleet/0.3.500/values.yaml
new file mode 100755
index 000000000..d81363b8f
--- /dev/null
+++ b/released/charts/fleet/fleet/0.3.500/values.yaml
@@ -0,0 +1,47 @@
+image:
+ repository: rancher/fleet
+ tag: v0.3.5-rc5
+ imagePullPolicy: IfNotPresent
+
+agentImage:
+ repository: rancher/fleet-agent
+ tag: v0.3.5-rc5
+ imagePullPolicy: IfNotPresent
+
+# For cluster registration the public URL of the Kubernetes API server must be set here
+# Example: https://example.com:6443
+apiServerURL: ""
+
+# For cluster registration the pem encoded value of the CA of the Kubernetes API server must be set here
+# If left empty it is assumed this Kubernetes API TLS is signed by a well known CA.
+apiServerCA: ""
+
+# A duration string for how often agents should report a heartbeat
+agentCheckinInterval: "15m"
+
+# Whether you want to allow cluster upon registration to specify their labels.
+ignoreClusterRegistrationLabels: false
+
+bootstrap:
+ # The namespace that will be autocreated and the local cluster will be registered in
+ namespace: fleet-local
+ # A repo to add at install time that will deploy to the local cluster. This allows
+ # one to fully bootstrap fleet, it's configuration and all it's downstream clusters
+ # in one shot.
+ repo: ""
+ secret: ""
+ branch: master
+ paths: ""
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+nodeSelector:
+ kubernetes.io/os: linux
+
+tolerations:
+ - key: cattle.io/os
+ operator: "Equal"
+ value: "linux"
+ effect: NoSchedule
\ No newline at end of file
diff --git a/released/charts/longhorn/longhorn-crd/1.0.200/Chart.yaml b/released/charts/longhorn/longhorn-crd/1.0.200/Chart.yaml
new file mode 100644
index 000000000..7dc68d42b
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.0.200/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: longhorn-system
+ catalog.cattle.io/release-name: longhorn-crd
+apiVersion: v1
+description: Installs the CRDs for longhorn.
+name: longhorn-crd
+type: application
+version: 1.0.200
diff --git a/released/charts/longhorn/longhorn-crd/1.0.200/README.md b/released/charts/longhorn/longhorn-crd/1.0.200/README.md
new file mode 100644
index 000000000..3db83649d
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.0.200/README.md
@@ -0,0 +1,2 @@
+# longhorn-crd
+A Rancher chart that installs the CRDs used by [longhorn](https://github.com/rancher/dev-charts/tree/master/packages/longhorn).
diff --git a/released/charts/longhorn/longhorn-crd/1.0.200/templates/crds.yaml b/released/charts/longhorn/longhorn-crd/1.0.200/templates/crds.yaml
new file mode 100644
index 000000000..e63cf8c72
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.0.200/templates/crds.yaml
@@ -0,0 +1,172 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Engine
+ name: engines.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Engine
+ listKind: EngineList
+ plural: engines
+ shortNames:
+ - lhe
+ singular: engine
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Replica
+ name: replicas.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Replica
+ listKind: ReplicaList
+ plural: replicas
+ shortNames:
+ - lhr
+ singular: replica
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Setting
+ name: settings.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Setting
+ listKind: SettingList
+ plural: settings
+ shortNames:
+ - lhs
+ singular: setting
+ scope: Namespaced
+ version: v1beta1
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Volume
+ name: volumes.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Volume
+ listKind: VolumeList
+ plural: volumes
+ shortNames:
+ - lhv
+ singular: volume
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: EngineImage
+ name: engineimages.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: EngineImage
+ listKind: EngineImageList
+ plural: engineimages
+ shortNames:
+ - lhei
+ singular: engineimage
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Node
+ name: nodes.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Node
+ listKind: NodeList
+ plural: nodes
+ shortNames:
+ - lhn
+ singular: node
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: InstanceManager
+ name: instancemanagers.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: InstanceManager
+ listKind: InstanceManagerList
+ plural: instancemanagers
+ shortNames:
+ - lhim
+ singular: instancemanager
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
diff --git a/released/charts/longhorn/longhorn-crd/1.0.201/Chart.yaml b/released/charts/longhorn/longhorn-crd/1.0.201/Chart.yaml
new file mode 100644
index 000000000..ba1c26d89
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.0.201/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: longhorn-system
+ catalog.cattle.io/release-name: longhorn-crd
+apiVersion: v1
+description: Installs the CRDs for longhorn.
+name: longhorn-crd
+type: application
+version: 1.0.201
diff --git a/released/charts/longhorn/longhorn-crd/1.0.201/README.md b/released/charts/longhorn/longhorn-crd/1.0.201/README.md
new file mode 100644
index 000000000..d9f7f14b3
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.0.201/README.md
@@ -0,0 +1,2 @@
+# longhorn-crd
+A Rancher chart that installs the CRDs used by longhorn.
diff --git a/released/charts/longhorn/longhorn-crd/1.0.201/templates/crds.yaml b/released/charts/longhorn/longhorn-crd/1.0.201/templates/crds.yaml
new file mode 100644
index 000000000..e63cf8c72
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.0.201/templates/crds.yaml
@@ -0,0 +1,172 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Engine
+ name: engines.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Engine
+ listKind: EngineList
+ plural: engines
+ shortNames:
+ - lhe
+ singular: engine
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Replica
+ name: replicas.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Replica
+ listKind: ReplicaList
+ plural: replicas
+ shortNames:
+ - lhr
+ singular: replica
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Setting
+ name: settings.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Setting
+ listKind: SettingList
+ plural: settings
+ shortNames:
+ - lhs
+ singular: setting
+ scope: Namespaced
+ version: v1beta1
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Volume
+ name: volumes.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Volume
+ listKind: VolumeList
+ plural: volumes
+ shortNames:
+ - lhv
+ singular: volume
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: EngineImage
+ name: engineimages.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: EngineImage
+ listKind: EngineImageList
+ plural: engineimages
+ shortNames:
+ - lhei
+ singular: engineimage
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: Node
+ name: nodes.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Node
+ listKind: NodeList
+ plural: nodes
+ shortNames:
+ - lhn
+ singular: node
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.0.2
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.0.2
+ longhorn-manager: InstanceManager
+ name: instancemanagers.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: InstanceManager
+ listKind: InstanceManagerList
+ plural: instancemanagers
+ shortNames:
+ - lhim
+ singular: instancemanager
+ scope: Namespaced
+ version: v1beta1
+ subresources:
+ status: {}
diff --git a/released/charts/longhorn/longhorn-crd/1.1.000/Chart.yaml b/released/charts/longhorn/longhorn-crd/1.1.000/Chart.yaml
new file mode 100644
index 000000000..b9dba3761
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.1.000/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: longhorn-system
+ catalog.cattle.io/release-name: longhorn-crd
+apiVersion: v1
+description: Installs the CRDs for longhorn.
+name: longhorn-crd
+type: application
+version: 1.1.000
diff --git a/released/charts/longhorn/longhorn-crd/1.1.000/README.md b/released/charts/longhorn/longhorn-crd/1.1.000/README.md
new file mode 100644
index 000000000..d9f7f14b3
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.1.000/README.md
@@ -0,0 +1,2 @@
+# longhorn-crd
+A Rancher chart that installs the CRDs used by longhorn.
diff --git a/released/charts/longhorn/longhorn-crd/1.1.000/templates/crds.yaml b/released/charts/longhorn/longhorn-crd/1.1.000/templates/crds.yaml
new file mode 100644
index 000000000..836264585
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.1.000/templates/crds.yaml
@@ -0,0 +1,420 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Engine
+ name: engines.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Engine
+ listKind: EngineList
+ plural: engines
+ shortNames:
+ - lhe
+ singular: engine
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The current state of the engine
+ jsonPath: .status.currentState
+ - name: Node
+ type: string
+ description: The node that the engine is on
+ jsonPath: .spec.nodeID
+ - name: InstanceManager
+ type: string
+ description: The instance manager of the engine
+ jsonPath: .status.instanceManagerName
+ - name: Image
+ type: string
+ description: The current image of the engine
+ jsonPath: .status.currentImage
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Replica
+ name: replicas.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Replica
+ listKind: ReplicaList
+ plural: replicas
+ shortNames:
+ - lhr
+ singular: replica
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The current state of the replica
+ jsonPath: .status.currentState
+ - name: Node
+ type: string
+ description: The node that the replica is on
+ jsonPath: .spec.nodeID
+ - name: Disk
+ type: string
+ description: The disk that the replica is on
+ jsonPath: .spec.diskID
+ - name: InstanceManager
+ type: string
+ description: The instance manager of the replica
+ jsonPath: .status.instanceManagerName
+ - name: Image
+ type: string
+ description: The current image of the replica
+ jsonPath: .status.currentImage
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Setting
+ name: settings.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Setting
+ listKind: SettingList
+ plural: settings
+ shortNames:
+ - lhs
+ singular: setting
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ x-kubernetes-preserve-unknown-fields: true
+ additionalPrinterColumns:
+ - name: Value
+ type: string
+ description: The value of the setting
+ jsonPath: .value
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Volume
+ name: volumes.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Volume
+ listKind: VolumeList
+ plural: volumes
+ shortNames:
+ - lhv
+ singular: volume
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The state of the volume
+ jsonPath: .status.state
+ - name: Robustness
+ type: string
+ description: The robustness of the volume
+ jsonPath: .status.robustness
+ - name: Scheduled
+ type: string
+ description: The scheduled condition of the volume
+ jsonPath: .status.conditions['scheduled']['status']
+ - name: Size
+ type: string
+ description: The size of the volume
+ jsonPath: .spec.size
+ - name: Node
+ type: string
+ description: The node that the volume is currently attaching to
+ jsonPath: .status.currentNodeID
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: EngineImage
+ name: engineimages.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: EngineImage
+ listKind: EngineImageList
+ plural: engineimages
+ shortNames:
+ - lhei
+ singular: engineimage
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: State of the engine image
+ jsonPath: .status.state
+ - name: Image
+ type: string
+ description: The Longhorn engine image
+ jsonPath: .spec.image
+ - name: RefCount
+ type: integer
+ description: Number of volumes are using the engine image
+ jsonPath: .status.refCount
+ - name: BuildDate
+ type: date
+ description: The build date of the engine image
+ jsonPath: .status.buildDate
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Node
+ name: nodes.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Node
+ listKind: NodeList
+ plural: nodes
+ shortNames:
+ - lhn
+ singular: node
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: Ready
+ type: string
+ description: Indicate whether the node is ready
+ jsonPath: .status.conditions['Ready']['status']
+ - name: AllowScheduling
+ type: boolean
+ description: Indicate whether the user disabled/enabled replica scheduling for the node
+ jsonPath: .spec.allowScheduling
+ - name: Schedulable
+ type: string
+ description: Indicate whether Longhorn can schedule replicas on the node
+ jsonPath: .status.conditions['Schedulable']['status']
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: InstanceManager
+ name: instancemanagers.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: InstanceManager
+ listKind: InstanceManagerList
+ plural: instancemanagers
+ shortNames:
+ - lhim
+ singular: instancemanager
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The state of the instance manager
+ jsonPath: .status.currentState
+ - name: Type
+ type: string
+ description: The type of the instance manager (engine or replica)
+ jsonPath: .spec.type
+ - name: Node
+ type: string
+ description: The node that the instance manager is running on
+ jsonPath: .spec.nodeID
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: ShareManager
+ name: sharemanagers.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: ShareManager
+ listKind: ShareManagerList
+ plural: sharemanagers
+ shortNames:
+ - lhsm
+ singular: sharemanager
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The state of the share manager
+ jsonPath: .status.state
+ - name: Node
+ type: string
+ description: The node that the share manager is owned by
+ jsonPath: .status.ownerID
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
diff --git a/released/charts/longhorn/longhorn-crd/1.1.001/Chart.yaml b/released/charts/longhorn/longhorn-crd/1.1.001/Chart.yaml
new file mode 100755
index 000000000..2ce321e37
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.1.001/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: longhorn-system
+ catalog.cattle.io/release-name: longhorn-crd
+apiVersion: v1
+description: Installs the CRDs for longhorn.
+name: longhorn-crd
+type: application
+version: 1.1.001
diff --git a/released/charts/longhorn/longhorn-crd/1.1.001/README.md b/released/charts/longhorn/longhorn-crd/1.1.001/README.md
new file mode 100755
index 000000000..d9f7f14b3
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.1.001/README.md
@@ -0,0 +1,2 @@
+# longhorn-crd
+A Rancher chart that installs the CRDs used by longhorn.
diff --git a/released/charts/longhorn/longhorn-crd/1.1.001/templates/crds.yaml b/released/charts/longhorn/longhorn-crd/1.1.001/templates/crds.yaml
new file mode 100755
index 000000000..836264585
--- /dev/null
+++ b/released/charts/longhorn/longhorn-crd/1.1.001/templates/crds.yaml
@@ -0,0 +1,420 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Engine
+ name: engines.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Engine
+ listKind: EngineList
+ plural: engines
+ shortNames:
+ - lhe
+ singular: engine
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The current state of the engine
+ jsonPath: .status.currentState
+ - name: Node
+ type: string
+ description: The node that the engine is on
+ jsonPath: .spec.nodeID
+ - name: InstanceManager
+ type: string
+ description: The instance manager of the engine
+ jsonPath: .status.instanceManagerName
+ - name: Image
+ type: string
+ description: The current image of the engine
+ jsonPath: .status.currentImage
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Replica
+ name: replicas.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Replica
+ listKind: ReplicaList
+ plural: replicas
+ shortNames:
+ - lhr
+ singular: replica
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The current state of the replica
+ jsonPath: .status.currentState
+ - name: Node
+ type: string
+ description: The node that the replica is on
+ jsonPath: .spec.nodeID
+ - name: Disk
+ type: string
+ description: The disk that the replica is on
+ jsonPath: .spec.diskID
+ - name: InstanceManager
+ type: string
+ description: The instance manager of the replica
+ jsonPath: .status.instanceManagerName
+ - name: Image
+ type: string
+ description: The current image of the replica
+ jsonPath: .status.currentImage
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Setting
+ name: settings.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Setting
+ listKind: SettingList
+ plural: settings
+ shortNames:
+ - lhs
+ singular: setting
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ x-kubernetes-preserve-unknown-fields: true
+ additionalPrinterColumns:
+ - name: Value
+ type: string
+ description: The value of the setting
+ jsonPath: .value
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Volume
+ name: volumes.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Volume
+ listKind: VolumeList
+ plural: volumes
+ shortNames:
+ - lhv
+ singular: volume
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The state of the volume
+ jsonPath: .status.state
+ - name: Robustness
+ type: string
+ description: The robustness of the volume
+ jsonPath: .status.robustness
+ - name: Scheduled
+ type: string
+ description: The scheduled condition of the volume
+ jsonPath: .status.conditions['scheduled']['status']
+ - name: Size
+ type: string
+ description: The size of the volume
+ jsonPath: .spec.size
+ - name: Node
+ type: string
+ description: The node that the volume is currently attaching to
+ jsonPath: .status.currentNodeID
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: EngineImage
+ name: engineimages.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: EngineImage
+ listKind: EngineImageList
+ plural: engineimages
+ shortNames:
+ - lhei
+ singular: engineimage
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: State of the engine image
+ jsonPath: .status.state
+ - name: Image
+ type: string
+ description: The Longhorn engine image
+ jsonPath: .spec.image
+ - name: RefCount
+ type: integer
+ description: Number of volumes are using the engine image
+ jsonPath: .status.refCount
+ - name: BuildDate
+ type: date
+ description: The build date of the engine image
+ jsonPath: .status.buildDate
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: Node
+ name: nodes.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: Node
+ listKind: NodeList
+ plural: nodes
+ shortNames:
+ - lhn
+ singular: node
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: Ready
+ type: string
+ description: Indicate whether the node is ready
+ jsonPath: .status.conditions['Ready']['status']
+ - name: AllowScheduling
+ type: boolean
+ description: Indicate whether the user disabled/enabled replica scheduling for the node
+ jsonPath: .spec.allowScheduling
+ - name: Schedulable
+ type: string
+ description: Indicate whether Longhorn can schedule replicas on the node
+ jsonPath: .status.conditions['Schedulable']['status']
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: InstanceManager
+ name: instancemanagers.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: InstanceManager
+ listKind: InstanceManagerList
+ plural: instancemanagers
+ shortNames:
+ - lhim
+ singular: instancemanager
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The state of the instance manager
+ jsonPath: .status.currentState
+ - name: Type
+ type: string
+ description: The type of the instance manager (engine or replica)
+ jsonPath: .spec.type
+ - name: Node
+ type: string
+ description: The node that the instance manager is running on
+ jsonPath: .spec.nodeID
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ labels:
+ app.kubernetes.io/name: longhorn
+ helm.sh/chart: longhorn-1.1.0
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/instance: longhorn
+ app.kubernetes.io/version: v1.1.0
+ longhorn-manager: ShareManager
+ name: sharemanagers.longhorn.io
+spec:
+ group: longhorn.io
+ names:
+ kind: ShareManager
+ listKind: ShareManagerList
+ plural: sharemanagers
+ shortNames:
+ - lhsm
+ singular: sharemanager
+ scope: Namespaced
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ schema:
+ openAPIV3Schema:
+ type: object
+ properties:
+ spec:
+ x-kubernetes-preserve-unknown-fields: true
+ status:
+ x-kubernetes-preserve-unknown-fields: true
+ subresources:
+ status: {}
+ additionalPrinterColumns:
+ - name: State
+ type: string
+ description: The state of the share manager
+ jsonPath: .status.state
+ - name: Node
+ type: string
+ description: The node that the share manager is owned by
+ jsonPath: .status.ownerID
+ - name: Age
+ type: date
+ jsonPath: .metadata.creationTimestamp
diff --git a/released/charts/longhorn/longhorn/1.0.200/.helmignore b/released/charts/longhorn/longhorn/1.0.200/.helmignore
new file mode 100644
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/longhorn/longhorn/1.0.200/Chart.yaml b/released/charts/longhorn/longhorn/1.0.200/Chart.yaml
new file mode 100644
index 000000000..915d207db
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/Chart.yaml
@@ -0,0 +1,35 @@
+annotations:
+ catalog.cattle.io/auto-install: longhorn-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/namespace: longhorn-system
+ catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
+ catalog.cattle.io/release-name: longhorn
+ catalog.cattle.io/ui-component: longhorn
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v1.0.2
+description: Longhorn is a distributed block storage system for Kubernetes.
+home: https://github.com/longhorn/longhorn
+icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
+keywords:
+- longhorn
+- storage
+- distributed
+- block
+- device
+- iscsi
+kubeVersion: '>=v1.14.0-r0'
+maintainers:
+- email: maintainers@longhorn.io
+ name: Longhorn maintainers
+- email: sheng@yasker.org
+ name: Sheng Yang
+name: longhorn
+sources:
+- https://github.com/longhorn/longhorn
+- https://github.com/longhorn/longhorn-engine
+- https://github.com/longhorn/longhorn-instance-manager
+- https://github.com/longhorn/longhorn-manager
+- https://github.com/longhorn/longhorn-ui
+- https://github.com/longhorn/longhorn-tests
+version: 1.0.200
diff --git a/released/charts/longhorn/longhorn/1.0.200/README.md b/released/charts/longhorn/longhorn/1.0.200/README.md
new file mode 100644
index 000000000..068bb5d66
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/README.md
@@ -0,0 +1,49 @@
+# Rancher Longhorn Chart
+
+> **Important**: Please install Longhorn chart in `longhorn-system` namespace only.
+
+> **Warning**: Longhorn doesn't support downgrading from a higher version to a lower version.
+
+The following document pertains to running Longhorn from the Rancher 2.0 chart.
+
+## Source Code
+
+Longhorn is 100% open source software. Project source code is spread across a number of repos:
+
+1. Longhorn Engine -- Core controller/replica logic https://github.com/longhorn/longhorn-engine
+2. Longhorn Instance Manager -- Controller/replica instance lifecycle management https://github.com/longhorn/longhorn-instance-manager
+3. Longhorn Manager -- Longhorn orchestration, includes CSI driver for Kubernetes https://github.com/longhorn/longhorn-manager
+4. Longhorn UI -- Dashboard https://github.com/longhorn/longhorn-ui
+
+## Prerequisites
+
+1. Rancher v2.1+
+2. Docker v1.13+
+3. Kubernetes v1.14+
+4. Make sure `curl`, `findmnt`, `grep`, `awk` and `blkid` has been installed in all nodes of the Kubernetes cluster.
+5. Make sure `open-iscsi` has been installed in all nodes of the Kubernetes cluster. For GKE, recommended Ubuntu as guest OS image since it contains `open-iscsi` already.
+
+## Uninstallation
+
+1. To prevent damage to the Kubernetes cluster, we recommend deleting all Kubernetes workloads using Longhorn volumes (PersistentVolume, PersistentVolumeClaim, StorageClass, Deployment, StatefulSet, DaemonSet, etc).
+
+2. From Rancher UI, navigate to `Catalog Apps` tab and delete Longhorn app.
+
+## Troubleshooting
+
+### I deleted the Longhorn App from Rancher UI instead of following the uninstallation procedure
+
+Redeploy the (same version) Longhorn App. Follow the uninstallation procedure above.
+
+### Problems with CRDs
+
+If your CRD instances or the CRDs themselves can't be deleted for whatever reason, run the commands below to clean up. Caution: this will wipe all Longhorn state!
+
+```
+# Delete CRD instances and definitions
+curl -s https://raw.githubusercontent.com/longhorn/longhorn/v0.8.1/scripts/cleanup.sh |bash -s v062
+curl -s https://raw.githubusercontent.com/longhorn/longhorn/v0.8.1/scripts/cleanup.sh |bash -s v070
+```
+
+---
+Please see [link](https://github.com/longhorn/longhorn) for more information.
diff --git a/released/charts/longhorn/longhorn/1.0.200/app-readme.md b/released/charts/longhorn/longhorn/1.0.200/app-readme.md
new file mode 100644
index 000000000..cb23135ca
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/app-readme.md
@@ -0,0 +1,11 @@
+# Longhorn
+
+Longhorn is a lightweight, reliable and easy to use distributed block storage system for Kubernetes. Once deployed, users can leverage persistent volumes provided by Longhorn.
+
+Longhorn creates a dedicated storage controller for each volume and synchronously replicates the volume across multiple replicas stored on multiple nodes. The storage controller and replicas are themselves orchestrated using Kubernetes. Longhorn supports snapshots, backups and even allows you to schedule recurring snapshots and backups!
+
+**Important**: Please install Longhorn chart in `longhorn-system` namespace only.
+
+**Warning**: Longhorn doesn't support downgrading from a higher version to a lower version.
+
+[Chart Documentation](https://github.com/longhorn/longhorn/blob/master/chart/README.md)
diff --git a/released/charts/longhorn/longhorn/1.0.200/questions.yml b/released/charts/longhorn/longhorn/1.0.200/questions.yml
new file mode 100644
index 000000000..26566901f
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/questions.yml
@@ -0,0 +1,346 @@
+categories:
+- storage
+namespace: longhorn-system
+questions:
+- variable: image.defaultImage
+ default: "true"
+ description: "Use default Longhorn images"
+ label: Use Default Images
+ type: boolean
+ show_subquestion_if: false
+ group: "Longhorn Images"
+ subquestions:
+ - variable: image.longhorn.manager.repository
+ default: longhornio/longhorn-manager
+ description: "Specify Longhorn Manager Image Repository"
+ type: string
+ label: Longhorn Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.manager.tag
+ default: v1.0.2
+ description: "Specify Longhorn Manager Image Tag"
+ type: string
+ label: Longhorn Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.engine.repository
+ default: longhornio/longhorn-engine
+ description: "Specify Longhorn Engine Image Repository"
+ type: string
+ label: Longhorn Engine Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.engine.tag
+ default: v1.0.2
+ description: "Specify Longhorn Engine Image Tag"
+ type: string
+ label: Longhorn Engine Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.ui.repository
+ default: longhornio/longhorn-ui
+ description: "Specify Longhorn UI Image Repository"
+ type: string
+ label: Longhorn UI Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.ui.tag
+ default: v1.0.2
+ description: "Specify Longhorn UI Image Tag"
+ type: string
+ label: Longhorn UI Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.instanceManager.repository
+ default: longhornio/longhorn-instance-manager
+ description: "Specify Longhorn Instance Manager Image Repository"
+ type: string
+ label: Longhorn Instance Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.instanceManager.tag
+ default: v1_20200514
+ description: "Specify Longhorn Instance Manager Image Tag"
+ type: string
+ label: Longhorn Instance Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.csi.attacher.repository
+ default: longhornio/csi-attacher
+ description: "Specify CSI attacher image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Attacher Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.attacher.tag
+ default: v2.0.0
+ description: "Specify CSI attacher image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Attacher Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.provisioner.repository
+ default: longhornio/csi-provisioner
+ description: "Specify CSI provisioner image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Provisioner Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.provisioner.tag
+ default: v1.4.0
+ description: "Specify CSI provisioner image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Provisioner Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.nodeDriverRegistrar.repository
+ default: longhornio/csi-node-driver-registrar
+ description: "Specify CSI Node Driver Registrar image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Node Driver Registrar Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.nodeDriverRegistrar.tag
+ default: v1.2.0
+ description: "Specify CSI Node Driver Registrar image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Node Driver Registrar Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.resizer.repository
+ default: longhornio/csi-resizer
+ description: "Specify CSI Driver Resizer image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Resizer Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.resizer.tag
+ default: v0.3.0
+ description: "Specify CSI Driver Resizer image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Resizer Image Tag
+ group: "Longhorn CSI Driver Images"
+- variable: privateRegistry.registryUrl
+ label: Private registry URL
+ description: "URL of private registry"
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: privateRegistry.registryUser
+ label: Private registry user
+ description: "User used to authenticate to private registry"
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: privateRegistry.registryPasswd
+ label: Private registry password
+ description: "Password used to authenticate to private registry"
+ group: "Private Registry Settings"
+ type: password
+ default: ""
+- variable: longhorn.default_setting
+ default: "false"
+ description: "Customize the default settings before installing Longhorn for the first time. This option will only work if the cluster hasn't installed Longhorn."
+ label: "Customize Default Settings"
+ type: boolean
+ show_subquestion_if: true
+ group: "Longhorn Default Settings"
+ subquestions:
+ - variable: defaultSettings.registrySecret
+ label: Private registry secret
+ description: "The Kubernetes Secret name"
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: csi.kubeletRootDir
+ default:
+ description: "Specify kubelet root-dir. Leave blank to autodetect."
+ type: string
+ label: Kubelet Root Directory
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.attacherReplicaCount
+ type: int
+ default:
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Attacher. By default 3."
+ label: Longhorn CSI Attacher replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.provisionerReplicaCount
+ type: int
+ default:
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Provisioner. By default 3."
+ label: Longhorn CSI Provisioner replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: persistence.defaultClass
+ default: "true"
+ description: "Set as default StorageClass"
+ group: "Longhorn CSI Driver Settings"
+ type: boolean
+ required: true
+ label: Default Storage Class
+ - variable: persistence.defaultClassReplicaCount
+ description: "Set replica count for default StorageClass"
+ group: "Longhorn CSI Driver Settings"
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ label: Default Storage Class Replica Count
+ - variable: defaultSettings.backupTarget
+ label: Backup Target
+ description: "The endpoint used to access the backupstore. NFS and S3 are supported."
+ group: "Longhorn Default Settings"
+ type: string
+ default:
+ - variable: defaultSettings.backupTargetCredentialSecret
+ label: Backup Target Credential Secret
+ description: "The name of the Kubernetes secret associated with the backup target."
+ group: "Longhorn Default Settings"
+ type: string
+ default:
+ - variable: defaultSettings.createDefaultDiskLabeledNodes
+ label: Create Default Disk on Labeled Nodes
+ description: 'Create default Disk automatically only on Nodes with the label "node.longhorn.io/create-default-disk=true" if no other disks exist. If disabled, the default disk will be created on all new nodes when each node is first added.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.defaultDataPath
+ label: Default Data Path
+ description: 'Default path to use for storing data on a host. By default "/var/lib/longhorn/"'
+ group: "Longhorn Default Settings"
+ type: string
+ default: "/var/lib/longhorn/"
+ - variable: defaultSettings.replicaSoftAntiAffinity
+ label: Replica Node Level Soft Anti-Affinity
+ description: 'Allow scheduling on nodes with existing healthy replicas of the same volume. By default false.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.storageOverProvisioningPercentage
+ label: Storage Over Provisioning Percentage
+ description: "The over-provisioning percentage defines how much storage can be allocated relative to the hard drive's capacity. By default 200."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 200
+ - variable: defaultSettings.storageMinimalAvailablePercentage
+ label: Storage Minimal Available Percentage
+ description: "If the minimum available disk capacity exceeds the actual percentage of available disk capacity, the disk becomes unschedulable until more space is freed up. By default 25."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ max: 100
+ default: 25
+ - variable: defaultSettings.upgradeChecker
+ label: Enable Upgrade Checker
+ description: 'Upgrade Checker will check for new Longhorn version periodically. When there is a new version available, a notification will appear in the UI. By default true.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.defaultReplicaCount
+ label: Default Replica Count
+ description: "The default number of replicas when a volume is created from the Longhorn UI. For Kubernetes configuration, update the `numberOfReplicas` in the StorageClass. By default 3."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 1
+ max: 20
+ default: 3
+ - variable: defaultSettings.guaranteedEngineCPU
+ label: Guaranteed Engine CPU
+ description: 'Allow Longhorn Instance Managers to have guaranteed CPU allocation. The value is how many CPUs should be reserved for each Engine/Replica Instance Manager Pod created by Longhorn. For example, 0.1 means one-tenth of a CPU. This will help maintain engine stability during high node workload. It only applies to the Engine/Replica Manager Pods created after the setting took effect.
+WARNING: After this setting is changed, all the instance managers on all the nodes will be automatically restarted.
+WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES.
+By default 0.25.'
+ group: "Longhorn Default Settings"
+ type: float
+ default: 0.25
+ - variable: defaultSettings.defaultLonghornStaticStorageClass
+ label: Default Longhorn Static StorageClass Name
+ description: "The 'storageClassName' is given to PVs and PVCs that are created for an existing Longhorn volume. The StorageClass name can also be used as a label, so it is possible to use a Longhorn StorageClass to bind a workload to an existing PV without creating a Kubernetes StorageClass object. By default 'longhorn-static'."
+ group: "Longhorn Default Settings"
+ type: string
+ default: "longhorn-static"
+ - variable: defaultSettings.backupstorePollInterval
+ label: Backupstore Poll Interval
+ description: "In seconds. The backupstore poll interval determines how often Longhorn checks the backupstore for new backups. Set to 0 to disable the polling. By default 300."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 300
+ - variable: defaultSettings.taintToleration
+ label: Kubernetes Taint Toleration
+ description: 'To dedicate nodes to store Longhorn replicas and reject other general workloads, set tolerations for Longhorn and add taints for the storage nodes. All Longhorn volumes should be detached before modifying toleration settings. We recommend setting tolerations during Longhorn deployment because the Longhorn system cannot be operated during the update. Multiple tolerations can be set here, and these tolerations are separated by semicolon. For example, `key1=value1:NoSchedule; key2:NoExecute`. Because `kubernetes.io` is used as the key of all Kubernetes default tolerations, it should not be used in the toleration settings.
+WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES.'
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: defaultSettings.priorityClass
+ label: Priority Class
+ description: "The name of the Priority Class to set on the Longhorn workloads. This can help prevent Longhorn workloads from being evicted under Node Pressure. WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES."
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: defaultSettings.autoSalvage
+ label: Automatic salvage
+ description: "If enabled, volumes will be automatically salvaged when all the replicas become faulty e.g. due to network disconnection. Longhorn will try to figure out which replica(s) are usable, then use them for the volume. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.disableSchedulingOnCordonedNode
+ label: Disable Scheduling On Cordoned Node
+ description: "Disable Longhorn manager to schedule replica on Kubernetes cordoned node. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.replicaZoneSoftAntiAffinity
+ label: Replica Zone Level Soft Anti-Affinity
+ description: "Allow scheduling new Replicas of Volume to the Nodes in the same Zone as existing healthy Replicas. Nodes don't belong to any Zone will be treated as in the same Zone. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.volumeAttachmentRecoveryPolicy
+ label: Volume Attachment Recovery Policy
+ description: "Defines the Longhorn action when a Volume is stuck with a Deployment Pod on a failed node. `wait` leads to the deletion of the volume attachment as soon as the pods deletion time has passed. `never` is the default Kubernetes behavior of never deleting volume attachments on terminating pods. `immediate` leads to the deletion of the volume attachment as soon as all workload pods are pending. By default wait."
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "wait"
+ - "never"
+ - "immediate"
+ default: "wait"
+ - variable: defaultSettings.mkfsExt4Parameters
+ label: Custom mkfs.ext4 parameters
+ description: "Allows setting additional filesystem creation parameters for ext4. For older host kernels it might be necessary to disable the optional ext4 metadata_csum feature by specifying `-O ^64bit,^metadata_csum`."
+ group: "Longhorn Default Settings"
+ type: string
+- variable: ingress.enabled
+ default: "false"
+ description: "Expose app using Layer 7 Load Balancer - ingress"
+ type: boolean
+ group: "Services and Load Balancing"
+ label: Expose app using Layer 7 Load Balancer
+ show_subquestion_if: true
+ subquestions:
+ - variable: ingress.host
+ default: "xip.io"
+ description: "layer 7 Load Balancer hostname"
+ type: hostname
+ required: true
+ label: Layer 7 Load Balancer Hostname
+- variable: service.ui.type
+ default: "Rancher-Proxy"
+ description: "Define Longhorn UI service type"
+ type: enum
+ options:
+ - "ClusterIP"
+ - "NodePort"
+ - "LoadBalancer"
+ - "Rancher-Proxy"
+ label: Longhorn UI Service
+ show_if: "ingress.enabled=false"
+ group: "Services and Load Balancing"
+ show_subquestion_if: "NodePort"
+ subquestions:
+ - variable: service.ui.nodePort
+ default: ""
+ description: "NodePort port number(to set explicitly, choose port between 30000-32767)"
+ type: int
+ min: 30000
+ max: 32767
+ show_if: "service.ui.type=NodePort||service.ui.type=LoadBalancer"
+ label: UI Service NodePort number
+- variable: enablePSP
+ default: "true"
+ description: "Setup a pod security policy for Longhorn workloads."
+ label: Pod Security Policy
+ type: boolean
+ group: "Other Settings"
\ No newline at end of file
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/NOTES.txt b/released/charts/longhorn/longhorn/1.0.200/templates/NOTES.txt
new file mode 100644
index 000000000..cca7cd77b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/NOTES.txt
@@ -0,0 +1,5 @@
+Longhorn is now installed on the cluster!
+
+Please wait a few minutes for other Longhorn components such as CSI deployments, Engine Images, and Instance Managers to be initialized.
+
+Visit our documentation at https://longhorn.io/docs/
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/_helpers.tpl b/released/charts/longhorn/longhorn/1.0.200/templates/_helpers.tpl
new file mode 100644
index 000000000..5cac51cfa
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/_helpers.tpl
@@ -0,0 +1,47 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "longhorn.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "longhorn.fullname" -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "longhorn.managerIP" -}}
+{{- $fullname := (include "longhorn.fullname" .) -}}
+{{- printf "http://%s-backend:9500" $fullname | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "secret" }}
+{{- printf "{\"auths\": {\"%s\": {\"auth\": \"%s\"}}}" .Values.privateRegistry.registryUrl (printf "%s:%s" .Values.privateRegistry.registryUser .Values.privateRegistry.registryPasswd | b64enc) | b64enc }}
+{{- end }}
+
+{{- /*
+longhorn.labels generates the standard Helm labels.
+*/ -}}
+{{- define "longhorn.labels" -}}
+app.kubernetes.io/name: {{ template "longhorn.name" . }}
+helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/version: {{ .Chart.AppVersion }}
+{{- end -}}
+
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/clusterrole.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/clusterrole.yaml
new file mode 100644
index 000000000..491c3e6a5
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/clusterrole.yaml
@@ -0,0 +1,40 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: longhorn-role
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - "*"
+- apiGroups: [""]
+ resources: ["pods", "events", "persistentvolumes", "persistentvolumeclaims","persistentvolumeclaims/status", "nodes", "proxy/nodes", "pods/log", "secrets", "services", "endpoints", "configmaps"]
+ verbs: ["*"]
+- apiGroups: [""]
+ resources: ["namespaces"]
+ verbs: ["get", "list"]
+- apiGroups: ["apps"]
+ resources: ["daemonsets", "statefulsets", "deployments"]
+ verbs: ["*"]
+- apiGroups: ["batch"]
+ resources: ["jobs", "cronjobs"]
+ verbs: ["*"]
+- apiGroups: ["scheduling.k8s.io"]
+ resources: ["priorityclasses"]
+ verbs: ["watch", "list"]
+- apiGroups: ["storage.k8s.io"]
+ resources: ["storageclasses", "volumeattachments", "csinodes", "csidrivers"]
+ verbs: ["*"]
+- apiGroups: ["coordination.k8s.io"]
+ resources: ["leases"]
+ verbs: ["get", "watch", "list", "delete", "update", "create"]
+- apiGroups: ["longhorn.io"]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status"]
+ verbs: ["*"]
+- apiGroups: ["coordination.k8s.io"]
+ resources: ["leases"]
+ verbs: ["*"]
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/clusterrolebinding.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..30c7fa78c
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/clusterrolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: longhorn-bind
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: longhorn-role
+subjects:
+- kind: ServiceAccount
+ name: longhorn-service-account
+ namespace: {{ .Release.Namespace }}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/daemonset-sa.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/daemonset-sa.yaml
new file mode 100644
index 000000000..1717aa4d9
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/daemonset-sa.yaml
@@ -0,0 +1,112 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-manager
+ name: longhorn-manager
+ namespace: {{ .Release.Namespace }}
+spec:
+ selector:
+ matchLabels:
+ app: longhorn-manager
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-manager
+ spec:
+ containers:
+ - name: longhorn-manager
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ privileged: true
+ command:
+ - longhorn-manager
+ - -d
+ - daemon
+ - --engine-image
+ - "{{ template "system_default_registry" . }}{{ .Values.image.longhorn.engine.repository }}:{{ .Values.image.longhorn.engine.tag }}"
+ - --instance-manager-image
+ - "{{ template "system_default_registry" . }}{{ .Values.image.longhorn.instanceManager.repository }}:{{ .Values.image.longhorn.instanceManager.tag }}"
+ - --manager-image
+ - "{{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}"
+ - --service-account
+ - longhorn-service-account
+ ports:
+ - containerPort: 9500
+ name: manager
+ readinessProbe:
+ tcpSocket:
+ port: 9500
+ volumeMounts:
+ - name: dev
+ mountPath: /host/dev/
+ - name: proc
+ mountPath: /host/proc/
+ - name: varrun
+ mountPath: /var/run/
+ mountPropagation: Bidirectional
+ - name: longhorn
+ mountPath: /var/lib/longhorn/
+ mountPropagation: Bidirectional
+ - name: longhorn-default-setting
+ mountPath: /var/lib/longhorn-setting/
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ - name: POD_IP
+ valueFrom:
+ fieldRef:
+ fieldPath: status.podIP
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ - name: DEFAULT_SETTING_PATH
+ value: /var/lib/longhorn-setting/default-setting.yaml
+ volumes:
+ - name: dev
+ hostPath:
+ path: /dev/
+ - name: proc
+ hostPath:
+ path: /proc/
+ - name: varrun
+ hostPath:
+ path: /var/run/
+ - name: longhorn
+ hostPath:
+ path: /var/lib/longhorn/
+ - name: longhorn-default-setting
+ configMap:
+ name: longhorn-default-setting
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
+ updateStrategy:
+ rollingUpdate:
+ maxUnavailable: "100%"
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-manager
+ name: longhorn-backend
+ namespace: {{ .Release.Namespace }}
+spec:
+ type: {{ .Values.service.manager.type }}
+ sessionAffinity: ClientIP
+ selector:
+ app: longhorn-manager
+ ports:
+ - name: manager
+ port: 9500
+ targetPort: manager
+ {{- if .Values.service.manager.nodePort }}
+ nodePort: {{ .Values.service.manager.nodePort }}
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/default-setting.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/default-setting.yaml
new file mode 100644
index 000000000..2eb10b4dc
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/default-setting.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: longhorn-default-setting
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+data:
+ default-setting.yaml: |-
+ backup-target: {{ .Values.defaultSettings.backupTarget }}
+ backup-target-credential-secret: {{ .Values.defaultSettings.backupTargetCredentialSecret }}
+ create-default-disk-labeled-nodes: {{ .Values.defaultSettings.createDefaultDiskLabeledNodes }}
+ default-data-path: {{ .Values.defaultSettings.defaultDataPath }}
+ replica-soft-anti-affinity: {{ .Values.defaultSettings.replicaSoftAntiAffinity }}
+ storage-over-provisioning-percentage: {{ .Values.defaultSettings.storageOverProvisioningPercentage }}
+ storage-minimal-available-percentage: {{ .Values.defaultSettings.storageMinimalAvailablePercentage }}
+ upgrade-checker: {{ .Values.defaultSettings.upgradeChecker }}
+ default-replica-count: {{ .Values.defaultSettings.defaultReplicaCount }}
+ guaranteed-engine-cpu: {{ .Values.defaultSettings.guaranteedEngineCPU }}
+ default-longhorn-static-storage-class: {{ .Values.defaultSettings.defaultLonghornStaticStorageClass }}
+ backupstore-poll-interval: {{ .Values.defaultSettings.backupstorePollInterval }}
+ taint-toleration: {{ .Values.defaultSettings.taintToleration }}
+ priority-class: {{ .Values.defaultSettings.priorityClass }}
+ registry-secret: {{ .Values.defaultSettings.registrySecret }}
+ auto-salvage: {{ .Values.defaultSettings.autoSalvage }}
+ disable-scheduling-on-cordoned-node: {{ .Values.defaultSettings.disableSchedulingOnCordonedNode }}
+ replica-zone-soft-anti-affinity: {{ .Values.defaultSettings.replicaZoneSoftAntiAffinity }}
+ volume-attachment-recovery-policy: {{ .Values.defaultSettings.volumeAttachmentRecoveryPolicy }}
+ mkfs-ext4-parameters: {{ .Values.defaultSettings.mkfsExt4Parameters }}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/deployment-driver.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/deployment-driver.yaml
new file mode 100644
index 000000000..bee055d8e
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/deployment-driver.yaml
@@ -0,0 +1,84 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: longhorn-driver-deployer
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: longhorn-driver-deployer
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-driver-deployer
+ spec:
+ initContainers:
+ - name: wait-longhorn-manager
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ command: ['sh', '-c', 'while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" http://longhorn-backend:9500/v1) != "200" ]; do echo waiting; sleep 2; done']
+ containers:
+ - name: longhorn-driver-deployer
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - longhorn-manager
+ - -d
+ - deploy-driver
+ - --manager-image
+ - "{{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}"
+ - --manager-url
+ - http://longhorn-backend:9500/v1
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ - name: SERVICE_ACCOUNT
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.serviceAccountName
+ {{- if .Values.csi.kubeletRootDir }}
+ - name: KUBELET_ROOT_DIR
+ value: {{ .Values.csi.kubeletRootDir }}
+ {{- end }}
+ {{- if and .Values.image.csi.attacher.repository .Values.image.csi.attacher.tag }}
+ - name: CSI_ATTACHER_IMAGE
+ value: "{{ template "system_default_registry" . }}{{ .Values.image.csi.attacher.repository }}:{{ .Values.image.csi.attacher.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.provisioner.repository .Values.image.csi.provisioner.tag }}
+ - name: CSI_PROVISIONER_IMAGE
+ value: "{{ template "system_default_registry" . }}{{ .Values.image.csi.provisioner.repository }}:{{ .Values.image.csi.provisioner.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.nodeDriverRegistrar.repository .Values.image.csi.nodeDriverRegistrar.tag }}
+ - name: CSI_NODE_DRIVER_REGISTRAR_IMAGE
+ value: "{{ template "system_default_registry" . }}{{ .Values.image.csi.nodeDriverRegistrar.repository }}:{{ .Values.image.csi.nodeDriverRegistrar.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.resizer.repository .Values.image.csi.resizer.tag }}
+ - name: CSI_RESIZER_IMAGE
+ value: "{{ template "system_default_registry" . }}{{ .Values.image.csi.resizer.repository }}:{{ .Values.image.csi.resizer.tag }}"
+ {{- end }}
+ {{- if .Values.csi.attacherReplicaCount }}
+ - name: CSI_ATTACHER_REPLICA_COUNT
+ value: {{ .Values.csi.attacherReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.provisionerReplicaCount }}
+ - name: CSI_PROVISIONER_REPLICA_COUNT
+ value: {{ .Values.csi.provisionerReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.resizerReplicaCount }}
+ - name: CSI_RESIZER_REPLICA_COUNT
+ value: {{ .Values.csi.resizerReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
+ securityContext:
+ runAsUser: 0
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/deployment-ui.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/deployment-ui.yaml
new file mode 100644
index 000000000..0de0c9b3b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/deployment-ui.yaml
@@ -0,0 +1,61 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ui
+ name: longhorn-ui
+ namespace: {{ .Release.Namespace }}
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: longhorn-ui
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-ui
+ spec:
+ containers:
+ - name: longhorn-ui
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.ui.repository }}:{{ .Values.image.longhorn.ui.tag }}
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ runAsUser: 0
+ ports:
+ - containerPort: 8000
+ name: http
+ env:
+ - name: LONGHORN_MANAGER_IP
+ value: "http://longhorn-backend:9500"
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ui
+ {{- if eq .Values.service.ui.type "Rancher-Proxy" }}
+ kubernetes.io/cluster-service: "true"
+ {{- end }}
+ name: longhorn-frontend
+ namespace: {{ .Release.Namespace }}
+spec:
+ {{- if eq .Values.service.ui.type "Rancher-Proxy" }}
+ type: ClusterIP
+ {{- else }}
+ type: {{ .Values.service.ui.type }}
+ {{- end }}
+ selector:
+ app: longhorn-ui
+ ports:
+ - name: http
+ port: 80
+ targetPort: http
+ {{- if .Values.service.ui.nodePort }}
+ nodePort: {{ .Values.service.ui.nodePort }}
+ {{- else }}
+ nodePort: null
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/ingress.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/ingress.yaml
new file mode 100644
index 000000000..e3e9e3eea
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/ingress.yaml
@@ -0,0 +1,30 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: longhorn-ingress
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ingress
+ annotations:
+ {{- if .Values.ingress.tls }}
+ ingress.kubernetes.io/secure-backends: "true"
+ {{- end }}
+ {{- range $key, $value := .Values.ingress.annotations }}
+ {{ $key }}: {{ $value | quote }}
+ {{- end }}
+spec:
+ rules:
+ - host: {{ .Values.ingress.host }}
+ http:
+ paths:
+ - path: {{ default "" .Values.ingress.path }}
+ backend:
+ serviceName: longhorn-frontend
+ servicePort: 80
+{{- if .Values.ingress.tls }}
+ tls:
+ - hosts:
+ - {{ .Values.ingress.host }}
+ secretName: {{ .Values.ingress.tlsSecret }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/postupgrade-job.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/postupgrade-job.yaml
new file mode 100644
index 000000000..1860be5fe
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/postupgrade-job.yaml
@@ -0,0 +1,35 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ annotations:
+ "helm.sh/hook": post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
+ name: longhorn-post-upgrade
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ activeDeadlineSeconds: 900
+ backoffLimit: 1
+ template:
+ metadata:
+ name: longhorn-post-upgrade
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ spec:
+ containers:
+ - name: longhorn-post-upgrade
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: Always
+ command:
+ - longhorn-manager
+ - post-upgrade
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ restartPolicy: OnFailure
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/psp.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/psp.yaml
new file mode 100644
index 000000000..66479b4fa
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/psp.yaml
@@ -0,0 +1,66 @@
+{{- if .Values.enablePSP }}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: longhorn-psp
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ privileged: true
+ allowPrivilegeEscalation: true
+ requiredDropCapabilities:
+ - NET_RAW
+ allowedCapabilities:
+ - SYS_ADMIN
+ hostNetwork: false
+ hostIPC: false
+ hostPID: true
+ runAsUser:
+ rule: RunAsAny
+ seLinux:
+ rule: RunAsAny
+ fsGroup:
+ rule: RunAsAny
+ supplementalGroups:
+ rule: RunAsAny
+ volumes:
+ - configMap
+ - downwardAPI
+ - emptyDir
+ - secret
+ - projected
+ - hostPath
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: longhorn-psp-role
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ namespace: {{ .Release.Namespace }}
+rules:
+- apiGroups:
+ - policy
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+ resourceNames:
+ - longhorn-psp
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: longhorn-psp-binding
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ namespace: {{ .Release.Namespace }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: longhorn-psp-role
+subjects:
+- kind: ServiceAccount
+ name: longhorn-service-account
+ namespace: {{ .Release.Namespace }}
+- kind: ServiceAccount
+ name: default
+ namespace: {{ .Release.Namespace }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/registry-secret.yml b/released/charts/longhorn/longhorn/1.0.200/templates/registry-secret.yml
new file mode 100644
index 000000000..eeb9a8f4a
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/registry-secret.yml
@@ -0,0 +1,10 @@
+{{- if .Values.defaultSettings.registrySecret }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ .Values.defaultSettings.registrySecret }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+type: kubernetes.io/dockerconfigjson
+data:
+ .dockerconfigjson: {{ template "secret" . }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/serviceaccount.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/serviceaccount.yaml
new file mode 100644
index 000000000..a2280b44f
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/serviceaccount.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: longhorn-service-account
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/storageclass.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/storageclass.yaml
new file mode 100644
index 000000000..3fee340f4
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/storageclass.yaml
@@ -0,0 +1,14 @@
+kind: StorageClass
+apiVersion: storage.k8s.io/v1
+metadata:
+ name: longhorn
+ annotations:
+ storageclass.kubernetes.io/is-default-class: {{ .Values.persistence.defaultClass | quote }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+provisioner: driver.longhorn.io
+allowVolumeExpansion: true
+parameters:
+ numberOfReplicas: "{{ .Values.persistence.defaultClassReplicaCount }}"
+ staleReplicaTimeout: "30"
+ fromBackup: ""
+ baseImage: ""
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/tls-secrets.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/tls-secrets.yaml
new file mode 100644
index 000000000..7a75df09c
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/tls-secrets.yaml
@@ -0,0 +1,15 @@
+{{- if .Values.ingress.enabled }}
+{{- range .Values.ingress.secrets }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: longhorn
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn
+type: kubernetes.io/tls
+data:
+ tls.crt: {{ .certificate | b64enc }}
+ tls.key: {{ .key | b64enc }}
+---
+{{- end }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/uninstall-job.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/uninstall-job.yaml
new file mode 100644
index 000000000..d32157145
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/uninstall-job.yaml
@@ -0,0 +1,36 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ annotations:
+ "helm.sh/hook": pre-delete
+ "helm.sh/hook-delete-policy": hook-succeeded
+ name: longhorn-uninstall
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ activeDeadlineSeconds: 900
+ backoffLimit: 1
+ template:
+ metadata:
+ name: longhorn-uninstall
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ spec:
+ containers:
+ - name: longhorn-uninstall
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: Always
+ command:
+ - longhorn-manager
+ - uninstall
+ - --force
+ env:
+ - name: LONGHORN_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ restartPolicy: OnFailure
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/userroles.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/userroles.yaml
new file mode 100644
index 000000000..ba6d40643
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/userroles.yaml
@@ -0,0 +1,35 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-admin"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status" ]
+ verbs: [ "*" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-edit"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status" ]
+ verbs: [ "*" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-view"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-view: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status" ]
+ verbs: [ "get", "list", "watch" ]
diff --git a/released/charts/longhorn/longhorn/1.0.200/templates/validate-install-crd.yaml b/released/charts/longhorn/longhorn/1.0.200/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..4899b977c
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/templates/validate-install-crd.yaml
@@ -0,0 +1,14 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "longhorn.io/v1beta1/Engine" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the longhorn-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/longhorn/longhorn/1.0.200/values.yaml b/released/charts/longhorn/longhorn/1.0.200/values.yaml
new file mode 100644
index 000000000..a29b9497d
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.200/values.yaml
@@ -0,0 +1,136 @@
+# Default values for longhorn.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+image:
+ longhorn:
+ engine:
+ repository: rancher/longhornio-longhorn-engine
+ tag: v1.0.2
+ manager:
+ repository: rancher/longhornio-longhorn-manager
+ tag: v1.0.2
+ ui:
+ repository: rancher/longhornio-longhorn-ui
+ tag: v1.0.2
+ instanceManager:
+ repository: rancher/longhornio-longhorn-instance-manager
+ tag: v1_20200514
+ csi:
+ attacher:
+ repository: rancher/longhornio-csi-attacher
+ tag: v2.0.0
+ provisioner:
+ repository: rancher/longhornio-csi-provisioner
+ tag: v1.4.0
+ nodeDriverRegistrar:
+ repository: rancher/longhornio-csi-node-driver-registrar
+ tag: v1.2.0
+ resizer:
+ repository: rancher/longhornio-csi-resizer
+ tag: v0.3.0
+ pullPolicy: IfNotPresent
+
+service:
+ ui:
+ type: ClusterIP
+ nodePort: null
+ manager:
+ type: ClusterIP
+ nodePort: ""
+
+persistence:
+ defaultClass: true
+ defaultClassReplicaCount: 3
+
+csi:
+ kubeletRootDir: ~
+ attacherReplicaCount: ~
+ provisionerReplicaCount: ~
+ resizerReplicaCount: ~
+
+defaultSettings:
+ backupTarget: ~
+ backupTargetCredentialSecret: ~
+ createDefaultDiskLabeledNodes: ~
+ defaultDataPath: ~
+ replicaSoftAntiAffinity: ~
+ storageOverProvisioningPercentage: ~
+ storageMinimalAvailablePercentage: ~
+ upgradeChecker: ~
+ defaultReplicaCount: ~
+ guaranteedEngineCPU: ~
+ defaultLonghornStaticStorageClass: ~
+ backupstorePollInterval: ~
+ taintToleration: ~
+ priorityClass: ~
+ registrySecret: ~
+ autoSalvage: ~
+ disableSchedulingOnCordonedNode: ~
+ replicaZoneSoftAntiAffinity: ~
+ volumeAttachmentRecoveryPolicy: ~
+ mkfsExt4Parameters: ~
+
+privateRegistry:
+ registryUrl: ~
+ registryUser: ~
+ registryPasswd: ~
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+ #
+
+ingress:
+ ## Set to true to enable ingress record generation
+ enabled: false
+
+
+ host: xip.io
+
+ ## Set this to true in order to enable TLS on the ingress record
+ ## A side effect of this will be that the backend service will be connected at port 443
+ tls: false
+
+ ## If TLS is set to true, you must declare what secret will store the key/certificate for TLS
+ tlsSecret: longhorn.local-tls
+
+ ## Ingress annotations done as key:value pairs
+ ## If you're using kube-lego, you will want to add:
+ ## kubernetes.io/tls-acme: true
+ ##
+ ## For a full list of possible ingress annotations, please see
+ ## ref: https://github.com/kubernetes/ingress-nginx/blob/master/docs/annotations.md
+ ##
+ ## If tls is set to true, annotation ingress.kubernetes.io/secure-backends: "true" will automatically be set
+ annotations:
+ # kubernetes.io/ingress.class: nginx
+ # kubernetes.io/tls-acme: true
+
+ secrets:
+ ## If you're providing your own certificates, please use this to add the certificates as secrets
+ ## key and certificate should start with -----BEGIN CERTIFICATE----- or
+ ## -----BEGIN RSA PRIVATE KEY-----
+ ##
+ ## name should line up with a tlsSecret set further up
+ ## If you're using kube-lego, this is unneeded, as it will create the secret for you if it is not set
+ ##
+ ## It is also possible to create and manage the certificates outside of this helm chart
+ ## Please see README.md for more information
+ # - name: longhorn.local-tls
+ # key:
+ # certificate:
+
+# Configure a pod security policy in the Longhorn namespace to allow privileged pods
+enablePSP: true
diff --git a/released/charts/longhorn/longhorn/1.0.201/.helmignore b/released/charts/longhorn/longhorn/1.0.201/.helmignore
new file mode 100644
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/longhorn/longhorn/1.0.201/Chart.yaml b/released/charts/longhorn/longhorn/1.0.201/Chart.yaml
new file mode 100644
index 000000000..7cf478dd8
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/Chart.yaml
@@ -0,0 +1,36 @@
+annotations:
+ catalog.cattle.io/auto-install: longhorn-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: Longhorn
+ catalog.cattle.io/namespace: longhorn-system
+ catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
+ catalog.cattle.io/release-name: longhorn
+ catalog.cattle.io/ui-component: longhorn
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v1.0.2
+description: Longhorn is a distributed block storage system for Kubernetes.
+home: https://github.com/longhorn/longhorn
+icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
+keywords:
+- longhorn
+- storage
+- distributed
+- block
+- device
+- iscsi
+kubeVersion: '>=v1.14.0-r0'
+maintainers:
+- email: maintainers@longhorn.io
+ name: Longhorn maintainers
+- email: sheng@yasker.org
+ name: Sheng Yang
+name: longhorn
+sources:
+- https://github.com/longhorn/longhorn
+- https://github.com/longhorn/longhorn-engine
+- https://github.com/longhorn/longhorn-instance-manager
+- https://github.com/longhorn/longhorn-manager
+- https://github.com/longhorn/longhorn-ui
+- https://github.com/longhorn/longhorn-tests
+version: 1.0.201
diff --git a/released/charts/longhorn/longhorn/1.0.201/README.md b/released/charts/longhorn/longhorn/1.0.201/README.md
new file mode 100644
index 000000000..068bb5d66
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/README.md
@@ -0,0 +1,49 @@
+# Rancher Longhorn Chart
+
+> **Important**: Please install Longhorn chart in `longhorn-system` namespace only.
+
+> **Warning**: Longhorn doesn't support downgrading from a higher version to a lower version.
+
+The following document pertains to running Longhorn from the Rancher 2.0 chart.
+
+## Source Code
+
+Longhorn is 100% open source software. Project source code is spread across a number of repos:
+
+1. Longhorn Engine -- Core controller/replica logic https://github.com/longhorn/longhorn-engine
+2. Longhorn Instance Manager -- Controller/replica instance lifecycle management https://github.com/longhorn/longhorn-instance-manager
+3. Longhorn Manager -- Longhorn orchestration, includes CSI driver for Kubernetes https://github.com/longhorn/longhorn-manager
+4. Longhorn UI -- Dashboard https://github.com/longhorn/longhorn-ui
+
+## Prerequisites
+
+1. Rancher v2.1+
+2. Docker v1.13+
+3. Kubernetes v1.14+
+4. Make sure `curl`, `findmnt`, `grep`, `awk` and `blkid` has been installed in all nodes of the Kubernetes cluster.
+5. Make sure `open-iscsi` has been installed in all nodes of the Kubernetes cluster. For GKE, recommended Ubuntu as guest OS image since it contains `open-iscsi` already.
+
+## Uninstallation
+
+1. To prevent damage to the Kubernetes cluster, we recommend deleting all Kubernetes workloads using Longhorn volumes (PersistentVolume, PersistentVolumeClaim, StorageClass, Deployment, StatefulSet, DaemonSet, etc).
+
+2. From Rancher UI, navigate to `Catalog Apps` tab and delete Longhorn app.
+
+## Troubleshooting
+
+### I deleted the Longhorn App from Rancher UI instead of following the uninstallation procedure
+
+Redeploy the (same version) Longhorn App. Follow the uninstallation procedure above.
+
+### Problems with CRDs
+
+If your CRD instances or the CRDs themselves can't be deleted for whatever reason, run the commands below to clean up. Caution: this will wipe all Longhorn state!
+
+```
+# Delete CRD instances and definitions
+curl -s https://raw.githubusercontent.com/longhorn/longhorn/v0.8.1/scripts/cleanup.sh |bash -s v062
+curl -s https://raw.githubusercontent.com/longhorn/longhorn/v0.8.1/scripts/cleanup.sh |bash -s v070
+```
+
+---
+Please see [link](https://github.com/longhorn/longhorn) for more information.
diff --git a/released/charts/longhorn/longhorn/1.0.201/app-readme.md b/released/charts/longhorn/longhorn/1.0.201/app-readme.md
new file mode 100644
index 000000000..cb23135ca
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/app-readme.md
@@ -0,0 +1,11 @@
+# Longhorn
+
+Longhorn is a lightweight, reliable and easy to use distributed block storage system for Kubernetes. Once deployed, users can leverage persistent volumes provided by Longhorn.
+
+Longhorn creates a dedicated storage controller for each volume and synchronously replicates the volume across multiple replicas stored on multiple nodes. The storage controller and replicas are themselves orchestrated using Kubernetes. Longhorn supports snapshots, backups and even allows you to schedule recurring snapshots and backups!
+
+**Important**: Please install Longhorn chart in `longhorn-system` namespace only.
+
+**Warning**: Longhorn doesn't support downgrading from a higher version to a lower version.
+
+[Chart Documentation](https://github.com/longhorn/longhorn/blob/master/chart/README.md)
diff --git a/released/charts/longhorn/longhorn/1.0.201/questions.yml b/released/charts/longhorn/longhorn/1.0.201/questions.yml
new file mode 100644
index 000000000..26566901f
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/questions.yml
@@ -0,0 +1,346 @@
+categories:
+- storage
+namespace: longhorn-system
+questions:
+- variable: image.defaultImage
+ default: "true"
+ description: "Use default Longhorn images"
+ label: Use Default Images
+ type: boolean
+ show_subquestion_if: false
+ group: "Longhorn Images"
+ subquestions:
+ - variable: image.longhorn.manager.repository
+ default: longhornio/longhorn-manager
+ description: "Specify Longhorn Manager Image Repository"
+ type: string
+ label: Longhorn Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.manager.tag
+ default: v1.0.2
+ description: "Specify Longhorn Manager Image Tag"
+ type: string
+ label: Longhorn Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.engine.repository
+ default: longhornio/longhorn-engine
+ description: "Specify Longhorn Engine Image Repository"
+ type: string
+ label: Longhorn Engine Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.engine.tag
+ default: v1.0.2
+ description: "Specify Longhorn Engine Image Tag"
+ type: string
+ label: Longhorn Engine Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.ui.repository
+ default: longhornio/longhorn-ui
+ description: "Specify Longhorn UI Image Repository"
+ type: string
+ label: Longhorn UI Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.ui.tag
+ default: v1.0.2
+ description: "Specify Longhorn UI Image Tag"
+ type: string
+ label: Longhorn UI Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.instanceManager.repository
+ default: longhornio/longhorn-instance-manager
+ description: "Specify Longhorn Instance Manager Image Repository"
+ type: string
+ label: Longhorn Instance Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.instanceManager.tag
+ default: v1_20200514
+ description: "Specify Longhorn Instance Manager Image Tag"
+ type: string
+ label: Longhorn Instance Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.csi.attacher.repository
+ default: longhornio/csi-attacher
+ description: "Specify CSI attacher image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Attacher Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.attacher.tag
+ default: v2.0.0
+ description: "Specify CSI attacher image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Attacher Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.provisioner.repository
+ default: longhornio/csi-provisioner
+ description: "Specify CSI provisioner image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Provisioner Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.provisioner.tag
+ default: v1.4.0
+ description: "Specify CSI provisioner image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Provisioner Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.nodeDriverRegistrar.repository
+ default: longhornio/csi-node-driver-registrar
+ description: "Specify CSI Node Driver Registrar image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Node Driver Registrar Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.nodeDriverRegistrar.tag
+ default: v1.2.0
+ description: "Specify CSI Node Driver Registrar image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Node Driver Registrar Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.resizer.repository
+ default: longhornio/csi-resizer
+ description: "Specify CSI Driver Resizer image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Resizer Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.resizer.tag
+ default: v0.3.0
+ description: "Specify CSI Driver Resizer image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Resizer Image Tag
+ group: "Longhorn CSI Driver Images"
+- variable: privateRegistry.registryUrl
+ label: Private registry URL
+ description: "URL of private registry"
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: privateRegistry.registryUser
+ label: Private registry user
+ description: "User used to authenticate to private registry"
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: privateRegistry.registryPasswd
+ label: Private registry password
+ description: "Password used to authenticate to private registry"
+ group: "Private Registry Settings"
+ type: password
+ default: ""
+- variable: longhorn.default_setting
+ default: "false"
+ description: "Customize the default settings before installing Longhorn for the first time. This option will only work if the cluster hasn't installed Longhorn."
+ label: "Customize Default Settings"
+ type: boolean
+ show_subquestion_if: true
+ group: "Longhorn Default Settings"
+ subquestions:
+ - variable: defaultSettings.registrySecret
+ label: Private registry secret
+ description: "The Kubernetes Secret name"
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: csi.kubeletRootDir
+ default:
+ description: "Specify kubelet root-dir. Leave blank to autodetect."
+ type: string
+ label: Kubelet Root Directory
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.attacherReplicaCount
+ type: int
+ default:
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Attacher. By default 3."
+ label: Longhorn CSI Attacher replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.provisionerReplicaCount
+ type: int
+ default:
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Provisioner. By default 3."
+ label: Longhorn CSI Provisioner replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: persistence.defaultClass
+ default: "true"
+ description: "Set as default StorageClass"
+ group: "Longhorn CSI Driver Settings"
+ type: boolean
+ required: true
+ label: Default Storage Class
+ - variable: persistence.defaultClassReplicaCount
+ description: "Set replica count for default StorageClass"
+ group: "Longhorn CSI Driver Settings"
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ label: Default Storage Class Replica Count
+ - variable: defaultSettings.backupTarget
+ label: Backup Target
+ description: "The endpoint used to access the backupstore. NFS and S3 are supported."
+ group: "Longhorn Default Settings"
+ type: string
+ default:
+ - variable: defaultSettings.backupTargetCredentialSecret
+ label: Backup Target Credential Secret
+ description: "The name of the Kubernetes secret associated with the backup target."
+ group: "Longhorn Default Settings"
+ type: string
+ default:
+ - variable: defaultSettings.createDefaultDiskLabeledNodes
+ label: Create Default Disk on Labeled Nodes
+ description: 'Create default Disk automatically only on Nodes with the label "node.longhorn.io/create-default-disk=true" if no other disks exist. If disabled, the default disk will be created on all new nodes when each node is first added.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.defaultDataPath
+ label: Default Data Path
+ description: 'Default path to use for storing data on a host. By default "/var/lib/longhorn/"'
+ group: "Longhorn Default Settings"
+ type: string
+ default: "/var/lib/longhorn/"
+ - variable: defaultSettings.replicaSoftAntiAffinity
+ label: Replica Node Level Soft Anti-Affinity
+ description: 'Allow scheduling on nodes with existing healthy replicas of the same volume. By default false.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.storageOverProvisioningPercentage
+ label: Storage Over Provisioning Percentage
+ description: "The over-provisioning percentage defines how much storage can be allocated relative to the hard drive's capacity. By default 200."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 200
+ - variable: defaultSettings.storageMinimalAvailablePercentage
+ label: Storage Minimal Available Percentage
+ description: "If the minimum available disk capacity exceeds the actual percentage of available disk capacity, the disk becomes unschedulable until more space is freed up. By default 25."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ max: 100
+ default: 25
+ - variable: defaultSettings.upgradeChecker
+ label: Enable Upgrade Checker
+ description: 'Upgrade Checker will check for new Longhorn version periodically. When there is a new version available, a notification will appear in the UI. By default true.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.defaultReplicaCount
+ label: Default Replica Count
+ description: "The default number of replicas when a volume is created from the Longhorn UI. For Kubernetes configuration, update the `numberOfReplicas` in the StorageClass. By default 3."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 1
+ max: 20
+ default: 3
+ - variable: defaultSettings.guaranteedEngineCPU
+ label: Guaranteed Engine CPU
+ description: 'Allow Longhorn Instance Managers to have guaranteed CPU allocation. The value is how many CPUs should be reserved for each Engine/Replica Instance Manager Pod created by Longhorn. For example, 0.1 means one-tenth of a CPU. This will help maintain engine stability during high node workload. It only applies to the Engine/Replica Manager Pods created after the setting took effect.
+WARNING: After this setting is changed, all the instance managers on all the nodes will be automatically restarted.
+WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES.
+By default 0.25.'
+ group: "Longhorn Default Settings"
+ type: float
+ default: 0.25
+ - variable: defaultSettings.defaultLonghornStaticStorageClass
+ label: Default Longhorn Static StorageClass Name
+ description: "The 'storageClassName' is given to PVs and PVCs that are created for an existing Longhorn volume. The StorageClass name can also be used as a label, so it is possible to use a Longhorn StorageClass to bind a workload to an existing PV without creating a Kubernetes StorageClass object. By default 'longhorn-static'."
+ group: "Longhorn Default Settings"
+ type: string
+ default: "longhorn-static"
+ - variable: defaultSettings.backupstorePollInterval
+ label: Backupstore Poll Interval
+ description: "In seconds. The backupstore poll interval determines how often Longhorn checks the backupstore for new backups. Set to 0 to disable the polling. By default 300."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 300
+ - variable: defaultSettings.taintToleration
+ label: Kubernetes Taint Toleration
+ description: 'To dedicate nodes to store Longhorn replicas and reject other general workloads, set tolerations for Longhorn and add taints for the storage nodes. All Longhorn volumes should be detached before modifying toleration settings. We recommend setting tolerations during Longhorn deployment because the Longhorn system cannot be operated during the update. Multiple tolerations can be set here, and these tolerations are separated by semicolon. For example, `key1=value1:NoSchedule; key2:NoExecute`. Because `kubernetes.io` is used as the key of all Kubernetes default tolerations, it should not be used in the toleration settings.
+WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES.'
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: defaultSettings.priorityClass
+ label: Priority Class
+ description: "The name of the Priority Class to set on the Longhorn workloads. This can help prevent Longhorn workloads from being evicted under Node Pressure. WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES."
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: defaultSettings.autoSalvage
+ label: Automatic salvage
+ description: "If enabled, volumes will be automatically salvaged when all the replicas become faulty e.g. due to network disconnection. Longhorn will try to figure out which replica(s) are usable, then use them for the volume. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.disableSchedulingOnCordonedNode
+ label: Disable Scheduling On Cordoned Node
+ description: "Disable Longhorn manager to schedule replica on Kubernetes cordoned node. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.replicaZoneSoftAntiAffinity
+ label: Replica Zone Level Soft Anti-Affinity
+ description: "Allow scheduling new Replicas of Volume to the Nodes in the same Zone as existing healthy Replicas. Nodes don't belong to any Zone will be treated as in the same Zone. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.volumeAttachmentRecoveryPolicy
+ label: Volume Attachment Recovery Policy
+ description: "Defines the Longhorn action when a Volume is stuck with a Deployment Pod on a failed node. `wait` leads to the deletion of the volume attachment as soon as the pods deletion time has passed. `never` is the default Kubernetes behavior of never deleting volume attachments on terminating pods. `immediate` leads to the deletion of the volume attachment as soon as all workload pods are pending. By default wait."
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "wait"
+ - "never"
+ - "immediate"
+ default: "wait"
+ - variable: defaultSettings.mkfsExt4Parameters
+ label: Custom mkfs.ext4 parameters
+ description: "Allows setting additional filesystem creation parameters for ext4. For older host kernels it might be necessary to disable the optional ext4 metadata_csum feature by specifying `-O ^64bit,^metadata_csum`."
+ group: "Longhorn Default Settings"
+ type: string
+- variable: ingress.enabled
+ default: "false"
+ description: "Expose app using Layer 7 Load Balancer - ingress"
+ type: boolean
+ group: "Services and Load Balancing"
+ label: Expose app using Layer 7 Load Balancer
+ show_subquestion_if: true
+ subquestions:
+ - variable: ingress.host
+ default: "xip.io"
+ description: "layer 7 Load Balancer hostname"
+ type: hostname
+ required: true
+ label: Layer 7 Load Balancer Hostname
+- variable: service.ui.type
+ default: "Rancher-Proxy"
+ description: "Define Longhorn UI service type"
+ type: enum
+ options:
+ - "ClusterIP"
+ - "NodePort"
+ - "LoadBalancer"
+ - "Rancher-Proxy"
+ label: Longhorn UI Service
+ show_if: "ingress.enabled=false"
+ group: "Services and Load Balancing"
+ show_subquestion_if: "NodePort"
+ subquestions:
+ - variable: service.ui.nodePort
+ default: ""
+ description: "NodePort port number(to set explicitly, choose port between 30000-32767)"
+ type: int
+ min: 30000
+ max: 32767
+ show_if: "service.ui.type=NodePort||service.ui.type=LoadBalancer"
+ label: UI Service NodePort number
+- variable: enablePSP
+ default: "true"
+ description: "Setup a pod security policy for Longhorn workloads."
+ label: Pod Security Policy
+ type: boolean
+ group: "Other Settings"
\ No newline at end of file
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/NOTES.txt b/released/charts/longhorn/longhorn/1.0.201/templates/NOTES.txt
new file mode 100644
index 000000000..cca7cd77b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/NOTES.txt
@@ -0,0 +1,5 @@
+Longhorn is now installed on the cluster!
+
+Please wait a few minutes for other Longhorn components such as CSI deployments, Engine Images, and Instance Managers to be initialized.
+
+Visit our documentation at https://longhorn.io/docs/
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/_helpers.tpl b/released/charts/longhorn/longhorn/1.0.201/templates/_helpers.tpl
new file mode 100644
index 000000000..5cac51cfa
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/_helpers.tpl
@@ -0,0 +1,47 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "longhorn.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "longhorn.fullname" -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "longhorn.managerIP" -}}
+{{- $fullname := (include "longhorn.fullname" .) -}}
+{{- printf "http://%s-backend:9500" $fullname | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "secret" }}
+{{- printf "{\"auths\": {\"%s\": {\"auth\": \"%s\"}}}" .Values.privateRegistry.registryUrl (printf "%s:%s" .Values.privateRegistry.registryUser .Values.privateRegistry.registryPasswd | b64enc) | b64enc }}
+{{- end }}
+
+{{- /*
+longhorn.labels generates the standard Helm labels.
+*/ -}}
+{{- define "longhorn.labels" -}}
+app.kubernetes.io/name: {{ template "longhorn.name" . }}
+helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/version: {{ .Chart.AppVersion }}
+{{- end -}}
+
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/clusterrole.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/clusterrole.yaml
new file mode 100644
index 000000000..491c3e6a5
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/clusterrole.yaml
@@ -0,0 +1,40 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: longhorn-role
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - "*"
+- apiGroups: [""]
+ resources: ["pods", "events", "persistentvolumes", "persistentvolumeclaims","persistentvolumeclaims/status", "nodes", "proxy/nodes", "pods/log", "secrets", "services", "endpoints", "configmaps"]
+ verbs: ["*"]
+- apiGroups: [""]
+ resources: ["namespaces"]
+ verbs: ["get", "list"]
+- apiGroups: ["apps"]
+ resources: ["daemonsets", "statefulsets", "deployments"]
+ verbs: ["*"]
+- apiGroups: ["batch"]
+ resources: ["jobs", "cronjobs"]
+ verbs: ["*"]
+- apiGroups: ["scheduling.k8s.io"]
+ resources: ["priorityclasses"]
+ verbs: ["watch", "list"]
+- apiGroups: ["storage.k8s.io"]
+ resources: ["storageclasses", "volumeattachments", "csinodes", "csidrivers"]
+ verbs: ["*"]
+- apiGroups: ["coordination.k8s.io"]
+ resources: ["leases"]
+ verbs: ["get", "watch", "list", "delete", "update", "create"]
+- apiGroups: ["longhorn.io"]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status"]
+ verbs: ["*"]
+- apiGroups: ["coordination.k8s.io"]
+ resources: ["leases"]
+ verbs: ["*"]
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/clusterrolebinding.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..30c7fa78c
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/clusterrolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: longhorn-bind
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: longhorn-role
+subjects:
+- kind: ServiceAccount
+ name: longhorn-service-account
+ namespace: {{ .Release.Namespace }}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/daemonset-sa.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/daemonset-sa.yaml
new file mode 100644
index 000000000..1717aa4d9
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/daemonset-sa.yaml
@@ -0,0 +1,112 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-manager
+ name: longhorn-manager
+ namespace: {{ .Release.Namespace }}
+spec:
+ selector:
+ matchLabels:
+ app: longhorn-manager
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-manager
+ spec:
+ containers:
+ - name: longhorn-manager
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ privileged: true
+ command:
+ - longhorn-manager
+ - -d
+ - daemon
+ - --engine-image
+ - "{{ template "system_default_registry" . }}{{ .Values.image.longhorn.engine.repository }}:{{ .Values.image.longhorn.engine.tag }}"
+ - --instance-manager-image
+ - "{{ template "system_default_registry" . }}{{ .Values.image.longhorn.instanceManager.repository }}:{{ .Values.image.longhorn.instanceManager.tag }}"
+ - --manager-image
+ - "{{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}"
+ - --service-account
+ - longhorn-service-account
+ ports:
+ - containerPort: 9500
+ name: manager
+ readinessProbe:
+ tcpSocket:
+ port: 9500
+ volumeMounts:
+ - name: dev
+ mountPath: /host/dev/
+ - name: proc
+ mountPath: /host/proc/
+ - name: varrun
+ mountPath: /var/run/
+ mountPropagation: Bidirectional
+ - name: longhorn
+ mountPath: /var/lib/longhorn/
+ mountPropagation: Bidirectional
+ - name: longhorn-default-setting
+ mountPath: /var/lib/longhorn-setting/
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ - name: POD_IP
+ valueFrom:
+ fieldRef:
+ fieldPath: status.podIP
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ - name: DEFAULT_SETTING_PATH
+ value: /var/lib/longhorn-setting/default-setting.yaml
+ volumes:
+ - name: dev
+ hostPath:
+ path: /dev/
+ - name: proc
+ hostPath:
+ path: /proc/
+ - name: varrun
+ hostPath:
+ path: /var/run/
+ - name: longhorn
+ hostPath:
+ path: /var/lib/longhorn/
+ - name: longhorn-default-setting
+ configMap:
+ name: longhorn-default-setting
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
+ updateStrategy:
+ rollingUpdate:
+ maxUnavailable: "100%"
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-manager
+ name: longhorn-backend
+ namespace: {{ .Release.Namespace }}
+spec:
+ type: {{ .Values.service.manager.type }}
+ sessionAffinity: ClientIP
+ selector:
+ app: longhorn-manager
+ ports:
+ - name: manager
+ port: 9500
+ targetPort: manager
+ {{- if .Values.service.manager.nodePort }}
+ nodePort: {{ .Values.service.manager.nodePort }}
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/default-setting.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/default-setting.yaml
new file mode 100644
index 000000000..2eb10b4dc
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/default-setting.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: longhorn-default-setting
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+data:
+ default-setting.yaml: |-
+ backup-target: {{ .Values.defaultSettings.backupTarget }}
+ backup-target-credential-secret: {{ .Values.defaultSettings.backupTargetCredentialSecret }}
+ create-default-disk-labeled-nodes: {{ .Values.defaultSettings.createDefaultDiskLabeledNodes }}
+ default-data-path: {{ .Values.defaultSettings.defaultDataPath }}
+ replica-soft-anti-affinity: {{ .Values.defaultSettings.replicaSoftAntiAffinity }}
+ storage-over-provisioning-percentage: {{ .Values.defaultSettings.storageOverProvisioningPercentage }}
+ storage-minimal-available-percentage: {{ .Values.defaultSettings.storageMinimalAvailablePercentage }}
+ upgrade-checker: {{ .Values.defaultSettings.upgradeChecker }}
+ default-replica-count: {{ .Values.defaultSettings.defaultReplicaCount }}
+ guaranteed-engine-cpu: {{ .Values.defaultSettings.guaranteedEngineCPU }}
+ default-longhorn-static-storage-class: {{ .Values.defaultSettings.defaultLonghornStaticStorageClass }}
+ backupstore-poll-interval: {{ .Values.defaultSettings.backupstorePollInterval }}
+ taint-toleration: {{ .Values.defaultSettings.taintToleration }}
+ priority-class: {{ .Values.defaultSettings.priorityClass }}
+ registry-secret: {{ .Values.defaultSettings.registrySecret }}
+ auto-salvage: {{ .Values.defaultSettings.autoSalvage }}
+ disable-scheduling-on-cordoned-node: {{ .Values.defaultSettings.disableSchedulingOnCordonedNode }}
+ replica-zone-soft-anti-affinity: {{ .Values.defaultSettings.replicaZoneSoftAntiAffinity }}
+ volume-attachment-recovery-policy: {{ .Values.defaultSettings.volumeAttachmentRecoveryPolicy }}
+ mkfs-ext4-parameters: {{ .Values.defaultSettings.mkfsExt4Parameters }}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/deployment-driver.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/deployment-driver.yaml
new file mode 100644
index 000000000..bee055d8e
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/deployment-driver.yaml
@@ -0,0 +1,84 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: longhorn-driver-deployer
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: longhorn-driver-deployer
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-driver-deployer
+ spec:
+ initContainers:
+ - name: wait-longhorn-manager
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ command: ['sh', '-c', 'while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" http://longhorn-backend:9500/v1) != "200" ]; do echo waiting; sleep 2; done']
+ containers:
+ - name: longhorn-driver-deployer
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - longhorn-manager
+ - -d
+ - deploy-driver
+ - --manager-image
+ - "{{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}"
+ - --manager-url
+ - http://longhorn-backend:9500/v1
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ - name: SERVICE_ACCOUNT
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.serviceAccountName
+ {{- if .Values.csi.kubeletRootDir }}
+ - name: KUBELET_ROOT_DIR
+ value: {{ .Values.csi.kubeletRootDir }}
+ {{- end }}
+ {{- if and .Values.image.csi.attacher.repository .Values.image.csi.attacher.tag }}
+ - name: CSI_ATTACHER_IMAGE
+ value: "{{ template "system_default_registry" . }}{{ .Values.image.csi.attacher.repository }}:{{ .Values.image.csi.attacher.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.provisioner.repository .Values.image.csi.provisioner.tag }}
+ - name: CSI_PROVISIONER_IMAGE
+ value: "{{ template "system_default_registry" . }}{{ .Values.image.csi.provisioner.repository }}:{{ .Values.image.csi.provisioner.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.nodeDriverRegistrar.repository .Values.image.csi.nodeDriverRegistrar.tag }}
+ - name: CSI_NODE_DRIVER_REGISTRAR_IMAGE
+ value: "{{ template "system_default_registry" . }}{{ .Values.image.csi.nodeDriverRegistrar.repository }}:{{ .Values.image.csi.nodeDriverRegistrar.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.resizer.repository .Values.image.csi.resizer.tag }}
+ - name: CSI_RESIZER_IMAGE
+ value: "{{ template "system_default_registry" . }}{{ .Values.image.csi.resizer.repository }}:{{ .Values.image.csi.resizer.tag }}"
+ {{- end }}
+ {{- if .Values.csi.attacherReplicaCount }}
+ - name: CSI_ATTACHER_REPLICA_COUNT
+ value: {{ .Values.csi.attacherReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.provisionerReplicaCount }}
+ - name: CSI_PROVISIONER_REPLICA_COUNT
+ value: {{ .Values.csi.provisionerReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.resizerReplicaCount }}
+ - name: CSI_RESIZER_REPLICA_COUNT
+ value: {{ .Values.csi.resizerReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
+ securityContext:
+ runAsUser: 0
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/deployment-ui.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/deployment-ui.yaml
new file mode 100644
index 000000000..0de0c9b3b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/deployment-ui.yaml
@@ -0,0 +1,61 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ui
+ name: longhorn-ui
+ namespace: {{ .Release.Namespace }}
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: longhorn-ui
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-ui
+ spec:
+ containers:
+ - name: longhorn-ui
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.ui.repository }}:{{ .Values.image.longhorn.ui.tag }}
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ runAsUser: 0
+ ports:
+ - containerPort: 8000
+ name: http
+ env:
+ - name: LONGHORN_MANAGER_IP
+ value: "http://longhorn-backend:9500"
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ui
+ {{- if eq .Values.service.ui.type "Rancher-Proxy" }}
+ kubernetes.io/cluster-service: "true"
+ {{- end }}
+ name: longhorn-frontend
+ namespace: {{ .Release.Namespace }}
+spec:
+ {{- if eq .Values.service.ui.type "Rancher-Proxy" }}
+ type: ClusterIP
+ {{- else }}
+ type: {{ .Values.service.ui.type }}
+ {{- end }}
+ selector:
+ app: longhorn-ui
+ ports:
+ - name: http
+ port: 80
+ targetPort: http
+ {{- if .Values.service.ui.nodePort }}
+ nodePort: {{ .Values.service.ui.nodePort }}
+ {{- else }}
+ nodePort: null
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/ingress.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/ingress.yaml
new file mode 100644
index 000000000..e3e9e3eea
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/ingress.yaml
@@ -0,0 +1,30 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: longhorn-ingress
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ingress
+ annotations:
+ {{- if .Values.ingress.tls }}
+ ingress.kubernetes.io/secure-backends: "true"
+ {{- end }}
+ {{- range $key, $value := .Values.ingress.annotations }}
+ {{ $key }}: {{ $value | quote }}
+ {{- end }}
+spec:
+ rules:
+ - host: {{ .Values.ingress.host }}
+ http:
+ paths:
+ - path: {{ default "" .Values.ingress.path }}
+ backend:
+ serviceName: longhorn-frontend
+ servicePort: 80
+{{- if .Values.ingress.tls }}
+ tls:
+ - hosts:
+ - {{ .Values.ingress.host }}
+ secretName: {{ .Values.ingress.tlsSecret }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/postupgrade-job.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/postupgrade-job.yaml
new file mode 100644
index 000000000..1860be5fe
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/postupgrade-job.yaml
@@ -0,0 +1,35 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ annotations:
+ "helm.sh/hook": post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
+ name: longhorn-post-upgrade
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ activeDeadlineSeconds: 900
+ backoffLimit: 1
+ template:
+ metadata:
+ name: longhorn-post-upgrade
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ spec:
+ containers:
+ - name: longhorn-post-upgrade
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: Always
+ command:
+ - longhorn-manager
+ - post-upgrade
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ restartPolicy: OnFailure
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/psp.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/psp.yaml
new file mode 100644
index 000000000..66479b4fa
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/psp.yaml
@@ -0,0 +1,66 @@
+{{- if .Values.enablePSP }}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: longhorn-psp
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ privileged: true
+ allowPrivilegeEscalation: true
+ requiredDropCapabilities:
+ - NET_RAW
+ allowedCapabilities:
+ - SYS_ADMIN
+ hostNetwork: false
+ hostIPC: false
+ hostPID: true
+ runAsUser:
+ rule: RunAsAny
+ seLinux:
+ rule: RunAsAny
+ fsGroup:
+ rule: RunAsAny
+ supplementalGroups:
+ rule: RunAsAny
+ volumes:
+ - configMap
+ - downwardAPI
+ - emptyDir
+ - secret
+ - projected
+ - hostPath
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: longhorn-psp-role
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ namespace: {{ .Release.Namespace }}
+rules:
+- apiGroups:
+ - policy
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+ resourceNames:
+ - longhorn-psp
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: longhorn-psp-binding
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ namespace: {{ .Release.Namespace }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: longhorn-psp-role
+subjects:
+- kind: ServiceAccount
+ name: longhorn-service-account
+ namespace: {{ .Release.Namespace }}
+- kind: ServiceAccount
+ name: default
+ namespace: {{ .Release.Namespace }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/registry-secret.yml b/released/charts/longhorn/longhorn/1.0.201/templates/registry-secret.yml
new file mode 100644
index 000000000..eeb9a8f4a
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/registry-secret.yml
@@ -0,0 +1,10 @@
+{{- if .Values.defaultSettings.registrySecret }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ .Values.defaultSettings.registrySecret }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+type: kubernetes.io/dockerconfigjson
+data:
+ .dockerconfigjson: {{ template "secret" . }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/serviceaccount.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/serviceaccount.yaml
new file mode 100644
index 000000000..a2280b44f
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/serviceaccount.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: longhorn-service-account
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/storageclass.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/storageclass.yaml
new file mode 100644
index 000000000..3fee340f4
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/storageclass.yaml
@@ -0,0 +1,14 @@
+kind: StorageClass
+apiVersion: storage.k8s.io/v1
+metadata:
+ name: longhorn
+ annotations:
+ storageclass.kubernetes.io/is-default-class: {{ .Values.persistence.defaultClass | quote }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+provisioner: driver.longhorn.io
+allowVolumeExpansion: true
+parameters:
+ numberOfReplicas: "{{ .Values.persistence.defaultClassReplicaCount }}"
+ staleReplicaTimeout: "30"
+ fromBackup: ""
+ baseImage: ""
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/tls-secrets.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/tls-secrets.yaml
new file mode 100644
index 000000000..7a75df09c
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/tls-secrets.yaml
@@ -0,0 +1,15 @@
+{{- if .Values.ingress.enabled }}
+{{- range .Values.ingress.secrets }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: longhorn
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn
+type: kubernetes.io/tls
+data:
+ tls.crt: {{ .certificate | b64enc }}
+ tls.key: {{ .key | b64enc }}
+---
+{{- end }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/uninstall-job.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/uninstall-job.yaml
new file mode 100644
index 000000000..d32157145
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/uninstall-job.yaml
@@ -0,0 +1,36 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ annotations:
+ "helm.sh/hook": pre-delete
+ "helm.sh/hook-delete-policy": hook-succeeded
+ name: longhorn-uninstall
+ namespace: {{ .Release.Namespace }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ activeDeadlineSeconds: 900
+ backoffLimit: 1
+ template:
+ metadata:
+ name: longhorn-uninstall
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ spec:
+ containers:
+ - name: longhorn-uninstall
+ image: {{ template "system_default_registry" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: Always
+ command:
+ - longhorn-manager
+ - uninstall
+ - --force
+ env:
+ - name: LONGHORN_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ restartPolicy: OnFailure
+ {{- if .Values.defaultSettings.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.defaultSettings.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/userroles.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/userroles.yaml
new file mode 100644
index 000000000..ba6d40643
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/userroles.yaml
@@ -0,0 +1,35 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-admin"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status" ]
+ verbs: [ "*" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-edit"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status" ]
+ verbs: [ "*" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-view"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-view: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: [ "volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status" ]
+ verbs: [ "get", "list", "watch" ]
diff --git a/released/charts/longhorn/longhorn/1.0.201/templates/validate-install-crd.yaml b/released/charts/longhorn/longhorn/1.0.201/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..4899b977c
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/templates/validate-install-crd.yaml
@@ -0,0 +1,14 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "longhorn.io/v1beta1/Engine" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the longhorn-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/longhorn/longhorn/1.0.201/values.yaml b/released/charts/longhorn/longhorn/1.0.201/values.yaml
new file mode 100644
index 000000000..a29b9497d
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.0.201/values.yaml
@@ -0,0 +1,136 @@
+# Default values for longhorn.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+image:
+ longhorn:
+ engine:
+ repository: rancher/longhornio-longhorn-engine
+ tag: v1.0.2
+ manager:
+ repository: rancher/longhornio-longhorn-manager
+ tag: v1.0.2
+ ui:
+ repository: rancher/longhornio-longhorn-ui
+ tag: v1.0.2
+ instanceManager:
+ repository: rancher/longhornio-longhorn-instance-manager
+ tag: v1_20200514
+ csi:
+ attacher:
+ repository: rancher/longhornio-csi-attacher
+ tag: v2.0.0
+ provisioner:
+ repository: rancher/longhornio-csi-provisioner
+ tag: v1.4.0
+ nodeDriverRegistrar:
+ repository: rancher/longhornio-csi-node-driver-registrar
+ tag: v1.2.0
+ resizer:
+ repository: rancher/longhornio-csi-resizer
+ tag: v0.3.0
+ pullPolicy: IfNotPresent
+
+service:
+ ui:
+ type: ClusterIP
+ nodePort: null
+ manager:
+ type: ClusterIP
+ nodePort: ""
+
+persistence:
+ defaultClass: true
+ defaultClassReplicaCount: 3
+
+csi:
+ kubeletRootDir: ~
+ attacherReplicaCount: ~
+ provisionerReplicaCount: ~
+ resizerReplicaCount: ~
+
+defaultSettings:
+ backupTarget: ~
+ backupTargetCredentialSecret: ~
+ createDefaultDiskLabeledNodes: ~
+ defaultDataPath: ~
+ replicaSoftAntiAffinity: ~
+ storageOverProvisioningPercentage: ~
+ storageMinimalAvailablePercentage: ~
+ upgradeChecker: ~
+ defaultReplicaCount: ~
+ guaranteedEngineCPU: ~
+ defaultLonghornStaticStorageClass: ~
+ backupstorePollInterval: ~
+ taintToleration: ~
+ priorityClass: ~
+ registrySecret: ~
+ autoSalvage: ~
+ disableSchedulingOnCordonedNode: ~
+ replicaZoneSoftAntiAffinity: ~
+ volumeAttachmentRecoveryPolicy: ~
+ mkfsExt4Parameters: ~
+
+privateRegistry:
+ registryUrl: ~
+ registryUser: ~
+ registryPasswd: ~
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+ #
+
+ingress:
+ ## Set to true to enable ingress record generation
+ enabled: false
+
+
+ host: xip.io
+
+ ## Set this to true in order to enable TLS on the ingress record
+ ## A side effect of this will be that the backend service will be connected at port 443
+ tls: false
+
+ ## If TLS is set to true, you must declare what secret will store the key/certificate for TLS
+ tlsSecret: longhorn.local-tls
+
+ ## Ingress annotations done as key:value pairs
+ ## If you're using kube-lego, you will want to add:
+ ## kubernetes.io/tls-acme: true
+ ##
+ ## For a full list of possible ingress annotations, please see
+ ## ref: https://github.com/kubernetes/ingress-nginx/blob/master/docs/annotations.md
+ ##
+ ## If tls is set to true, annotation ingress.kubernetes.io/secure-backends: "true" will automatically be set
+ annotations:
+ # kubernetes.io/ingress.class: nginx
+ # kubernetes.io/tls-acme: true
+
+ secrets:
+ ## If you're providing your own certificates, please use this to add the certificates as secrets
+ ## key and certificate should start with -----BEGIN CERTIFICATE----- or
+ ## -----BEGIN RSA PRIVATE KEY-----
+ ##
+ ## name should line up with a tlsSecret set further up
+ ## If you're using kube-lego, this is unneeded, as it will create the secret for you if it is not set
+ ##
+ ## It is also possible to create and manage the certificates outside of this helm chart
+ ## Please see README.md for more information
+ # - name: longhorn.local-tls
+ # key:
+ # certificate:
+
+# Configure a pod security policy in the Longhorn namespace to allow privileged pods
+enablePSP: true
diff --git a/released/charts/longhorn/longhorn/1.1.000/.helmignore b/released/charts/longhorn/longhorn/1.1.000/.helmignore
new file mode 100644
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/longhorn/longhorn/1.1.000/Chart.yaml b/released/charts/longhorn/longhorn/1.1.000/Chart.yaml
new file mode 100644
index 000000000..2d86b61fe
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/Chart.yaml
@@ -0,0 +1,37 @@
+annotations:
+ catalog.cattle.io/auto-install: longhorn-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: Longhorn
+ catalog.cattle.io/namespace: longhorn-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
+ catalog.cattle.io/release-name: longhorn
+ catalog.cattle.io/ui-component: longhorn
+apiVersion: v1
+appVersion: v1.1.0
+description: Longhorn is a distributed block storage system for Kubernetes.
+home: https://github.com/longhorn/longhorn
+icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg
+keywords:
+- longhorn
+- storage
+- distributed
+- block
+- device
+- iscsi
+kubeVersion: '>=v1.16.0-r0'
+maintainers:
+- email: maintainers@longhorn.io
+ name: Longhorn maintainers
+- email: sheng@yasker.org
+ name: Sheng Yang
+name: longhorn
+sources:
+- https://github.com/longhorn/longhorn
+- https://github.com/longhorn/longhorn-engine
+- https://github.com/longhorn/longhorn-instance-manager
+- https://github.com/longhorn/longhorn-share-manager
+- https://github.com/longhorn/longhorn-manager
+- https://github.com/longhorn/longhorn-ui
+- https://github.com/longhorn/longhorn-tests
+version: 1.1.000
diff --git a/released/charts/longhorn/longhorn/1.1.000/README.md b/released/charts/longhorn/longhorn/1.1.000/README.md
new file mode 100644
index 000000000..eae11ef6d
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/README.md
@@ -0,0 +1,32 @@
+# Longhorn Chart
+
+> **Important**: Please install the Longhorn chart in the `longhorn-system` namespace only.
+
+> **Warning**: Longhorn doesn't support downgrading from a higher version to a lower version.
+
+## Source Code
+
+Longhorn is 100% open source software. Project source code is spread across a number of repos:
+
+1. Longhorn Engine -- Core controller/replica logic https://github.com/longhorn/longhorn-engine
+2. Longhorn Instance Manager -- Controller/replica instance lifecycle management https://github.com/longhorn/longhorn-instance-manager
+3. Longhorn Share Manager -- NFS provisioner that exposes Longhorn volumes as ReadWriteMany volumes. https://github.com/longhorn/longhorn-share-manager
+4. Longhorn Manager -- Longhorn orchestration, includes CSI driver for Kubernetes https://github.com/longhorn/longhorn-manager
+5. Longhorn UI -- Dashboard https://github.com/longhorn/longhorn-ui
+
+## Prerequisites
+
+1. Docker v1.13+
+2. Kubernetes v1.16+
+3. Make sure `curl`, `findmnt`, `grep`, `awk` and `blkid` has been installed in all nodes of the Kubernetes cluster.
+4. Make sure `open-iscsi` has been installed in all nodes of the Kubernetes cluster. For GKE, recommended Ubuntu as guest OS image since it contains `open-iscsi` already.
+
+## Uninstallation
+
+To prevent damage to the Kubernetes cluster, we recommend deleting all Kubernetes workloads using Longhorn volumes (PersistentVolume, PersistentVolumeClaim, StorageClass, Deployment, StatefulSet, DaemonSet, etc).
+
+From Rancher Cluster Explorer UI, navigate to Apps page, delete app `longhorn` then app `longhorn-crd` in Installed Apps tab.
+
+
+---
+Please see [link](https://github.com/longhorn/longhorn) for more information.
diff --git a/released/charts/longhorn/longhorn/1.1.000/app-readme.md b/released/charts/longhorn/longhorn/1.1.000/app-readme.md
new file mode 100644
index 000000000..cb23135ca
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/app-readme.md
@@ -0,0 +1,11 @@
+# Longhorn
+
+Longhorn is a lightweight, reliable and easy to use distributed block storage system for Kubernetes. Once deployed, users can leverage persistent volumes provided by Longhorn.
+
+Longhorn creates a dedicated storage controller for each volume and synchronously replicates the volume across multiple replicas stored on multiple nodes. The storage controller and replicas are themselves orchestrated using Kubernetes. Longhorn supports snapshots, backups and even allows you to schedule recurring snapshots and backups!
+
+**Important**: Please install Longhorn chart in `longhorn-system` namespace only.
+
+**Warning**: Longhorn doesn't support downgrading from a higher version to a lower version.
+
+[Chart Documentation](https://github.com/longhorn/longhorn/blob/master/chart/README.md)
diff --git a/released/charts/longhorn/longhorn/1.1.000/questions.yml b/released/charts/longhorn/longhorn/1.1.000/questions.yml
new file mode 100644
index 000000000..f7ace54c7
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/questions.yml
@@ -0,0 +1,512 @@
+categories:
+- storage
+namespace: longhorn-system
+questions:
+- variable: image.defaultImage
+ default: "true"
+ description: "Use default Longhorn images"
+ label: Use Default Images
+ type: boolean
+ show_subquestion_if: false
+ group: "Longhorn Images"
+ subquestions:
+ - variable: image.longhorn.manager.repository
+ default: rancher/longhornio-longhorn-manager
+ description: "Specify Longhorn Manager Image Repository"
+ type: string
+ label: Longhorn Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.manager.tag
+ default: v1.1.0
+ description: "Specify Longhorn Manager Image Tag"
+ type: string
+ label: Longhorn Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.engine.repository
+ default: rancher/longhornio-longhorn-engine
+ description: "Specify Longhorn Engine Image Repository"
+ type: string
+ label: Longhorn Engine Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.engine.tag
+ default: v1.1.0
+ description: "Specify Longhorn Engine Image Tag"
+ type: string
+ label: Longhorn Engine Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.ui.repository
+ default: rancher/longhornio-longhorn-ui
+ description: "Specify Longhorn UI Image Repository"
+ type: string
+ label: Longhorn UI Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.ui.tag
+ default: v1.1.0
+ description: "Specify Longhorn UI Image Tag"
+ type: string
+ label: Longhorn UI Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.instanceManager.repository
+ default: rancher/longhornio-longhorn-instance-manager
+ description: "Specify Longhorn Instance Manager Image Repository"
+ type: string
+ label: Longhorn Instance Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.instanceManager.tag
+ default: v1_20201216
+ description: "Specify Longhorn Instance Manager Image Tag"
+ type: string
+ label: Longhorn Instance Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.shareManager.repository
+ default: rancher/longhornio-longhorn-share-manager
+ description: "Specify Longhorn Share Manager Image Repository"
+ type: string
+ label: Longhorn Share Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.shareManager.tag
+ default: v1_20201204
+ description: "Specify Longhorn Share Manager Image Tag"
+ type: string
+ label: Longhorn Share Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.csi.attacher.repository
+ default: rancher/longhornio-csi-attacher
+ description: "Specify CSI attacher image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Attacher Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.attacher.tag
+ default: v2.2.1-lh1
+ description: "Specify CSI attacher image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Attacher Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.provisioner.repository
+ default: rancher/longhornio-csi-provisioner
+ description: "Specify CSI provisioner image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Provisioner Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.provisioner.tag
+ default: v1.6.0-lh1
+ description: "Specify CSI provisioner image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Provisioner Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.nodeDriverRegistrar.repository
+ default: rancher/longhornio-csi-node-driver-registrar
+ description: "Specify CSI Node Driver Registrar image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Node Driver Registrar Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.nodeDriverRegistrar.tag
+ default: v1.2.0-lh1
+ description: "Specify CSI Node Driver Registrar image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Node Driver Registrar Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.resizer.repository
+ default: rancher/longhornio-csi-resizer
+ description: "Specify CSI Driver Resizer image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Resizer Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.resizer.tag
+ default: v0.5.1-lh1
+ description: "Specify CSI Driver Resizer image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Resizer Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.snapshotter.repository
+ default: rancher/longhornio-csi-snapshotter
+ description: "Specify CSI Driver Snapshotter image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Snapshotter Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.snapshotter.tag
+ default: v2.1.1-lh1
+ description: "Specify CSI Driver Snapshotter image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Snapshotter Image Tag
+ group: "Longhorn CSI Driver Images"
+- variable: privateRegistry.registryUrl
+ label: Private registry URL
+ description: "URL of private registry. Leave blank to apply system default registry."
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: privateRegistry.registryUser
+ label: Private registry user
+ description: "User used to authenticate to private registry"
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: privateRegistry.registryPasswd
+ label: Private registry password
+ description: "Password used to authenticate to private registry"
+ group: "Private Registry Settings"
+ type: password
+ default: ""
+- variable: privateRegistry.registrySecret
+ label: Private registry secret name
+ description: "Longhorn will automatically generate a Kubernetes secret with this name and use it to pull images from your private registry."
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: longhorn.default_setting
+ default: "false"
+ description: "Customize the default settings before installing Longhorn for the first time. This option will only work if the cluster hasn't installed Longhorn."
+ label: "Customize Default Settings"
+ type: boolean
+ show_subquestion_if: true
+ group: "Longhorn Default Settings"
+ subquestions:
+ - variable: csi.kubeletRootDir
+ default:
+ description: "Specify kubelet root-dir. Leave blank to autodetect."
+ type: string
+ label: Kubelet Root Directory
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.attacherReplicaCount
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Attacher. By default 3."
+ label: Longhorn CSI Attacher replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.provisionerReplicaCount
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Provisioner. By default 3."
+ label: Longhorn CSI Provisioner replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.resizerReplicaCount
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Resizer. By default 3."
+ label: Longhorn CSI Resizer replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.snapshotterReplicaCount
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Snapshotter. By default 3."
+ label: Longhorn CSI Snapshotter replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: defaultSettings.backupTarget
+ label: Backup Target
+ description: "The endpoint used to access the backupstore. NFS and S3 are supported."
+ group: "Longhorn Default Settings"
+ type: string
+ default:
+ - variable: defaultSettings.backupTargetCredentialSecret
+ label: Backup Target Credential Secret
+ description: "The name of the Kubernetes secret associated with the backup target."
+ group: "Longhorn Default Settings"
+ type: string
+ default:
+ - variable: defaultSettings.allowRecurringJobWhileVolumeDetached
+ label: Allow Recurring Job While Volume Is Detached
+ description: 'If this setting is enabled, Longhorn will automatically attaches the volume and takes snapshot/backup when it is the time to do recurring snapshot/backup.
+Note that the volume is not ready for workload during the period when the volume was automatically attached. Workload will have to wait until the recurring job finishes.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.createDefaultDiskLabeledNodes
+ label: Create Default Disk on Labeled Nodes
+ description: 'Create default Disk automatically only on Nodes with the label "node.longhorn.io/create-default-disk=true" if no other disks exist. If disabled, the default disk will be created on all new nodes when each node is first added.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.defaultDataPath
+ label: Default Data Path
+ description: 'Default path to use for storing data on a host. By default "/var/lib/longhorn/"'
+ group: "Longhorn Default Settings"
+ type: string
+ default: "/var/lib/longhorn/"
+ - variable: defaultSettings.defaultDataLocality
+ label: Default Data Locality
+ description: 'We say a Longhorn volume has data locality if there is a local replica of the volume on the same node as the pod which is using the volume.
+This setting specifies the default data locality when a volume is created from the Longhorn UI. For Kubernetes configuration, update the `dataLocality` in the StorageClass
+The available modes are:
+- **disabled**. This is the default option. There may or may not be a replica on the same node as the attached volume (workload)
+- **best-effort**. This option instructs Longhorn to try to keep a replica on the same node as the attached volume (workload). Longhorn will not stop the volume, even if it cannot keep a replica local to the attached volume (workload) due to environment limitation, e.g. not enough disk space, incompatible disk tags, etc.'
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "disabled"
+ - "best-effort"
+ default: "disabled"
+ - variable: defaultSettings.replicaSoftAntiAffinity
+ label: Replica Node Level Soft Anti-Affinity
+ description: 'Allow scheduling on nodes with existing healthy replicas of the same volume. By default false.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.storageOverProvisioningPercentage
+ label: Storage Over Provisioning Percentage
+ description: "The over-provisioning percentage defines how much storage can be allocated relative to the hard drive's capacity. By default 200."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 200
+ - variable: defaultSettings.storageMinimalAvailablePercentage
+ label: Storage Minimal Available Percentage
+ description: "If the minimum available disk capacity exceeds the actual percentage of available disk capacity, the disk becomes unschedulable until more space is freed up. By default 25."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ max: 100
+ default: 25
+ - variable: defaultSettings.upgradeChecker
+ label: Enable Upgrade Checker
+ description: 'Upgrade Checker will check for new Longhorn version periodically. When there is a new version available, a notification will appear in the UI. By default true.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.defaultReplicaCount
+ label: Default Replica Count
+ description: "The default number of replicas when a volume is created from the Longhorn UI. For Kubernetes configuration, update the `numberOfReplicas` in the StorageClass. By default 3."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 1
+ max: 20
+ default: 3
+ - variable: defaultSettings.guaranteedEngineCPU
+ label: Guaranteed Engine CPU
+ description: "Allow Longhorn Instance Managers to have guaranteed CPU allocation. By default 0.25. The value is how many CPUs should be reserved for each Engine/Replica Instance Manager Pod created by Longhorn. For example, 0.1 means one-tenth of a CPU. This will help maintain engine stability during high node workload. It only applies to the Engine/Replica Instance Manager Pods created after the setting took effect.
+In order to prevent unexpected volume crash, you can use the following formula to calculate an appropriate value for this setting:
+'Guaranteed Engine CPU = The estimated max Longhorn volume/replica count on a node * 0.1'.
+The result of above calculation doesn't mean that's the maximum CPU resources the Longhorn workloads require. To fully exploit the Longhorn volume I/O performance, you can allocate/guarantee more CPU resources via this setting.
+If it's hard to estimate the volume/replica count now, you can leave it with the default value, or allocate 1/8 of total CPU of a node. Then you can tune it when there is no running workload using Longhorn volumes.
+WARNING: After this setting is changed, all the instance managers on all the nodes will be automatically restarted
+WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES."
+ group: "Longhorn Default Settings"
+ type: float
+ default: 0.25
+ - variable: defaultSettings.defaultLonghornStaticStorageClass
+ label: Default Longhorn Static StorageClass Name
+ description: "The 'storageClassName' is given to PVs and PVCs that are created for an existing Longhorn volume. The StorageClass name can also be used as a label, so it is possible to use a Longhorn StorageClass to bind a workload to an existing PV without creating a Kubernetes StorageClass object. By default 'longhorn-static'."
+ group: "Longhorn Default Settings"
+ type: string
+ default: "longhorn-static"
+ - variable: defaultSettings.backupstorePollInterval
+ label: Backupstore Poll Interval
+ description: "In seconds. The backupstore poll interval determines how often Longhorn checks the backupstore for new backups. Set to 0 to disable the polling. By default 300."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 300
+ - variable: defaultSettings.taintToleration
+ label: Kubernetes Taint Toleration
+ description: "To dedicate nodes to store Longhorn replicas and reject other general workloads, set tolerations for Longhorn and add taints for the storage nodes.
+All Longhorn volumes should be detached before modifying toleration settings.
+We recommend setting tolerations during Longhorn deployment because the Longhorn system cannot be operated during the update.
+Multiple tolerations can be set here, and these tolerations are separated by semicolon. For example:
+* `key1=value1:NoSchedule; key2:NoExecute`
+* `:` this toleration tolerates everything because an empty key with operator `Exists` matches all keys, values and effects
+* `key1=value1:` this toleration has empty effect. It matches all effects with key `key1`
+Because `kubernetes.io` is used as the key of all Kubernetes default tolerations, it should not be used in the toleration settings.
+WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES!"
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: defaultSettings.priorityClass
+ label: Priority Class
+ description: "The name of the Priority Class to set on the Longhorn workloads. This can help prevent Longhorn workloads from being evicted under Node Pressure. WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES."
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: defaultSettings.autoSalvage
+ label: Automatic salvage
+ description: "If enabled, volumes will be automatically salvaged when all the replicas become faulty e.g. due to network disconnection. Longhorn will try to figure out which replica(s) are usable, then use them for the volume. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.autoDeletePodWhenVolumeDetachedUnexpectedly
+ label: Automatically Delete Workload Pod when The Volume Is Detached Unexpectedly
+ description: 'If enabled, Longhorn will automatically delete the workload pod that is managed by a controller (e.g. deployment, statefulset, daemonset, etc...) when Longhorn volume is detached unexpectedly (e.g. during Kubernetes upgrade, Docker reboot, or network disconnect). By deleting the pod, its controller restarts the pod and Kubernetes handles volume reattachment and remount.
+If disabled, Longhorn will not delete the workload pod that is managed by a controller. You will have to manually restart the pod to reattach and remount the volume.
+**Note:** This setting does not apply to the workload pods that do not have a controller. Longhorn never deletes them.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.disableSchedulingOnCordonedNode
+ label: Disable Scheduling On Cordoned Node
+ description: "Disable Longhorn manager to schedule replica on Kubernetes cordoned node. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.replicaZoneSoftAntiAffinity
+ label: Replica Zone Level Soft Anti-Affinity
+ description: "Allow scheduling new Replicas of Volume to the Nodes in the same Zone as existing healthy Replicas. Nodes don't belong to any Zone will be treated as in the same Zone. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.volumeAttachmentRecoveryPolicy
+ label: Volume Attachment Recovery Policy
+ description: "Defines the Longhorn action when a Volume is stuck with a Deployment Pod on a failed node. `wait` leads to the deletion of the volume attachment as soon as the pods deletion time has passed. `never` is the default Kubernetes behavior of never deleting volume attachments on terminating pods. `immediate` leads to the deletion of the volume attachment as soon as all workload pods are pending. By default wait."
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "wait"
+ - "never"
+ - "immediate"
+ default: "wait"
+ - variable: defaultSettings.nodeDownPodDeletionPolicy
+ label: Pod Deletion Policy When Node is Down
+ description: "Defines the Longhorn action when a Volume is stuck with a StatefulSet/Deployment Pod on a node that is down.
+- **do-nothing** is the default Kubernetes behavior of never force deleting StatefulSet/Deployment terminating pods. Since the pod on the node that is down isn't removed, Longhorn volumes are stuck on nodes that are down.
+- **delete-statefulset-pod** Longhorn will force delete StatefulSet terminating pods on nodes that are down to release Longhorn volumes so that Kubernetes can spin up replacement pods.
+- **delete-deployment-pod** Longhorn will force delete Deployment terminating pods on nodes that are down to release Longhorn volumes so that Kubernetes can spin up replacement pods.
+- **delete-both-statefulset-and-deployment-pod** Longhorn will force delete StatefulSet/Deployment terminating pods on nodes that are down to release Longhorn volumes so that Kubernetes can spin up replacement pods."
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "do-nothing"
+ - "delete-statefulset-pod"
+ - "delete-deployment-pod"
+ - "delete-both-statefulset-and-deployment-pod"
+ default: "do-nothing"
+ - variable: defaultSettings.allowNodeDrainWithLastHealthyReplica
+ label: Allow Node Drain with the Last Healthy Replica
+ description: "By default, Longhorn will block `kubectl drain` action on a node if the node contains the last healthy replica of a volume.
+If this setting is enabled, Longhorn will **not** block `kubectl drain` action on a node even if the node contains the last healthy replica of a volume."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.mkfsExt4Parameters
+ label: Custom mkfs.ext4 parameters
+ description: "Allows setting additional filesystem creation parameters for ext4. For older host kernels it might be necessary to disable the optional ext4 metadata_csum feature by specifying `-O ^64bit,^metadata_csum`."
+ group: "Longhorn Default Settings"
+ type: string
+ - variable: defaultSettings.disableReplicaRebuild
+ label: Disable Replica Rebuild
+ description: "This setting disable replica rebuild cross the whole cluster, eviction and data locality feature won't work if this setting is true. But doesn't have any impact to any current replica rebuild and restore disaster recovery volume."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.replicaReplenishmentWaitInterval
+ label: Replica Replenishment Wait Interval
+ description: "In seconds. The interval determines how long Longhorn will wait at least in order to reuse the existing data on a failed replica rather than directly creating a new replica for a degraded volume.
+Warning: This option works only when there is a failed replica in the volume. And this option may block the rebuilding for a while in the case."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 600
+ - variable: defaultSettings.disableRevisionCounter
+ label: Disable Revision Counter
+ description: "This setting is only for volumes created by UI. By default, this is false meaning there will be a reivision counter file to track every write to the volume. During salvage recovering Longhorn will pick the repica with largest reivision counter as candidate to recover the whole volume. If revision counter is disabled, Longhorn will not track every write to the volume. During the salvage recovering, Longhorn will use the 'volume-head-xxx.img' file last modification time and file size to pick the replica candidate to recover the whole volume."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.systemManagedPodsImagePullPolicy
+ label: System Managed Pod Image Pull Policy
+ description: "This setting defines the Image Pull Policy of Longhorn system managed pods, e.g. instance manager, engine image, CSI driver, etc. The new Image Pull Policy will only apply after the system managed pods restart."
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "if-not-present"
+ - "always"
+ - "never"
+ default: "if-not-present"
+ - variable: defaultSettings.allowVolumeCreationWithDegradedAvailability
+ label: Allow Volume Creation with Degraded Availability
+ description: "This setting allows user to create and attach a volume that doesn't have all the replicas scheduled at the time of creation."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.autoCleanupSystemGeneratedSnapshot
+ label: Automatically Cleanup System Generated Snapshot
+ description: "This setting enables Longhorn to automatically cleanup the system generated snapshot after replica rebuild is done."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+- variable: persistence.defaultClass
+ default: "true"
+ description: "Set as default StorageClass for Longhorn"
+ label: Default Storage Class
+ group: "Longhorn Storage Class Settings"
+ required: true
+ type: boolean
+- variable: persistence.reclaimPolicy
+ label: Storage Class Retain Policy
+ description: "Define reclaim policy (Retain or Delete)"
+ group: "Longhorn Storage Class Settings"
+ required: true
+ type: enum
+ options:
+ - "Delete"
+ - "Retain"
+ default: "Delete"
+- variable: persistence.defaultClassReplicaCount
+ description: "Set replica count for Longhorn StorageClass"
+ label: Default Storage Class Replica Count
+ group: "Longhorn Storage Class Settings"
+ type: int
+ min: 1
+ max: 10
+ default: 3
+- variable: persistence.recurringJobs.enable
+ description: "Enable recurring job for Longhorn StorageClass"
+ group: "Longhorn Storage Class Settings"
+ label: Enable Storage Class Recurring Job
+ type: boolean
+ default: false
+ show_subquestion_if: true
+ subquestions:
+ - variable: persistence.recurringJobs.jobList
+ description: 'Recurring job list for Longhorn StorageClass. Please be careful of quotes of input. e.g., [{"name":"backup", "task":"backup", "cron":"*/2 * * * *", "retain":1,"labels": {"interval":"2m"}}]'
+ label: Storage Class Recurring Job List
+ group: "Longhorn Storage Class Settings"
+ type: string
+ default:
+- variable: ingress.enabled
+ default: "false"
+ description: "Expose app using Layer 7 Load Balancer - ingress"
+ type: boolean
+ group: "Services and Load Balancing"
+ label: Expose app using Layer 7 Load Balancer
+ show_subquestion_if: true
+ subquestions:
+ - variable: ingress.host
+ default: "xip.io"
+ description: "layer 7 Load Balancer hostname"
+ type: hostname
+ required: true
+ label: Layer 7 Load Balancer Hostname
+- variable: service.ui.type
+ default: "Rancher-Proxy"
+ description: "Define Longhorn UI service type"
+ type: enum
+ options:
+ - "ClusterIP"
+ - "NodePort"
+ - "LoadBalancer"
+ - "Rancher-Proxy"
+ label: Longhorn UI Service
+ show_if: "ingress.enabled=false"
+ group: "Services and Load Balancing"
+ show_subquestion_if: "NodePort"
+ subquestions:
+ - variable: service.ui.nodePort
+ default: ""
+ description: "NodePort port number(to set explicitly, choose port between 30000-32767)"
+ type: int
+ min: 30000
+ max: 32767
+ show_if: "service.ui.type=NodePort||service.ui.type=LoadBalancer"
+ label: UI Service NodePort number
+- variable: enablePSP
+ default: "true"
+ description: "Setup a pod security policy for Longhorn workloads."
+ label: Pod Security Policy
+ type: boolean
+ group: "Other Settings"
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/NOTES.txt b/released/charts/longhorn/longhorn/1.1.000/templates/NOTES.txt
new file mode 100644
index 000000000..cca7cd77b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/NOTES.txt
@@ -0,0 +1,5 @@
+Longhorn is now installed on the cluster!
+
+Please wait a few minutes for other Longhorn components such as CSI deployments, Engine Images, and Instance Managers to be initialized.
+
+Visit our documentation at https://longhorn.io/docs/
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/_helpers.tpl b/released/charts/longhorn/longhorn/1.1.000/templates/_helpers.tpl
new file mode 100644
index 000000000..3fbc2ac02
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/_helpers.tpl
@@ -0,0 +1,66 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "longhorn.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "longhorn.fullname" -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "longhorn.managerIP" -}}
+{{- $fullname := (include "longhorn.fullname" .) -}}
+{{- printf "http://%s-backend:9500" $fullname | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "secret" }}
+{{- printf "{\"auths\": {\"%s\": {\"auth\": \"%s\"}}}" .Values.privateRegistry.registryUrl (printf "%s:%s" .Values.privateRegistry.registryUser .Values.privateRegistry.registryPasswd | b64enc) | b64enc }}
+{{- end }}
+
+{{- /*
+longhorn.labels generates the standard Helm labels.
+*/ -}}
+{{- define "longhorn.labels" -}}
+app.kubernetes.io/name: {{ template "longhorn.name" . }}
+helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/version: {{ .Chart.AppVersion }}
+{{- end -}}
+
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "registry_url" -}}
+{{- if .Values.privateRegistry.registryUrl -}}
+{{- printf "%s/" .Values.privateRegistry.registryUrl -}}
+{{- else -}}
+{{ include "system_default_registry" . }}
+{{- end -}}
+{{- end -}}
+
+{{- /*
+ define the longhorn release namespace
+*/ -}}
+{{- define "release_namespace" -}}
+{{- if .Values.namespaceOverride -}}
+{{- .Values.namespaceOverride -}}
+{{- else -}}
+{{- .Release.Namespace -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/clusterrole.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/clusterrole.yaml
new file mode 100644
index 000000000..c69761756
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/clusterrole.yaml
@@ -0,0 +1,47 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: longhorn-role
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - "*"
+- apiGroups: [""]
+ resources: ["pods", "events", "persistentvolumes", "persistentvolumeclaims","persistentvolumeclaims/status", "nodes", "proxy/nodes", "pods/log", "secrets", "services", "endpoints", "configmaps"]
+ verbs: ["*"]
+- apiGroups: [""]
+ resources: ["namespaces"]
+ verbs: ["get", "list"]
+- apiGroups: ["apps"]
+ resources: ["daemonsets", "statefulsets", "deployments"]
+ verbs: ["*"]
+- apiGroups: ["batch"]
+ resources: ["jobs", "cronjobs"]
+ verbs: ["*"]
+- apiGroups: ["policy"]
+ resources: ["poddisruptionbudgets"]
+ verbs: ["*"]
+- apiGroups: ["scheduling.k8s.io"]
+ resources: ["priorityclasses"]
+ verbs: ["watch", "list"]
+- apiGroups: ["storage.k8s.io"]
+ resources: ["storageclasses", "volumeattachments", "csinodes", "csidrivers"]
+ verbs: ["*"]
+- apiGroups: ["snapshot.storage.k8s.io"]
+ resources: ["volumesnapshotclasses", "volumesnapshots", "volumesnapshotcontents", "volumesnapshotcontents/status"]
+ verbs: ["*"]
+- apiGroups: ["longhorn.io"]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
+ "sharemanagers", "sharemanagers/status"]
+ verbs: ["*"]
+- apiGroups: ["coordination.k8s.io"]
+ resources: ["leases"]
+ verbs: ["*"]
+- apiGroups: ["metrics.k8s.io"]
+ resources: ["pods", "nodes"]
+ verbs: ["get", "list"]
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/clusterrolebinding.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..66ac62f9b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/clusterrolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: longhorn-bind
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: longhorn-role
+subjects:
+- kind: ServiceAccount
+ name: longhorn-service-account
+ namespace: {{ include "release_namespace" . }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/daemonset-sa.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/daemonset-sa.yaml
new file mode 100644
index 000000000..e40793591
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/daemonset-sa.yaml
@@ -0,0 +1,114 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-manager
+ name: longhorn-manager
+ namespace: {{ include "release_namespace" . }}
+spec:
+ selector:
+ matchLabels:
+ app: longhorn-manager
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-manager
+ spec:
+ containers:
+ - name: longhorn-manager
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ privileged: true
+ command:
+ - longhorn-manager
+ - -d
+ - daemon
+ - --engine-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.engine.repository }}:{{ .Values.image.longhorn.engine.tag }}"
+ - --instance-manager-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.instanceManager.repository }}:{{ .Values.image.longhorn.instanceManager.tag }}"
+ - --share-manager-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.shareManager.repository }}:{{ .Values.image.longhorn.shareManager.tag }}"
+ - --manager-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}"
+ - --service-account
+ - longhorn-service-account
+ ports:
+ - containerPort: 9500
+ name: manager
+ readinessProbe:
+ tcpSocket:
+ port: 9500
+ volumeMounts:
+ - name: dev
+ mountPath: /host/dev/
+ - name: proc
+ mountPath: /host/proc/
+ - name: varrun
+ mountPath: /var/run/
+ mountPropagation: Bidirectional
+ - name: longhorn
+ mountPath: /var/lib/longhorn/
+ mountPropagation: Bidirectional
+ - name: longhorn-default-setting
+ mountPath: /var/lib/longhorn-setting/
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ - name: POD_IP
+ valueFrom:
+ fieldRef:
+ fieldPath: status.podIP
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ - name: DEFAULT_SETTING_PATH
+ value: /var/lib/longhorn-setting/default-setting.yaml
+ volumes:
+ - name: dev
+ hostPath:
+ path: /dev/
+ - name: proc
+ hostPath:
+ path: /proc/
+ - name: varrun
+ hostPath:
+ path: /var/run/
+ - name: longhorn
+ hostPath:
+ path: /var/lib/longhorn/
+ - name: longhorn-default-setting
+ configMap:
+ name: longhorn-default-setting
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
+ updateStrategy:
+ rollingUpdate:
+ maxUnavailable: "100%"
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-manager
+ name: longhorn-backend
+ namespace: {{ include "release_namespace" . }}
+spec:
+ type: {{ .Values.service.manager.type }}
+ sessionAffinity: ClientIP
+ selector:
+ app: longhorn-manager
+ ports:
+ - name: manager
+ port: 9500
+ targetPort: manager
+ {{- if .Values.service.manager.nodePort }}
+ nodePort: {{ .Values.service.manager.nodePort }}
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/default-setting.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/default-setting.yaml
new file mode 100644
index 000000000..14c264e27
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/default-setting.yaml
@@ -0,0 +1,38 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: longhorn-default-setting
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+data:
+ default-setting.yaml: |-
+ backup-target: {{ .Values.defaultSettings.backupTarget }}
+ backup-target-credential-secret: {{ .Values.defaultSettings.backupTargetCredentialSecret }}
+ allow-recurring-job-while-volume-detached: {{ .Values.defaultSettings.allowRecurringJobWhileVolumeDetached }}
+ create-default-disk-labeled-nodes: {{ .Values.defaultSettings.createDefaultDiskLabeledNodes }}
+ default-data-path: {{ .Values.defaultSettings.defaultDataPath }}
+ replica-soft-anti-affinity: {{ .Values.defaultSettings.replicaSoftAntiAffinity }}
+ storage-over-provisioning-percentage: {{ .Values.defaultSettings.storageOverProvisioningPercentage }}
+ storage-minimal-available-percentage: {{ .Values.defaultSettings.storageMinimalAvailablePercentage }}
+ upgrade-checker: {{ .Values.defaultSettings.upgradeChecker }}
+ default-replica-count: {{ .Values.defaultSettings.defaultReplicaCount }}
+ default-data-locality: {{ .Values.defaultSettings.defaultDataLocality }}
+ guaranteed-engine-cpu: {{ .Values.defaultSettings.guaranteedEngineCPU }}
+ default-longhorn-static-storage-class: {{ .Values.defaultSettings.defaultLonghornStaticStorageClass }}
+ backupstore-poll-interval: {{ .Values.defaultSettings.backupstorePollInterval }}
+ taint-toleration: {{ .Values.defaultSettings.taintToleration }}
+ priority-class: {{ .Values.defaultSettings.priorityClass }}
+ auto-salvage: {{ .Values.defaultSettings.autoSalvage }}
+ auto-delete-pod-when-volume-detached-unexpectedly: {{ .Values.defaultSettings.autoDeletePodWhenVolumeDetachedUnexpectedly }}
+ disable-scheduling-on-cordoned-node: {{ .Values.defaultSettings.disableSchedulingOnCordonedNode }}
+ replica-zone-soft-anti-affinity: {{ .Values.defaultSettings.replicaZoneSoftAntiAffinity }}
+ volume-attachment-recovery-policy: {{ .Values.defaultSettings.volumeAttachmentRecoveryPolicy }}
+ node-down-pod-deletion-policy: {{ .Values.defaultSettings.nodeDownPodDeletionPolicy }}
+ allow-node-drain-with-last-healthy-replica: {{ .Values.defaultSettings.allowNodeDrainWithLastHealthyReplica }}
+ mkfs-ext4-parameters: {{ .Values.defaultSettings.mkfsExt4Parameters }}
+ disable-replica-rebuild: {{ .Values.defaultSettings.disableReplicaRebuild }}
+ replica-replenishment-wait-interval: {{ .Values.defaultSettings.replicaReplenishmentWaitInterval }}
+ disable-revision-counter: {{ .Values.defaultSettings.disableRevisionCounter }}
+ system-managed-pods-image-pull-policy: {{ .Values.defaultSettings.systemManagedPodsImagePullPolicy }}
+ allow-volume-creation-with-degraded-availability: {{ .Values.defaultSettings.allowVolumeCreationWithDegradedAvailability }}
+ auto-cleanup-system-generated-snapshot: {{ .Values.defaultSettings.autoCleanupSystemGeneratedSnapshot }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/deployment-driver.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/deployment-driver.yaml
new file mode 100644
index 000000000..c4b6e3587
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/deployment-driver.yaml
@@ -0,0 +1,93 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: longhorn-driver-deployer
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: longhorn-driver-deployer
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-driver-deployer
+ spec:
+ initContainers:
+ - name: wait-longhorn-manager
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ command: ['sh', '-c', 'while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" http://longhorn-backend:9500/v1) != "200" ]; do echo waiting; sleep 2; done']
+ containers:
+ - name: longhorn-driver-deployer
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - longhorn-manager
+ - -d
+ - deploy-driver
+ - --manager-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}"
+ - --manager-url
+ - http://longhorn-backend:9500/v1
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ - name: SERVICE_ACCOUNT
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.serviceAccountName
+ {{- if .Values.csi.kubeletRootDir }}
+ - name: KUBELET_ROOT_DIR
+ value: {{ .Values.csi.kubeletRootDir }}
+ {{- end }}
+ {{- if and .Values.image.csi.attacher.repository .Values.image.csi.attacher.tag }}
+ - name: CSI_ATTACHER_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.attacher.repository }}:{{ .Values.image.csi.attacher.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.provisioner.repository .Values.image.csi.provisioner.tag }}
+ - name: CSI_PROVISIONER_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.provisioner.repository }}:{{ .Values.image.csi.provisioner.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.nodeDriverRegistrar.repository .Values.image.csi.nodeDriverRegistrar.tag }}
+ - name: CSI_NODE_DRIVER_REGISTRAR_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.nodeDriverRegistrar.repository }}:{{ .Values.image.csi.nodeDriverRegistrar.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.resizer.repository .Values.image.csi.resizer.tag }}
+ - name: CSI_RESIZER_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.resizer.repository }}:{{ .Values.image.csi.resizer.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.snapshotter.repository .Values.image.csi.snapshotter.tag }}
+ - name: CSI_SNAPSHOTTER_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.snapshotter.repository }}:{{ .Values.image.csi.snapshotter.tag }}"
+ {{- end }}
+ {{- if .Values.csi.attacherReplicaCount }}
+ - name: CSI_ATTACHER_REPLICA_COUNT
+ value: {{ .Values.csi.attacherReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.provisionerReplicaCount }}
+ - name: CSI_PROVISIONER_REPLICA_COUNT
+ value: {{ .Values.csi.provisionerReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.resizerReplicaCount }}
+ - name: CSI_RESIZER_REPLICA_COUNT
+ value: {{ .Values.csi.resizerReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.snapshotterReplicaCount }}
+ - name: CSI_SNAPSHOTTER_REPLICA_COUNT
+ value: {{ .Values.csi.snapshotterReplicaCount | quote }}
+ {{- end }}
+
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
+ securityContext:
+ runAsUser: 0
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/deployment-ui.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/deployment-ui.yaml
new file mode 100644
index 000000000..da7c0ea5b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/deployment-ui.yaml
@@ -0,0 +1,61 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ui
+ name: longhorn-ui
+ namespace: {{ include "release_namespace" . }}
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: longhorn-ui
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-ui
+ spec:
+ containers:
+ - name: longhorn-ui
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.ui.repository }}:{{ .Values.image.longhorn.ui.tag }}
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ runAsUser: 0
+ ports:
+ - containerPort: 8000
+ name: http
+ env:
+ - name: LONGHORN_MANAGER_IP
+ value: "http://longhorn-backend:9500"
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ui
+ {{- if eq .Values.service.ui.type "Rancher-Proxy" }}
+ kubernetes.io/cluster-service: "true"
+ {{- end }}
+ name: longhorn-frontend
+ namespace: {{ include "release_namespace" . }}
+spec:
+ {{- if eq .Values.service.ui.type "Rancher-Proxy" }}
+ type: ClusterIP
+ {{- else }}
+ type: {{ .Values.service.ui.type }}
+ {{- end }}
+ selector:
+ app: longhorn-ui
+ ports:
+ - name: http
+ port: 80
+ targetPort: http
+ {{- if .Values.service.ui.nodePort }}
+ nodePort: {{ .Values.service.ui.nodePort }}
+ {{- else }}
+ nodePort: null
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/ingress.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/ingress.yaml
new file mode 100644
index 000000000..5b3a40588
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/ingress.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: longhorn-ingress
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ingress
+ annotations:
+ {{- if .Values.ingress.tls }}
+ ingress.kubernetes.io/secure-backends: "true"
+ {{- end }}
+ {{- range $key, $value := .Values.ingress.annotations }}
+ {{ $key }}: {{ $value | quote }}
+ {{- end }}
+spec:
+ rules:
+ - host: {{ .Values.ingress.host }}
+ http:
+ paths:
+ - path: {{ default "" .Values.ingress.path }}
+ backend:
+ serviceName: longhorn-frontend
+ servicePort: 80
+{{- if .Values.ingress.tls }}
+ tls:
+ - hosts:
+ - {{ .Values.ingress.host }}
+ secretName: {{ .Values.ingress.tlsSecret }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/postupgrade-job.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/postupgrade-job.yaml
new file mode 100644
index 000000000..6b6a38591
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/postupgrade-job.yaml
@@ -0,0 +1,35 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ annotations:
+ "helm.sh/hook": post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
+ name: longhorn-post-upgrade
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ activeDeadlineSeconds: 900
+ backoffLimit: 1
+ template:
+ metadata:
+ name: longhorn-post-upgrade
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ spec:
+ containers:
+ - name: longhorn-post-upgrade
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - longhorn-manager
+ - post-upgrade
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ restartPolicy: OnFailure
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/psp.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/psp.yaml
new file mode 100644
index 000000000..a2dfc05be
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/psp.yaml
@@ -0,0 +1,66 @@
+{{- if .Values.enablePSP }}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: longhorn-psp
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ privileged: true
+ allowPrivilegeEscalation: true
+ requiredDropCapabilities:
+ - NET_RAW
+ allowedCapabilities:
+ - SYS_ADMIN
+ hostNetwork: false
+ hostIPC: false
+ hostPID: true
+ runAsUser:
+ rule: RunAsAny
+ seLinux:
+ rule: RunAsAny
+ fsGroup:
+ rule: RunAsAny
+ supplementalGroups:
+ rule: RunAsAny
+ volumes:
+ - configMap
+ - downwardAPI
+ - emptyDir
+ - secret
+ - projected
+ - hostPath
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: longhorn-psp-role
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ namespace: {{ include "release_namespace" . }}
+rules:
+- apiGroups:
+ - policy
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+ resourceNames:
+ - longhorn-psp
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: longhorn-psp-binding
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ namespace: {{ include "release_namespace" . }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: longhorn-psp-role
+subjects:
+- kind: ServiceAccount
+ name: longhorn-service-account
+ namespace: {{ include "release_namespace" . }}
+- kind: ServiceAccount
+ name: default
+ namespace: {{ include "release_namespace" . }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/registry-secret.yml b/released/charts/longhorn/longhorn/1.1.000/templates/registry-secret.yml
new file mode 100644
index 000000000..1c7565fea
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/registry-secret.yml
@@ -0,0 +1,11 @@
+{{- if .Values.privateRegistry.registrySecret }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ .Values.privateRegistry.registrySecret }}
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+type: kubernetes.io/dockerconfigjson
+data:
+ .dockerconfigjson: {{ template "secret" . }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/serviceaccount.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/serviceaccount.yaml
new file mode 100644
index 000000000..ad576c353
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/serviceaccount.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: longhorn-service-account
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/storageclass.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/storageclass.yaml
new file mode 100644
index 000000000..dea6aafd4
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/storageclass.yaml
@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: longhorn-storageclass
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+data:
+ storageclass.yaml: |
+ kind: StorageClass
+ apiVersion: storage.k8s.io/v1
+ metadata:
+ name: longhorn
+ annotations:
+ storageclass.kubernetes.io/is-default-class: {{ .Values.persistence.defaultClass | quote }}
+ provisioner: driver.longhorn.io
+ allowVolumeExpansion: true
+ reclaimPolicy: "{{ .Values.persistence.reclaimPolicy }}"
+ volumeBindingMode: Immediate
+ parameters:
+ numberOfReplicas: "{{ .Values.persistence.defaultClassReplicaCount }}"
+ staleReplicaTimeout: "30"
+ fromBackup: ""
+ baseImage: ""
+ {{- if .Values.persistence.recurringJobs.enable }}
+ recurringJobs: '{{ .Values.persistence.recurringJobs.jobList }}'
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/tls-secrets.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/tls-secrets.yaml
new file mode 100644
index 000000000..a7ebf13e0
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/tls-secrets.yaml
@@ -0,0 +1,16 @@
+{{- if .Values.ingress.enabled }}
+{{- range .Values.ingress.secrets }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: longhorn
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn
+type: kubernetes.io/tls
+data:
+ tls.crt: {{ .certificate | b64enc }}
+ tls.key: {{ .key | b64enc }}
+---
+{{- end }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/uninstall-job.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/uninstall-job.yaml
new file mode 100644
index 000000000..e7e9f1457
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/uninstall-job.yaml
@@ -0,0 +1,36 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ annotations:
+ "helm.sh/hook": pre-delete
+ "helm.sh/hook-delete-policy": hook-succeeded
+ name: longhorn-uninstall
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ activeDeadlineSeconds: 900
+ backoffLimit: 1
+ template:
+ metadata:
+ name: longhorn-uninstall
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ spec:
+ containers:
+ - name: longhorn-uninstall
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - longhorn-manager
+ - uninstall
+ - --force
+ env:
+ - name: LONGHORN_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ restartPolicy: OnFailure
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/userroles.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/userroles.yaml
new file mode 100644
index 000000000..37e8e3ddb
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/userroles.yaml
@@ -0,0 +1,38 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-admin"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
+ "sharemanagers", "sharemanagers/status"]
+ verbs: [ "*" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-edit"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
+ "sharemanagers", "sharemanagers/status"]
+ verbs: [ "*" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-view"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-view: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
+ "sharemanagers", "sharemanagers/status"]
+ verbs: [ "get", "list", "watch" ]
diff --git a/released/charts/longhorn/longhorn/1.1.000/templates/validate-install-crd.yaml b/released/charts/longhorn/longhorn/1.1.000/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..4899b977c
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/templates/validate-install-crd.yaml
@@ -0,0 +1,14 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "longhorn.io/v1beta1/Engine" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the longhorn-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/longhorn/longhorn/1.1.000/values.yaml b/released/charts/longhorn/longhorn/1.1.000/values.yaml
new file mode 100644
index 000000000..c1e38eed9
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.000/values.yaml
@@ -0,0 +1,162 @@
+# Default values for longhorn.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+image:
+ longhorn:
+ engine:
+ repository: rancher/longhornio-longhorn-engine
+ tag: v1.1.0
+ manager:
+ repository: rancher/longhornio-longhorn-manager
+ tag: v1.1.0
+ ui:
+ repository: rancher/longhornio-longhorn-ui
+ tag: v1.1.0
+ instanceManager:
+ repository: rancher/longhornio-longhorn-instance-manager
+ tag: v1_20201216
+ shareManager:
+ repository: rancher/longhornio-longhorn-share-manager
+ tag: v1_20201204
+ csi:
+ attacher:
+ repository: rancher/longhornio-csi-attacher
+ tag: v2.2.1-lh1
+ provisioner:
+ repository: rancher/longhornio-csi-provisioner
+ tag: v1.6.0-lh1
+ nodeDriverRegistrar:
+ repository: rancher/longhornio-csi-node-driver-registrar
+ tag: v1.2.0-lh1
+ resizer:
+ repository: rancher/longhornio-csi-resizer
+ tag: v0.5.1-lh1
+ snapshotter:
+ repository: rancher/longhornio-csi-snapshotter
+ tag: v2.1.1-lh1
+ pullPolicy: IfNotPresent
+
+service:
+ ui:
+ type: ClusterIP
+ nodePort: null
+ manager:
+ type: ClusterIP
+ nodePort: ""
+
+persistence:
+ defaultClass: true
+ defaultClassReplicaCount: 3
+ reclaimPolicy: Delete
+ recurringJobs:
+ enable: false
+ jobList: []
+
+csi:
+ kubeletRootDir: ~
+ attacherReplicaCount: ~
+ provisionerReplicaCount: ~
+ resizerReplicaCount: ~
+ snapshotterReplicaCount: ~
+
+defaultSettings:
+ backupTarget: ~
+ backupTargetCredentialSecret: ~
+ allowRecurringJobWhileVolumeDetached: ~
+ createDefaultDiskLabeledNodes: ~
+ defaultDataPath: ~
+ defaultDataLocality: ~
+ replicaSoftAntiAffinity: ~
+ storageOverProvisioningPercentage: ~
+ storageMinimalAvailablePercentage: ~
+ upgradeChecker: ~
+ defaultReplicaCount: ~
+ guaranteedEngineCPU: ~
+ defaultLonghornStaticStorageClass: ~
+ backupstorePollInterval: ~
+ taintToleration: ~
+ priorityClass: ~
+ autoSalvage: ~
+ autoDeletePodWhenVolumeDetachedUnexpectedly: ~
+ disableSchedulingOnCordonedNode: ~
+ replicaZoneSoftAntiAffinity: ~
+ volumeAttachmentRecoveryPolicy: ~
+ nodeDownPodDeletionPolicy: ~
+ allowNodeDrainWithLastHealthyReplica: ~
+ mkfsExt4Parameters: ~
+ disableReplicaRebuild: ~
+ replicaReplenishmentWaitInterval: ~
+ disableRevisionCounter: ~
+ systemManagedPodsImagePullPolicy: ~
+ allowVolumeCreationWithDegradedAvailability: ~
+ autoCleanupSystemGeneratedSnapshot: ~
+
+privateRegistry:
+ registryUrl: ~
+ registryUser: ~
+ registryPasswd: ~
+ registrySecret: ~
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+ #
+
+ingress:
+ ## Set to true to enable ingress record generation
+ enabled: false
+
+
+ host: xip.io
+
+ ## Set this to true in order to enable TLS on the ingress record
+ ## A side effect of this will be that the backend service will be connected at port 443
+ tls: false
+
+ ## If TLS is set to true, you must declare what secret will store the key/certificate for TLS
+ tlsSecret: longhorn.local-tls
+
+ ## Ingress annotations done as key:value pairs
+ ## If you're using kube-lego, you will want to add:
+ ## kubernetes.io/tls-acme: true
+ ##
+ ## For a full list of possible ingress annotations, please see
+ ## ref: https://github.com/kubernetes/ingress-nginx/blob/master/docs/annotations.md
+ ##
+ ## If tls is set to true, annotation ingress.kubernetes.io/secure-backends: "true" will automatically be set
+ annotations:
+ # kubernetes.io/ingress.class: nginx
+ # kubernetes.io/tls-acme: true
+
+ secrets:
+ ## If you're providing your own certificates, please use this to add the certificates as secrets
+ ## key and certificate should start with -----BEGIN CERTIFICATE----- or
+ ## -----BEGIN RSA PRIVATE KEY-----
+ ##
+ ## name should line up with a tlsSecret set further up
+ ## If you're using kube-lego, this is unneeded, as it will create the secret for you if it is not set
+ ##
+ ## It is also possible to create and manage the certificates outside of this helm chart
+ ## Please see README.md for more information
+ # - name: longhorn.local-tls
+ # key:
+ # certificate:
+
+# Configure a pod security policy in the Longhorn namespace to allow privileged pods
+enablePSP: true
+
+## Specify override namespace, specifically this is useful for using longhorn as sub-chart
+## and its release namespace is not the `longhorn-system`
+namespaceOverride: ""
diff --git a/released/charts/longhorn/longhorn/1.1.001/.helmignore b/released/charts/longhorn/longhorn/1.1.001/.helmignore
new file mode 100755
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/longhorn/longhorn/1.1.001/Chart.yaml b/released/charts/longhorn/longhorn/1.1.001/Chart.yaml
new file mode 100755
index 000000000..733dfe1cb
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/Chart.yaml
@@ -0,0 +1,37 @@
+annotations:
+ catalog.cattle.io/auto-install: longhorn-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: Longhorn
+ catalog.cattle.io/namespace: longhorn-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: longhorn.io/v1beta1
+ catalog.cattle.io/release-name: longhorn
+ catalog.cattle.io/ui-component: longhorn
+apiVersion: v1
+appVersion: v1.1.0
+description: Longhorn is a distributed block storage system for Kubernetes.
+home: https://github.com/longhorn/longhorn
+icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/longhorn/icon/color/longhorn-icon-color.svg?sanitize=true
+keywords:
+- longhorn
+- storage
+- distributed
+- block
+- device
+- iscsi
+kubeVersion: '>=v1.16.0-r0'
+maintainers:
+- email: maintainers@longhorn.io
+ name: Longhorn maintainers
+- email: sheng@yasker.org
+ name: Sheng Yang
+name: longhorn
+sources:
+- https://github.com/longhorn/longhorn
+- https://github.com/longhorn/longhorn-engine
+- https://github.com/longhorn/longhorn-instance-manager
+- https://github.com/longhorn/longhorn-share-manager
+- https://github.com/longhorn/longhorn-manager
+- https://github.com/longhorn/longhorn-ui
+- https://github.com/longhorn/longhorn-tests
+version: 1.1.001
diff --git a/released/charts/longhorn/longhorn/1.1.001/README.md b/released/charts/longhorn/longhorn/1.1.001/README.md
new file mode 100755
index 000000000..eae11ef6d
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/README.md
@@ -0,0 +1,32 @@
+# Longhorn Chart
+
+> **Important**: Please install the Longhorn chart in the `longhorn-system` namespace only.
+
+> **Warning**: Longhorn doesn't support downgrading from a higher version to a lower version.
+
+## Source Code
+
+Longhorn is 100% open source software. Project source code is spread across a number of repos:
+
+1. Longhorn Engine -- Core controller/replica logic https://github.com/longhorn/longhorn-engine
+2. Longhorn Instance Manager -- Controller/replica instance lifecycle management https://github.com/longhorn/longhorn-instance-manager
+3. Longhorn Share Manager -- NFS provisioner that exposes Longhorn volumes as ReadWriteMany volumes. https://github.com/longhorn/longhorn-share-manager
+4. Longhorn Manager -- Longhorn orchestration, includes CSI driver for Kubernetes https://github.com/longhorn/longhorn-manager
+5. Longhorn UI -- Dashboard https://github.com/longhorn/longhorn-ui
+
+## Prerequisites
+
+1. Docker v1.13+
+2. Kubernetes v1.16+
+3. Make sure `curl`, `findmnt`, `grep`, `awk` and `blkid` has been installed in all nodes of the Kubernetes cluster.
+4. Make sure `open-iscsi` has been installed in all nodes of the Kubernetes cluster. For GKE, recommended Ubuntu as guest OS image since it contains `open-iscsi` already.
+
+## Uninstallation
+
+To prevent damage to the Kubernetes cluster, we recommend deleting all Kubernetes workloads using Longhorn volumes (PersistentVolume, PersistentVolumeClaim, StorageClass, Deployment, StatefulSet, DaemonSet, etc).
+
+From Rancher Cluster Explorer UI, navigate to Apps page, delete app `longhorn` then app `longhorn-crd` in Installed Apps tab.
+
+
+---
+Please see [link](https://github.com/longhorn/longhorn) for more information.
diff --git a/released/charts/longhorn/longhorn/1.1.001/app-readme.md b/released/charts/longhorn/longhorn/1.1.001/app-readme.md
new file mode 100755
index 000000000..cb23135ca
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/app-readme.md
@@ -0,0 +1,11 @@
+# Longhorn
+
+Longhorn is a lightweight, reliable and easy to use distributed block storage system for Kubernetes. Once deployed, users can leverage persistent volumes provided by Longhorn.
+
+Longhorn creates a dedicated storage controller for each volume and synchronously replicates the volume across multiple replicas stored on multiple nodes. The storage controller and replicas are themselves orchestrated using Kubernetes. Longhorn supports snapshots, backups and even allows you to schedule recurring snapshots and backups!
+
+**Important**: Please install Longhorn chart in `longhorn-system` namespace only.
+
+**Warning**: Longhorn doesn't support downgrading from a higher version to a lower version.
+
+[Chart Documentation](https://github.com/longhorn/longhorn/blob/master/chart/README.md)
diff --git a/released/charts/longhorn/longhorn/1.1.001/questions.yml b/released/charts/longhorn/longhorn/1.1.001/questions.yml
new file mode 100755
index 000000000..f7ace54c7
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/questions.yml
@@ -0,0 +1,512 @@
+categories:
+- storage
+namespace: longhorn-system
+questions:
+- variable: image.defaultImage
+ default: "true"
+ description: "Use default Longhorn images"
+ label: Use Default Images
+ type: boolean
+ show_subquestion_if: false
+ group: "Longhorn Images"
+ subquestions:
+ - variable: image.longhorn.manager.repository
+ default: rancher/longhornio-longhorn-manager
+ description: "Specify Longhorn Manager Image Repository"
+ type: string
+ label: Longhorn Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.manager.tag
+ default: v1.1.0
+ description: "Specify Longhorn Manager Image Tag"
+ type: string
+ label: Longhorn Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.engine.repository
+ default: rancher/longhornio-longhorn-engine
+ description: "Specify Longhorn Engine Image Repository"
+ type: string
+ label: Longhorn Engine Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.engine.tag
+ default: v1.1.0
+ description: "Specify Longhorn Engine Image Tag"
+ type: string
+ label: Longhorn Engine Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.ui.repository
+ default: rancher/longhornio-longhorn-ui
+ description: "Specify Longhorn UI Image Repository"
+ type: string
+ label: Longhorn UI Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.ui.tag
+ default: v1.1.0
+ description: "Specify Longhorn UI Image Tag"
+ type: string
+ label: Longhorn UI Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.instanceManager.repository
+ default: rancher/longhornio-longhorn-instance-manager
+ description: "Specify Longhorn Instance Manager Image Repository"
+ type: string
+ label: Longhorn Instance Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.instanceManager.tag
+ default: v1_20201216
+ description: "Specify Longhorn Instance Manager Image Tag"
+ type: string
+ label: Longhorn Instance Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.shareManager.repository
+ default: rancher/longhornio-longhorn-share-manager
+ description: "Specify Longhorn Share Manager Image Repository"
+ type: string
+ label: Longhorn Share Manager Image Repository
+ group: "Longhorn Images Settings"
+ - variable: image.longhorn.shareManager.tag
+ default: v1_20201204
+ description: "Specify Longhorn Share Manager Image Tag"
+ type: string
+ label: Longhorn Share Manager Image Tag
+ group: "Longhorn Images Settings"
+ - variable: image.csi.attacher.repository
+ default: rancher/longhornio-csi-attacher
+ description: "Specify CSI attacher image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Attacher Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.attacher.tag
+ default: v2.2.1-lh1
+ description: "Specify CSI attacher image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Attacher Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.provisioner.repository
+ default: rancher/longhornio-csi-provisioner
+ description: "Specify CSI provisioner image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Provisioner Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.provisioner.tag
+ default: v1.6.0-lh1
+ description: "Specify CSI provisioner image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Provisioner Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.nodeDriverRegistrar.repository
+ default: rancher/longhornio-csi-node-driver-registrar
+ description: "Specify CSI Node Driver Registrar image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Node Driver Registrar Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.nodeDriverRegistrar.tag
+ default: v1.2.0-lh1
+ description: "Specify CSI Node Driver Registrar image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Node Driver Registrar Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.resizer.repository
+ default: rancher/longhornio-csi-resizer
+ description: "Specify CSI Driver Resizer image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Resizer Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.resizer.tag
+ default: v0.5.1-lh1
+ description: "Specify CSI Driver Resizer image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Resizer Image Tag
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.snapshotter.repository
+ default: rancher/longhornio-csi-snapshotter
+ description: "Specify CSI Driver Snapshotter image repository. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Snapshotter Image Repository
+ group: "Longhorn CSI Driver Images"
+ - variable: image.csi.snapshotter.tag
+ default: v2.1.1-lh1
+ description: "Specify CSI Driver Snapshotter image tag. Leave blank to autodetect."
+ type: string
+ label: Longhorn CSI Driver Snapshotter Image Tag
+ group: "Longhorn CSI Driver Images"
+- variable: privateRegistry.registryUrl
+ label: Private registry URL
+ description: "URL of private registry. Leave blank to apply system default registry."
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: privateRegistry.registryUser
+ label: Private registry user
+ description: "User used to authenticate to private registry"
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: privateRegistry.registryPasswd
+ label: Private registry password
+ description: "Password used to authenticate to private registry"
+ group: "Private Registry Settings"
+ type: password
+ default: ""
+- variable: privateRegistry.registrySecret
+ label: Private registry secret name
+ description: "Longhorn will automatically generate a Kubernetes secret with this name and use it to pull images from your private registry."
+ group: "Private Registry Settings"
+ type: string
+ default: ""
+- variable: longhorn.default_setting
+ default: "false"
+ description: "Customize the default settings before installing Longhorn for the first time. This option will only work if the cluster hasn't installed Longhorn."
+ label: "Customize Default Settings"
+ type: boolean
+ show_subquestion_if: true
+ group: "Longhorn Default Settings"
+ subquestions:
+ - variable: csi.kubeletRootDir
+ default:
+ description: "Specify kubelet root-dir. Leave blank to autodetect."
+ type: string
+ label: Kubelet Root Directory
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.attacherReplicaCount
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Attacher. By default 3."
+ label: Longhorn CSI Attacher replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.provisionerReplicaCount
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Provisioner. By default 3."
+ label: Longhorn CSI Provisioner replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.resizerReplicaCount
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Resizer. By default 3."
+ label: Longhorn CSI Resizer replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: csi.snapshotterReplicaCount
+ type: int
+ default: 3
+ min: 1
+ max: 10
+ description: "Specify replica count of CSI Snapshotter. By default 3."
+ label: Longhorn CSI Snapshotter replica count
+ group: "Longhorn CSI Driver Settings"
+ - variable: defaultSettings.backupTarget
+ label: Backup Target
+ description: "The endpoint used to access the backupstore. NFS and S3 are supported."
+ group: "Longhorn Default Settings"
+ type: string
+ default:
+ - variable: defaultSettings.backupTargetCredentialSecret
+ label: Backup Target Credential Secret
+ description: "The name of the Kubernetes secret associated with the backup target."
+ group: "Longhorn Default Settings"
+ type: string
+ default:
+ - variable: defaultSettings.allowRecurringJobWhileVolumeDetached
+ label: Allow Recurring Job While Volume Is Detached
+ description: 'If this setting is enabled, Longhorn will automatically attaches the volume and takes snapshot/backup when it is the time to do recurring snapshot/backup.
+Note that the volume is not ready for workload during the period when the volume was automatically attached. Workload will have to wait until the recurring job finishes.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.createDefaultDiskLabeledNodes
+ label: Create Default Disk on Labeled Nodes
+ description: 'Create default Disk automatically only on Nodes with the label "node.longhorn.io/create-default-disk=true" if no other disks exist. If disabled, the default disk will be created on all new nodes when each node is first added.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.defaultDataPath
+ label: Default Data Path
+ description: 'Default path to use for storing data on a host. By default "/var/lib/longhorn/"'
+ group: "Longhorn Default Settings"
+ type: string
+ default: "/var/lib/longhorn/"
+ - variable: defaultSettings.defaultDataLocality
+ label: Default Data Locality
+ description: 'We say a Longhorn volume has data locality if there is a local replica of the volume on the same node as the pod which is using the volume.
+This setting specifies the default data locality when a volume is created from the Longhorn UI. For Kubernetes configuration, update the `dataLocality` in the StorageClass
+The available modes are:
+- **disabled**. This is the default option. There may or may not be a replica on the same node as the attached volume (workload)
+- **best-effort**. This option instructs Longhorn to try to keep a replica on the same node as the attached volume (workload). Longhorn will not stop the volume, even if it cannot keep a replica local to the attached volume (workload) due to environment limitation, e.g. not enough disk space, incompatible disk tags, etc.'
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "disabled"
+ - "best-effort"
+ default: "disabled"
+ - variable: defaultSettings.replicaSoftAntiAffinity
+ label: Replica Node Level Soft Anti-Affinity
+ description: 'Allow scheduling on nodes with existing healthy replicas of the same volume. By default false.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.storageOverProvisioningPercentage
+ label: Storage Over Provisioning Percentage
+ description: "The over-provisioning percentage defines how much storage can be allocated relative to the hard drive's capacity. By default 200."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 200
+ - variable: defaultSettings.storageMinimalAvailablePercentage
+ label: Storage Minimal Available Percentage
+ description: "If the minimum available disk capacity exceeds the actual percentage of available disk capacity, the disk becomes unschedulable until more space is freed up. By default 25."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ max: 100
+ default: 25
+ - variable: defaultSettings.upgradeChecker
+ label: Enable Upgrade Checker
+ description: 'Upgrade Checker will check for new Longhorn version periodically. When there is a new version available, a notification will appear in the UI. By default true.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.defaultReplicaCount
+ label: Default Replica Count
+ description: "The default number of replicas when a volume is created from the Longhorn UI. For Kubernetes configuration, update the `numberOfReplicas` in the StorageClass. By default 3."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 1
+ max: 20
+ default: 3
+ - variable: defaultSettings.guaranteedEngineCPU
+ label: Guaranteed Engine CPU
+ description: "Allow Longhorn Instance Managers to have guaranteed CPU allocation. By default 0.25. The value is how many CPUs should be reserved for each Engine/Replica Instance Manager Pod created by Longhorn. For example, 0.1 means one-tenth of a CPU. This will help maintain engine stability during high node workload. It only applies to the Engine/Replica Instance Manager Pods created after the setting took effect.
+In order to prevent unexpected volume crash, you can use the following formula to calculate an appropriate value for this setting:
+'Guaranteed Engine CPU = The estimated max Longhorn volume/replica count on a node * 0.1'.
+The result of above calculation doesn't mean that's the maximum CPU resources the Longhorn workloads require. To fully exploit the Longhorn volume I/O performance, you can allocate/guarantee more CPU resources via this setting.
+If it's hard to estimate the volume/replica count now, you can leave it with the default value, or allocate 1/8 of total CPU of a node. Then you can tune it when there is no running workload using Longhorn volumes.
+WARNING: After this setting is changed, all the instance managers on all the nodes will be automatically restarted
+WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES."
+ group: "Longhorn Default Settings"
+ type: float
+ default: 0.25
+ - variable: defaultSettings.defaultLonghornStaticStorageClass
+ label: Default Longhorn Static StorageClass Name
+ description: "The 'storageClassName' is given to PVs and PVCs that are created for an existing Longhorn volume. The StorageClass name can also be used as a label, so it is possible to use a Longhorn StorageClass to bind a workload to an existing PV without creating a Kubernetes StorageClass object. By default 'longhorn-static'."
+ group: "Longhorn Default Settings"
+ type: string
+ default: "longhorn-static"
+ - variable: defaultSettings.backupstorePollInterval
+ label: Backupstore Poll Interval
+ description: "In seconds. The backupstore poll interval determines how often Longhorn checks the backupstore for new backups. Set to 0 to disable the polling. By default 300."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 300
+ - variable: defaultSettings.taintToleration
+ label: Kubernetes Taint Toleration
+ description: "To dedicate nodes to store Longhorn replicas and reject other general workloads, set tolerations for Longhorn and add taints for the storage nodes.
+All Longhorn volumes should be detached before modifying toleration settings.
+We recommend setting tolerations during Longhorn deployment because the Longhorn system cannot be operated during the update.
+Multiple tolerations can be set here, and these tolerations are separated by semicolon. For example:
+* `key1=value1:NoSchedule; key2:NoExecute`
+* `:` this toleration tolerates everything because an empty key with operator `Exists` matches all keys, values and effects
+* `key1=value1:` this toleration has empty effect. It matches all effects with key `key1`
+Because `kubernetes.io` is used as the key of all Kubernetes default tolerations, it should not be used in the toleration settings.
+WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES!"
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: defaultSettings.priorityClass
+ label: Priority Class
+ description: "The name of the Priority Class to set on the Longhorn workloads. This can help prevent Longhorn workloads from being evicted under Node Pressure. WARNING: DO NOT CHANGE THIS SETTING WITH ATTACHED VOLUMES."
+ group: "Longhorn Default Settings"
+ type: string
+ default: ""
+ - variable: defaultSettings.autoSalvage
+ label: Automatic salvage
+ description: "If enabled, volumes will be automatically salvaged when all the replicas become faulty e.g. due to network disconnection. Longhorn will try to figure out which replica(s) are usable, then use them for the volume. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.autoDeletePodWhenVolumeDetachedUnexpectedly
+ label: Automatically Delete Workload Pod when The Volume Is Detached Unexpectedly
+ description: 'If enabled, Longhorn will automatically delete the workload pod that is managed by a controller (e.g. deployment, statefulset, daemonset, etc...) when Longhorn volume is detached unexpectedly (e.g. during Kubernetes upgrade, Docker reboot, or network disconnect). By deleting the pod, its controller restarts the pod and Kubernetes handles volume reattachment and remount.
+If disabled, Longhorn will not delete the workload pod that is managed by a controller. You will have to manually restart the pod to reattach and remount the volume.
+**Note:** This setting does not apply to the workload pods that do not have a controller. Longhorn never deletes them.'
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.disableSchedulingOnCordonedNode
+ label: Disable Scheduling On Cordoned Node
+ description: "Disable Longhorn manager to schedule replica on Kubernetes cordoned node. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.replicaZoneSoftAntiAffinity
+ label: Replica Zone Level Soft Anti-Affinity
+ description: "Allow scheduling new Replicas of Volume to the Nodes in the same Zone as existing healthy Replicas. Nodes don't belong to any Zone will be treated as in the same Zone. By default true."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.volumeAttachmentRecoveryPolicy
+ label: Volume Attachment Recovery Policy
+ description: "Defines the Longhorn action when a Volume is stuck with a Deployment Pod on a failed node. `wait` leads to the deletion of the volume attachment as soon as the pods deletion time has passed. `never` is the default Kubernetes behavior of never deleting volume attachments on terminating pods. `immediate` leads to the deletion of the volume attachment as soon as all workload pods are pending. By default wait."
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "wait"
+ - "never"
+ - "immediate"
+ default: "wait"
+ - variable: defaultSettings.nodeDownPodDeletionPolicy
+ label: Pod Deletion Policy When Node is Down
+ description: "Defines the Longhorn action when a Volume is stuck with a StatefulSet/Deployment Pod on a node that is down.
+- **do-nothing** is the default Kubernetes behavior of never force deleting StatefulSet/Deployment terminating pods. Since the pod on the node that is down isn't removed, Longhorn volumes are stuck on nodes that are down.
+- **delete-statefulset-pod** Longhorn will force delete StatefulSet terminating pods on nodes that are down to release Longhorn volumes so that Kubernetes can spin up replacement pods.
+- **delete-deployment-pod** Longhorn will force delete Deployment terminating pods on nodes that are down to release Longhorn volumes so that Kubernetes can spin up replacement pods.
+- **delete-both-statefulset-and-deployment-pod** Longhorn will force delete StatefulSet/Deployment terminating pods on nodes that are down to release Longhorn volumes so that Kubernetes can spin up replacement pods."
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "do-nothing"
+ - "delete-statefulset-pod"
+ - "delete-deployment-pod"
+ - "delete-both-statefulset-and-deployment-pod"
+ default: "do-nothing"
+ - variable: defaultSettings.allowNodeDrainWithLastHealthyReplica
+ label: Allow Node Drain with the Last Healthy Replica
+ description: "By default, Longhorn will block `kubectl drain` action on a node if the node contains the last healthy replica of a volume.
+If this setting is enabled, Longhorn will **not** block `kubectl drain` action on a node even if the node contains the last healthy replica of a volume."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.mkfsExt4Parameters
+ label: Custom mkfs.ext4 parameters
+ description: "Allows setting additional filesystem creation parameters for ext4. For older host kernels it might be necessary to disable the optional ext4 metadata_csum feature by specifying `-O ^64bit,^metadata_csum`."
+ group: "Longhorn Default Settings"
+ type: string
+ - variable: defaultSettings.disableReplicaRebuild
+ label: Disable Replica Rebuild
+ description: "This setting disable replica rebuild cross the whole cluster, eviction and data locality feature won't work if this setting is true. But doesn't have any impact to any current replica rebuild and restore disaster recovery volume."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.replicaReplenishmentWaitInterval
+ label: Replica Replenishment Wait Interval
+ description: "In seconds. The interval determines how long Longhorn will wait at least in order to reuse the existing data on a failed replica rather than directly creating a new replica for a degraded volume.
+Warning: This option works only when there is a failed replica in the volume. And this option may block the rebuilding for a while in the case."
+ group: "Longhorn Default Settings"
+ type: int
+ min: 0
+ default: 600
+ - variable: defaultSettings.disableRevisionCounter
+ label: Disable Revision Counter
+ description: "This setting is only for volumes created by UI. By default, this is false meaning there will be a reivision counter file to track every write to the volume. During salvage recovering Longhorn will pick the repica with largest reivision counter as candidate to recover the whole volume. If revision counter is disabled, Longhorn will not track every write to the volume. During the salvage recovering, Longhorn will use the 'volume-head-xxx.img' file last modification time and file size to pick the replica candidate to recover the whole volume."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "false"
+ - variable: defaultSettings.systemManagedPodsImagePullPolicy
+ label: System Managed Pod Image Pull Policy
+ description: "This setting defines the Image Pull Policy of Longhorn system managed pods, e.g. instance manager, engine image, CSI driver, etc. The new Image Pull Policy will only apply after the system managed pods restart."
+ group: "Longhorn Default Settings"
+ type: enum
+ options:
+ - "if-not-present"
+ - "always"
+ - "never"
+ default: "if-not-present"
+ - variable: defaultSettings.allowVolumeCreationWithDegradedAvailability
+ label: Allow Volume Creation with Degraded Availability
+ description: "This setting allows user to create and attach a volume that doesn't have all the replicas scheduled at the time of creation."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+ - variable: defaultSettings.autoCleanupSystemGeneratedSnapshot
+ label: Automatically Cleanup System Generated Snapshot
+ description: "This setting enables Longhorn to automatically cleanup the system generated snapshot after replica rebuild is done."
+ group: "Longhorn Default Settings"
+ type: boolean
+ default: "true"
+- variable: persistence.defaultClass
+ default: "true"
+ description: "Set as default StorageClass for Longhorn"
+ label: Default Storage Class
+ group: "Longhorn Storage Class Settings"
+ required: true
+ type: boolean
+- variable: persistence.reclaimPolicy
+ label: Storage Class Retain Policy
+ description: "Define reclaim policy (Retain or Delete)"
+ group: "Longhorn Storage Class Settings"
+ required: true
+ type: enum
+ options:
+ - "Delete"
+ - "Retain"
+ default: "Delete"
+- variable: persistence.defaultClassReplicaCount
+ description: "Set replica count for Longhorn StorageClass"
+ label: Default Storage Class Replica Count
+ group: "Longhorn Storage Class Settings"
+ type: int
+ min: 1
+ max: 10
+ default: 3
+- variable: persistence.recurringJobs.enable
+ description: "Enable recurring job for Longhorn StorageClass"
+ group: "Longhorn Storage Class Settings"
+ label: Enable Storage Class Recurring Job
+ type: boolean
+ default: false
+ show_subquestion_if: true
+ subquestions:
+ - variable: persistence.recurringJobs.jobList
+ description: 'Recurring job list for Longhorn StorageClass. Please be careful of quotes of input. e.g., [{"name":"backup", "task":"backup", "cron":"*/2 * * * *", "retain":1,"labels": {"interval":"2m"}}]'
+ label: Storage Class Recurring Job List
+ group: "Longhorn Storage Class Settings"
+ type: string
+ default:
+- variable: ingress.enabled
+ default: "false"
+ description: "Expose app using Layer 7 Load Balancer - ingress"
+ type: boolean
+ group: "Services and Load Balancing"
+ label: Expose app using Layer 7 Load Balancer
+ show_subquestion_if: true
+ subquestions:
+ - variable: ingress.host
+ default: "xip.io"
+ description: "layer 7 Load Balancer hostname"
+ type: hostname
+ required: true
+ label: Layer 7 Load Balancer Hostname
+- variable: service.ui.type
+ default: "Rancher-Proxy"
+ description: "Define Longhorn UI service type"
+ type: enum
+ options:
+ - "ClusterIP"
+ - "NodePort"
+ - "LoadBalancer"
+ - "Rancher-Proxy"
+ label: Longhorn UI Service
+ show_if: "ingress.enabled=false"
+ group: "Services and Load Balancing"
+ show_subquestion_if: "NodePort"
+ subquestions:
+ - variable: service.ui.nodePort
+ default: ""
+ description: "NodePort port number(to set explicitly, choose port between 30000-32767)"
+ type: int
+ min: 30000
+ max: 32767
+ show_if: "service.ui.type=NodePort||service.ui.type=LoadBalancer"
+ label: UI Service NodePort number
+- variable: enablePSP
+ default: "true"
+ description: "Setup a pod security policy for Longhorn workloads."
+ label: Pod Security Policy
+ type: boolean
+ group: "Other Settings"
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/NOTES.txt b/released/charts/longhorn/longhorn/1.1.001/templates/NOTES.txt
new file mode 100755
index 000000000..cca7cd77b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/NOTES.txt
@@ -0,0 +1,5 @@
+Longhorn is now installed on the cluster!
+
+Please wait a few minutes for other Longhorn components such as CSI deployments, Engine Images, and Instance Managers to be initialized.
+
+Visit our documentation at https://longhorn.io/docs/
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/_helpers.tpl b/released/charts/longhorn/longhorn/1.1.001/templates/_helpers.tpl
new file mode 100755
index 000000000..3fbc2ac02
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/_helpers.tpl
@@ -0,0 +1,66 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "longhorn.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "longhorn.fullname" -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "longhorn.managerIP" -}}
+{{- $fullname := (include "longhorn.fullname" .) -}}
+{{- printf "http://%s-backend:9500" $fullname | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "secret" }}
+{{- printf "{\"auths\": {\"%s\": {\"auth\": \"%s\"}}}" .Values.privateRegistry.registryUrl (printf "%s:%s" .Values.privateRegistry.registryUser .Values.privateRegistry.registryPasswd | b64enc) | b64enc }}
+{{- end }}
+
+{{- /*
+longhorn.labels generates the standard Helm labels.
+*/ -}}
+{{- define "longhorn.labels" -}}
+app.kubernetes.io/name: {{ template "longhorn.name" . }}
+helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/version: {{ .Chart.AppVersion }}
+{{- end -}}
+
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "registry_url" -}}
+{{- if .Values.privateRegistry.registryUrl -}}
+{{- printf "%s/" .Values.privateRegistry.registryUrl -}}
+{{- else -}}
+{{ include "system_default_registry" . }}
+{{- end -}}
+{{- end -}}
+
+{{- /*
+ define the longhorn release namespace
+*/ -}}
+{{- define "release_namespace" -}}
+{{- if .Values.namespaceOverride -}}
+{{- .Values.namespaceOverride -}}
+{{- else -}}
+{{- .Release.Namespace -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/clusterrole.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/clusterrole.yaml
new file mode 100755
index 000000000..c69761756
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/clusterrole.yaml
@@ -0,0 +1,47 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: longhorn-role
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - "*"
+- apiGroups: [""]
+ resources: ["pods", "events", "persistentvolumes", "persistentvolumeclaims","persistentvolumeclaims/status", "nodes", "proxy/nodes", "pods/log", "secrets", "services", "endpoints", "configmaps"]
+ verbs: ["*"]
+- apiGroups: [""]
+ resources: ["namespaces"]
+ verbs: ["get", "list"]
+- apiGroups: ["apps"]
+ resources: ["daemonsets", "statefulsets", "deployments"]
+ verbs: ["*"]
+- apiGroups: ["batch"]
+ resources: ["jobs", "cronjobs"]
+ verbs: ["*"]
+- apiGroups: ["policy"]
+ resources: ["poddisruptionbudgets"]
+ verbs: ["*"]
+- apiGroups: ["scheduling.k8s.io"]
+ resources: ["priorityclasses"]
+ verbs: ["watch", "list"]
+- apiGroups: ["storage.k8s.io"]
+ resources: ["storageclasses", "volumeattachments", "csinodes", "csidrivers"]
+ verbs: ["*"]
+- apiGroups: ["snapshot.storage.k8s.io"]
+ resources: ["volumesnapshotclasses", "volumesnapshots", "volumesnapshotcontents", "volumesnapshotcontents/status"]
+ verbs: ["*"]
+- apiGroups: ["longhorn.io"]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
+ "sharemanagers", "sharemanagers/status"]
+ verbs: ["*"]
+- apiGroups: ["coordination.k8s.io"]
+ resources: ["leases"]
+ verbs: ["*"]
+- apiGroups: ["metrics.k8s.io"]
+ resources: ["pods", "nodes"]
+ verbs: ["get", "list"]
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/clusterrolebinding.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/clusterrolebinding.yaml
new file mode 100755
index 000000000..66ac62f9b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/clusterrolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: longhorn-bind
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: longhorn-role
+subjects:
+- kind: ServiceAccount
+ name: longhorn-service-account
+ namespace: {{ include "release_namespace" . }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/daemonset-sa.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/daemonset-sa.yaml
new file mode 100755
index 000000000..e40793591
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/daemonset-sa.yaml
@@ -0,0 +1,114 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-manager
+ name: longhorn-manager
+ namespace: {{ include "release_namespace" . }}
+spec:
+ selector:
+ matchLabels:
+ app: longhorn-manager
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-manager
+ spec:
+ containers:
+ - name: longhorn-manager
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ privileged: true
+ command:
+ - longhorn-manager
+ - -d
+ - daemon
+ - --engine-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.engine.repository }}:{{ .Values.image.longhorn.engine.tag }}"
+ - --instance-manager-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.instanceManager.repository }}:{{ .Values.image.longhorn.instanceManager.tag }}"
+ - --share-manager-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.shareManager.repository }}:{{ .Values.image.longhorn.shareManager.tag }}"
+ - --manager-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}"
+ - --service-account
+ - longhorn-service-account
+ ports:
+ - containerPort: 9500
+ name: manager
+ readinessProbe:
+ tcpSocket:
+ port: 9500
+ volumeMounts:
+ - name: dev
+ mountPath: /host/dev/
+ - name: proc
+ mountPath: /host/proc/
+ - name: varrun
+ mountPath: /var/run/
+ mountPropagation: Bidirectional
+ - name: longhorn
+ mountPath: /var/lib/longhorn/
+ mountPropagation: Bidirectional
+ - name: longhorn-default-setting
+ mountPath: /var/lib/longhorn-setting/
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ - name: POD_IP
+ valueFrom:
+ fieldRef:
+ fieldPath: status.podIP
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ - name: DEFAULT_SETTING_PATH
+ value: /var/lib/longhorn-setting/default-setting.yaml
+ volumes:
+ - name: dev
+ hostPath:
+ path: /dev/
+ - name: proc
+ hostPath:
+ path: /proc/
+ - name: varrun
+ hostPath:
+ path: /var/run/
+ - name: longhorn
+ hostPath:
+ path: /var/lib/longhorn/
+ - name: longhorn-default-setting
+ configMap:
+ name: longhorn-default-setting
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
+ updateStrategy:
+ rollingUpdate:
+ maxUnavailable: "100%"
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-manager
+ name: longhorn-backend
+ namespace: {{ include "release_namespace" . }}
+spec:
+ type: {{ .Values.service.manager.type }}
+ sessionAffinity: ClientIP
+ selector:
+ app: longhorn-manager
+ ports:
+ - name: manager
+ port: 9500
+ targetPort: manager
+ {{- if .Values.service.manager.nodePort }}
+ nodePort: {{ .Values.service.manager.nodePort }}
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/default-setting.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/default-setting.yaml
new file mode 100755
index 000000000..14c264e27
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/default-setting.yaml
@@ -0,0 +1,38 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: longhorn-default-setting
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+data:
+ default-setting.yaml: |-
+ backup-target: {{ .Values.defaultSettings.backupTarget }}
+ backup-target-credential-secret: {{ .Values.defaultSettings.backupTargetCredentialSecret }}
+ allow-recurring-job-while-volume-detached: {{ .Values.defaultSettings.allowRecurringJobWhileVolumeDetached }}
+ create-default-disk-labeled-nodes: {{ .Values.defaultSettings.createDefaultDiskLabeledNodes }}
+ default-data-path: {{ .Values.defaultSettings.defaultDataPath }}
+ replica-soft-anti-affinity: {{ .Values.defaultSettings.replicaSoftAntiAffinity }}
+ storage-over-provisioning-percentage: {{ .Values.defaultSettings.storageOverProvisioningPercentage }}
+ storage-minimal-available-percentage: {{ .Values.defaultSettings.storageMinimalAvailablePercentage }}
+ upgrade-checker: {{ .Values.defaultSettings.upgradeChecker }}
+ default-replica-count: {{ .Values.defaultSettings.defaultReplicaCount }}
+ default-data-locality: {{ .Values.defaultSettings.defaultDataLocality }}
+ guaranteed-engine-cpu: {{ .Values.defaultSettings.guaranteedEngineCPU }}
+ default-longhorn-static-storage-class: {{ .Values.defaultSettings.defaultLonghornStaticStorageClass }}
+ backupstore-poll-interval: {{ .Values.defaultSettings.backupstorePollInterval }}
+ taint-toleration: {{ .Values.defaultSettings.taintToleration }}
+ priority-class: {{ .Values.defaultSettings.priorityClass }}
+ auto-salvage: {{ .Values.defaultSettings.autoSalvage }}
+ auto-delete-pod-when-volume-detached-unexpectedly: {{ .Values.defaultSettings.autoDeletePodWhenVolumeDetachedUnexpectedly }}
+ disable-scheduling-on-cordoned-node: {{ .Values.defaultSettings.disableSchedulingOnCordonedNode }}
+ replica-zone-soft-anti-affinity: {{ .Values.defaultSettings.replicaZoneSoftAntiAffinity }}
+ volume-attachment-recovery-policy: {{ .Values.defaultSettings.volumeAttachmentRecoveryPolicy }}
+ node-down-pod-deletion-policy: {{ .Values.defaultSettings.nodeDownPodDeletionPolicy }}
+ allow-node-drain-with-last-healthy-replica: {{ .Values.defaultSettings.allowNodeDrainWithLastHealthyReplica }}
+ mkfs-ext4-parameters: {{ .Values.defaultSettings.mkfsExt4Parameters }}
+ disable-replica-rebuild: {{ .Values.defaultSettings.disableReplicaRebuild }}
+ replica-replenishment-wait-interval: {{ .Values.defaultSettings.replicaReplenishmentWaitInterval }}
+ disable-revision-counter: {{ .Values.defaultSettings.disableRevisionCounter }}
+ system-managed-pods-image-pull-policy: {{ .Values.defaultSettings.systemManagedPodsImagePullPolicy }}
+ allow-volume-creation-with-degraded-availability: {{ .Values.defaultSettings.allowVolumeCreationWithDegradedAvailability }}
+ auto-cleanup-system-generated-snapshot: {{ .Values.defaultSettings.autoCleanupSystemGeneratedSnapshot }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/deployment-driver.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/deployment-driver.yaml
new file mode 100755
index 000000000..c4b6e3587
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/deployment-driver.yaml
@@ -0,0 +1,93 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: longhorn-driver-deployer
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: longhorn-driver-deployer
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-driver-deployer
+ spec:
+ initContainers:
+ - name: wait-longhorn-manager
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ command: ['sh', '-c', 'while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" http://longhorn-backend:9500/v1) != "200" ]; do echo waiting; sleep 2; done']
+ containers:
+ - name: longhorn-driver-deployer
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - longhorn-manager
+ - -d
+ - deploy-driver
+ - --manager-image
+ - "{{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}"
+ - --manager-url
+ - http://longhorn-backend:9500/v1
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ - name: NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ - name: SERVICE_ACCOUNT
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.serviceAccountName
+ {{- if .Values.csi.kubeletRootDir }}
+ - name: KUBELET_ROOT_DIR
+ value: {{ .Values.csi.kubeletRootDir }}
+ {{- end }}
+ {{- if and .Values.image.csi.attacher.repository .Values.image.csi.attacher.tag }}
+ - name: CSI_ATTACHER_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.attacher.repository }}:{{ .Values.image.csi.attacher.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.provisioner.repository .Values.image.csi.provisioner.tag }}
+ - name: CSI_PROVISIONER_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.provisioner.repository }}:{{ .Values.image.csi.provisioner.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.nodeDriverRegistrar.repository .Values.image.csi.nodeDriverRegistrar.tag }}
+ - name: CSI_NODE_DRIVER_REGISTRAR_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.nodeDriverRegistrar.repository }}:{{ .Values.image.csi.nodeDriverRegistrar.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.resizer.repository .Values.image.csi.resizer.tag }}
+ - name: CSI_RESIZER_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.resizer.repository }}:{{ .Values.image.csi.resizer.tag }}"
+ {{- end }}
+ {{- if and .Values.image.csi.snapshotter.repository .Values.image.csi.snapshotter.tag }}
+ - name: CSI_SNAPSHOTTER_IMAGE
+ value: "{{ template "registry_url" . }}{{ .Values.image.csi.snapshotter.repository }}:{{ .Values.image.csi.snapshotter.tag }}"
+ {{- end }}
+ {{- if .Values.csi.attacherReplicaCount }}
+ - name: CSI_ATTACHER_REPLICA_COUNT
+ value: {{ .Values.csi.attacherReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.provisionerReplicaCount }}
+ - name: CSI_PROVISIONER_REPLICA_COUNT
+ value: {{ .Values.csi.provisionerReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.resizerReplicaCount }}
+ - name: CSI_RESIZER_REPLICA_COUNT
+ value: {{ .Values.csi.resizerReplicaCount | quote }}
+ {{- end }}
+ {{- if .Values.csi.snapshotterReplicaCount }}
+ - name: CSI_SNAPSHOTTER_REPLICA_COUNT
+ value: {{ .Values.csi.snapshotterReplicaCount | quote }}
+ {{- end }}
+
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
+ securityContext:
+ runAsUser: 0
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/deployment-ui.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/deployment-ui.yaml
new file mode 100755
index 000000000..da7c0ea5b
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/deployment-ui.yaml
@@ -0,0 +1,61 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ui
+ name: longhorn-ui
+ namespace: {{ include "release_namespace" . }}
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: longhorn-ui
+ template:
+ metadata:
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ app: longhorn-ui
+ spec:
+ containers:
+ - name: longhorn-ui
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.ui.repository }}:{{ .Values.image.longhorn.ui.tag }}
+ imagePullPolicy: IfNotPresent
+ securityContext:
+ runAsUser: 0
+ ports:
+ - containerPort: 8000
+ name: http
+ env:
+ - name: LONGHORN_MANAGER_IP
+ value: "http://longhorn-backend:9500"
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+---
+kind: Service
+apiVersion: v1
+metadata:
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ui
+ {{- if eq .Values.service.ui.type "Rancher-Proxy" }}
+ kubernetes.io/cluster-service: "true"
+ {{- end }}
+ name: longhorn-frontend
+ namespace: {{ include "release_namespace" . }}
+spec:
+ {{- if eq .Values.service.ui.type "Rancher-Proxy" }}
+ type: ClusterIP
+ {{- else }}
+ type: {{ .Values.service.ui.type }}
+ {{- end }}
+ selector:
+ app: longhorn-ui
+ ports:
+ - name: http
+ port: 80
+ targetPort: http
+ {{- if .Values.service.ui.nodePort }}
+ nodePort: {{ .Values.service.ui.nodePort }}
+ {{- else }}
+ nodePort: null
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/ingress.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/ingress.yaml
new file mode 100755
index 000000000..5b3a40588
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/ingress.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: longhorn-ingress
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn-ingress
+ annotations:
+ {{- if .Values.ingress.tls }}
+ ingress.kubernetes.io/secure-backends: "true"
+ {{- end }}
+ {{- range $key, $value := .Values.ingress.annotations }}
+ {{ $key }}: {{ $value | quote }}
+ {{- end }}
+spec:
+ rules:
+ - host: {{ .Values.ingress.host }}
+ http:
+ paths:
+ - path: {{ default "" .Values.ingress.path }}
+ backend:
+ serviceName: longhorn-frontend
+ servicePort: 80
+{{- if .Values.ingress.tls }}
+ tls:
+ - hosts:
+ - {{ .Values.ingress.host }}
+ secretName: {{ .Values.ingress.tlsSecret }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/postupgrade-job.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/postupgrade-job.yaml
new file mode 100755
index 000000000..6b6a38591
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/postupgrade-job.yaml
@@ -0,0 +1,35 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ annotations:
+ "helm.sh/hook": post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
+ name: longhorn-post-upgrade
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ activeDeadlineSeconds: 900
+ backoffLimit: 1
+ template:
+ metadata:
+ name: longhorn-post-upgrade
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ spec:
+ containers:
+ - name: longhorn-post-upgrade
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - longhorn-manager
+ - post-upgrade
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ restartPolicy: OnFailure
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/psp.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/psp.yaml
new file mode 100755
index 000000000..a2dfc05be
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/psp.yaml
@@ -0,0 +1,66 @@
+{{- if .Values.enablePSP }}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: longhorn-psp
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ privileged: true
+ allowPrivilegeEscalation: true
+ requiredDropCapabilities:
+ - NET_RAW
+ allowedCapabilities:
+ - SYS_ADMIN
+ hostNetwork: false
+ hostIPC: false
+ hostPID: true
+ runAsUser:
+ rule: RunAsAny
+ seLinux:
+ rule: RunAsAny
+ fsGroup:
+ rule: RunAsAny
+ supplementalGroups:
+ rule: RunAsAny
+ volumes:
+ - configMap
+ - downwardAPI
+ - emptyDir
+ - secret
+ - projected
+ - hostPath
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: longhorn-psp-role
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ namespace: {{ include "release_namespace" . }}
+rules:
+- apiGroups:
+ - policy
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+ resourceNames:
+ - longhorn-psp
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: longhorn-psp-binding
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ namespace: {{ include "release_namespace" . }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: longhorn-psp-role
+subjects:
+- kind: ServiceAccount
+ name: longhorn-service-account
+ namespace: {{ include "release_namespace" . }}
+- kind: ServiceAccount
+ name: default
+ namespace: {{ include "release_namespace" . }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/registry-secret.yml b/released/charts/longhorn/longhorn/1.1.001/templates/registry-secret.yml
new file mode 100755
index 000000000..1c7565fea
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/registry-secret.yml
@@ -0,0 +1,11 @@
+{{- if .Values.privateRegistry.registrySecret }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ .Values.privateRegistry.registrySecret }}
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+type: kubernetes.io/dockerconfigjson
+data:
+ .dockerconfigjson: {{ template "secret" . }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/serviceaccount.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/serviceaccount.yaml
new file mode 100755
index 000000000..ad576c353
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/serviceaccount.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: longhorn-service-account
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/storageclass.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/storageclass.yaml
new file mode 100755
index 000000000..dea6aafd4
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/storageclass.yaml
@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: longhorn-storageclass
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+data:
+ storageclass.yaml: |
+ kind: StorageClass
+ apiVersion: storage.k8s.io/v1
+ metadata:
+ name: longhorn
+ annotations:
+ storageclass.kubernetes.io/is-default-class: {{ .Values.persistence.defaultClass | quote }}
+ provisioner: driver.longhorn.io
+ allowVolumeExpansion: true
+ reclaimPolicy: "{{ .Values.persistence.reclaimPolicy }}"
+ volumeBindingMode: Immediate
+ parameters:
+ numberOfReplicas: "{{ .Values.persistence.defaultClassReplicaCount }}"
+ staleReplicaTimeout: "30"
+ fromBackup: ""
+ baseImage: ""
+ {{- if .Values.persistence.recurringJobs.enable }}
+ recurringJobs: '{{ .Values.persistence.recurringJobs.jobList }}'
+ {{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/tls-secrets.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/tls-secrets.yaml
new file mode 100755
index 000000000..a7ebf13e0
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/tls-secrets.yaml
@@ -0,0 +1,16 @@
+{{- if .Values.ingress.enabled }}
+{{- range .Values.ingress.secrets }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: longhorn
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+ app: longhorn
+type: kubernetes.io/tls
+data:
+ tls.crt: {{ .certificate | b64enc }}
+ tls.key: {{ .key | b64enc }}
+---
+{{- end }}
+{{- end }}
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/uninstall-job.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/uninstall-job.yaml
new file mode 100755
index 000000000..e7e9f1457
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/uninstall-job.yaml
@@ -0,0 +1,36 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ annotations:
+ "helm.sh/hook": pre-delete
+ "helm.sh/hook-delete-policy": hook-succeeded
+ name: longhorn-uninstall
+ namespace: {{ include "release_namespace" . }}
+ labels: {{- include "longhorn.labels" . | nindent 4 }}
+spec:
+ activeDeadlineSeconds: 900
+ backoffLimit: 1
+ template:
+ metadata:
+ name: longhorn-uninstall
+ labels: {{- include "longhorn.labels" . | nindent 8 }}
+ spec:
+ containers:
+ - name: longhorn-uninstall
+ image: {{ template "registry_url" . }}{{ .Values.image.longhorn.manager.repository }}:{{ .Values.image.longhorn.manager.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - longhorn-manager
+ - uninstall
+ - --force
+ env:
+ - name: LONGHORN_NAMESPACE
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.namespace
+ restartPolicy: OnFailure
+ {{- if .Values.privateRegistry.registrySecret }}
+ imagePullSecrets:
+ - name: {{ .Values.privateRegistry.registrySecret }}
+ {{- end }}
+ serviceAccountName: longhorn-service-account
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/userroles.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/userroles.yaml
new file mode 100755
index 000000000..37e8e3ddb
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/userroles.yaml
@@ -0,0 +1,38 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-admin"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
+ "sharemanagers", "sharemanagers/status"]
+ verbs: [ "*" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-edit"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
+ "sharemanagers", "sharemanagers/status"]
+ verbs: [ "*" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: "longhorn-view"
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-view: "true"
+rules:
+ - apiGroups: [ "longhorn.io" ]
+ resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
+ "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
+ "sharemanagers", "sharemanagers/status"]
+ verbs: [ "get", "list", "watch" ]
diff --git a/released/charts/longhorn/longhorn/1.1.001/templates/validate-install-crd.yaml b/released/charts/longhorn/longhorn/1.1.001/templates/validate-install-crd.yaml
new file mode 100755
index 000000000..a4be98416
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/templates/validate-install-crd.yaml
@@ -0,0 +1,21 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "longhorn.io/v1beta1/Engine" false -}}
+# {{- set $found "longhorn.io/v1beta1/Replica" false -}}
+# {{- set $found "longhorn.io/v1beta1/Setting" false -}}
+# {{- set $found "longhorn.io/v1beta1/Volume" false -}}
+# {{- set $found "longhorn.io/v1beta1/EngineImage" false -}}
+# {{- set $found "longhorn.io/v1beta1/Node" false -}}
+# {{- set $found "longhorn.io/v1beta1/InstanceManager" false -}}
+# {{- set $found "longhorn.io/v1beta1/ShareManager" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/released/charts/longhorn/longhorn/1.1.001/values.yaml b/released/charts/longhorn/longhorn/1.1.001/values.yaml
new file mode 100755
index 000000000..b1d0995d9
--- /dev/null
+++ b/released/charts/longhorn/longhorn/1.1.001/values.yaml
@@ -0,0 +1,162 @@
+# Default values for longhorn.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+image:
+ longhorn:
+ engine:
+ repository: rancher/mirrored-longhornio-longhorn-engine
+ tag: v1.1.0
+ manager:
+ repository: rancher/mirrored-longhornio-longhorn-manager
+ tag: v1.1.0
+ ui:
+ repository: rancher/mirrored-longhornio-longhorn-ui
+ tag: v1.1.0
+ instanceManager:
+ repository: rancher/mirrored-longhornio-longhorn-instance-manager
+ tag: v1_20201216
+ shareManager:
+ repository: rancher/mirrored-longhornio-longhorn-share-manager
+ tag: v1_20201204
+ csi:
+ attacher:
+ repository: rancher/mirrored-longhornio-csi-attacher
+ tag: v2.2.1-lh1
+ provisioner:
+ repository: rancher/mirrored-longhornio-csi-provisioner
+ tag: v1.6.0-lh1
+ nodeDriverRegistrar:
+ repository: rancher/mirrored-longhornio-csi-node-driver-registrar
+ tag: v1.2.0-lh1
+ resizer:
+ repository: rancher/mirrored-longhornio-csi-resizer
+ tag: v0.5.1-lh1
+ snapshotter:
+ repository: rancher/mirrored-longhornio-csi-snapshotter
+ tag: v2.1.1-lh1
+ pullPolicy: IfNotPresent
+
+service:
+ ui:
+ type: ClusterIP
+ nodePort: null
+ manager:
+ type: ClusterIP
+ nodePort: ""
+
+persistence:
+ defaultClass: true
+ defaultClassReplicaCount: 3
+ reclaimPolicy: Delete
+ recurringJobs:
+ enable: false
+ jobList: []
+
+csi:
+ kubeletRootDir: ~
+ attacherReplicaCount: ~
+ provisionerReplicaCount: ~
+ resizerReplicaCount: ~
+ snapshotterReplicaCount: ~
+
+defaultSettings:
+ backupTarget: ~
+ backupTargetCredentialSecret: ~
+ allowRecurringJobWhileVolumeDetached: ~
+ createDefaultDiskLabeledNodes: ~
+ defaultDataPath: ~
+ defaultDataLocality: ~
+ replicaSoftAntiAffinity: ~
+ storageOverProvisioningPercentage: ~
+ storageMinimalAvailablePercentage: ~
+ upgradeChecker: ~
+ defaultReplicaCount: ~
+ guaranteedEngineCPU: ~
+ defaultLonghornStaticStorageClass: ~
+ backupstorePollInterval: ~
+ taintToleration: ~
+ priorityClass: ~
+ autoSalvage: ~
+ autoDeletePodWhenVolumeDetachedUnexpectedly: ~
+ disableSchedulingOnCordonedNode: ~
+ replicaZoneSoftAntiAffinity: ~
+ volumeAttachmentRecoveryPolicy: ~
+ nodeDownPodDeletionPolicy: ~
+ allowNodeDrainWithLastHealthyReplica: ~
+ mkfsExt4Parameters: ~
+ disableReplicaRebuild: ~
+ replicaReplenishmentWaitInterval: ~
+ disableRevisionCounter: ~
+ systemManagedPodsImagePullPolicy: ~
+ allowVolumeCreationWithDegradedAvailability: ~
+ autoCleanupSystemGeneratedSnapshot: ~
+
+privateRegistry:
+ registryUrl: ~
+ registryUser: ~
+ registryPasswd: ~
+ registrySecret: ~
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+ #
+
+ingress:
+ ## Set to true to enable ingress record generation
+ enabled: false
+
+
+ host: xip.io
+
+ ## Set this to true in order to enable TLS on the ingress record
+ ## A side effect of this will be that the backend service will be connected at port 443
+ tls: false
+
+ ## If TLS is set to true, you must declare what secret will store the key/certificate for TLS
+ tlsSecret: longhorn.local-tls
+
+ ## Ingress annotations done as key:value pairs
+ ## If you're using kube-lego, you will want to add:
+ ## kubernetes.io/tls-acme: true
+ ##
+ ## For a full list of possible ingress annotations, please see
+ ## ref: https://github.com/kubernetes/ingress-nginx/blob/master/docs/annotations.md
+ ##
+ ## If tls is set to true, annotation ingress.kubernetes.io/secure-backends: "true" will automatically be set
+ annotations:
+ # kubernetes.io/ingress.class: nginx
+ # kubernetes.io/tls-acme: true
+
+ secrets:
+ ## If you're providing your own certificates, please use this to add the certificates as secrets
+ ## key and certificate should start with -----BEGIN CERTIFICATE----- or
+ ## -----BEGIN RSA PRIVATE KEY-----
+ ##
+ ## name should line up with a tlsSecret set further up
+ ## If you're using kube-lego, this is unneeded, as it will create the secret for you if it is not set
+ ##
+ ## It is also possible to create and manage the certificates outside of this helm chart
+ ## Please see README.md for more information
+ # - name: longhorn.local-tls
+ # key:
+ # certificate:
+
+# Configure a pod security policy in the Longhorn namespace to allow privileged pods
+enablePSP: true
+
+## Specify override namespace, specifically this is useful for using longhorn as sub-chart
+## and its release namespace is not the `longhorn-system`
+namespaceOverride: ""
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/Chart.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/Chart.yaml
new file mode 100755
index 000000000..03fb6469b
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/Chart.yaml
@@ -0,0 +1,21 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: Alerting Drivers
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: rancher-alerting-drivers
+apiVersion: v2
+appVersion: 1.16.0
+dependencies:
+- condition: prom2teams.enabled
+ name: prom2teams
+ repository: file://./charts/prom2teams
+- condition: sachet.enabled
+ name: sachet
+ repository: file://./charts/sachet
+description: The manager for third-party webhook receivers used in Prometheus Alertmanager
+keywords:
+- monitoring
+- alertmanger
+- webhook
+name: rancher-alerting-drivers
+version: 1.0.100
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/app-readme.md b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/app-readme.md
new file mode 100755
index 000000000..ea3f11801
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/app-readme.md
@@ -0,0 +1,11 @@
+# Rancher Alerting Drivers
+
+This chart installs one or more [Alertmanager Webhook Receiver Integrations](https://prometheus.io/docs/operating/integrations/#alertmanager-webhook-receiver) (i.e. Drivers).
+
+Those Drivers can be targeted by an existing deployment of Alertmanager to send alerts to notification mechanisms that are not natively supported.
+
+Currently, this chart supports the following Drivers:
+- Microsoft Teams, based on [prom2teams](https://github.com/idealista/prom2teams)
+- SMS, based on [Sachet](https://github.com/messagebird/sachet)
+
+After installing rancher-alerting-drivers, please refer to the upstream documentation for each Driver for configuration options.
\ No newline at end of file
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/.helmignore b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/.helmignore
new file mode 100755
index 000000000..50af03172
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/.helmignore
@@ -0,0 +1,22 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/Chart.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/Chart.yaml
new file mode 100755
index 000000000..463385d4b
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: rancher-prom2teams
+apiVersion: v1
+appVersion: 3.2.1
+description: A Helm chart for Prom2Teams based on the upstream https://github.com/idealista/prom2teams
+name: prom2teams
+version: 0.2.0
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/files/teams.j2 b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/files/teams.j2
new file mode 100755
index 000000000..f1cf61d4e
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/files/teams.j2
@@ -0,0 +1,44 @@
+{%- set
+ theme_colors = {
+ 'resolved' : '2DC72D',
+ 'critical' : '8C1A1A',
+ 'severe' : '8C1A1A',
+ 'warning' : 'FF9A0B',
+ 'unknown' : 'CCCCCC'
+ }
+-%}
+
+{
+ "@type": "MessageCard",
+ "@context": "http://schema.org/extensions",
+ "themeColor": "{% if status=='resolved' %} {{ theme_colors.resolved }} {% else %} {{ theme_colors[msg_text.severity] }} {% endif %}",
+ "summary": "{% if status=='resolved' %}(Resolved) {% endif %}{{ msg_text.summary }}",
+ "title": "Prometheus alert {% if status=='resolved' %}(Resolved) {% elif status=='unknown' %} (status unknown) {% endif %}",
+ "sections": [{
+ "activityTitle": "{{ msg_text.summary }}",
+ "facts": [{% if msg_text.name %}{
+ "name": "Alert",
+ "value": "{{ msg_text.name }}"
+ },{% endif %}{% if msg_text.instance %}{
+ "name": "In host",
+ "value": "{{ msg_text.instance }}"
+ },{% endif %}{% if msg_text.severity %}{
+ "name": "Severity",
+ "value": "{{ msg_text.severity }}"
+ },{% endif %}{% if msg_text.description %}{
+ "name": "Description",
+ "value": "{{ msg_text.description }}"
+ },{% endif %}{
+ "name": "Status",
+ "value": "{{ msg_text.status }}"
+ }{% if msg_text.extra_labels %}{% for key in msg_text.extra_labels %},{
+ "name": "{{ key }}",
+ "value": "{{ msg_text.extra_labels[key] }}"
+ }{% endfor %}{% endif %}
+ {% if msg_text.extra_annotations %}{% for key in msg_text.extra_annotations %},{
+ "name": "{{ key }}",
+ "value": "{{ msg_text.extra_annotations[key] }}"
+ }{% endfor %}{% endif %}],
+ "markdown": true
+ }]
+}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/NOTES.txt b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/NOTES.txt
new file mode 100755
index 000000000..a94c4132b
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/NOTES.txt
@@ -0,0 +1,2 @@
+Prom2Teams has been installed. Check its status by running:
+ kubectl --namespace {{ .Release.Namespace }} get pods -l "app.kubernetes.io/instance={{ .Release.Name }}"
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/_helpers.tpl b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/_helpers.tpl
new file mode 100755
index 000000000..ffc0fa356
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/_helpers.tpl
@@ -0,0 +1,73 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+{{- if semverCompare "<1.14-0" .Capabilities.KubeVersion.GitVersion -}}
+beta.kubernetes.io/os: linux
+{{- else -}}
+kubernetes.io/os: linux
+{{- end -}}
+{{- end -}}
+
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "prom2teams.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "prom2teams.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Allow the release namespace to be overridden for multi-namespace deployments in combined charts
+*/}}
+{{- define "prom2teams.namespace" -}}
+{{ default .Release.Namespace .Values.global.namespaceOverride }}
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "prom2teams.labels" -}}
+app.kubernetes.io/name: {{ include "prom2teams.name" . }}
+helm.sh/chart: {{ printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+release: {{ .Release.Name }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end -}}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/configmap.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/configmap.yaml
new file mode 100755
index 000000000..ccf38953e
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/configmap.yaml
@@ -0,0 +1,39 @@
+{{- $valid := list "DEBUG" "INFO" "WARNING" "ERROR" "CRITICAL" -}}
+{{- if not (has .Values.prom2teams.loglevel $valid) -}}
+{{- fail "Invalid log level"}}
+{{- end -}}
+{{- if and .Values.prom2teams.connector (hasKey .Values.prom2teams.connectors "Connector") -}}
+{{- fail "Invalid configuration: prom2teams.connectors can't have a connector named Connector when prom2teams.connector is set"}}
+{{- end -}}
+{{/* Create the configmap when the operation is helm install and the target configmap does not exist. */}}
+{{- if not (lookup "v1" "ConfigMap" (include "prom2teams.namespace" . ) (include "prom2teams.fullname" .)) }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: {{ include "prom2teams.namespace" . }}
+ name: {{ include "prom2teams.fullname" . }}
+ labels: {{ include "prom2teams.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook": pre-install, pre-upgrade
+ "helm.sh/hook-weight": "3"
+ "helm.sh/resource-policy": keep
+data:
+ config.ini: |-
+ [HTTP Server]
+ Host: {{ .Values.prom2teams.host }}
+ Port: {{ .Values.prom2teams.port }}
+ [Microsoft Teams]
+ {{- with .Values.prom2teams.connector }}
+ Connector: {{ . }}
+ {{- end }}
+ {{- range $key, $val := .Values.prom2teams.connectors }}
+ {{ $key }}: {{ $val }}
+ {{- end }}
+ [Group Alerts]
+ Field: {{ .Values.prom2teams.group_alerts_by }}
+ [Log]
+ Level: {{ .Values.prom2teams.loglevel }}
+ [Template]
+ Path: {{ .Values.prom2teams.templatepath }}
+ teams.j2: {{ .Files.Get "files/teams.j2" | quote }}
+ {{- end -}}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/deployment.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/deployment.yaml
new file mode 100755
index 000000000..c7149b9da
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/deployment.yaml
@@ -0,0 +1,77 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "prom2teams.fullname" . }}
+ namespace: {{ include "prom2teams.namespace" . }}
+ labels: {{ include "prom2teams.labels" . | nindent 4 }}
+spec:
+ replicas: {{ .Values.replicaCount }}
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: {{ include "prom2teams.name" . }}
+ app.kubernetes.io/instance: {{ .Release.Name }}
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/name: {{ include "prom2teams.name" . }}
+ app.kubernetes.io/instance: {{ .Release.Name }}
+ spec:
+ serviceAccountName: {{ include "prom2teams.fullname" . }}
+ {{- with .Values.imagePullSecrets }}
+ imagePullSecrets: {{ toYaml . | nindent 8 }}
+ {{- end }}
+ volumes:
+ - name: config
+ configMap:
+ name: {{ include "prom2teams.fullname" . }}
+ containers:
+ - name: {{ .Chart.Name }}
+ image: {{ include "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: {{ .Values.image.pullPolicy }}
+ ports:
+ - name: http
+ containerPort: 8089
+ protocol: TCP
+ volumeMounts:
+ - name: config
+ mountPath: /opt/prom2teams/helmconfig/
+ env:
+ - name: APP_CONFIG_FILE
+ value: {{ .Values.prom2teams.config | quote }}
+ - name: PROM2TEAMS_PORT
+ value: {{ .Values.prom2teams.port | quote }}
+ - name: PROM2TEAMS_HOST
+ value: {{ .Values.prom2teams.ip | quote }}
+ - name: PROM2TEAMS_CONNECTOR
+ value: {{ .Values.prom2teams.connector | quote }}
+ - name: PROM2TEAMS_GROUP_ALERTS_BY
+ value: {{ .Values.prom2teams.group_alerts_by | quote }}
+ resources: {{ toYaml .Values.resources | nindent 12 }}
+ {{- if .Values.securityContext.enabled }}
+ securityContext:
+ privileged: false
+ readOnlyRootFilesystem: false
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ {{- end }}
+ nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+ {{- if .Values.nodeSelector }}
+ {{- toYaml .Values.nodeSelector | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity: {{ toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
+ {{- if .Values.tolerations }}
+ {{- toYaml .Values.tolerations | nindent 8 }}
+ {{- end }}
+ {{- if .Values.securityContext.enabled }}
+ securityContext:
+ runAsNonRoot: {{ if eq (int .Values.securityContext.runAsUser) 0 }}false{{ else }}true{{ end }}
+ runAsUser: {{ .Values.securityContext.runAsUser }}
+ runAsGroup: {{ .Values.securityContext.runAsGroup }}
+ fsGroup: {{ .Values.securityContext.fsGroup }}
+ {{- end }}
+
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/psp.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/psp.yaml
new file mode 100755
index 000000000..37f21f52a
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/psp.yaml
@@ -0,0 +1,28 @@
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: {{ include "prom2teams.fullname" . }}-psp
+ labels: {{ include "prom2teams.labels" . | nindent 4 }}
+spec:
+ privileged: false
+ allowPrivilegeEscalation: false
+ hostNetwork: false
+ hostIPC: false
+ hostPID: false
+ runAsUser:
+ rule: 'MustRunAsNonRoot'
+ seLinux:
+ rule: 'RunAsAny'
+ supplementalGroups:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ fsGroup:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ readOnlyRootFilesystem: false
+ volumes:
+ - 'configMap'
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/role.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/role.yaml
new file mode 100755
index 000000000..25391d588
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/role.yaml
@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: {{ include "prom2teams.fullname" . }}-psp
+ namespace: {{ include "prom2teams.namespace" . }}
+ labels: {{ include "prom2teams.labels" . | nindent 4 }}
+rules:
+ - apiGroups:
+ - policy
+ resourceNames:
+ - {{ include "prom2teams.fullname" . }}-psp
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/rolebinding.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/rolebinding.yaml
new file mode 100755
index 000000000..3ca8bc252
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/rolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: {{ include "prom2teams.fullname" . }}-psp
+ namespace: {{ include "prom2teams.namespace" . }}
+ labels: {{ include "prom2teams.labels" . | nindent 4 }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: {{ include "prom2teams.fullname" . }}-psp
+subjects:
+ - kind: ServiceAccount
+ name: {{ include "prom2teams.fullname" . }}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/service-account.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/service-account.yaml
new file mode 100755
index 000000000..a9572c5cd
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/service-account.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "prom2teams.fullname" . }}
+ namespace: {{ include "prom2teams.namespace" . }}
+ labels: {{ include "prom2teams.labels" . | nindent 4 }}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/service.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/service.yaml
new file mode 100755
index 000000000..cc95cad35
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/templates/service.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: {{ include "prom2teams.fullname" . }}
+ namespace: {{ include "prom2teams.namespace" . }}
+ labels:
+{{ include "prom2teams.labels" . | indent 4 }}
+spec:
+ type: {{ .Values.service.type }}
+ ports:
+ - port: {{ .Values.service.port }}
+ targetPort: 8089
+ protocol: TCP
+ name: http
+ selector:
+ app.kubernetes.io/name: {{ include "prom2teams.name" . }}
+ app.kubernetes.io/instance: {{ .Release.Name }}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/values.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/values.yaml
new file mode 100755
index 000000000..dcbbd8cfa
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/prom2teams/values.yaml
@@ -0,0 +1,62 @@
+# Default values for prom2teams.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ namespaceOverride: ""
+
+nameOverride: "prom2teams"
+fullnameOverride: ""
+
+replicaCount: 1
+
+image:
+ repository: rancher/mirrored-idealista-prom2teams
+ tag: 3.2.1
+ pullPolicy: IfNotPresent
+
+resources:
+ requests:
+ cpu: 100m
+ memory: 128Mi
+ limits:
+ cpu: 200m
+ memory: 200Mi
+
+service:
+ type: ClusterIP
+ port: 8089
+
+prom2teams:
+ host: 0.0.0.0
+ port: 8089
+ connector: the-connector-url
+ connectors: {}
+ # group_alerts_by can be one of
+ # ("name" | "description" | "instance" | "severity" | "status" | "summary" | "fingerprint" | "runbook_url")
+ group_alerts_by:
+ # loglevel can be one of (DEBUG | INFO | WARNING | ERROR | CRITICAL)
+ loglevel: INFO
+ templatepath: /opt/prom2teams/helmconfig/teams.j2
+ config: /opt/prom2teams/helmconfig/config.ini
+
+# Security Context properties
+securityContext:
+ # enabled is a flag to enable Security Context
+ enabled: true
+ # runAsUser is the user ID used to run the container
+ runAsUser: 65534
+ # runAsGroup is the primary group ID used to run all processes within any container of the pod
+ runAsGroup: 65534
+ # fsGroup is the group ID associated with the container
+ fsGroup: 65534
+ # readOnlyRootFilesystem is a flag to enable readOnlyRootFilesystem for the Hazelcast security context
+ readOnlyRootFilesystem: true
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/.helmignore b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/.helmignore
new file mode 100755
index 000000000..0e8a0eb36
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/Chart.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/Chart.yaml
new file mode 100755
index 000000000..493bd9d9e
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/Chart.yaml
@@ -0,0 +1,11 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: rancher-sachet
+apiVersion: v2
+appVersion: 0.2.3
+description: A Helm chart for Sachet based on the upstream https://github.com/messagebird/sachet
+name: sachet
+type: application
+version: 1.0.1
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/files/template.tmpl b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/files/template.tmpl
new file mode 100755
index 000000000..08f24e138
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/files/template.tmpl
@@ -0,0 +1 @@
+# reference: https://github.com/messagebird/sachet/blob/master/examples/telegram.tmpl
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/NOTES.txt b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/NOTES.txt
new file mode 100755
index 000000000..247a91fc1
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/NOTES.txt
@@ -0,0 +1,3 @@
+rancher-sachet is now installed on the cluster!
+Please refer to the upstream documentation for configuration options:
+https://github.com/messagebird/sachet
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/_helpers.tpl b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/_helpers.tpl
new file mode 100755
index 000000000..eaa61fee5
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/_helpers.tpl
@@ -0,0 +1,79 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+{{- if semverCompare "<1.14-0" .Capabilities.KubeVersion.GitVersion -}}
+beta.kubernetes.io/os: linux
+{{- else -}}
+kubernetes.io/os: linux
+{{- end -}}
+{{- end -}}
+
+{{/*
+Allow the release namespace to be overridden for multi-namespace deployments in combined charts
+*/}}
+{{- define "sachet.namespace" -}}
+{{ default .Release.Namespace .Values.global.namespaceOverride }}
+{{- end }}
+
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "sachet.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "sachet.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "sachet.labels" -}}
+helm.sh/chart: {{ printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{ include "sachet.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "sachet.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "sachet.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/configmap-pre-install.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/configmap-pre-install.yaml
new file mode 100755
index 000000000..8472914a9
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/configmap-pre-install.yaml
@@ -0,0 +1,21 @@
+{{/*This file is applied when the operation is helm install and the target confimap does not exist. */}}
+{{- if not (lookup "v1" "ConfigMap" (include "sachet.namespace" . ) (include "sachet.fullname" .)) }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: {{ include "sachet.namespace" . }}
+ name: {{ include "sachet.fullname" . }}
+ labels: {{ include "sachet.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook": pre-install, pre-upgrade
+ "helm.sh/hook-weight": "3"
+ "helm.sh/resource-policy": keep
+data:
+ config.yaml: |-
+ {{- with .Values.sachet.providers }}
+ providers: {{ toYaml . | nindent 6 }}
+ {{- end }}
+ {{- with .Values.sachet.receivers }}
+ receivers: {{ toYaml . | nindent 6 }}
+ {{- end }}
+{{- end }}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/deployment.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/deployment.yaml
new file mode 100755
index 000000000..17215eebd
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/deployment.yaml
@@ -0,0 +1,75 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "sachet.fullname" . }}
+ namespace: {{ include "sachet.namespace" . }}
+ labels: {{ include "sachet.labels" . | nindent 4 }}
+spec:
+ replicas: {{ .Values.replicaCount }}
+ selector:
+ matchLabels: {{ include "sachet.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ {{- with .Values.podAnnotations }}
+ annotations: {{ toYaml . | nindent 8 }}
+ {{- end }}
+ labels: {{ include "sachet.selectorLabels" . | nindent 8 }}
+ spec:
+ nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+ {{- if .Values.nodeSelector }}
+ {{- toYaml .Values.nodeSelector | nindent 8 }}
+ {{- end }}
+ tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
+ {{- if .Values.tolerations }}
+ {{- toYaml .Values.tolerations | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity: {{ toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.imagePullSecrets }}
+ imagePullSecrets: {{ toYaml . | nindent 8 }}
+ {{- end }}
+ serviceAccountName: {{ include "sachet.fullname" . }}
+ {{- with .Values.podSecurityContext }}
+ securityContext: {{ toYaml .Values.podSecurityContext | nindent 8 }}
+ {{- end }}
+ containers:
+ - name: {{ .Chart.Name }}
+ securityContext: {{ toYaml .Values.securityContext | nindent 12 }}
+ image: {{ include "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: {{ .Values.image.pullPolicy }}
+ ports:
+ - name: http
+ containerPort: 9876
+ protocol: TCP
+ livenessProbe:
+ httpGet:
+ path: /-/live
+ port: http
+ readinessProbe:
+ httpGet:
+ path: /-/ready
+ port: http
+ volumeMounts:
+ - mountPath: /etc/sachet/
+ name: config-volume
+ {{- with .Values.resources }}
+ resources: {{ toYaml .Values.resources | nindent 12 }}
+ {{- end }}
+ - name: config-reloader
+ securityContext: {{ toYaml .Values.securityContext | nindent 12 }}
+ image: {{ include "system_default_registry" . }}{{ .Values.configReloader.repository }}:{{ .Values.configReloader.tag }}
+ imagePullPolicy: {{ .Values.configReloader.pullPolicy }}
+ args:
+ - -volume-dir=/watch-config
+ - -webhook-method=POST
+ - -webhook-status-code=200
+ - -webhook-url=http://127.0.0.1:{{ .Values.service.port }}/-/reload
+ volumeMounts:
+ - mountPath: /watch-config
+ name: config-volume
+ volumes:
+ - name: config-volume
+ configMap:
+ name: {{ include "sachet.fullname" . }}
+ defaultMode: 0777
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/psp.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/psp.yaml
new file mode 100755
index 000000000..1cc5b0895
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/psp.yaml
@@ -0,0 +1,28 @@
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: {{ include "sachet.fullname" . }}-psp
+ labels: {{ include "sachet.labels" . | nindent 4 }}
+spec:
+ privileged: false
+ allowPrivilegeEscalation: false
+ hostNetwork: false
+ hostIPC: false
+ hostPID: false
+ runAsUser:
+ rule: 'MustRunAsNonRoot'
+ seLinux:
+ rule: 'RunAsAny'
+ supplementalGroups:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ fsGroup:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ readOnlyRootFilesystem: false
+ volumes:
+ - 'configMap'
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/role.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/role.yaml
new file mode 100755
index 000000000..05d4410e3
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/role.yaml
@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ name: {{ include "sachet.fullname" . }}-psp
+ namespace: {{ include "sachet.namespace" . }}
+ labels: {{ include "sachet.labels" . | nindent 4 }}
+rules:
+ - apiGroups:
+ - policy
+ resourceNames:
+ - {{ include "sachet.fullname" . }}-psp
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/rolebinding.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/rolebinding.yaml
new file mode 100755
index 000000000..174f0d9e8
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/rolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: {{ include "sachet.fullname" . }}-psp
+ namespace: {{ include "sachet.namespace" . }}
+ labels: {{ include "sachet.labels" . | nindent 4 }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: {{ include "sachet.fullname" . }}-psp
+subjects:
+ - kind: ServiceAccount
+ name: {{ include "sachet.fullname" . }}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/service-account.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/service-account.yaml
new file mode 100755
index 000000000..8833f1b3b
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/service-account.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "sachet.fullname" . }}
+ namespace: {{ include "sachet.namespace" . }}
+ labels: {{ include "sachet.labels" . | nindent 4 }}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/service.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/service.yaml
new file mode 100755
index 000000000..216e8322c
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/templates/service.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: {{ include "sachet.fullname" . }}
+ namespace: {{ include "sachet.namespace" . }}
+ labels: {{ include "sachet.labels" . | nindent 4 }}
+spec:
+ type: {{ .Values.service.type }}
+ ports:
+ - port: {{ .Values.service.port }}
+ targetPort: http
+ protocol: TCP
+ name: http
+ {{- if contains "NodePort" .Values.service.type }}
+ nodePort: {{ .Values.service.nodePort }}
+ {{- end }}
+ selector: {{ include "sachet.selectorLabels" . | nindent 4 }}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/values.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/values.yaml
new file mode 100755
index 000000000..b00cf0b18
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/charts/sachet/values.yaml
@@ -0,0 +1,63 @@
+# Default values for sachet.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ namespaceOverride: ""
+
+nameOverride: "sachet"
+fullnameOverride: ""
+
+configReloader:
+ repository: rancher/mirrored-jimmidyson-configmap-reload
+ pullPolicy: IfNotPresent
+ tag: v0.4.0
+
+sachet:
+ # reference: https://github.com/messagebird/sachet/blob/master/examples/config.yaml
+ providers: {}
+
+ receivers: []
+
+replicaCount: 1
+
+image:
+ repository: rancher/mirrored-messagebird-sachet
+ pullPolicy: IfNotPresent
+ tag: 0.2.3
+
+imagePullSecrets: []
+
+podAnnotations: {}
+
+podSecurityContext:
+
+securityContext:
+ runAsUser: 1000
+ runAsNonRoot: true
+ runAsGroup: 1000
+
+service:
+ type: ClusterIP
+ port: 9876
+ nodePort: 30001
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/questions.yml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/questions.yml
new file mode 100755
index 000000000..741808c23
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/questions.yml
@@ -0,0 +1,14 @@
+categories:
+ - monitoring
+namespace: cattle-monitoring-system
+questions:
+ - variable: prom2teams.enabled
+ default: false
+ label: Enable Microsoft Teams
+ type: boolean
+ group: "General"
+ - variable: sachet.enabled
+ default: false
+ label: Enable SMS
+ type: boolean
+ group: "General"
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/NOTES.txt b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/NOTES.txt
new file mode 100755
index 000000000..59c1415e0
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/NOTES.txt
@@ -0,0 +1,2 @@
+rancher-alerting-drivers is now installed on the cluster!
+Please refer to the upstream documentation for each Driver for configuration options.
\ No newline at end of file
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/_helpers.tpl b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/_helpers.tpl
new file mode 100755
index 000000000..e57f6ff74
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/_helpers.tpl
@@ -0,0 +1,91 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "drivers.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "drivers.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "drivers.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "drivers.labels" -}}
+helm.sh/chart: {{ include "drivers.chart" . }}
+{{ include "drivers.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "drivers.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "drivers.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "drivers.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "drivers.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
+
+{{/*
+https://github.com/helm/helm/issues/4535#issuecomment-477778391
+Usage: {{ include "call-nested" (list . "SUBCHART_NAME" "TEMPLATE") }}
+e.g. {{ include "call-nested" (list . "grafana" "grafana.fullname") }}
+*/}}
+{{- define "call-nested" }}
+{{- $dot := index . 0 }}
+{{- $subchart := index . 1 | splitList "." }}
+{{- $template := index . 2 }}
+{{- $values := $dot.Values }}
+{{- range $subchart }}
+{{- $values = index $values . }}
+{{- end }}
+{{- include $template (dict "Chart" (dict "Name" (last $subchart)) "Values" $values "Release" $dot.Release "Capabilities" $dot.Capabilities) }}
+{{- end }}
+
+
+{{/*
+Get the list of configMaps to be managed
+*/}}
+{{- define "drivers.configmapList" -}}
+{{- if .Values.sachet.enabled -}}
+- {{ include "call-nested" (list . "sachet" "sachet.fullname") }}
+{{- end }}
+{{- if .Values.prom2teams.enabled -}}
+- {{ include "call-nested" (list . "prom2teams" "prom2teams.fullname") }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/cluster-role.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/cluster-role.yaml
new file mode 100755
index 000000000..e3022a7ca
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/templates/cluster-role.yaml
@@ -0,0 +1,50 @@
+{{- if and (not .Values.sachet.enabled) (not .Values.prom2teams.enabled) -}}
+{{- fail "At least one Driver must be enabled to install the chart. " }}
+{{- end -}}
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: {{ include "drivers.fullname" . }}-admin
+ labels: {{ include "drivers.labels" . | nindent 4 }}
+ rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ resourceNames: {{ include "drivers.configmapList" . | nindent 6 }}
+ verbs:
+ - "*"
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: {{ include "drivers.fullname" . }}-edit
+ labels: {{ include "drivers.labels" . | nindent 4 }}
+ rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ resourceNames: {{ include "drivers.configmapList" . | nindent 6 }}
+ verbs:
+ - "*"
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: {{ include "drivers.fullname" . }}-view
+ labels: {{ include "drivers.labels" . | nindent 4 }}
+ rbac.authorization.k8s.io/aggregate-to-view: "true"
+rules:
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ resourceNames: {{ include "drivers.configmapList" . | nindent 6 }}
+ verbs:
+ - 'get'
+ - 'list'
+ - 'watch'
diff --git a/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/values.yaml b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/values.yaml
new file mode 100755
index 000000000..ff9ab90e0
--- /dev/null
+++ b/released/charts/rancher-alerting-drivers/rancher-alerting-drivers/1.0.100/values.yaml
@@ -0,0 +1,17 @@
+# Default values for rancher-alerting-driver.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+global:
+ cattle:
+ # the registry where all images will be pulled from
+ systemDefaultRegistry: ""
+ # set this value if you want the sub-charts to be installed into
+ # a namespace rather than where this chart is installed
+ namespaceOverride: ""
+
+prom2teams:
+ enabled: false
+
+sachet:
+ enabled: false
diff --git a/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/Chart.yaml b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/Chart.yaml
new file mode 100755
index 000000000..dd3f43a33
--- /dev/null
+++ b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/Chart.yaml
@@ -0,0 +1,11 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/release-name: rancher-backup-crd
+apiVersion: v2
+appVersion: 1.0.4
+description: Installs the CRDs for rancher-backup.
+name: rancher-backup-crd
+type: application
+version: 1.0.400
diff --git a/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/README.md b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/README.md
new file mode 100755
index 000000000..046410962
--- /dev/null
+++ b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/README.md
@@ -0,0 +1,3 @@
+# Rancher Backup CRD
+
+A Rancher chart that installs the CRDs used by `rancher-backup`.
diff --git a/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/backup.yaml b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/backup.yaml
new file mode 100755
index 000000000..a4b9471c0
--- /dev/null
+++ b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/backup.yaml
@@ -0,0 +1,119 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: backups.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.storageLocation
+ name: Location
+ type: string
+ - JSONPath: .status.backupType
+ name: Type
+ type: string
+ - JSONPath: .status.filename
+ name: Latest-Backup
+ type: string
+ - JSONPath: .spec.resourceSetName
+ name: ResourceSet
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Backup
+ plural: backups
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ encryptionConfigSecretName:
+ description: Name of the Secret containing the encryption config
+ type: string
+ resourceSetName:
+ description: Name of the ResourceSet CR to use for backup
+ type: string
+ retentionCount:
+ minimum: 1
+ type: integer
+ schedule:
+ description: Cron schedule for recurring backups
+ example:
+ Descriptors: '@midnight'
+ Standard crontab specs: 0 0 * * *
+ type: string
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - resourceSetName
+ type: object
+ status:
+ properties:
+ backupType:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ filename:
+ type: string
+ lastSnapshotTs:
+ type: string
+ nextSnapshotAt:
+ type: string
+ observedGeneration:
+ type: integer
+ storageLocation:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/resourceset.yaml b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/resourceset.yaml
new file mode 100755
index 000000000..665ef786d
--- /dev/null
+++ b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/resourceset.yaml
@@ -0,0 +1,94 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: resourcesets.resources.cattle.io
+spec:
+ group: resources.cattle.io
+ names:
+ kind: ResourceSet
+ plural: resourcesets
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ controllerReferences:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ name:
+ type: string
+ namespace:
+ type: string
+ replicas:
+ type: integer
+ resource:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceSelectors:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ kinds:
+ items:
+ type: string
+ nullable: true
+ type: array
+ kindsRegexp:
+ type: string
+ labelSelectors:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceRegexp:
+ type: string
+ namespaces:
+ items:
+ type: string
+ nullable: true
+ type: array
+ resourceNameRegexp:
+ type: string
+ resourceNames:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ required:
+ - apiVersion
+ type: array
+ required:
+ - resourceSelectors
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/restore.yaml b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/restore.yaml
new file mode 100755
index 000000000..1ad7d1721
--- /dev/null
+++ b/released/charts/rancher-backup-crd/rancher-backup-crd/1.0.400/templates/restore.yaml
@@ -0,0 +1,102 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: restores.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.backupSource
+ name: Backup-Source
+ type: string
+ - JSONPath: .spec.backupFilename
+ name: Backup-File
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Restore
+ plural: restores
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ backupFilename:
+ type: string
+ deleteTimeoutSeconds:
+ maximum: 10
+ type: integer
+ encryptionConfigSecretName:
+ type: string
+ prune:
+ nullable: true
+ type: boolean
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - backupFilename
+ type: object
+ status:
+ properties:
+ backupSource:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ observedGeneration:
+ type: integer
+ restoreCompletionTs:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.200/Chart.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/Chart.yaml
new file mode 100644
index 000000000..b09f805f1
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/release-name: rancher-backup-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-backup.
+name: rancher-backup-crd
+type: application
+version: 1.0.200
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.200/README.md b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/README.md
new file mode 100644
index 000000000..f7efdcc7f
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/README.md
@@ -0,0 +1,2 @@
+# rancher-backup-crd
+A Rancher chart that installs the CRDs used by [rancher-backup](https://github.com/rancher/dev-charts/tree/master/packages/rancher-backup).
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/backup.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/backup.yaml
new file mode 100644
index 000000000..a4b9471c0
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/backup.yaml
@@ -0,0 +1,119 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: backups.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.storageLocation
+ name: Location
+ type: string
+ - JSONPath: .status.backupType
+ name: Type
+ type: string
+ - JSONPath: .status.filename
+ name: Latest-Backup
+ type: string
+ - JSONPath: .spec.resourceSetName
+ name: ResourceSet
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Backup
+ plural: backups
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ encryptionConfigSecretName:
+ description: Name of the Secret containing the encryption config
+ type: string
+ resourceSetName:
+ description: Name of the ResourceSet CR to use for backup
+ type: string
+ retentionCount:
+ minimum: 1
+ type: integer
+ schedule:
+ description: Cron schedule for recurring backups
+ example:
+ Descriptors: '@midnight'
+ Standard crontab specs: 0 0 * * *
+ type: string
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - resourceSetName
+ type: object
+ status:
+ properties:
+ backupType:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ filename:
+ type: string
+ lastSnapshotTs:
+ type: string
+ nextSnapshotAt:
+ type: string
+ observedGeneration:
+ type: integer
+ storageLocation:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/resourceset.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/resourceset.yaml
new file mode 100644
index 000000000..665ef786d
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/resourceset.yaml
@@ -0,0 +1,94 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: resourcesets.resources.cattle.io
+spec:
+ group: resources.cattle.io
+ names:
+ kind: ResourceSet
+ plural: resourcesets
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ controllerReferences:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ name:
+ type: string
+ namespace:
+ type: string
+ replicas:
+ type: integer
+ resource:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceSelectors:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ kinds:
+ items:
+ type: string
+ nullable: true
+ type: array
+ kindsRegexp:
+ type: string
+ labelSelectors:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceRegexp:
+ type: string
+ namespaces:
+ items:
+ type: string
+ nullable: true
+ type: array
+ resourceNameRegexp:
+ type: string
+ resourceNames:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ required:
+ - apiVersion
+ type: array
+ required:
+ - resourceSelectors
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/restore.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/restore.yaml
new file mode 100644
index 000000000..1ad7d1721
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.200/templates/restore.yaml
@@ -0,0 +1,102 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: restores.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.backupSource
+ name: Backup-Source
+ type: string
+ - JSONPath: .spec.backupFilename
+ name: Backup-File
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Restore
+ plural: restores
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ backupFilename:
+ type: string
+ deleteTimeoutSeconds:
+ maximum: 10
+ type: integer
+ encryptionConfigSecretName:
+ type: string
+ prune:
+ nullable: true
+ type: boolean
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - backupFilename
+ type: object
+ status:
+ properties:
+ backupSource:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ observedGeneration:
+ type: integer
+ restoreCompletionTs:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.201/Chart.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/Chart.yaml
new file mode 100644
index 000000000..ebb25151d
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/release-name: rancher-backup-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-backup.
+name: rancher-backup-crd
+type: application
+version: 1.0.201
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.201/README.md b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/README.md
new file mode 100644
index 000000000..b8bbba6fd
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/README.md
@@ -0,0 +1,2 @@
+# rancher-backup-crd
+A Rancher chart that installs the CRDs used by rancher-backup.
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/backup.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/backup.yaml
new file mode 100644
index 000000000..a4b9471c0
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/backup.yaml
@@ -0,0 +1,119 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: backups.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.storageLocation
+ name: Location
+ type: string
+ - JSONPath: .status.backupType
+ name: Type
+ type: string
+ - JSONPath: .status.filename
+ name: Latest-Backup
+ type: string
+ - JSONPath: .spec.resourceSetName
+ name: ResourceSet
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Backup
+ plural: backups
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ encryptionConfigSecretName:
+ description: Name of the Secret containing the encryption config
+ type: string
+ resourceSetName:
+ description: Name of the ResourceSet CR to use for backup
+ type: string
+ retentionCount:
+ minimum: 1
+ type: integer
+ schedule:
+ description: Cron schedule for recurring backups
+ example:
+ Descriptors: '@midnight'
+ Standard crontab specs: 0 0 * * *
+ type: string
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - resourceSetName
+ type: object
+ status:
+ properties:
+ backupType:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ filename:
+ type: string
+ lastSnapshotTs:
+ type: string
+ nextSnapshotAt:
+ type: string
+ observedGeneration:
+ type: integer
+ storageLocation:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/resourceset.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/resourceset.yaml
new file mode 100644
index 000000000..665ef786d
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/resourceset.yaml
@@ -0,0 +1,94 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: resourcesets.resources.cattle.io
+spec:
+ group: resources.cattle.io
+ names:
+ kind: ResourceSet
+ plural: resourcesets
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ controllerReferences:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ name:
+ type: string
+ namespace:
+ type: string
+ replicas:
+ type: integer
+ resource:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceSelectors:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ kinds:
+ items:
+ type: string
+ nullable: true
+ type: array
+ kindsRegexp:
+ type: string
+ labelSelectors:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceRegexp:
+ type: string
+ namespaces:
+ items:
+ type: string
+ nullable: true
+ type: array
+ resourceNameRegexp:
+ type: string
+ resourceNames:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ required:
+ - apiVersion
+ type: array
+ required:
+ - resourceSelectors
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/restore.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/restore.yaml
new file mode 100644
index 000000000..1ad7d1721
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.201/templates/restore.yaml
@@ -0,0 +1,102 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: restores.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.backupSource
+ name: Backup-Source
+ type: string
+ - JSONPath: .spec.backupFilename
+ name: Backup-File
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Restore
+ plural: restores
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ backupFilename:
+ type: string
+ deleteTimeoutSeconds:
+ maximum: 10
+ type: integer
+ encryptionConfigSecretName:
+ type: string
+ prune:
+ nullable: true
+ type: boolean
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - backupFilename
+ type: object
+ status:
+ properties:
+ backupSource:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ observedGeneration:
+ type: integer
+ restoreCompletionTs:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.300/Chart.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/Chart.yaml
new file mode 100644
index 000000000..909e94ff1
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/release-name: rancher-backup-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-backup.
+name: rancher-backup-crd
+type: application
+version: 1.0.300
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.300/README.md b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/README.md
new file mode 100644
index 000000000..b8bbba6fd
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/README.md
@@ -0,0 +1,2 @@
+# rancher-backup-crd
+A Rancher chart that installs the CRDs used by rancher-backup.
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/backup.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/backup.yaml
new file mode 100644
index 000000000..a4b9471c0
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/backup.yaml
@@ -0,0 +1,119 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: backups.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.storageLocation
+ name: Location
+ type: string
+ - JSONPath: .status.backupType
+ name: Type
+ type: string
+ - JSONPath: .status.filename
+ name: Latest-Backup
+ type: string
+ - JSONPath: .spec.resourceSetName
+ name: ResourceSet
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Backup
+ plural: backups
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ encryptionConfigSecretName:
+ description: Name of the Secret containing the encryption config
+ type: string
+ resourceSetName:
+ description: Name of the ResourceSet CR to use for backup
+ type: string
+ retentionCount:
+ minimum: 1
+ type: integer
+ schedule:
+ description: Cron schedule for recurring backups
+ example:
+ Descriptors: '@midnight'
+ Standard crontab specs: 0 0 * * *
+ type: string
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - resourceSetName
+ type: object
+ status:
+ properties:
+ backupType:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ filename:
+ type: string
+ lastSnapshotTs:
+ type: string
+ nextSnapshotAt:
+ type: string
+ observedGeneration:
+ type: integer
+ storageLocation:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/resourceset.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/resourceset.yaml
new file mode 100644
index 000000000..665ef786d
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/resourceset.yaml
@@ -0,0 +1,94 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: resourcesets.resources.cattle.io
+spec:
+ group: resources.cattle.io
+ names:
+ kind: ResourceSet
+ plural: resourcesets
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ controllerReferences:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ name:
+ type: string
+ namespace:
+ type: string
+ replicas:
+ type: integer
+ resource:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceSelectors:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ kinds:
+ items:
+ type: string
+ nullable: true
+ type: array
+ kindsRegexp:
+ type: string
+ labelSelectors:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceRegexp:
+ type: string
+ namespaces:
+ items:
+ type: string
+ nullable: true
+ type: array
+ resourceNameRegexp:
+ type: string
+ resourceNames:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ required:
+ - apiVersion
+ type: array
+ required:
+ - resourceSelectors
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/restore.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/restore.yaml
new file mode 100644
index 000000000..1ad7d1721
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.300/templates/restore.yaml
@@ -0,0 +1,102 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: restores.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.backupSource
+ name: Backup-Source
+ type: string
+ - JSONPath: .spec.backupFilename
+ name: Backup-File
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Restore
+ plural: restores
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ backupFilename:
+ type: string
+ deleteTimeoutSeconds:
+ maximum: 10
+ type: integer
+ encryptionConfigSecretName:
+ type: string
+ prune:
+ nullable: true
+ type: boolean
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - backupFilename
+ type: object
+ status:
+ properties:
+ backupSource:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ observedGeneration:
+ type: integer
+ restoreCompletionTs:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.301/Chart.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/Chart.yaml
new file mode 100755
index 000000000..a05487e1f
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/release-name: rancher-backup-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-backup.
+name: rancher-backup-crd
+type: application
+version: 1.0.301
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.301/README.md b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/README.md
new file mode 100755
index 000000000..b8bbba6fd
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/README.md
@@ -0,0 +1,2 @@
+# rancher-backup-crd
+A Rancher chart that installs the CRDs used by rancher-backup.
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/backup.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/backup.yaml
new file mode 100755
index 000000000..a4b9471c0
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/backup.yaml
@@ -0,0 +1,119 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: backups.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.storageLocation
+ name: Location
+ type: string
+ - JSONPath: .status.backupType
+ name: Type
+ type: string
+ - JSONPath: .status.filename
+ name: Latest-Backup
+ type: string
+ - JSONPath: .spec.resourceSetName
+ name: ResourceSet
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Backup
+ plural: backups
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ encryptionConfigSecretName:
+ description: Name of the Secret containing the encryption config
+ type: string
+ resourceSetName:
+ description: Name of the ResourceSet CR to use for backup
+ type: string
+ retentionCount:
+ minimum: 1
+ type: integer
+ schedule:
+ description: Cron schedule for recurring backups
+ example:
+ Descriptors: '@midnight'
+ Standard crontab specs: 0 0 * * *
+ type: string
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - resourceSetName
+ type: object
+ status:
+ properties:
+ backupType:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ filename:
+ type: string
+ lastSnapshotTs:
+ type: string
+ nextSnapshotAt:
+ type: string
+ observedGeneration:
+ type: integer
+ storageLocation:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/resourceset.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/resourceset.yaml
new file mode 100755
index 000000000..665ef786d
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/resourceset.yaml
@@ -0,0 +1,94 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: resourcesets.resources.cattle.io
+spec:
+ group: resources.cattle.io
+ names:
+ kind: ResourceSet
+ plural: resourcesets
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ controllerReferences:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ name:
+ type: string
+ namespace:
+ type: string
+ replicas:
+ type: integer
+ resource:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ resourceSelectors:
+ items:
+ properties:
+ apiVersion:
+ type: string
+ kinds:
+ items:
+ type: string
+ nullable: true
+ type: array
+ kindsRegexp:
+ type: string
+ labelSelectors:
+ nullable: true
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ type: array
+ matchLabels:
+ additionalProperties:
+ type: string
+ nullable: true
+ type: object
+ type: object
+ namespaceRegexp:
+ type: string
+ namespaces:
+ items:
+ type: string
+ nullable: true
+ type: array
+ resourceNameRegexp:
+ type: string
+ resourceNames:
+ items:
+ type: string
+ nullable: true
+ type: array
+ type: object
+ nullable: true
+ required:
+ - apiVersion
+ type: array
+ required:
+ - resourceSelectors
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/restore.yaml b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/restore.yaml
new file mode 100755
index 000000000..1ad7d1721
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup-crd/1.0.301/templates/restore.yaml
@@ -0,0 +1,102 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: restores.resources.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.backupSource
+ name: Backup-Source
+ type: string
+ - JSONPath: .spec.backupFilename
+ name: Backup-File
+ type: string
+ - JSONPath: .metadata.creationTimestamp
+ name: Age
+ type: date
+ - JSONPath: .status.conditions[?(@.type=="Ready")].message
+ name: Status
+ type: string
+ group: resources.cattle.io
+ names:
+ kind: Restore
+ plural: restores
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ backupFilename:
+ type: string
+ deleteTimeoutSeconds:
+ maximum: 10
+ type: integer
+ encryptionConfigSecretName:
+ type: string
+ prune:
+ nullable: true
+ type: boolean
+ storageLocation:
+ nullable: true
+ properties:
+ s3:
+ nullable: true
+ properties:
+ bucketName:
+ type: string
+ credentialSecretName:
+ type: string
+ credentialSecretNamespace:
+ type: string
+ endpoint:
+ type: string
+ endpointCA:
+ type: string
+ folder:
+ type: string
+ insecureTLSSkipVerify:
+ type: boolean
+ region:
+ type: string
+ type: object
+ type: object
+ required:
+ - backupFilename
+ type: object
+ status:
+ properties:
+ backupSource:
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ type: string
+ lastUpdateTime:
+ type: string
+ message:
+ type: string
+ reason:
+ type: string
+ status:
+ type: string
+ type:
+ type: string
+ type: object
+ nullable: true
+ type: array
+ observedGeneration:
+ type: integer
+ restoreCompletionTs:
+ type: string
+ summary:
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/Chart.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/Chart.yaml
new file mode 100644
index 000000000..714ad0b16
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/Chart.yaml
@@ -0,0 +1,19 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-backup-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
+ catalog.cattle.io/release-name: rancher-backup
+ catalog.cattle.io/scope: management
+ catalog.cattle.io/ui-component: rancher-backup
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v1.0.2
+description: Provides ability to back up and restore the Rancher application running
+ on any Kubernetes cluster
+icon: https://charts.rancher.io/assets/logos/backup-restore.svg
+keywords:
+- applications
+- infrastructure
+name: rancher-backup
+version: 1.0.200
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/README.md b/released/charts/rancher-backup/rancher-backup/1.0.200/README.md
new file mode 100644
index 000000000..feb526977
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/README.md
@@ -0,0 +1,69 @@
+# Rancher Backup
+
+This chart provides ability to back up and restore the Rancher application running on any Kubernetes cluster.
+
+Refer [this](https://github.com/rancher/backup-restore-operator) repository for implementation details.
+
+-----
+
+### Get Repo Info
+```
+helm repo add rancher-chart https://charts.rancher.io
+helm repo update
+```
+
+-----
+
+### Install Chart
+```
+helm install rancher-backup-crd rancher-chart/rancher-backup-crd -n cattle-resources-system --create-namespace
+helm install rancher-backup rancher-chart/rancher-backup -n cattle-resources-system
+```
+
+-----
+
+### Configuration
+The following table lists the configurable parameters of the rancher-backup chart and their default values:
+
+| Parameter | Description | Default |
+|----------|---------------|-------|
+| image.repository | Container image repository | rancher/backup-restore-operator |
+| image.tag | Container image tag | v0.1.0-rc1 |
+| s3.enabled | Configure S3 compatible default storage location. Current version supports S3 and MinIO | false |
+| s3.credentialSecretName | Name of the Secret containing S3 credentials. This is an optional field. Skip this field in order to use IAM Role authentication. The Secret must contain following two keys, `accessKey` and `secretKey` | "" |
+| s3.credentialSecretNamespace | Namespace of the Secret containing S3 credentials | "" |
+| s3.region | Region of the S3 Bucket (Required for S3, not valid for MinIO) | "" |
+| s3.bucketName | Name of the Bucket | "" |
+| s3.folder | Base folder within the Bucket (optional) | "" |
+| s3.endpoint | Endpoint for the S3 storage provider | "" |
+| s3.endpointCA | Base64 encoded CA cert for the S3 storage provider (optional) | "" |
+| s3.insecureTLSSkipVerify | Skip SSL verification | false |
+| persistence.enabled | Configure a Persistent Volume as the default storage location. It accepts either a StorageClass name to create a PVC, or directly accepts the PV to use. The Persistent Volume is mounted at `/var/lib/backups` in the operator pod | false |
+| persistence.storageClass | StorageClass to use for dynamically provisioning the Persistent Volume, which will be used for storing backups | "" |
+| persistence.volumeName | Persistent Volume to use for storing backups | "" |
+| persistence.size | Requested size of the Persistent Volume (Applicable when using dynamic provisioning) | "" |
+| nodeSelector | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | {} |
+| tolerations | https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration | [] |
+| affinity | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity | {} |
+
+-----
+
+### CRDs
+
+Refer [this](https://github.com/rancher/backup-restore-operator#crds) section for information on CRDs that this chart installs. Also refer [this](https://github.com/rancher/backup-restore-operator/tree/master/examples) folder containing sample manifests for the CRDs.
+
+-----
+### Upgrading Chart
+```
+helm upgrade rancher-backup-crd -n cattle-resources-system
+helm upgrade rancher-backup -n cattle-resources-system
+```
+
+-----
+### Uninstall Chart
+
+```
+helm uninstall rancher-backup -n cattle-resources-system
+helm uninstall rancher-backup-crd -n cattle-resources-system
+```
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/templates/_helpers.tpl b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/_helpers.tpl
new file mode 100644
index 000000000..411cfc63a
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/_helpers.tpl
@@ -0,0 +1,76 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "backupRestore.fullname" -}}
+{{- .Chart.Name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "backupRestore.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "backupRestore.labels" -}}
+helm.sh/chart: {{ include "backupRestore.chart" . }}
+{{ include "backupRestore.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "backupRestore.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "backupRestore.fullname" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+resources.cattle.io/operator: backup-restore
+{{- end }}
+
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "backupRestore.serviceAccountName" -}}
+{{ include "backupRestore.fullname" . }}
+{{- end }}
+
+
+{{- define "backupRestore.s3SecretName" -}}
+{{- printf "%s-%s" .Chart.Name "s3" | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create PVC name using release and revision number.
+*/}}
+{{- define "backupRestore.pvcName" -}}
+{{- printf "%s-%d" .Release.Name .Release.Revision }}
+{{- end }}
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/templates/clusterrolebinding.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..cf4abf670
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/clusterrolebinding.yaml
@@ -0,0 +1,14 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+subjects:
+- kind: ServiceAccount
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/templates/deployment.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/deployment.yaml
new file mode 100644
index 000000000..776351ae5
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/deployment.yaml
@@ -0,0 +1,59 @@
+{{- if and .Values.s3.enabled .Values.persistence.enabled }}
+{{- fail "\n\nCannot configure both s3 and PV for storing backups" }}
+{{- end }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ selector:
+ matchLabels:
+ {{- include "backupRestore.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ labels:
+ {{- include "backupRestore.selectorLabels" . | nindent 8 }}
+ annotations:
+ checksum/s3: {{ include (print $.Template.BasePath "/s3-secret.yaml") . | sha256sum }}
+ checksum/pvc: {{ include (print $.Template.BasePath "/pvc.yaml") . | sha256sum }}
+ spec:
+ serviceAccountName: {{ include "backupRestore.serviceAccountName" . }}
+ containers:
+ - name: {{ .Chart.Name }}
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: Always
+ env:
+ - name: CHART_NAMESPACE
+ value: {{ .Release.Namespace }}
+ {{- if .Values.s3.enabled }}
+ - name: DEFAULT_S3_BACKUP_STORAGE_LOCATION
+ value: {{ include "backupRestore.s3SecretName" . }}
+ {{- end }}
+ {{- if .Values.persistence.enabled }}
+ - name: DEFAULT_PERSISTENCE_ENABLED
+ value: "persistence-enabled"
+ volumeMounts:
+ - mountPath: "/var/lib/backups"
+ name: pv-storage
+ volumes:
+ - name: pv-storage
+ persistentVolumeClaim:
+ claimName: {{ include "backupRestore.pvcName" . }}
+ {{- end }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux-node-tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/templates/pvc.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/pvc.yaml
new file mode 100644
index 000000000..ff57e4dab
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/pvc.yaml
@@ -0,0 +1,27 @@
+{{- if and .Values.persistence.enabled -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+ name: {{ include "backupRestore.pvcName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ accessModes:
+ - ReadWriteOnce
+ resources:
+ {{- with .Values.persistence }}
+ requests:
+ storage: {{ .size | quote }}
+{{- if .storageClass }}
+{{- if (eq "-" .storageClass) }}
+ storageClassName: ""
+{{- else }}
+ storageClassName: {{ .storageClass | quote }}
+{{- end }}
+{{- end }}
+{{- if .volumeName }}
+ volumeName: {{ .volumeName | quote }}
+{{- end }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/templates/rancher-resourceset.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/rancher-resourceset.yaml
new file mode 100644
index 000000000..c04d9901c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/rancher-resourceset.yaml
@@ -0,0 +1,62 @@
+apiVersion: resources.cattle.io/v1
+kind: ResourceSet
+metadata:
+ name: rancher-resource-set
+resourceSelectors:
+ - apiVersion: "v1"
+ kindsRegexp: "^namespaces$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^user-|^u-"
+ resourceNames:
+ - "local"
+ - apiVersion: "v1"
+ kindsRegexp: "^secrets$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ labelSelectors:
+ matchExpressions:
+ - key: "owner"
+ operator: "NotIn"
+ values: ["helm"]
+ - apiVersion: "v1"
+ kindsRegexp: "^serviceaccounts$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ - apiVersion: "v1"
+ kindsRegexp: "^configmaps$"
+ namespaces:
+ - "cattle-system"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^roles$|^rolebindings$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNameRegexp: "^cattle-|^clusterrolebinding-|^globaladmin-user-|^grb-u-"
+ resourceNames:
+ - "eks-operator"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^local-|^user-|^u-|^project-|^create-ns$"
+ resourceNames:
+ - "eks-operator"
+ - apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "management.cattle.io$|project.cattle.io$|catalog.cattle.io$|eks.cattle.io$|resources.cattle.io$"
+ - apiVersion: "management.cattle.io/v3"
+ kindsRegexp: "."
+ - apiVersion: "project.cattle.io/v3"
+ kindsRegexp: "."
+ - apiVersion: "catalog.cattle.io/v1"
+ kindsRegexp: "^clusterrepos$"
+ - apiVersion: "resources.cattle.io/v1"
+ kindsRegexp: "^ResourceSet$"
+ - apiVersion: "eks.cattle.io/v1"
+ kindsRegexp: "."
+ - apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ resourceNames:
+ - "eks-config-operator"
+ namespaces:
+ - "cattle-system"
+controllerReferences:
+ - apiVersion: "apps/v1"
+ resource: "deployments"
+ name: "rancher"
+ namespace: "cattle-system"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/templates/s3-secret.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/s3-secret.yaml
new file mode 100644
index 000000000..0401b554b
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/s3-secret.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.s3.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ include "backupRestore.s3SecretName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+type: Opaque
+stringData:
+ {{- with .Values.s3 }}
+ {{- if .credentialSecretName }}
+ credentialSecretName: {{ .credentialSecretName }}
+ credentialSecretNamespace: {{ required "When providing a Secret containing S3 credentials, a valid .Values.credentialSecretNamespace must be provided" .credentialSecretNamespace }}
+ {{- end }}
+ {{- if .region }}
+ region: {{ .region }}
+ {{- end }}
+ bucketName: {{ required "A valid .Values.bucketName is required for configuring S3 compatible storage as the default backup storage location" .bucketName }}
+ {{- if .folder }}
+ folder: {{ .folder }}
+ {{- end }}
+ endpoint: {{ required "A valid .Values.endpoint is required for configuring S3 compatible storage as the default backup storage location" .endpoint }}
+ {{- if .endpointCA }}
+ endpointCA: {{ .endpointCA }}
+ {{- end }}
+ {{- if .insecureTLSSkipVerify }}
+ insecureTLSSkipVerify: {{ .insecureTLSSkipVerify }}
+ {{- end }}
+ {{- end }}
+{{ end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/templates/serviceaccount.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/serviceaccount.yaml
new file mode 100644
index 000000000..f333b746c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/templates/validate-install-crd.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..8f04e51e8
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/templates/validate-install-crd.yaml
@@ -0,0 +1,16 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "resources.cattle.io/v1/Backup" false -}}
+# {{- set $found "resources.cattle.io/v1/ResourceSet" false -}}
+# {{- set $found "resources.cattle.io/v1/Restore" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-backup-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.200/values.yaml b/released/charts/rancher-backup/rancher-backup/1.0.200/values.yaml
new file mode 100644
index 000000000..dafb30b76
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.200/values.yaml
@@ -0,0 +1,49 @@
+image:
+ repository: rancher/backup-restore-operator
+ tag: v1.0.2
+
+## Default s3 bucket for storing all backup files created by the backup-restore-operator
+s3:
+ enabled: false
+ ## credentialSecretName if set, should be the name of the Secret containing AWS credentials.
+ ## To use IAM Role, don't set this field
+ credentialSecretName: ""
+ credentialSecretNamespace: ""
+ region: ""
+ bucketName: ""
+ folder: ""
+ endpoint: ""
+ endpointCA: ""
+ insecureTLSSkipVerify: false
+
+## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
+## If persistence is enabled, operator will create a PVC with mountPath /var/lib/backups
+persistence:
+ enabled: false
+
+ ## If defined, storageClassName:
+ ## If set to "-", storageClassName: "", which disables dynamic provisioning
+ ## If undefined (the default) or set to null, no storageClassName spec is
+ ## set, choosing the default provisioner. (gp2 on AWS, standard on
+ ## GKE, AWS & OpenStack).
+ ## Refer https://kubernetes.io/docs/concepts/storage/persistent-volumes/#class-1
+ ##
+ storageClass: "-"
+
+ ## If you want to disable dynamic provisioning by setting storageClass to "-" above,
+ ## and want to target a particular PV, provide name of the target volume
+ volumeName: ""
+
+ ## Only certain StorageClasses allow resizing PVs; Refer https://kubernetes.io/blog/2018/07/12/resizing-persistent-volumes-using-kubernetes/
+ size: 2Gi
+
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/Chart.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/Chart.yaml
new file mode 100644
index 000000000..c646351b1
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/Chart.yaml
@@ -0,0 +1,20 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-backup-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: Rancher Backups
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
+ catalog.cattle.io/release-name: rancher-backup
+ catalog.cattle.io/scope: management
+ catalog.cattle.io/ui-component: rancher-backup
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v1.0.2
+description: Provides ability to back up and restore the Rancher application running
+ on any Kubernetes cluster
+icon: https://charts.rancher.io/assets/logos/backup-restore.svg
+keywords:
+- applications
+- infrastructure
+name: rancher-backup
+version: 1.0.201
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/README.md b/released/charts/rancher-backup/rancher-backup/1.0.201/README.md
new file mode 100644
index 000000000..feb526977
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/README.md
@@ -0,0 +1,69 @@
+# Rancher Backup
+
+This chart provides ability to back up and restore the Rancher application running on any Kubernetes cluster.
+
+Refer [this](https://github.com/rancher/backup-restore-operator) repository for implementation details.
+
+-----
+
+### Get Repo Info
+```
+helm repo add rancher-chart https://charts.rancher.io
+helm repo update
+```
+
+-----
+
+### Install Chart
+```
+helm install rancher-backup-crd rancher-chart/rancher-backup-crd -n cattle-resources-system --create-namespace
+helm install rancher-backup rancher-chart/rancher-backup -n cattle-resources-system
+```
+
+-----
+
+### Configuration
+The following table lists the configurable parameters of the rancher-backup chart and their default values:
+
+| Parameter | Description | Default |
+|----------|---------------|-------|
+| image.repository | Container image repository | rancher/backup-restore-operator |
+| image.tag | Container image tag | v0.1.0-rc1 |
+| s3.enabled | Configure S3 compatible default storage location. Current version supports S3 and MinIO | false |
+| s3.credentialSecretName | Name of the Secret containing S3 credentials. This is an optional field. Skip this field in order to use IAM Role authentication. The Secret must contain following two keys, `accessKey` and `secretKey` | "" |
+| s3.credentialSecretNamespace | Namespace of the Secret containing S3 credentials | "" |
+| s3.region | Region of the S3 Bucket (Required for S3, not valid for MinIO) | "" |
+| s3.bucketName | Name of the Bucket | "" |
+| s3.folder | Base folder within the Bucket (optional) | "" |
+| s3.endpoint | Endpoint for the S3 storage provider | "" |
+| s3.endpointCA | Base64 encoded CA cert for the S3 storage provider (optional) | "" |
+| s3.insecureTLSSkipVerify | Skip SSL verification | false |
+| persistence.enabled | Configure a Persistent Volume as the default storage location. It accepts either a StorageClass name to create a PVC, or directly accepts the PV to use. The Persistent Volume is mounted at `/var/lib/backups` in the operator pod | false |
+| persistence.storageClass | StorageClass to use for dynamically provisioning the Persistent Volume, which will be used for storing backups | "" |
+| persistence.volumeName | Persistent Volume to use for storing backups | "" |
+| persistence.size | Requested size of the Persistent Volume (Applicable when using dynamic provisioning) | "" |
+| nodeSelector | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | {} |
+| tolerations | https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration | [] |
+| affinity | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity | {} |
+
+-----
+
+### CRDs
+
+Refer [this](https://github.com/rancher/backup-restore-operator#crds) section for information on CRDs that this chart installs. Also refer [this](https://github.com/rancher/backup-restore-operator/tree/master/examples) folder containing sample manifests for the CRDs.
+
+-----
+### Upgrading Chart
+```
+helm upgrade rancher-backup-crd -n cattle-resources-system
+helm upgrade rancher-backup -n cattle-resources-system
+```
+
+-----
+### Uninstall Chart
+
+```
+helm uninstall rancher-backup -n cattle-resources-system
+helm uninstall rancher-backup-crd -n cattle-resources-system
+```
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/app-readme.md b/released/charts/rancher-backup/rancher-backup/1.0.201/app-readme.md
new file mode 100644
index 000000000..15a021cdb
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/app-readme.md
@@ -0,0 +1,15 @@
+# Rancher Backup
+
+This chart enables ability to capture backups of the Rancher application and restore from these backups. This chart can be used to migrate Rancher from one Kubernetes cluster to a different Kubernetes cluster.
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/backups/v2.5/).
+
+This chart installs the following components:
+
+- [backup-restore-operator](https://github.com/rancher/backup-restore-operator)
+ - The operator handles backing up all Kubernetes resources and CRDs that Rancher creates and manages from the local cluster. It gathers these resources by querying the Kubernetes API server, packages all the resources to create a tarball file and saves it in the configured backup storage location.
+ - The operator can be configured to store backups in S3-compatible object stores such as AWS S3 and MinIO, and in persistent volumes. During deployment, you can create a default storage location, but there is always the option to override the default storage location with each backup, but will be limited to using an S3-compatible object store.
+ - It preserves the ownerReferences on all resources, hence maintaining dependencies between objects.
+ - This operator provides encryption support, to encrypt user specified resources before saving them in the backup file. It uses the same encryption configuration that is used to enable [Kubernetes Encryption at Rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).
+- Backup - A backup is a CRD (`Backup`) that defines when to take backups, where to store the backup and what encryption to use (optional). Backups can be taken ad hoc or scheduled to be taken in intervals.
+- Restore - A restore is a CRD (`Restore`) that defines which backup to use to restore the Rancher application to.
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/templates/_helpers.tpl b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/_helpers.tpl
new file mode 100644
index 000000000..411cfc63a
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/_helpers.tpl
@@ -0,0 +1,76 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "backupRestore.fullname" -}}
+{{- .Chart.Name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "backupRestore.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "backupRestore.labels" -}}
+helm.sh/chart: {{ include "backupRestore.chart" . }}
+{{ include "backupRestore.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "backupRestore.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "backupRestore.fullname" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+resources.cattle.io/operator: backup-restore
+{{- end }}
+
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "backupRestore.serviceAccountName" -}}
+{{ include "backupRestore.fullname" . }}
+{{- end }}
+
+
+{{- define "backupRestore.s3SecretName" -}}
+{{- printf "%s-%s" .Chart.Name "s3" | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create PVC name using release and revision number.
+*/}}
+{{- define "backupRestore.pvcName" -}}
+{{- printf "%s-%d" .Release.Name .Release.Revision }}
+{{- end }}
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/templates/clusterrolebinding.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..cf4abf670
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/clusterrolebinding.yaml
@@ -0,0 +1,14 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+subjects:
+- kind: ServiceAccount
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/templates/deployment.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/deployment.yaml
new file mode 100644
index 000000000..776351ae5
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/deployment.yaml
@@ -0,0 +1,59 @@
+{{- if and .Values.s3.enabled .Values.persistence.enabled }}
+{{- fail "\n\nCannot configure both s3 and PV for storing backups" }}
+{{- end }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ selector:
+ matchLabels:
+ {{- include "backupRestore.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ labels:
+ {{- include "backupRestore.selectorLabels" . | nindent 8 }}
+ annotations:
+ checksum/s3: {{ include (print $.Template.BasePath "/s3-secret.yaml") . | sha256sum }}
+ checksum/pvc: {{ include (print $.Template.BasePath "/pvc.yaml") . | sha256sum }}
+ spec:
+ serviceAccountName: {{ include "backupRestore.serviceAccountName" . }}
+ containers:
+ - name: {{ .Chart.Name }}
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: Always
+ env:
+ - name: CHART_NAMESPACE
+ value: {{ .Release.Namespace }}
+ {{- if .Values.s3.enabled }}
+ - name: DEFAULT_S3_BACKUP_STORAGE_LOCATION
+ value: {{ include "backupRestore.s3SecretName" . }}
+ {{- end }}
+ {{- if .Values.persistence.enabled }}
+ - name: DEFAULT_PERSISTENCE_ENABLED
+ value: "persistence-enabled"
+ volumeMounts:
+ - mountPath: "/var/lib/backups"
+ name: pv-storage
+ volumes:
+ - name: pv-storage
+ persistentVolumeClaim:
+ claimName: {{ include "backupRestore.pvcName" . }}
+ {{- end }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux-node-tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/templates/pvc.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/pvc.yaml
new file mode 100644
index 000000000..ff57e4dab
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/pvc.yaml
@@ -0,0 +1,27 @@
+{{- if and .Values.persistence.enabled -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+ name: {{ include "backupRestore.pvcName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ accessModes:
+ - ReadWriteOnce
+ resources:
+ {{- with .Values.persistence }}
+ requests:
+ storage: {{ .size | quote }}
+{{- if .storageClass }}
+{{- if (eq "-" .storageClass) }}
+ storageClassName: ""
+{{- else }}
+ storageClassName: {{ .storageClass | quote }}
+{{- end }}
+{{- end }}
+{{- if .volumeName }}
+ volumeName: {{ .volumeName | quote }}
+{{- end }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/templates/rancher-resourceset.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/rancher-resourceset.yaml
new file mode 100644
index 000000000..c04d9901c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/rancher-resourceset.yaml
@@ -0,0 +1,62 @@
+apiVersion: resources.cattle.io/v1
+kind: ResourceSet
+metadata:
+ name: rancher-resource-set
+resourceSelectors:
+ - apiVersion: "v1"
+ kindsRegexp: "^namespaces$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^user-|^u-"
+ resourceNames:
+ - "local"
+ - apiVersion: "v1"
+ kindsRegexp: "^secrets$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ labelSelectors:
+ matchExpressions:
+ - key: "owner"
+ operator: "NotIn"
+ values: ["helm"]
+ - apiVersion: "v1"
+ kindsRegexp: "^serviceaccounts$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ - apiVersion: "v1"
+ kindsRegexp: "^configmaps$"
+ namespaces:
+ - "cattle-system"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^roles$|^rolebindings$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNameRegexp: "^cattle-|^clusterrolebinding-|^globaladmin-user-|^grb-u-"
+ resourceNames:
+ - "eks-operator"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^local-|^user-|^u-|^project-|^create-ns$"
+ resourceNames:
+ - "eks-operator"
+ - apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "management.cattle.io$|project.cattle.io$|catalog.cattle.io$|eks.cattle.io$|resources.cattle.io$"
+ - apiVersion: "management.cattle.io/v3"
+ kindsRegexp: "."
+ - apiVersion: "project.cattle.io/v3"
+ kindsRegexp: "."
+ - apiVersion: "catalog.cattle.io/v1"
+ kindsRegexp: "^clusterrepos$"
+ - apiVersion: "resources.cattle.io/v1"
+ kindsRegexp: "^ResourceSet$"
+ - apiVersion: "eks.cattle.io/v1"
+ kindsRegexp: "."
+ - apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ resourceNames:
+ - "eks-config-operator"
+ namespaces:
+ - "cattle-system"
+controllerReferences:
+ - apiVersion: "apps/v1"
+ resource: "deployments"
+ name: "rancher"
+ namespace: "cattle-system"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/templates/s3-secret.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/s3-secret.yaml
new file mode 100644
index 000000000..0401b554b
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/s3-secret.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.s3.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ include "backupRestore.s3SecretName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+type: Opaque
+stringData:
+ {{- with .Values.s3 }}
+ {{- if .credentialSecretName }}
+ credentialSecretName: {{ .credentialSecretName }}
+ credentialSecretNamespace: {{ required "When providing a Secret containing S3 credentials, a valid .Values.credentialSecretNamespace must be provided" .credentialSecretNamespace }}
+ {{- end }}
+ {{- if .region }}
+ region: {{ .region }}
+ {{- end }}
+ bucketName: {{ required "A valid .Values.bucketName is required for configuring S3 compatible storage as the default backup storage location" .bucketName }}
+ {{- if .folder }}
+ folder: {{ .folder }}
+ {{- end }}
+ endpoint: {{ required "A valid .Values.endpoint is required for configuring S3 compatible storage as the default backup storage location" .endpoint }}
+ {{- if .endpointCA }}
+ endpointCA: {{ .endpointCA }}
+ {{- end }}
+ {{- if .insecureTLSSkipVerify }}
+ insecureTLSSkipVerify: {{ .insecureTLSSkipVerify }}
+ {{- end }}
+ {{- end }}
+{{ end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/templates/serviceaccount.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/serviceaccount.yaml
new file mode 100644
index 000000000..f333b746c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/templates/validate-install-crd.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..8f04e51e8
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/templates/validate-install-crd.yaml
@@ -0,0 +1,16 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "resources.cattle.io/v1/Backup" false -}}
+# {{- set $found "resources.cattle.io/v1/ResourceSet" false -}}
+# {{- set $found "resources.cattle.io/v1/Restore" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-backup-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.201/values.yaml b/released/charts/rancher-backup/rancher-backup/1.0.201/values.yaml
new file mode 100644
index 000000000..dafb30b76
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.201/values.yaml
@@ -0,0 +1,49 @@
+image:
+ repository: rancher/backup-restore-operator
+ tag: v1.0.2
+
+## Default s3 bucket for storing all backup files created by the backup-restore-operator
+s3:
+ enabled: false
+ ## credentialSecretName if set, should be the name of the Secret containing AWS credentials.
+ ## To use IAM Role, don't set this field
+ credentialSecretName: ""
+ credentialSecretNamespace: ""
+ region: ""
+ bucketName: ""
+ folder: ""
+ endpoint: ""
+ endpointCA: ""
+ insecureTLSSkipVerify: false
+
+## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
+## If persistence is enabled, operator will create a PVC with mountPath /var/lib/backups
+persistence:
+ enabled: false
+
+ ## If defined, storageClassName:
+ ## If set to "-", storageClassName: "", which disables dynamic provisioning
+ ## If undefined (the default) or set to null, no storageClassName spec is
+ ## set, choosing the default provisioner. (gp2 on AWS, standard on
+ ## GKE, AWS & OpenStack).
+ ## Refer https://kubernetes.io/docs/concepts/storage/persistent-volumes/#class-1
+ ##
+ storageClass: "-"
+
+ ## If you want to disable dynamic provisioning by setting storageClass to "-" above,
+ ## and want to target a particular PV, provide name of the target volume
+ volumeName: ""
+
+ ## Only certain StorageClasses allow resizing PVs; Refer https://kubernetes.io/blog/2018/07/12/resizing-persistent-volumes-using-kubernetes/
+ size: 2Gi
+
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/Chart.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/Chart.yaml
new file mode 100644
index 000000000..404b29b06
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/Chart.yaml
@@ -0,0 +1,20 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-backup-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: Rancher Backups
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
+ catalog.cattle.io/release-name: rancher-backup
+ catalog.cattle.io/scope: management
+ catalog.cattle.io/ui-component: rancher-backup
+apiVersion: v1
+appVersion: v1.0.3
+description: Provides ability to back up and restore the Rancher application running
+ on any Kubernetes cluster
+icon: https://charts.rancher.io/assets/logos/backup-restore.svg
+keywords:
+- applications
+- infrastructure
+name: rancher-backup
+version: 1.0.300
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/README.md b/released/charts/rancher-backup/rancher-backup/1.0.300/README.md
new file mode 100644
index 000000000..feb526977
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/README.md
@@ -0,0 +1,69 @@
+# Rancher Backup
+
+This chart provides ability to back up and restore the Rancher application running on any Kubernetes cluster.
+
+Refer [this](https://github.com/rancher/backup-restore-operator) repository for implementation details.
+
+-----
+
+### Get Repo Info
+```
+helm repo add rancher-chart https://charts.rancher.io
+helm repo update
+```
+
+-----
+
+### Install Chart
+```
+helm install rancher-backup-crd rancher-chart/rancher-backup-crd -n cattle-resources-system --create-namespace
+helm install rancher-backup rancher-chart/rancher-backup -n cattle-resources-system
+```
+
+-----
+
+### Configuration
+The following table lists the configurable parameters of the rancher-backup chart and their default values:
+
+| Parameter | Description | Default |
+|----------|---------------|-------|
+| image.repository | Container image repository | rancher/backup-restore-operator |
+| image.tag | Container image tag | v0.1.0-rc1 |
+| s3.enabled | Configure S3 compatible default storage location. Current version supports S3 and MinIO | false |
+| s3.credentialSecretName | Name of the Secret containing S3 credentials. This is an optional field. Skip this field in order to use IAM Role authentication. The Secret must contain following two keys, `accessKey` and `secretKey` | "" |
+| s3.credentialSecretNamespace | Namespace of the Secret containing S3 credentials | "" |
+| s3.region | Region of the S3 Bucket (Required for S3, not valid for MinIO) | "" |
+| s3.bucketName | Name of the Bucket | "" |
+| s3.folder | Base folder within the Bucket (optional) | "" |
+| s3.endpoint | Endpoint for the S3 storage provider | "" |
+| s3.endpointCA | Base64 encoded CA cert for the S3 storage provider (optional) | "" |
+| s3.insecureTLSSkipVerify | Skip SSL verification | false |
+| persistence.enabled | Configure a Persistent Volume as the default storage location. It accepts either a StorageClass name to create a PVC, or directly accepts the PV to use. The Persistent Volume is mounted at `/var/lib/backups` in the operator pod | false |
+| persistence.storageClass | StorageClass to use for dynamically provisioning the Persistent Volume, which will be used for storing backups | "" |
+| persistence.volumeName | Persistent Volume to use for storing backups | "" |
+| persistence.size | Requested size of the Persistent Volume (Applicable when using dynamic provisioning) | "" |
+| nodeSelector | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | {} |
+| tolerations | https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration | [] |
+| affinity | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity | {} |
+
+-----
+
+### CRDs
+
+Refer [this](https://github.com/rancher/backup-restore-operator#crds) section for information on CRDs that this chart installs. Also refer [this](https://github.com/rancher/backup-restore-operator/tree/master/examples) folder containing sample manifests for the CRDs.
+
+-----
+### Upgrading Chart
+```
+helm upgrade rancher-backup-crd -n cattle-resources-system
+helm upgrade rancher-backup -n cattle-resources-system
+```
+
+-----
+### Uninstall Chart
+
+```
+helm uninstall rancher-backup -n cattle-resources-system
+helm uninstall rancher-backup-crd -n cattle-resources-system
+```
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/app-readme.md b/released/charts/rancher-backup/rancher-backup/1.0.300/app-readme.md
new file mode 100644
index 000000000..15a021cdb
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/app-readme.md
@@ -0,0 +1,15 @@
+# Rancher Backup
+
+This chart enables ability to capture backups of the Rancher application and restore from these backups. This chart can be used to migrate Rancher from one Kubernetes cluster to a different Kubernetes cluster.
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/backups/v2.5/).
+
+This chart installs the following components:
+
+- [backup-restore-operator](https://github.com/rancher/backup-restore-operator)
+ - The operator handles backing up all Kubernetes resources and CRDs that Rancher creates and manages from the local cluster. It gathers these resources by querying the Kubernetes API server, packages all the resources to create a tarball file and saves it in the configured backup storage location.
+ - The operator can be configured to store backups in S3-compatible object stores such as AWS S3 and MinIO, and in persistent volumes. During deployment, you can create a default storage location, but there is always the option to override the default storage location with each backup, but will be limited to using an S3-compatible object store.
+ - It preserves the ownerReferences on all resources, hence maintaining dependencies between objects.
+ - This operator provides encryption support, to encrypt user specified resources before saving them in the backup file. It uses the same encryption configuration that is used to enable [Kubernetes Encryption at Rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).
+- Backup - A backup is a CRD (`Backup`) that defines when to take backups, where to store the backup and what encryption to use (optional). Backups can be taken ad hoc or scheduled to be taken in intervals.
+- Restore - A restore is a CRD (`Restore`) that defines which backup to use to restore the Rancher application to.
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/templates/_helpers.tpl b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/_helpers.tpl
new file mode 100644
index 000000000..411cfc63a
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/_helpers.tpl
@@ -0,0 +1,76 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "backupRestore.fullname" -}}
+{{- .Chart.Name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "backupRestore.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "backupRestore.labels" -}}
+helm.sh/chart: {{ include "backupRestore.chart" . }}
+{{ include "backupRestore.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "backupRestore.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "backupRestore.fullname" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+resources.cattle.io/operator: backup-restore
+{{- end }}
+
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "backupRestore.serviceAccountName" -}}
+{{ include "backupRestore.fullname" . }}
+{{- end }}
+
+
+{{- define "backupRestore.s3SecretName" -}}
+{{- printf "%s-%s" .Chart.Name "s3" | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create PVC name using release and revision number.
+*/}}
+{{- define "backupRestore.pvcName" -}}
+{{- printf "%s-%d" .Release.Name .Release.Revision }}
+{{- end }}
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/templates/clusterrolebinding.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..cf4abf670
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/clusterrolebinding.yaml
@@ -0,0 +1,14 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+subjects:
+- kind: ServiceAccount
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/templates/deployment.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/deployment.yaml
new file mode 100644
index 000000000..776351ae5
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/deployment.yaml
@@ -0,0 +1,59 @@
+{{- if and .Values.s3.enabled .Values.persistence.enabled }}
+{{- fail "\n\nCannot configure both s3 and PV for storing backups" }}
+{{- end }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ selector:
+ matchLabels:
+ {{- include "backupRestore.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ labels:
+ {{- include "backupRestore.selectorLabels" . | nindent 8 }}
+ annotations:
+ checksum/s3: {{ include (print $.Template.BasePath "/s3-secret.yaml") . | sha256sum }}
+ checksum/pvc: {{ include (print $.Template.BasePath "/pvc.yaml") . | sha256sum }}
+ spec:
+ serviceAccountName: {{ include "backupRestore.serviceAccountName" . }}
+ containers:
+ - name: {{ .Chart.Name }}
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: Always
+ env:
+ - name: CHART_NAMESPACE
+ value: {{ .Release.Namespace }}
+ {{- if .Values.s3.enabled }}
+ - name: DEFAULT_S3_BACKUP_STORAGE_LOCATION
+ value: {{ include "backupRestore.s3SecretName" . }}
+ {{- end }}
+ {{- if .Values.persistence.enabled }}
+ - name: DEFAULT_PERSISTENCE_ENABLED
+ value: "persistence-enabled"
+ volumeMounts:
+ - mountPath: "/var/lib/backups"
+ name: pv-storage
+ volumes:
+ - name: pv-storage
+ persistentVolumeClaim:
+ claimName: {{ include "backupRestore.pvcName" . }}
+ {{- end }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux-node-tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/templates/pvc.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/pvc.yaml
new file mode 100644
index 000000000..ff57e4dab
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/pvc.yaml
@@ -0,0 +1,27 @@
+{{- if and .Values.persistence.enabled -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+ name: {{ include "backupRestore.pvcName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ accessModes:
+ - ReadWriteOnce
+ resources:
+ {{- with .Values.persistence }}
+ requests:
+ storage: {{ .size | quote }}
+{{- if .storageClass }}
+{{- if (eq "-" .storageClass) }}
+ storageClassName: ""
+{{- else }}
+ storageClassName: {{ .storageClass | quote }}
+{{- end }}
+{{- end }}
+{{- if .volumeName }}
+ volumeName: {{ .volumeName | quote }}
+{{- end }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/templates/rancher-resourceset.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/rancher-resourceset.yaml
new file mode 100644
index 000000000..c04d9901c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/rancher-resourceset.yaml
@@ -0,0 +1,62 @@
+apiVersion: resources.cattle.io/v1
+kind: ResourceSet
+metadata:
+ name: rancher-resource-set
+resourceSelectors:
+ - apiVersion: "v1"
+ kindsRegexp: "^namespaces$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^user-|^u-"
+ resourceNames:
+ - "local"
+ - apiVersion: "v1"
+ kindsRegexp: "^secrets$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ labelSelectors:
+ matchExpressions:
+ - key: "owner"
+ operator: "NotIn"
+ values: ["helm"]
+ - apiVersion: "v1"
+ kindsRegexp: "^serviceaccounts$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ - apiVersion: "v1"
+ kindsRegexp: "^configmaps$"
+ namespaces:
+ - "cattle-system"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^roles$|^rolebindings$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNameRegexp: "^cattle-|^clusterrolebinding-|^globaladmin-user-|^grb-u-"
+ resourceNames:
+ - "eks-operator"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^local-|^user-|^u-|^project-|^create-ns$"
+ resourceNames:
+ - "eks-operator"
+ - apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "management.cattle.io$|project.cattle.io$|catalog.cattle.io$|eks.cattle.io$|resources.cattle.io$"
+ - apiVersion: "management.cattle.io/v3"
+ kindsRegexp: "."
+ - apiVersion: "project.cattle.io/v3"
+ kindsRegexp: "."
+ - apiVersion: "catalog.cattle.io/v1"
+ kindsRegexp: "^clusterrepos$"
+ - apiVersion: "resources.cattle.io/v1"
+ kindsRegexp: "^ResourceSet$"
+ - apiVersion: "eks.cattle.io/v1"
+ kindsRegexp: "."
+ - apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ resourceNames:
+ - "eks-config-operator"
+ namespaces:
+ - "cattle-system"
+controllerReferences:
+ - apiVersion: "apps/v1"
+ resource: "deployments"
+ name: "rancher"
+ namespace: "cattle-system"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/templates/s3-secret.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/s3-secret.yaml
new file mode 100644
index 000000000..a07623d90
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/s3-secret.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.s3.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ include "backupRestore.s3SecretName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+type: Opaque
+stringData:
+ {{- with .Values.s3 }}
+ {{- if .credentialSecretName }}
+ credentialSecretName: {{ .credentialSecretName }}
+ credentialSecretNamespace: {{ required "When providing a Secret containing S3 credentials, a valid .Values.credentialSecretNamespace must be provided" .credentialSecretNamespace }}
+ {{- end }}
+ {{- if .region }}
+ region: {{ .region }}
+ {{- end }}
+ bucketName: {{ required "A valid .Values.bucketName is required for configuring S3 compatible storage as the default backup storage location" .bucketName }}
+ {{- if .folder }}
+ folder: {{ .folder }}
+ {{- end }}
+ endpoint: {{ required "A valid .Values.endpoint is required for configuring S3 compatible storage as the default backup storage location" .endpoint }}
+ {{- if .endpointCA }}
+ endpointCA: {{ .endpointCA }}
+ {{- end }}
+ {{- if .insecureTLSSkipVerify }}
+ insecureTLSSkipVerify: {{ .insecureTLSSkipVerify | quote }}
+ {{- end }}
+ {{- end }}
+{{ end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/templates/serviceaccount.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/serviceaccount.yaml
new file mode 100644
index 000000000..f333b746c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/templates/validate-install-crd.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..8f04e51e8
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/templates/validate-install-crd.yaml
@@ -0,0 +1,16 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "resources.cattle.io/v1/Backup" false -}}
+# {{- set $found "resources.cattle.io/v1/ResourceSet" false -}}
+# {{- set $found "resources.cattle.io/v1/Restore" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-backup-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.300/values.yaml b/released/charts/rancher-backup/rancher-backup/1.0.300/values.yaml
new file mode 100644
index 000000000..46d231fd2
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.300/values.yaml
@@ -0,0 +1,49 @@
+image:
+ repository: rancher/backup-restore-operator
+ tag: v1.0.3
+
+## Default s3 bucket for storing all backup files created by the backup-restore-operator
+s3:
+ enabled: false
+ ## credentialSecretName if set, should be the name of the Secret containing AWS credentials.
+ ## To use IAM Role, don't set this field
+ credentialSecretName: ""
+ credentialSecretNamespace: ""
+ region: ""
+ bucketName: ""
+ folder: ""
+ endpoint: ""
+ endpointCA: ""
+ insecureTLSSkipVerify: false
+
+## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
+## If persistence is enabled, operator will create a PVC with mountPath /var/lib/backups
+persistence:
+ enabled: false
+
+ ## If defined, storageClassName:
+ ## If set to "-", storageClassName: "", which disables dynamic provisioning
+ ## If undefined (the default) or set to null, no storageClassName spec is
+ ## set, choosing the default provisioner. (gp2 on AWS, standard on
+ ## GKE, AWS & OpenStack).
+ ## Refer https://kubernetes.io/docs/concepts/storage/persistent-volumes/#class-1
+ ##
+ storageClass: "-"
+
+ ## If you want to disable dynamic provisioning by setting storageClass to "-" above,
+ ## and want to target a particular PV, provide name of the target volume
+ volumeName: ""
+
+ ## Only certain StorageClasses allow resizing PVs; Refer https://kubernetes.io/blog/2018/07/12/resizing-persistent-volumes-using-kubernetes/
+ size: 2Gi
+
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/Chart.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/Chart.yaml
new file mode 100755
index 000000000..aa39ba99d
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/Chart.yaml
@@ -0,0 +1,20 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-backup-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: Rancher Backups
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
+ catalog.cattle.io/release-name: rancher-backup
+ catalog.cattle.io/scope: management
+ catalog.cattle.io/ui-component: rancher-backup
+apiVersion: v1
+appVersion: v1.0.3
+description: Provides ability to back up and restore the Rancher application running
+ on any Kubernetes cluster
+icon: https://charts.rancher.io/assets/logos/backup-restore.svg
+keywords:
+- applications
+- infrastructure
+name: rancher-backup
+version: 1.0.301
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/README.md b/released/charts/rancher-backup/rancher-backup/1.0.301/README.md
new file mode 100755
index 000000000..67f7cc4d9
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/README.md
@@ -0,0 +1,69 @@
+# Rancher Backup
+
+This chart provides ability to back up and restore the Rancher application running on any Kubernetes cluster.
+
+Refer [this](https://github.com/rancher/backup-restore-operator) repository for implementation details.
+
+-----
+
+### Get Repo Info
+```
+helm repo add rancher-chart https://charts.rancher.io
+helm repo update
+```
+
+-----
+
+### Install Chart
+```
+helm install rancher-backup-crd rancher-chart/rancher-backup-crd -n cattle-resources-system --create-namespace
+helm install rancher-backup rancher-chart/rancher-backup -n cattle-resources-system
+```
+
+-----
+
+### Configuration
+The following table lists the configurable parameters of the rancher-backup chart and their default values:
+
+| Parameter | Description | Default |
+|----------|---------------|-------|
+| image.repository | Container image repository | rancher/backup-restore-operator |
+| image.tag | Container image tag | v0.1.0-rc1 |
+| s3.enabled | Configure S3 compatible default storage location. Current version supports S3 and MinIO | false |
+| s3.credentialSecretName | Name of the Secret containing S3 credentials. This is an optional field. Skip this field in order to use IAM Role authentication. The Secret must contain following two keys, `accessKey` and `secretKey` | "" |
+| s3.credentialSecretNamespace | Namespace of the Secret containing S3 credentials. This can be any namespace. | "" |
+| s3.region | Region of the S3 Bucket (Required for S3, not valid for MinIO) | "" |
+| s3.bucketName | Name of the Bucket | "" |
+| s3.folder | Base folder within the Bucket (optional) | "" |
+| s3.endpoint | Endpoint for the S3 storage provider | "" |
+| s3.endpointCA | Base64 encoded CA cert for the S3 storage provider (optional) | "" |
+| s3.insecureTLSSkipVerify | Skip SSL verification | false |
+| persistence.enabled | Configure a Persistent Volume as the default storage location. It accepts either a StorageClass name to create a PVC, or directly accepts the PV to use. The Persistent Volume is mounted at `/var/lib/backups` in the operator pod | false |
+| persistence.storageClass | StorageClass to use for dynamically provisioning the Persistent Volume, which will be used for storing backups | "" |
+| persistence.volumeName | Persistent Volume to use for storing backups | "" |
+| persistence.size | Requested size of the Persistent Volume (Applicable when using dynamic provisioning) | "" |
+| nodeSelector | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | {} |
+| tolerations | https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration | [] |
+| affinity | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity | {} |
+
+-----
+
+### CRDs
+
+Refer [this](https://github.com/rancher/backup-restore-operator#crds) section for information on CRDs that this chart installs. Also refer [this](https://github.com/rancher/backup-restore-operator/tree/master/examples) folder containing sample manifests for the CRDs.
+
+-----
+### Upgrading Chart
+```
+helm upgrade rancher-backup-crd -n cattle-resources-system
+helm upgrade rancher-backup -n cattle-resources-system
+```
+
+-----
+### Uninstall Chart
+
+```
+helm uninstall rancher-backup -n cattle-resources-system
+helm uninstall rancher-backup-crd -n cattle-resources-system
+```
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/app-readme.md b/released/charts/rancher-backup/rancher-backup/1.0.301/app-readme.md
new file mode 100755
index 000000000..15a021cdb
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/app-readme.md
@@ -0,0 +1,15 @@
+# Rancher Backup
+
+This chart enables ability to capture backups of the Rancher application and restore from these backups. This chart can be used to migrate Rancher from one Kubernetes cluster to a different Kubernetes cluster.
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/backups/v2.5/).
+
+This chart installs the following components:
+
+- [backup-restore-operator](https://github.com/rancher/backup-restore-operator)
+ - The operator handles backing up all Kubernetes resources and CRDs that Rancher creates and manages from the local cluster. It gathers these resources by querying the Kubernetes API server, packages all the resources to create a tarball file and saves it in the configured backup storage location.
+ - The operator can be configured to store backups in S3-compatible object stores such as AWS S3 and MinIO, and in persistent volumes. During deployment, you can create a default storage location, but there is always the option to override the default storage location with each backup, but will be limited to using an S3-compatible object store.
+ - It preserves the ownerReferences on all resources, hence maintaining dependencies between objects.
+ - This operator provides encryption support, to encrypt user specified resources before saving them in the backup file. It uses the same encryption configuration that is used to enable [Kubernetes Encryption at Rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).
+- Backup - A backup is a CRD (`Backup`) that defines when to take backups, where to store the backup and what encryption to use (optional). Backups can be taken ad hoc or scheduled to be taken in intervals.
+- Restore - A restore is a CRD (`Restore`) that defines which backup to use to restore the Rancher application to.
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/templates/_helpers.tpl b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/_helpers.tpl
new file mode 100755
index 000000000..411cfc63a
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/_helpers.tpl
@@ -0,0 +1,76 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "backupRestore.fullname" -}}
+{{- .Chart.Name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "backupRestore.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "backupRestore.labels" -}}
+helm.sh/chart: {{ include "backupRestore.chart" . }}
+{{ include "backupRestore.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "backupRestore.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "backupRestore.fullname" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+resources.cattle.io/operator: backup-restore
+{{- end }}
+
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "backupRestore.serviceAccountName" -}}
+{{ include "backupRestore.fullname" . }}
+{{- end }}
+
+
+{{- define "backupRestore.s3SecretName" -}}
+{{- printf "%s-%s" .Chart.Name "s3" | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create PVC name using release and revision number.
+*/}}
+{{- define "backupRestore.pvcName" -}}
+{{- printf "%s-%d" .Release.Name .Release.Revision }}
+{{- end }}
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/templates/clusterrolebinding.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/clusterrolebinding.yaml
new file mode 100755
index 000000000..cf4abf670
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/clusterrolebinding.yaml
@@ -0,0 +1,14 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+subjects:
+- kind: ServiceAccount
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/templates/deployment.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/deployment.yaml
new file mode 100755
index 000000000..776351ae5
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/deployment.yaml
@@ -0,0 +1,59 @@
+{{- if and .Values.s3.enabled .Values.persistence.enabled }}
+{{- fail "\n\nCannot configure both s3 and PV for storing backups" }}
+{{- end }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ selector:
+ matchLabels:
+ {{- include "backupRestore.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ labels:
+ {{- include "backupRestore.selectorLabels" . | nindent 8 }}
+ annotations:
+ checksum/s3: {{ include (print $.Template.BasePath "/s3-secret.yaml") . | sha256sum }}
+ checksum/pvc: {{ include (print $.Template.BasePath "/pvc.yaml") . | sha256sum }}
+ spec:
+ serviceAccountName: {{ include "backupRestore.serviceAccountName" . }}
+ containers:
+ - name: {{ .Chart.Name }}
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: Always
+ env:
+ - name: CHART_NAMESPACE
+ value: {{ .Release.Namespace }}
+ {{- if .Values.s3.enabled }}
+ - name: DEFAULT_S3_BACKUP_STORAGE_LOCATION
+ value: {{ include "backupRestore.s3SecretName" . }}
+ {{- end }}
+ {{- if .Values.persistence.enabled }}
+ - name: DEFAULT_PERSISTENCE_ENABLED
+ value: "persistence-enabled"
+ volumeMounts:
+ - mountPath: "/var/lib/backups"
+ name: pv-storage
+ volumes:
+ - name: pv-storage
+ persistentVolumeClaim:
+ claimName: {{ include "backupRestore.pvcName" . }}
+ {{- end }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux-node-tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/templates/pvc.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/pvc.yaml
new file mode 100755
index 000000000..ff57e4dab
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/pvc.yaml
@@ -0,0 +1,27 @@
+{{- if and .Values.persistence.enabled -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+ name: {{ include "backupRestore.pvcName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ accessModes:
+ - ReadWriteOnce
+ resources:
+ {{- with .Values.persistence }}
+ requests:
+ storage: {{ .size | quote }}
+{{- if .storageClass }}
+{{- if (eq "-" .storageClass) }}
+ storageClassName: ""
+{{- else }}
+ storageClassName: {{ .storageClass | quote }}
+{{- end }}
+{{- end }}
+{{- if .volumeName }}
+ volumeName: {{ .volumeName | quote }}
+{{- end }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/templates/rancher-resourceset.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/rancher-resourceset.yaml
new file mode 100755
index 000000000..c04d9901c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/rancher-resourceset.yaml
@@ -0,0 +1,62 @@
+apiVersion: resources.cattle.io/v1
+kind: ResourceSet
+metadata:
+ name: rancher-resource-set
+resourceSelectors:
+ - apiVersion: "v1"
+ kindsRegexp: "^namespaces$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^user-|^u-"
+ resourceNames:
+ - "local"
+ - apiVersion: "v1"
+ kindsRegexp: "^secrets$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ labelSelectors:
+ matchExpressions:
+ - key: "owner"
+ operator: "NotIn"
+ values: ["helm"]
+ - apiVersion: "v1"
+ kindsRegexp: "^serviceaccounts$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ - apiVersion: "v1"
+ kindsRegexp: "^configmaps$"
+ namespaces:
+ - "cattle-system"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^roles$|^rolebindings$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNameRegexp: "^cattle-|^clusterrolebinding-|^globaladmin-user-|^grb-u-"
+ resourceNames:
+ - "eks-operator"
+ - apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^local-|^user-|^u-|^project-|^create-ns$"
+ resourceNames:
+ - "eks-operator"
+ - apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "management.cattle.io$|project.cattle.io$|catalog.cattle.io$|eks.cattle.io$|resources.cattle.io$"
+ - apiVersion: "management.cattle.io/v3"
+ kindsRegexp: "."
+ - apiVersion: "project.cattle.io/v3"
+ kindsRegexp: "."
+ - apiVersion: "catalog.cattle.io/v1"
+ kindsRegexp: "^clusterrepos$"
+ - apiVersion: "resources.cattle.io/v1"
+ kindsRegexp: "^ResourceSet$"
+ - apiVersion: "eks.cattle.io/v1"
+ kindsRegexp: "."
+ - apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ resourceNames:
+ - "eks-config-operator"
+ namespaces:
+ - "cattle-system"
+controllerReferences:
+ - apiVersion: "apps/v1"
+ resource: "deployments"
+ name: "rancher"
+ namespace: "cattle-system"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/templates/s3-secret.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/s3-secret.yaml
new file mode 100755
index 000000000..a07623d90
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/s3-secret.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.s3.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ include "backupRestore.s3SecretName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+type: Opaque
+stringData:
+ {{- with .Values.s3 }}
+ {{- if .credentialSecretName }}
+ credentialSecretName: {{ .credentialSecretName }}
+ credentialSecretNamespace: {{ required "When providing a Secret containing S3 credentials, a valid .Values.credentialSecretNamespace must be provided" .credentialSecretNamespace }}
+ {{- end }}
+ {{- if .region }}
+ region: {{ .region }}
+ {{- end }}
+ bucketName: {{ required "A valid .Values.bucketName is required for configuring S3 compatible storage as the default backup storage location" .bucketName }}
+ {{- if .folder }}
+ folder: {{ .folder }}
+ {{- end }}
+ endpoint: {{ required "A valid .Values.endpoint is required for configuring S3 compatible storage as the default backup storage location" .endpoint }}
+ {{- if .endpointCA }}
+ endpointCA: {{ .endpointCA }}
+ {{- end }}
+ {{- if .insecureTLSSkipVerify }}
+ insecureTLSSkipVerify: {{ .insecureTLSSkipVerify | quote }}
+ {{- end }}
+ {{- end }}
+{{ end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/templates/serviceaccount.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/serviceaccount.yaml
new file mode 100755
index 000000000..f333b746c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/templates/validate-install-crd.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/validate-install-crd.yaml
new file mode 100755
index 000000000..f63fd2e2e
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/templates/validate-install-crd.yaml
@@ -0,0 +1,16 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "resources.cattle.io/v1/Backup" false -}}
+# {{- set $found "resources.cattle.io/v1/ResourceSet" false -}}
+# {{- set $found "resources.cattle.io/v1/Restore" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.301/values.yaml b/released/charts/rancher-backup/rancher-backup/1.0.301/values.yaml
new file mode 100755
index 000000000..46d231fd2
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.301/values.yaml
@@ -0,0 +1,49 @@
+image:
+ repository: rancher/backup-restore-operator
+ tag: v1.0.3
+
+## Default s3 bucket for storing all backup files created by the backup-restore-operator
+s3:
+ enabled: false
+ ## credentialSecretName if set, should be the name of the Secret containing AWS credentials.
+ ## To use IAM Role, don't set this field
+ credentialSecretName: ""
+ credentialSecretNamespace: ""
+ region: ""
+ bucketName: ""
+ folder: ""
+ endpoint: ""
+ endpointCA: ""
+ insecureTLSSkipVerify: false
+
+## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
+## If persistence is enabled, operator will create a PVC with mountPath /var/lib/backups
+persistence:
+ enabled: false
+
+ ## If defined, storageClassName:
+ ## If set to "-", storageClassName: "", which disables dynamic provisioning
+ ## If undefined (the default) or set to null, no storageClassName spec is
+ ## set, choosing the default provisioner. (gp2 on AWS, standard on
+ ## GKE, AWS & OpenStack).
+ ## Refer https://kubernetes.io/docs/concepts/storage/persistent-volumes/#class-1
+ ##
+ storageClass: "-"
+
+ ## If you want to disable dynamic provisioning by setting storageClass to "-" above,
+ ## and want to target a particular PV, provide name of the target volume
+ volumeName: ""
+
+ ## Only certain StorageClasses allow resizing PVs; Refer https://kubernetes.io/blog/2018/07/12/resizing-persistent-volumes-using-kubernetes/
+ size: 2Gi
+
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/Chart.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/Chart.yaml
new file mode 100755
index 000000000..0cc5ada17
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/Chart.yaml
@@ -0,0 +1,20 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-backup-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: Rancher Backups
+ catalog.cattle.io/namespace: cattle-resources-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: resources.cattle.io.resourceset/v1
+ catalog.cattle.io/release-name: rancher-backup
+ catalog.cattle.io/scope: management
+ catalog.cattle.io/ui-component: rancher-backup
+apiVersion: v2
+appVersion: 1.0.4
+description: Provides ability to back up and restore the Rancher application running
+ on any Kubernetes cluster
+icon: https://charts.rancher.io/assets/logos/backup-restore.svg
+keywords:
+- applications
+- infrastructure
+name: rancher-backup
+version: 1.0.400
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/README.md b/released/charts/rancher-backup/rancher-backup/1.0.400/README.md
new file mode 100755
index 000000000..00fc96d92
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/README.md
@@ -0,0 +1,69 @@
+# Rancher Backup
+
+This chart provides ability to back up and restore the Rancher application running on any Kubernetes cluster.
+
+Refer [this](https://github.com/rancher/backup-restore-operator) repository for implementation details.
+
+-----
+
+### Get Repo Info
+```bash
+helm repo add rancher-chart https://charts.rancher.io
+helm repo update
+```
+
+-----
+
+### Install Chart
+```bash
+helm install rancher-backup-crd rancher-chart/rancher-backup-crd -n cattle-resources-system --create-namespace
+helm install rancher-backup rancher-chart/rancher-backup -n cattle-resources-system
+```
+
+-----
+
+### Configuration
+The following table lists the configurable parameters of the rancher-backup chart and their default values:
+
+| Parameter | Description | Default |
+|----------|---------------|-------|
+| image.repository | Container image repository | rancher/backup-restore-operator |
+| image.tag | Container image tag | v0.1.0-rc1 |
+| s3.enabled | Configure S3 compatible default storage location. Current version supports S3 and MinIO | false |
+| s3.credentialSecretName | Name of the Secret containing S3 credentials. This is an optional field. Skip this field in order to use IAM Role authentication. The Secret must contain following two keys, `accessKey` and `secretKey` | "" |
+| s3.credentialSecretNamespace | Namespace of the Secret containing S3 credentials. This can be any namespace. | "" |
+| s3.region | Region of the S3 Bucket (Required for S3, not valid for MinIO) | "" |
+| s3.bucketName | Name of the Bucket | "" |
+| s3.folder | Base folder within the Bucket (optional) | "" |
+| s3.endpoint | Endpoint for the S3 storage provider | "" |
+| s3.endpointCA | Base64 encoded CA cert for the S3 storage provider (optional) | "" |
+| s3.insecureTLSSkipVerify | Skip SSL verification | false |
+| persistence.enabled | Configure a Persistent Volume as the default storage location. It accepts either a StorageClass name to create a PVC, or directly accepts the PV to use. The Persistent Volume is mounted at `/var/lib/backups` in the operator pod | false |
+| persistence.storageClass | StorageClass to use for dynamically provisioning the Persistent Volume, which will be used for storing backups | "" |
+| persistence.volumeName | Persistent Volume to use for storing backups | "" |
+| persistence.size | Requested size of the Persistent Volume (Applicable when using dynamic provisioning) | "" |
+| nodeSelector | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | {} |
+| tolerations | https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration | [] |
+| affinity | https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity | {} |
+
+-----
+
+### CRDs
+
+Refer [this](https://github.com/rancher/backup-restore-operator#crds) section for information on CRDs that this chart installs. Also refer [this](https://github.com/rancher/backup-restore-operator/tree/master/examples) folder containing sample manifests for the CRDs.
+
+-----
+### Upgrading Chart
+```bash
+helm upgrade rancher-backup-crd -n cattle-resources-system
+helm upgrade rancher-backup -n cattle-resources-system
+```
+
+-----
+### Uninstall Chart
+
+```bash
+helm uninstall rancher-backup -n cattle-resources-system
+helm uninstall rancher-backup-crd -n cattle-resources-system
+```
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/app-readme.md b/released/charts/rancher-backup/rancher-backup/1.0.400/app-readme.md
new file mode 100755
index 000000000..15a021cdb
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/app-readme.md
@@ -0,0 +1,15 @@
+# Rancher Backup
+
+This chart enables ability to capture backups of the Rancher application and restore from these backups. This chart can be used to migrate Rancher from one Kubernetes cluster to a different Kubernetes cluster.
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/backups/v2.5/).
+
+This chart installs the following components:
+
+- [backup-restore-operator](https://github.com/rancher/backup-restore-operator)
+ - The operator handles backing up all Kubernetes resources and CRDs that Rancher creates and manages from the local cluster. It gathers these resources by querying the Kubernetes API server, packages all the resources to create a tarball file and saves it in the configured backup storage location.
+ - The operator can be configured to store backups in S3-compatible object stores such as AWS S3 and MinIO, and in persistent volumes. During deployment, you can create a default storage location, but there is always the option to override the default storage location with each backup, but will be limited to using an S3-compatible object store.
+ - It preserves the ownerReferences on all resources, hence maintaining dependencies between objects.
+ - This operator provides encryption support, to encrypt user specified resources before saving them in the backup file. It uses the same encryption configuration that is used to enable [Kubernetes Encryption at Rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).
+- Backup - A backup is a CRD (`Backup`) that defines when to take backups, where to store the backup and what encryption to use (optional). Backups can be taken ad hoc or scheduled to be taken in intervals.
+- Restore - A restore is a CRD (`Restore`) that defines which backup to use to restore the Rancher application to.
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/eks.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/eks.yaml
new file mode 100755
index 000000000..59f47ce47
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/eks.yaml
@@ -0,0 +1,17 @@
+- apiVersion: "eks.cattle.io/v1"
+ kindsRegexp: "."
+- apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ resourceNames:
+ - "eks-config-operator"
+- apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "eks.cattle.io$"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNames:
+ - "eks-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNames:
+ - "eks-operator"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/fleet.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/fleet.yaml
new file mode 100755
index 000000000..140a11978
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/fleet.yaml
@@ -0,0 +1,49 @@
+- apiVersion: "v1"
+ kindsRegexp: "^namespaces$"
+ resourceNameRegexp: "^fleet-|^cluster-fleet-"
+- apiVersion: "v1"
+ kindsRegexp: "^secrets$"
+ namespaceRegexp: "^fleet-|^cluster-fleet-"
+ labelSelectors:
+ matchExpressions:
+ - key: "owner"
+ operator: "NotIn"
+ values: ["helm"]
+ - key: "fleet.cattle.io/managed"
+ operator: "In"
+ values: ["true"]
+- apiVersion: "v1"
+ kindsRegexp: "^serviceaccounts$"
+ namespaceRegexp: "^fleet-|^cluster-fleet-"
+- apiVersion: "v1"
+ kindsRegexp: "^configmaps$"
+ namespaceRegexp: "^fleet-|^cluster-fleet-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^roles$|^rolebindings$"
+ namespaceRegexp: "^fleet-|^cluster-fleet-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNameRegexp: "^fleet-|^gitjob-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNameRegexp: "^fleet-"
+ resourceNames:
+ - "gitjob"
+- apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "fleet.cattle.io$|gitjob.cattle.io$"
+- apiVersion: "fleet.cattle.io/v1alpha1"
+ kindsRegexp: "."
+- apiVersion: "gitjob.cattle.io/v1"
+ kindsRegexp: "."
+- apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ namespaceRegexp: "^fleet-|^cluster-fleet-"
+ resourceNameRegexp: "^fleet-"
+ resourceNames:
+ - "gitjob"
+- apiVersion: "apps/v1"
+ kindsRegexp: "^services$"
+ namespaceRegexp: "^fleet-|^cluster-fleet-"
+ resourceNames:
+ - "gitjob"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/gke.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/gke.yaml
new file mode 100755
index 000000000..a77019235
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/gke.yaml
@@ -0,0 +1,17 @@
+- apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "gke.cattle.io$"
+- apiVersion: "gke.cattle.io/v1"
+ kindsRegexp: "."
+- apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ resourceNames:
+ - "gke-config-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNames:
+ - "gke-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNames:
+ - "gke-operator"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/rancher-operator.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/rancher-operator.yaml
new file mode 100755
index 000000000..3518fb5b7
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/rancher-operator.yaml
@@ -0,0 +1,27 @@
+- apiVersion: "rancher.cattle.io/v1"
+ kindsRegexp: "."
+- apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ resourceNames:
+ - "rancher-operator"
+ namespaces:
+ - "rancher-operator-system"
+- apiVersion: "v1"
+ kindsRegexp: "^serviceaccounts$"
+ namespaces:
+ - "rancher-operator-system"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNames:
+ - "rancher-operator"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNames:
+ - "rancher-operator"
+- apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "rancher.cattle.io$"
+- apiVersion: "v1"
+ kindsRegexp: "^namespaces$"
+ resourceNames:
+ - "rancher-operator-system"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/rancher.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/rancher.yaml
new file mode 100755
index 000000000..fdfc067f6
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/files/default-resourceset-contents/rancher.yaml
@@ -0,0 +1,44 @@
+- apiVersion: "v1"
+ kindsRegexp: "^namespaces$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^user-|^u-"
+ resourceNames:
+ - "local"
+- apiVersion: "apps/v1"
+ kindsRegexp: "^deployments$"
+ namespaces:
+ - "cattle-system"
+- apiVersion: "v1"
+ kindsRegexp: "^secrets$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+ labelSelectors:
+ matchExpressions:
+ - key: "owner"
+ operator: "NotIn"
+ values: ["helm"]
+- apiVersion: "v1"
+ kindsRegexp: "^serviceaccounts$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+- apiVersion: "v1"
+ kindsRegexp: "^configmaps$"
+ namespaces:
+ - "cattle-system"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^roles$|^rolebindings$"
+ namespaceRegexp: "^cattle-|^p-|^c-|^local$|^user-|^u-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterrolebindings$"
+ resourceNameRegexp: "^cattle-|^clusterrolebinding-|^globaladmin-user-|^grb-u-"
+- apiVersion: "rbac.authorization.k8s.io/v1"
+ kindsRegexp: "^clusterroles$"
+ resourceNameRegexp: "^cattle-|^p-|^c-|^local-|^user-|^u-|^project-|^create-ns$"
+- apiVersion: "apiextensions.k8s.io/v1beta1"
+ kindsRegexp: "."
+ resourceNameRegexp: "management.cattle.io$|project.cattle.io$|catalog.cattle.io$|resources.cattle.io$"
+- apiVersion: "management.cattle.io/v3"
+ kindsRegexp: "."
+- apiVersion: "project.cattle.io/v3"
+ kindsRegexp: "."
+- apiVersion: "catalog.cattle.io/v1"
+ kindsRegexp: "^clusterrepos$"
+- apiVersion: "resources.cattle.io/v1"
+ kindsRegexp: "^ResourceSet$"
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/templates/_helpers.tpl b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/_helpers.tpl
new file mode 100755
index 000000000..411cfc63a
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/_helpers.tpl
@@ -0,0 +1,76 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "backupRestore.fullname" -}}
+{{- .Chart.Name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "backupRestore.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "backupRestore.labels" -}}
+helm.sh/chart: {{ include "backupRestore.chart" . }}
+{{ include "backupRestore.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "backupRestore.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "backupRestore.fullname" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+resources.cattle.io/operator: backup-restore
+{{- end }}
+
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "backupRestore.serviceAccountName" -}}
+{{ include "backupRestore.fullname" . }}
+{{- end }}
+
+
+{{- define "backupRestore.s3SecretName" -}}
+{{- printf "%s-%s" .Chart.Name "s3" | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create PVC name using release and revision number.
+*/}}
+{{- define "backupRestore.pvcName" -}}
+{{- printf "%s-%d" .Release.Name .Release.Revision }}
+{{- end }}
+
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/templates/clusterrolebinding.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/clusterrolebinding.yaml
new file mode 100755
index 000000000..cf4abf670
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/clusterrolebinding.yaml
@@ -0,0 +1,14 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+subjects:
+- kind: ServiceAccount
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/templates/deployment.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/deployment.yaml
new file mode 100755
index 000000000..776351ae5
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/deployment.yaml
@@ -0,0 +1,59 @@
+{{- if and .Values.s3.enabled .Values.persistence.enabled }}
+{{- fail "\n\nCannot configure both s3 and PV for storing backups" }}
+{{- end }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "backupRestore.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ selector:
+ matchLabels:
+ {{- include "backupRestore.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ labels:
+ {{- include "backupRestore.selectorLabels" . | nindent 8 }}
+ annotations:
+ checksum/s3: {{ include (print $.Template.BasePath "/s3-secret.yaml") . | sha256sum }}
+ checksum/pvc: {{ include (print $.Template.BasePath "/pvc.yaml") . | sha256sum }}
+ spec:
+ serviceAccountName: {{ include "backupRestore.serviceAccountName" . }}
+ containers:
+ - name: {{ .Chart.Name }}
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: Always
+ env:
+ - name: CHART_NAMESPACE
+ value: {{ .Release.Namespace }}
+ {{- if .Values.s3.enabled }}
+ - name: DEFAULT_S3_BACKUP_STORAGE_LOCATION
+ value: {{ include "backupRestore.s3SecretName" . }}
+ {{- end }}
+ {{- if .Values.persistence.enabled }}
+ - name: DEFAULT_PERSISTENCE_ENABLED
+ value: "persistence-enabled"
+ volumeMounts:
+ - mountPath: "/var/lib/backups"
+ name: pv-storage
+ volumes:
+ - name: pv-storage
+ persistentVolumeClaim:
+ claimName: {{ include "backupRestore.pvcName" . }}
+ {{- end }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux-node-tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/templates/pvc.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/pvc.yaml
new file mode 100755
index 000000000..ff57e4dab
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/pvc.yaml
@@ -0,0 +1,27 @@
+{{- if and .Values.persistence.enabled -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+ name: {{ include "backupRestore.pvcName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+spec:
+ accessModes:
+ - ReadWriteOnce
+ resources:
+ {{- with .Values.persistence }}
+ requests:
+ storage: {{ .size | quote }}
+{{- if .storageClass }}
+{{- if (eq "-" .storageClass) }}
+ storageClassName: ""
+{{- else }}
+ storageClassName: {{ .storageClass | quote }}
+{{- end }}
+{{- end }}
+{{- if .volumeName }}
+ volumeName: {{ .volumeName | quote }}
+{{- end }}
+{{- end }}
+{{- end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/templates/rancher-resourceset.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/rancher-resourceset.yaml
new file mode 100755
index 000000000..05add8824
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/rancher-resourceset.yaml
@@ -0,0 +1,13 @@
+apiVersion: resources.cattle.io/v1
+kind: ResourceSet
+metadata:
+ name: rancher-resource-set
+controllerReferences:
+ - apiVersion: "apps/v1"
+ resource: "deployments"
+ name: "rancher"
+ namespace: "cattle-system"
+resourceSelectors:
+{{- range $path, $_ := .Files.Glob "files/default-resourceset-contents/*.yaml" -}}
+ {{- $.Files.Get $path | nindent 2 -}}
+{{- end -}}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/templates/s3-secret.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/s3-secret.yaml
new file mode 100755
index 000000000..a07623d90
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/s3-secret.yaml
@@ -0,0 +1,31 @@
+{{- if .Values.s3.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ include "backupRestore.s3SecretName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
+type: Opaque
+stringData:
+ {{- with .Values.s3 }}
+ {{- if .credentialSecretName }}
+ credentialSecretName: {{ .credentialSecretName }}
+ credentialSecretNamespace: {{ required "When providing a Secret containing S3 credentials, a valid .Values.credentialSecretNamespace must be provided" .credentialSecretNamespace }}
+ {{- end }}
+ {{- if .region }}
+ region: {{ .region }}
+ {{- end }}
+ bucketName: {{ required "A valid .Values.bucketName is required for configuring S3 compatible storage as the default backup storage location" .bucketName }}
+ {{- if .folder }}
+ folder: {{ .folder }}
+ {{- end }}
+ endpoint: {{ required "A valid .Values.endpoint is required for configuring S3 compatible storage as the default backup storage location" .endpoint }}
+ {{- if .endpointCA }}
+ endpointCA: {{ .endpointCA }}
+ {{- end }}
+ {{- if .insecureTLSSkipVerify }}
+ insecureTLSSkipVerify: {{ .insecureTLSSkipVerify | quote }}
+ {{- end }}
+ {{- end }}
+{{ end }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/templates/serviceaccount.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/serviceaccount.yaml
new file mode 100755
index 000000000..f333b746c
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "backupRestore.serviceAccountName" . }}
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "backupRestore.labels" . | nindent 4 }}
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/templates/validate-install-crd.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/validate-install-crd.yaml
new file mode 100755
index 000000000..f63fd2e2e
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/templates/validate-install-crd.yaml
@@ -0,0 +1,16 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "resources.cattle.io/v1/Backup" false -}}
+# {{- set $found "resources.cattle.io/v1/ResourceSet" false -}}
+# {{- set $found "resources.cattle.io/v1/Restore" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-backup/rancher-backup/1.0.400/values.yaml b/released/charts/rancher-backup/rancher-backup/1.0.400/values.yaml
new file mode 100755
index 000000000..d6bb015bc
--- /dev/null
+++ b/released/charts/rancher-backup/rancher-backup/1.0.400/values.yaml
@@ -0,0 +1,49 @@
+image:
+ repository: rancher/backup-restore-operator
+ tag: v1.0.4-rc3
+
+## Default s3 bucket for storing all backup files created by the backup-restore-operator
+s3:
+ enabled: false
+ ## credentialSecretName if set, should be the name of the Secret containing AWS credentials.
+ ## To use IAM Role, don't set this field
+ credentialSecretName: ""
+ credentialSecretNamespace: ""
+ region: ""
+ bucketName: ""
+ folder: ""
+ endpoint: ""
+ endpointCA: ""
+ insecureTLSSkipVerify: false
+
+## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
+## If persistence is enabled, operator will create a PVC with mountPath /var/lib/backups
+persistence:
+ enabled: false
+
+ ## If defined, storageClassName:
+ ## If set to "-", storageClassName: "", which disables dynamic provisioning
+ ## If undefined (the default) or set to null, no storageClassName spec is
+ ## set, choosing the default provisioner. (gp2 on AWS, standard on
+ ## GKE, AWS & OpenStack).
+ ## Refer https://kubernetes.io/docs/concepts/storage/persistent-volumes/#class-1
+ ##
+ storageClass: "-"
+
+ ## If you want to disable dynamic provisioning by setting storageClass to "-" above,
+ ## and want to target a particular PV, provide name of the target volume
+ volumeName: ""
+
+ ## Only certain StorageClasses allow resizing PVs; Refer https://kubernetes.io/blog/2018/07/12/resizing-persistent-volumes-using-kubernetes/
+ size: 2Gi
+
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/Chart.yaml
new file mode 100644
index 000000000..de2b2e1a4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/release-name: rancher-cis-benchmark-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-cis-benchmark.
+name: rancher-cis-benchmark-crd
+type: application
+version: 1.0.100
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/README.md
new file mode 100644
index 000000000..6c3044b1a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/README.md
@@ -0,0 +1,2 @@
+# rancher-cis-benchmark-crd
+A Rancher chart that installs the CRDs used by [rancher-cis-benchmark](https://github.com/rancher/dev-charts/tree/master/packages/rancher-cis-benchmark).
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscan.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscan.yaml
new file mode 100644
index 000000000..921430fb4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscan.yaml
@@ -0,0 +1,112 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscans.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.lastRunScanProfileName
+ name: ClusterScanProfile
+ type: string
+ - JSONPath: .status.summary.total
+ name: Total
+ type: string
+ - JSONPath: .status.summary.pass
+ name: Pass
+ type: string
+ - JSONPath: .status.summary.fail
+ name: Fail
+ type: string
+ - JSONPath: .status.summary.skip
+ name: Skip
+ type: string
+ - JSONPath: .status.summary.notApplicable
+ name: Not Applicable
+ type: string
+ - JSONPath: .status.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScan
+ plural: clusterscans
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ scanProfileName:
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ nullable: true
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ lastRunScanProfileName:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ summary:
+ nullable: true
+ properties:
+ fail:
+ type: integer
+ notApplicable:
+ type: integer
+ pass:
+ type: integer
+ skip:
+ type: integer
+ total:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanbenchmark.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanbenchmark.yaml
new file mode 100644
index 000000000..4ad81c651
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanbenchmark.yaml
@@ -0,0 +1,49 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanbenchmarks.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.clusterProvider
+ name: ClusterProvider
+ type: string
+ - JSONPath: .spec.minKubernetesVersion
+ name: MinKubernetesVersion
+ type: string
+ - JSONPath: .spec.maxKubernetesVersion
+ name: MaxKubernetesVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanBenchmark
+ plural: clusterscanbenchmarks
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clusterProvider:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapName:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapNameSpace:
+ nullable: true
+ type: string
+ maxKubernetesVersion:
+ nullable: true
+ type: string
+ minKubernetesVersion:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanprofile.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanprofile.yaml
new file mode 100644
index 000000000..21bb68396
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanprofile.yaml
@@ -0,0 +1,37 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanprofiles.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanProfile
+ plural: clusterscanprofiles
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ skipTests:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanreport.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanreport.yaml
new file mode 100644
index 000000000..017020a95
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.100/templates/clusterscanreport.yaml
@@ -0,0 +1,40 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanreports.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanReport
+ plural: clusterscanreports
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ reportJSON:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/Chart.yaml
new file mode 100644
index 000000000..4f913ffe4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/release-name: rancher-cis-benchmark-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-cis-benchmark.
+name: rancher-cis-benchmark-crd
+type: application
+version: 1.0.200
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/README.md
new file mode 100644
index 000000000..f6d9ef621
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/README.md
@@ -0,0 +1,2 @@
+# rancher-cis-benchmark-crd
+A Rancher chart that installs the CRDs used by rancher-cis-benchmark.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscan.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscan.yaml
new file mode 100644
index 000000000..921430fb4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscan.yaml
@@ -0,0 +1,112 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscans.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.lastRunScanProfileName
+ name: ClusterScanProfile
+ type: string
+ - JSONPath: .status.summary.total
+ name: Total
+ type: string
+ - JSONPath: .status.summary.pass
+ name: Pass
+ type: string
+ - JSONPath: .status.summary.fail
+ name: Fail
+ type: string
+ - JSONPath: .status.summary.skip
+ name: Skip
+ type: string
+ - JSONPath: .status.summary.notApplicable
+ name: Not Applicable
+ type: string
+ - JSONPath: .status.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScan
+ plural: clusterscans
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ scanProfileName:
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ nullable: true
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ lastRunScanProfileName:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ summary:
+ nullable: true
+ properties:
+ fail:
+ type: integer
+ notApplicable:
+ type: integer
+ pass:
+ type: integer
+ skip:
+ type: integer
+ total:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanbenchmark.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanbenchmark.yaml
new file mode 100644
index 000000000..4ad81c651
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanbenchmark.yaml
@@ -0,0 +1,49 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanbenchmarks.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.clusterProvider
+ name: ClusterProvider
+ type: string
+ - JSONPath: .spec.minKubernetesVersion
+ name: MinKubernetesVersion
+ type: string
+ - JSONPath: .spec.maxKubernetesVersion
+ name: MaxKubernetesVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanBenchmark
+ plural: clusterscanbenchmarks
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clusterProvider:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapName:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapNameSpace:
+ nullable: true
+ type: string
+ maxKubernetesVersion:
+ nullable: true
+ type: string
+ minKubernetesVersion:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanprofile.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanprofile.yaml
new file mode 100644
index 000000000..21bb68396
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanprofile.yaml
@@ -0,0 +1,37 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanprofiles.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanProfile
+ plural: clusterscanprofiles
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ skipTests:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanreport.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanreport.yaml
new file mode 100644
index 000000000..017020a95
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.200/templates/clusterscanreport.yaml
@@ -0,0 +1,40 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanreports.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanReport
+ plural: clusterscanreports
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ reportJSON:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/Chart.yaml
new file mode 100644
index 000000000..e5ad1ef62
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/release-name: rancher-cis-benchmark-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-cis-benchmark.
+name: rancher-cis-benchmark-crd
+type: application
+version: 1.0.300
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/README.md
new file mode 100644
index 000000000..f6d9ef621
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/README.md
@@ -0,0 +1,2 @@
+# rancher-cis-benchmark-crd
+A Rancher chart that installs the CRDs used by rancher-cis-benchmark.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscan.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscan.yaml
new file mode 100644
index 000000000..beca6e1f8
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscan.yaml
@@ -0,0 +1,149 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscans.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.lastRunScanProfileName
+ name: ClusterScanProfile
+ type: string
+ - JSONPath: .status.summary.total
+ name: Total
+ type: string
+ - JSONPath: .status.summary.pass
+ name: Pass
+ type: string
+ - JSONPath: .status.summary.fail
+ name: Fail
+ type: string
+ - JSONPath: .status.summary.skip
+ name: Skip
+ type: string
+ - JSONPath: .status.summary.warn
+ name: Warn
+ type: string
+ - JSONPath: .status.summary.notApplicable
+ name: Not Applicable
+ type: string
+ - JSONPath: .status.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.scheduledScanConfig.cronSchedule
+ name: CronSchedule
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScan
+ plural: clusterscans
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ scanProfileName:
+ nullable: true
+ type: string
+ scheduledScanConfig:
+ nullable: true
+ properties:
+ cronSchedule:
+ nullable: true
+ type: string
+ retentionCount:
+ type: integer
+ scanAlertRule:
+ nullable: true
+ properties:
+ alertOnComplete:
+ type: boolean
+ alertOnFailure:
+ type: boolean
+ type: object
+ type: object
+ scoreWarning:
+ enum:
+ - pass
+ - fail
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ NextScanAt:
+ nullable: true
+ type: string
+ ScanAlertingRuleName:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ nullable: true
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ lastRunScanProfileName:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ summary:
+ nullable: true
+ properties:
+ fail:
+ type: integer
+ notApplicable:
+ type: integer
+ pass:
+ type: integer
+ skip:
+ type: integer
+ total:
+ type: integer
+ warn:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanbenchmark.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanbenchmark.yaml
new file mode 100644
index 000000000..aa6fc2218
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanbenchmark.yaml
@@ -0,0 +1,55 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanbenchmarks.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.clusterProvider
+ name: ClusterProvider
+ type: string
+ - JSONPath: .spec.minKubernetesVersion
+ name: MinKubernetesVersion
+ type: string
+ - JSONPath: .spec.maxKubernetesVersion
+ name: MaxKubernetesVersion
+ type: string
+ - JSONPath: .spec.customBenchmarkConfigMapName
+ name: customBenchmarkConfigMapName
+ type: string
+ - JSONPath: .spec.customBenchmarkConfigMapNamespace
+ name: customBenchmarkConfigMapNamespace
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanBenchmark
+ plural: clusterscanbenchmarks
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clusterProvider:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapName:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapNamespace:
+ nullable: true
+ type: string
+ maxKubernetesVersion:
+ nullable: true
+ type: string
+ minKubernetesVersion:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanprofile.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanprofile.yaml
new file mode 100644
index 000000000..21bb68396
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanprofile.yaml
@@ -0,0 +1,37 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanprofiles.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanProfile
+ plural: clusterscanprofiles
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ skipTests:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanreport.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanreport.yaml
new file mode 100644
index 000000000..017020a95
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.300/templates/clusterscanreport.yaml
@@ -0,0 +1,40 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanreports.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanReport
+ plural: clusterscanreports
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ reportJSON:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/Chart.yaml
new file mode 100755
index 000000000..3edb07a29
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/release-name: rancher-cis-benchmark-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-cis-benchmark.
+name: rancher-cis-benchmark-crd
+type: application
+version: 1.0.301
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/README.md
new file mode 100755
index 000000000..f6d9ef621
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/README.md
@@ -0,0 +1,2 @@
+# rancher-cis-benchmark-crd
+A Rancher chart that installs the CRDs used by rancher-cis-benchmark.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscan.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscan.yaml
new file mode 100755
index 000000000..beca6e1f8
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscan.yaml
@@ -0,0 +1,149 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscans.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.lastRunScanProfileName
+ name: ClusterScanProfile
+ type: string
+ - JSONPath: .status.summary.total
+ name: Total
+ type: string
+ - JSONPath: .status.summary.pass
+ name: Pass
+ type: string
+ - JSONPath: .status.summary.fail
+ name: Fail
+ type: string
+ - JSONPath: .status.summary.skip
+ name: Skip
+ type: string
+ - JSONPath: .status.summary.warn
+ name: Warn
+ type: string
+ - JSONPath: .status.summary.notApplicable
+ name: Not Applicable
+ type: string
+ - JSONPath: .status.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.scheduledScanConfig.cronSchedule
+ name: CronSchedule
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScan
+ plural: clusterscans
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ scanProfileName:
+ nullable: true
+ type: string
+ scheduledScanConfig:
+ nullable: true
+ properties:
+ cronSchedule:
+ nullable: true
+ type: string
+ retentionCount:
+ type: integer
+ scanAlertRule:
+ nullable: true
+ properties:
+ alertOnComplete:
+ type: boolean
+ alertOnFailure:
+ type: boolean
+ type: object
+ type: object
+ scoreWarning:
+ enum:
+ - pass
+ - fail
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ NextScanAt:
+ nullable: true
+ type: string
+ ScanAlertingRuleName:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ nullable: true
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ lastRunScanProfileName:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ summary:
+ nullable: true
+ properties:
+ fail:
+ type: integer
+ notApplicable:
+ type: integer
+ pass:
+ type: integer
+ skip:
+ type: integer
+ total:
+ type: integer
+ warn:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanbenchmark.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanbenchmark.yaml
new file mode 100755
index 000000000..aa6fc2218
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanbenchmark.yaml
@@ -0,0 +1,55 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanbenchmarks.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.clusterProvider
+ name: ClusterProvider
+ type: string
+ - JSONPath: .spec.minKubernetesVersion
+ name: MinKubernetesVersion
+ type: string
+ - JSONPath: .spec.maxKubernetesVersion
+ name: MaxKubernetesVersion
+ type: string
+ - JSONPath: .spec.customBenchmarkConfigMapName
+ name: customBenchmarkConfigMapName
+ type: string
+ - JSONPath: .spec.customBenchmarkConfigMapNamespace
+ name: customBenchmarkConfigMapNamespace
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanBenchmark
+ plural: clusterscanbenchmarks
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clusterProvider:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapName:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapNamespace:
+ nullable: true
+ type: string
+ maxKubernetesVersion:
+ nullable: true
+ type: string
+ minKubernetesVersion:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanprofile.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanprofile.yaml
new file mode 100755
index 000000000..21bb68396
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanprofile.yaml
@@ -0,0 +1,37 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanprofiles.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanProfile
+ plural: clusterscanprofiles
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ skipTests:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanreport.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanreport.yaml
new file mode 100755
index 000000000..017020a95
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.301/templates/clusterscanreport.yaml
@@ -0,0 +1,40 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanreports.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanReport
+ plural: clusterscanreports
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ reportJSON:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/Chart.yaml
new file mode 100755
index 000000000..5d62a6b99
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/release-name: rancher-cis-benchmark-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-cis-benchmark.
+name: rancher-cis-benchmark-crd
+type: application
+version: 1.0.400
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/README.md
new file mode 100755
index 000000000..f6d9ef621
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/README.md
@@ -0,0 +1,2 @@
+# rancher-cis-benchmark-crd
+A Rancher chart that installs the CRDs used by rancher-cis-benchmark.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscan.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscan.yaml
new file mode 100755
index 000000000..beca6e1f8
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscan.yaml
@@ -0,0 +1,149 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscans.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.lastRunScanProfileName
+ name: ClusterScanProfile
+ type: string
+ - JSONPath: .status.summary.total
+ name: Total
+ type: string
+ - JSONPath: .status.summary.pass
+ name: Pass
+ type: string
+ - JSONPath: .status.summary.fail
+ name: Fail
+ type: string
+ - JSONPath: .status.summary.skip
+ name: Skip
+ type: string
+ - JSONPath: .status.summary.warn
+ name: Warn
+ type: string
+ - JSONPath: .status.summary.notApplicable
+ name: Not Applicable
+ type: string
+ - JSONPath: .status.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.scheduledScanConfig.cronSchedule
+ name: CronSchedule
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScan
+ plural: clusterscans
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ scanProfileName:
+ nullable: true
+ type: string
+ scheduledScanConfig:
+ nullable: true
+ properties:
+ cronSchedule:
+ nullable: true
+ type: string
+ retentionCount:
+ type: integer
+ scanAlertRule:
+ nullable: true
+ properties:
+ alertOnComplete:
+ type: boolean
+ alertOnFailure:
+ type: boolean
+ type: object
+ type: object
+ scoreWarning:
+ enum:
+ - pass
+ - fail
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ NextScanAt:
+ nullable: true
+ type: string
+ ScanAlertingRuleName:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ nullable: true
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ lastRunScanProfileName:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ summary:
+ nullable: true
+ properties:
+ fail:
+ type: integer
+ notApplicable:
+ type: integer
+ pass:
+ type: integer
+ skip:
+ type: integer
+ total:
+ type: integer
+ warn:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanbenchmark.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanbenchmark.yaml
new file mode 100755
index 000000000..aa6fc2218
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanbenchmark.yaml
@@ -0,0 +1,55 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanbenchmarks.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.clusterProvider
+ name: ClusterProvider
+ type: string
+ - JSONPath: .spec.minKubernetesVersion
+ name: MinKubernetesVersion
+ type: string
+ - JSONPath: .spec.maxKubernetesVersion
+ name: MaxKubernetesVersion
+ type: string
+ - JSONPath: .spec.customBenchmarkConfigMapName
+ name: customBenchmarkConfigMapName
+ type: string
+ - JSONPath: .spec.customBenchmarkConfigMapNamespace
+ name: customBenchmarkConfigMapNamespace
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanBenchmark
+ plural: clusterscanbenchmarks
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clusterProvider:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapName:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapNamespace:
+ nullable: true
+ type: string
+ maxKubernetesVersion:
+ nullable: true
+ type: string
+ minKubernetesVersion:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanprofile.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanprofile.yaml
new file mode 100755
index 000000000..21bb68396
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanprofile.yaml
@@ -0,0 +1,37 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanprofiles.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanProfile
+ plural: clusterscanprofiles
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ skipTests:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanreport.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanreport.yaml
new file mode 100755
index 000000000..017020a95
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.400/templates/clusterscanreport.yaml
@@ -0,0 +1,40 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanreports.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanReport
+ plural: clusterscanreports
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ reportJSON:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/Chart.yaml
new file mode 100755
index 000000000..d20c8563b
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/release-name: rancher-cis-benchmark-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-cis-benchmark.
+name: rancher-cis-benchmark-crd
+type: application
+version: 1.0.402
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/README.md
new file mode 100755
index 000000000..f6d9ef621
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/README.md
@@ -0,0 +1,2 @@
+# rancher-cis-benchmark-crd
+A Rancher chart that installs the CRDs used by rancher-cis-benchmark.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscan.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscan.yaml
new file mode 100755
index 000000000..beca6e1f8
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscan.yaml
@@ -0,0 +1,149 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscans.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .status.lastRunScanProfileName
+ name: ClusterScanProfile
+ type: string
+ - JSONPath: .status.summary.total
+ name: Total
+ type: string
+ - JSONPath: .status.summary.pass
+ name: Pass
+ type: string
+ - JSONPath: .status.summary.fail
+ name: Fail
+ type: string
+ - JSONPath: .status.summary.skip
+ name: Skip
+ type: string
+ - JSONPath: .status.summary.warn
+ name: Warn
+ type: string
+ - JSONPath: .status.summary.notApplicable
+ name: Not Applicable
+ type: string
+ - JSONPath: .status.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.scheduledScanConfig.cronSchedule
+ name: CronSchedule
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScan
+ plural: clusterscans
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ scanProfileName:
+ nullable: true
+ type: string
+ scheduledScanConfig:
+ nullable: true
+ properties:
+ cronSchedule:
+ nullable: true
+ type: string
+ retentionCount:
+ type: integer
+ scanAlertRule:
+ nullable: true
+ properties:
+ alertOnComplete:
+ type: boolean
+ alertOnFailure:
+ type: boolean
+ type: object
+ type: object
+ scoreWarning:
+ enum:
+ - pass
+ - fail
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ NextScanAt:
+ nullable: true
+ type: string
+ ScanAlertingRuleName:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ nullable: true
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ lastRunScanProfileName:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ summary:
+ nullable: true
+ properties:
+ fail:
+ type: integer
+ notApplicable:
+ type: integer
+ pass:
+ type: integer
+ skip:
+ type: integer
+ total:
+ type: integer
+ warn:
+ type: integer
+ type: object
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanbenchmark.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanbenchmark.yaml
new file mode 100755
index 000000000..aa6fc2218
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanbenchmark.yaml
@@ -0,0 +1,55 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanbenchmarks.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.clusterProvider
+ name: ClusterProvider
+ type: string
+ - JSONPath: .spec.minKubernetesVersion
+ name: MinKubernetesVersion
+ type: string
+ - JSONPath: .spec.maxKubernetesVersion
+ name: MaxKubernetesVersion
+ type: string
+ - JSONPath: .spec.customBenchmarkConfigMapName
+ name: customBenchmarkConfigMapName
+ type: string
+ - JSONPath: .spec.customBenchmarkConfigMapNamespace
+ name: customBenchmarkConfigMapNamespace
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanBenchmark
+ plural: clusterscanbenchmarks
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clusterProvider:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapName:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapNamespace:
+ nullable: true
+ type: string
+ maxKubernetesVersion:
+ nullable: true
+ type: string
+ minKubernetesVersion:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanprofile.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanprofile.yaml
new file mode 100755
index 000000000..21bb68396
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanprofile.yaml
@@ -0,0 +1,37 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanprofiles.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanProfile
+ plural: clusterscanprofiles
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ skipTests:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanreport.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanreport.yaml
new file mode 100755
index 000000000..017020a95
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402/templates/clusterscanreport.yaml
@@ -0,0 +1,40 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanreports.cis.cattle.io
+spec:
+ additionalPrinterColumns:
+ - JSONPath: .spec.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - JSONPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanReport
+ plural: clusterscanreports
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ reportJSON:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ version: v1
+ versions:
+ - name: v1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/Chart.yaml
new file mode 100644
index 000000000..7ba2c55be
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/Chart.yaml
@@ -0,0 +1,17 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
+ catalog.cattle.io/release-name: rancher-cis-benchmark
+ catalog.cattle.io/ui-component: rancher-cis-benchmark
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v1.0.1
+description: The cis-operator enables running CIS benchmark security scans on a kubernetes
+ cluster
+icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
+keywords:
+- security
+name: rancher-cis-benchmark
+version: 1.0.100
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/README.md
new file mode 100644
index 000000000..50beab58b
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/README.md
@@ -0,0 +1,9 @@
+# Rancher CIS Benchmark Chart
+
+The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded.
+
+# Installation
+
+```
+helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system
+```
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/_helpers.tpl b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/_helpers.tpl
new file mode 100644
index 000000000..67f4ce116
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/_helpers.tpl
@@ -0,0 +1,23 @@
+{{/* Ensure namespace is set the same everywhere */}}
+{{- define "cis.namespace" -}}
+ {{- .Release.Namespace | default "cis-operator-system" -}}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux_node_tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-cis-1.5.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-cis-1.5.yaml
new file mode 100644
index 000000000..39e8b834a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-cis-1.5.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.5
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-eks-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-eks-1.0.yaml
new file mode 100644
index 000000000..bd2e32cd3
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-eks-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: eks-1.0
+spec:
+ clusterProvider: eks
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-gke-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-gke-1.0.yaml
new file mode 100644
index 000000000..72122e8c5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-gke-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: gke-1.0
+spec:
+ clusterProvider: gke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-rke-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-rke-cis-1.5-hardened.yaml
new file mode 100644
index 000000000..b5627f966
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-rke-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-rke-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-rke-cis-1.5-permissive.yaml
new file mode 100644
index 000000000..95f80c0f0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/benchmark-rke-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/cis-roles.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/cis-roles.yaml
new file mode 100644
index 000000000..08af2b185
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/cis-roles.yaml
@@ -0,0 +1,51 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-admin: "true"
+ name: cis-admin
+ namespace: {{ template "cis.namespace" . }}
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["create", "update", "delete", "patch","get", "watch", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-edit: "true"
+ namespace: {{ template "cis.namespace" . }}
+ name: cis-edit
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["create", "update", "delete", "patch","get", "watch", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ labels:
+ rbac.authorization.k8s.io/aggregate-to-view: "true"
+ namespace: {{ template "cis.namespace" . }}
+ name: cis-view
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["get", "watch", "list"]
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/configmap.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/configmap.yaml
new file mode 100644
index 000000000..7f14b1396
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/configmap.yaml
@@ -0,0 +1,11 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: default-clusterscanprofiles
+ namespace: {{ template "cis.namespace" . }}
+data:
+ # Default ClusterScanProfiles per cluster provider type
+ rke: "rke-profile-permissive"
+ eks: "eks-profile"
+ gke: "gke-profile"
+ default: "cis-1.5-profile"
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/deployment.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/deployment.yaml
new file mode 100644
index 000000000..1f64ea5db
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/deployment.yaml
@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: cis-operator
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ cis.cattle.io/operator: cis-operator
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ template:
+ metadata:
+ labels:
+ cis.cattle.io/operator: cis-operator
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ containers:
+ - name: cis-operator
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}'
+ imagePullPolicy: Always
+ env:
+ - name: SECURITY_SCAN_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }}
+ - name: SECURITY_SCAN_IMAGE_TAG
+ value: {{ .Values.image.securityScan.tag }}
+ - name: SONOBUOY_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }}
+ - name: SONOBUOY_IMAGE_TAG
+ value: {{ .Values.image.sonobuoy.tag }}
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux_node_tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/network_policy_allow_all.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/network_policy_allow_all.yaml
new file mode 100644
index 000000000..6ed5d645e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/patch_default_serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/patch_default_serviceaccount.yaml
new file mode 100644
index 000000000..1efa3ed1c
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ template "cis.namespace" . }}]
+ backoffLimit: 1
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/rbac.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/rbac.yaml
new file mode 100644
index 000000000..816991f23
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/rbac.yaml
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: cis-operator-role
+subjects:
+- kind: ServiceAccount
+ name: cis-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: cis-operator-installer
+subjects:
+- kind: ServiceAccount
+ name: cis-operator-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-cis-1.5.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-cis-1.5.yml
new file mode 100644
index 000000000..d69ae9dd5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-cis-1.5.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.5-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.5
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-rke-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-rke-hardened.yml
new file mode 100644
index 000000000..2a9819389
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-rke-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-hardened
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-rke-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-rke-permissive.yml
new file mode 100644
index 000000000..01266cf06
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofile-rke-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofileeks.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofileeks.yml
new file mode 100644
index 000000000..49c7e0246
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofileeks.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: eks-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: eks-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofilegke.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofilegke.yml
new file mode 100644
index 000000000..2ddd0686f
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/scanprofilegke.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: gke-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: gke-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/serviceaccount.yaml
new file mode 100644
index 000000000..ec48ec622
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/serviceaccount.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ name: cis-operator-serviceaccount
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-serviceaccount
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/validate-install-crd.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..bf516759a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-cis-benchmark-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/values.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/values.yaml
new file mode 100644
index 000000000..c726c9bc4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.100/values.yaml
@@ -0,0 +1,39 @@
+# Default values for rancher-cis-benchmark.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+image:
+ cisoperator:
+ repository: rancher/cis-operator
+ tag: v1.0.1
+ securityScan:
+ repository: rancher/security-scan
+ tag: v0.2.1
+ sonobuoy:
+ repository: rancher/sonobuoy-sonobuoy
+ tag: v0.16.3
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/Chart.yaml
new file mode 100644
index 000000000..f07e91e78
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/Chart.yaml
@@ -0,0 +1,18 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: CIS Benchmark
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
+ catalog.cattle.io/release-name: rancher-cis-benchmark
+ catalog.cattle.io/ui-component: rancher-cis-benchmark
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v1.0.2
+description: The cis-operator enables running CIS benchmark security scans on a kubernetes
+ cluster
+icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
+keywords:
+- security
+name: rancher-cis-benchmark
+version: 1.0.200
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/README.md
new file mode 100644
index 000000000..50beab58b
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/README.md
@@ -0,0 +1,9 @@
+# Rancher CIS Benchmark Chart
+
+The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded.
+
+# Installation
+
+```
+helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system
+```
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/app-readme.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/app-readme.md
new file mode 100644
index 000000000..f170ba263
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/app-readme.md
@@ -0,0 +1,12 @@
+# Rancher CIS Benchmarks
+
+This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/).
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/).
+
+This chart installs the following components:
+
+- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded.
+- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed.
+- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans.
+- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/_helpers.tpl b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/_helpers.tpl
new file mode 100644
index 000000000..67f4ce116
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/_helpers.tpl
@@ -0,0 +1,23 @@
+{{/* Ensure namespace is set the same everywhere */}}
+{{- define "cis.namespace" -}}
+ {{- .Release.Namespace | default "cis-operator-system" -}}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux_node_tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-cis-1.5.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-cis-1.5.yaml
new file mode 100644
index 000000000..39e8b834a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-cis-1.5.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.5
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-eks-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-eks-1.0.yaml
new file mode 100644
index 000000000..bd2e32cd3
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-eks-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: eks-1.0
+spec:
+ clusterProvider: eks
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-gke-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-gke-1.0.yaml
new file mode 100644
index 000000000..72122e8c5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-gke-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: gke-1.0
+spec:
+ clusterProvider: gke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-rke-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-rke-cis-1.5-hardened.yaml
new file mode 100644
index 000000000..b5627f966
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-rke-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-rke-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-rke-cis-1.5-permissive.yaml
new file mode 100644
index 000000000..95f80c0f0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/benchmark-rke-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/cis-roles.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/cis-roles.yaml
new file mode 100644
index 000000000..b8b3989dc
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/cis-roles.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-admin
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["create", "update", "delete", "patch","get", "watch", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-view
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["get", "watch", "list"]
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/configmap.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/configmap.yaml
new file mode 100644
index 000000000..7f14b1396
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/configmap.yaml
@@ -0,0 +1,11 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: default-clusterscanprofiles
+ namespace: {{ template "cis.namespace" . }}
+data:
+ # Default ClusterScanProfiles per cluster provider type
+ rke: "rke-profile-permissive"
+ eks: "eks-profile"
+ gke: "gke-profile"
+ default: "cis-1.5-profile"
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/deployment.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/deployment.yaml
new file mode 100644
index 000000000..1f64ea5db
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/deployment.yaml
@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: cis-operator
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ cis.cattle.io/operator: cis-operator
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ template:
+ metadata:
+ labels:
+ cis.cattle.io/operator: cis-operator
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ containers:
+ - name: cis-operator
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}'
+ imagePullPolicy: Always
+ env:
+ - name: SECURITY_SCAN_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }}
+ - name: SECURITY_SCAN_IMAGE_TAG
+ value: {{ .Values.image.securityScan.tag }}
+ - name: SONOBUOY_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }}
+ - name: SONOBUOY_IMAGE_TAG
+ value: {{ .Values.image.sonobuoy.tag }}
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux_node_tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/network_policy_allow_all.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/network_policy_allow_all.yaml
new file mode 100644
index 000000000..6ed5d645e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/patch_default_serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/patch_default_serviceaccount.yaml
new file mode 100644
index 000000000..1efa3ed1c
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ template "cis.namespace" . }}]
+ backoffLimit: 1
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/rbac.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/rbac.yaml
new file mode 100644
index 000000000..816991f23
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/rbac.yaml
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: cis-operator-role
+subjects:
+- kind: ServiceAccount
+ name: cis-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: cis-operator-installer
+subjects:
+- kind: ServiceAccount
+ name: cis-operator-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-cis-1.5.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-cis-1.5.yml
new file mode 100644
index 000000000..d69ae9dd5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-cis-1.5.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.5-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.5
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-rke-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-rke-hardened.yml
new file mode 100644
index 000000000..2a9819389
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-rke-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-hardened
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-rke-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-rke-permissive.yml
new file mode 100644
index 000000000..01266cf06
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofile-rke-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofileeks.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofileeks.yml
new file mode 100644
index 000000000..49c7e0246
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofileeks.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: eks-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: eks-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofilegke.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofilegke.yml
new file mode 100644
index 000000000..2ddd0686f
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/scanprofilegke.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: gke-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: gke-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/serviceaccount.yaml
new file mode 100644
index 000000000..ec48ec622
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/serviceaccount.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ name: cis-operator-serviceaccount
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-serviceaccount
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/validate-install-crd.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..bf516759a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-cis-benchmark-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/values.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/values.yaml
new file mode 100644
index 000000000..c726c9bc4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.200/values.yaml
@@ -0,0 +1,39 @@
+# Default values for rancher-cis-benchmark.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+image:
+ cisoperator:
+ repository: rancher/cis-operator
+ tag: v1.0.1
+ securityScan:
+ repository: rancher/security-scan
+ tag: v0.2.1
+ sonobuoy:
+ repository: rancher/sonobuoy-sonobuoy
+ tag: v0.16.3
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/Chart.yaml
new file mode 100644
index 000000000..a55691657
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/Chart.yaml
@@ -0,0 +1,18 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: CIS Benchmark
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
+ catalog.cattle.io/release-name: rancher-cis-benchmark
+ catalog.cattle.io/ui-component: rancher-cis-benchmark
+apiVersion: v1
+appVersion: v1.0.3
+description: The cis-operator enables running CIS benchmark security scans on a kubernetes
+ cluster
+icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
+keywords:
+- security
+name: rancher-cis-benchmark
+version: 1.0.300
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/README.md
new file mode 100644
index 000000000..50beab58b
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/README.md
@@ -0,0 +1,9 @@
+# Rancher CIS Benchmark Chart
+
+The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded.
+
+# Installation
+
+```
+helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system
+```
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/app-readme.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/app-readme.md
new file mode 100644
index 000000000..5e495d605
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/app-readme.md
@@ -0,0 +1,15 @@
+# Rancher CIS Benchmarks
+
+This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/).
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/).
+
+This chart installs the following components:
+
+- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded.
+- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed.
+- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans.
+- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources.
+- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish.
+ - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts.
+ - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/_helpers.tpl b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/_helpers.tpl
new file mode 100644
index 000000000..67f4ce116
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/_helpers.tpl
@@ -0,0 +1,23 @@
+{{/* Ensure namespace is set the same everywhere */}}
+{{- define "cis.namespace" -}}
+ {{- .Release.Namespace | default "cis-operator-system" -}}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux_node_tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/alertingrule.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/alertingrule.yaml
new file mode 100644
index 000000000..1787c88a0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/alertingrule.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.alerts.enabled -}}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+ name: rancher-cis-pod-monitor
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ podMetricsEndpoints:
+ - port: cismetrics
+{{- end }}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-cis-1.5.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-cis-1.5.yaml
new file mode 100644
index 000000000..39e8b834a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-cis-1.5.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.5
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-cis-1.6.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-cis-1.6.yaml
new file mode 100644
index 000000000..93ba064f4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-cis-1.6.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.6
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-eks-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-eks-1.0.yaml
new file mode 100644
index 000000000..bd2e32cd3
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-eks-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: eks-1.0
+spec:
+ clusterProvider: eks
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-gke-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-gke-1.0.yaml
new file mode 100644
index 000000000..72122e8c5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-gke-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: gke-1.0
+spec:
+ clusterProvider: gke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.5-hardened.yaml
new file mode 100644
index 000000000..b5627f966
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.5-permissive.yaml
new file mode 100644
index 000000000..95f80c0f0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.6-hardened.yaml
new file mode 100644
index 000000000..d75de8154
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.6-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.6-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.6-permissive.yaml
new file mode 100644
index 000000000..52428f4a7
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke-cis-1.6-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.6-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke2-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke2-cis-1.5-hardened.yaml
new file mode 100644
index 000000000..3d83e9bd8
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke2-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.5-hardened
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.18.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke2-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke2-cis-1.5-permissive.yaml
new file mode 100644
index 000000000..f66aa8f6e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/benchmark-rke2-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.5-permissive
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.18.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/cis-roles.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/cis-roles.yaml
new file mode 100644
index 000000000..23c93dc65
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/cis-roles.yaml
@@ -0,0 +1,49 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-admin
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["create", "update", "delete", "patch","get", "watch", "list"]
+ - apiGroups:
+ - catalog.cattle.io
+ resources: ["apps"]
+ resourceNames: ["rancher-cis-benchmark"]
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-view
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - catalog.cattle.io
+ resources: ["apps"]
+ resourceNames: ["rancher-cis-benchmark"]
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs: ["get", "watch", "list"]
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/configmap.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/configmap.yaml
new file mode 100644
index 000000000..16e43f576
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/configmap.yaml
@@ -0,0 +1,14 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: default-clusterscanprofiles
+ namespace: {{ template "cis.namespace" . }}
+data:
+ # Default ClusterScanProfiles per cluster provider type
+ rke: |-
+ <1.16.0: rke-profile-permissive-1.5
+ >=1.16.0: rke-profile-permissive-1.6
+ rke2: "rke2-cis-1.5-profile-permissive"
+ eks: "eks-profile"
+ gke: "gke-profile"
+ default: "cis-1.6-profile"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/deployment.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/deployment.yaml
new file mode 100644
index 000000000..0d3c75e39
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/deployment.yaml
@@ -0,0 +1,57 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: cis-operator
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ cis.cattle.io/operator: cis-operator
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ template:
+ metadata:
+ labels:
+ cis.cattle.io/operator: cis-operator
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ containers:
+ - name: cis-operator
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}'
+ imagePullPolicy: Always
+ ports:
+ - name: cismetrics
+ containerPort: {{ .Values.alerts.metricsPort }}
+ env:
+ - name: SECURITY_SCAN_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }}
+ - name: SECURITY_SCAN_IMAGE_TAG
+ value: {{ .Values.image.securityScan.tag }}
+ - name: SONOBUOY_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }}
+ - name: SONOBUOY_IMAGE_TAG
+ value: {{ .Values.image.sonobuoy.tag }}
+ - name: CIS_ALERTS_METRICS_PORT
+ value: '{{ .Values.alerts.metricsPort }}'
+ - name: CIS_ALERTS_SEVERITY
+ value: {{ .Values.alerts.severity }}
+ - name: CIS_ALERTS_ENABLED
+ value: {{ .Values.alerts.enabled | default "false" | quote }}
+ - name: CLUSTER_NAME
+ value: {{ .Values.global.cattle.clusterName }}
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux_node_tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/network_policy_allow_all.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/network_policy_allow_all.yaml
new file mode 100644
index 000000000..6ed5d645e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/patch_default_serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/patch_default_serviceaccount.yaml
new file mode 100644
index 000000000..1efa3ed1c
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ template "cis.namespace" . }}]
+ backoffLimit: 1
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/rbac.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/rbac.yaml
new file mode 100644
index 000000000..816991f23
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/rbac.yaml
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: cis-operator-role
+subjects:
+- kind: ServiceAccount
+ name: cis-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: cis-operator-installer
+subjects:
+- kind: ServiceAccount
+ name: cis-operator-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-cis-1.5.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-cis-1.5.yml
new file mode 100644
index 000000000..d69ae9dd5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-cis-1.5.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.5-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.5
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-cis-1.6.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-cis-1.6.yaml
new file mode 100644
index 000000000..8a8d8bf88
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-cis-1.6.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.6-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.6
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.5-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.5-hardened.yml
new file mode 100644
index 000000000..4eabe158a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.5-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened-1.5
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-hardened
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.5-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.5-permissive.yml
new file mode 100644
index 000000000..1f78751d1
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.5-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive-1.5
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.6-hardened.yaml
new file mode 100644
index 000000000..d38febd80
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.6-hardened.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened-1.6
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.6-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.6-permissive.yaml
new file mode 100644
index 000000000..d31b5b0d2
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke-1.6-permissive.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive-1.6
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.6-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke2-cis-1.5-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke2-cis-1.5-hardened.yml
new file mode 100644
index 000000000..83eb3131e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke2-cis-1.5-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.5-profile-hardened
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.5-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke2-cis-1.5-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke2-cis-1.5-permissive.yml
new file mode 100644
index 000000000..40dc44bdf
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofile-rke2-cis-1.5-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.5-profile-permissive
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofileeks.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofileeks.yml
new file mode 100644
index 000000000..49c7e0246
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofileeks.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: eks-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: eks-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofilegke.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofilegke.yml
new file mode 100644
index 000000000..2ddd0686f
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/scanprofilegke.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: gke-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: gke-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/serviceaccount.yaml
new file mode 100644
index 000000000..ec48ec622
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/serviceaccount.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ name: cis-operator-serviceaccount
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-serviceaccount
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/validate-install-crd.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..bf516759a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-cis-benchmark-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/values.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/values.yaml
new file mode 100644
index 000000000..b75a7b6fc
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.300/values.yaml
@@ -0,0 +1,45 @@
+# Default values for rancher-cis-benchmark.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+image:
+ cisoperator:
+ repository: rancher/cis-operator
+ tag: v1.0.3
+ securityScan:
+ repository: rancher/security-scan
+ tag: v0.2.2
+ sonobuoy:
+ repository: rancher/sonobuoy-sonobuoy
+ tag: v0.16.3
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ clusterName: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
+
+alerts:
+ enabled: false
+ severity: warning
+ metricsPort: 8080
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/Chart.yaml
new file mode 100755
index 000000000..876903b86
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/Chart.yaml
@@ -0,0 +1,18 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: CIS Benchmark
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
+ catalog.cattle.io/release-name: rancher-cis-benchmark
+ catalog.cattle.io/ui-component: rancher-cis-benchmark
+apiVersion: v1
+appVersion: v1.0.3
+description: The cis-operator enables running CIS benchmark security scans on a kubernetes
+ cluster
+icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
+keywords:
+- security
+name: rancher-cis-benchmark
+version: 1.0.301
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/README.md
new file mode 100755
index 000000000..50beab58b
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/README.md
@@ -0,0 +1,9 @@
+# Rancher CIS Benchmark Chart
+
+The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded.
+
+# Installation
+
+```
+helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system
+```
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/app-readme.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/app-readme.md
new file mode 100755
index 000000000..5e495d605
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/app-readme.md
@@ -0,0 +1,15 @@
+# Rancher CIS Benchmarks
+
+This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/).
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/).
+
+This chart installs the following components:
+
+- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded.
+- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed.
+- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans.
+- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources.
+- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish.
+ - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts.
+ - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/_helpers.tpl b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/_helpers.tpl
new file mode 100755
index 000000000..67f4ce116
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/_helpers.tpl
@@ -0,0 +1,23 @@
+{{/* Ensure namespace is set the same everywhere */}}
+{{- define "cis.namespace" -}}
+ {{- .Release.Namespace | default "cis-operator-system" -}}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux_node_tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/alertingrule.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/alertingrule.yaml
new file mode 100755
index 000000000..1787c88a0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/alertingrule.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.alerts.enabled -}}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+ name: rancher-cis-pod-monitor
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ podMetricsEndpoints:
+ - port: cismetrics
+{{- end }}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-cis-1.5.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-cis-1.5.yaml
new file mode 100755
index 000000000..39e8b834a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-cis-1.5.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.5
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-cis-1.6.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-cis-1.6.yaml
new file mode 100755
index 000000000..93ba064f4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-cis-1.6.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.6
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-eks-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-eks-1.0.yaml
new file mode 100755
index 000000000..bd2e32cd3
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-eks-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: eks-1.0
+spec:
+ clusterProvider: eks
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-gke-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-gke-1.0.yaml
new file mode 100755
index 000000000..72122e8c5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-gke-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: gke-1.0
+spec:
+ clusterProvider: gke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.5-hardened.yaml
new file mode 100755
index 000000000..b5627f966
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.5-permissive.yaml
new file mode 100755
index 000000000..95f80c0f0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.6-hardened.yaml
new file mode 100755
index 000000000..d75de8154
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.6-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.6-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.6-permissive.yaml
new file mode 100755
index 000000000..52428f4a7
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke-cis-1.6-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.6-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke2-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke2-cis-1.5-hardened.yaml
new file mode 100755
index 000000000..3d83e9bd8
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke2-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.5-hardened
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.18.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke2-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke2-cis-1.5-permissive.yaml
new file mode 100755
index 000000000..f66aa8f6e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/benchmark-rke2-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.5-permissive
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.18.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/cis-roles.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/cis-roles.yaml
new file mode 100755
index 000000000..23c93dc65
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/cis-roles.yaml
@@ -0,0 +1,49 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-admin
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["create", "update", "delete", "patch","get", "watch", "list"]
+ - apiGroups:
+ - catalog.cattle.io
+ resources: ["apps"]
+ resourceNames: ["rancher-cis-benchmark"]
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-view
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - catalog.cattle.io
+ resources: ["apps"]
+ resourceNames: ["rancher-cis-benchmark"]
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs: ["get", "watch", "list"]
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/configmap.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/configmap.yaml
new file mode 100755
index 000000000..16e43f576
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/configmap.yaml
@@ -0,0 +1,14 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: default-clusterscanprofiles
+ namespace: {{ template "cis.namespace" . }}
+data:
+ # Default ClusterScanProfiles per cluster provider type
+ rke: |-
+ <1.16.0: rke-profile-permissive-1.5
+ >=1.16.0: rke-profile-permissive-1.6
+ rke2: "rke2-cis-1.5-profile-permissive"
+ eks: "eks-profile"
+ gke: "gke-profile"
+ default: "cis-1.6-profile"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/deployment.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/deployment.yaml
new file mode 100755
index 000000000..0d3c75e39
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/deployment.yaml
@@ -0,0 +1,57 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: cis-operator
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ cis.cattle.io/operator: cis-operator
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ template:
+ metadata:
+ labels:
+ cis.cattle.io/operator: cis-operator
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ containers:
+ - name: cis-operator
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}'
+ imagePullPolicy: Always
+ ports:
+ - name: cismetrics
+ containerPort: {{ .Values.alerts.metricsPort }}
+ env:
+ - name: SECURITY_SCAN_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }}
+ - name: SECURITY_SCAN_IMAGE_TAG
+ value: {{ .Values.image.securityScan.tag }}
+ - name: SONOBUOY_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }}
+ - name: SONOBUOY_IMAGE_TAG
+ value: {{ .Values.image.sonobuoy.tag }}
+ - name: CIS_ALERTS_METRICS_PORT
+ value: '{{ .Values.alerts.metricsPort }}'
+ - name: CIS_ALERTS_SEVERITY
+ value: {{ .Values.alerts.severity }}
+ - name: CIS_ALERTS_ENABLED
+ value: {{ .Values.alerts.enabled | default "false" | quote }}
+ - name: CLUSTER_NAME
+ value: {{ .Values.global.cattle.clusterName }}
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux_node_tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/network_policy_allow_all.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/network_policy_allow_all.yaml
new file mode 100755
index 000000000..6ed5d645e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/patch_default_serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/patch_default_serviceaccount.yaml
new file mode 100755
index 000000000..1efa3ed1c
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ template "cis.namespace" . }}]
+ backoffLimit: 1
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/rbac.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/rbac.yaml
new file mode 100755
index 000000000..816991f23
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/rbac.yaml
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: cis-operator-role
+subjects:
+- kind: ServiceAccount
+ name: cis-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: cis-operator-installer
+subjects:
+- kind: ServiceAccount
+ name: cis-operator-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-cis-1.5.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-cis-1.5.yml
new file mode 100755
index 000000000..d69ae9dd5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-cis-1.5.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.5-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.5
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-cis-1.6.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-cis-1.6.yaml
new file mode 100755
index 000000000..8a8d8bf88
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-cis-1.6.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.6-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.6
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.5-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.5-hardened.yml
new file mode 100755
index 000000000..4eabe158a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.5-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened-1.5
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-hardened
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.5-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.5-permissive.yml
new file mode 100755
index 000000000..1f78751d1
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.5-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive-1.5
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.6-hardened.yaml
new file mode 100755
index 000000000..d38febd80
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.6-hardened.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened-1.6
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.6-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.6-permissive.yaml
new file mode 100755
index 000000000..d31b5b0d2
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke-1.6-permissive.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive-1.6
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.6-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke2-cis-1.5-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke2-cis-1.5-hardened.yml
new file mode 100755
index 000000000..83eb3131e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke2-cis-1.5-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.5-profile-hardened
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.5-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke2-cis-1.5-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke2-cis-1.5-permissive.yml
new file mode 100755
index 000000000..40dc44bdf
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofile-rke2-cis-1.5-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.5-profile-permissive
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofileeks.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofileeks.yml
new file mode 100755
index 000000000..49c7e0246
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofileeks.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: eks-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: eks-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofilegke.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofilegke.yml
new file mode 100755
index 000000000..2ddd0686f
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/scanprofilegke.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: gke-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: gke-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/serviceaccount.yaml
new file mode 100755
index 000000000..ec48ec622
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/serviceaccount.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ name: cis-operator-serviceaccount
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-serviceaccount
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/validate-install-crd.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/validate-install-crd.yaml
new file mode 100755
index 000000000..562295791
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/values.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/values.yaml
new file mode 100755
index 000000000..bfb6b96b2
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.301/values.yaml
@@ -0,0 +1,45 @@
+# Default values for rancher-cis-benchmark.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+image:
+ cisoperator:
+ repository: rancher/cis-operator
+ tag: v1.0.3
+ securityScan:
+ repository: rancher/security-scan
+ tag: v0.2.2
+ sonobuoy:
+ repository: rancher/mirrored-sonobuoy-sonobuoy
+ tag: v0.16.3
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ clusterName: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
+
+alerts:
+ enabled: false
+ severity: warning
+ metricsPort: 8080
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/Chart.yaml
new file mode 100755
index 000000000..2ca42fb2b
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/Chart.yaml
@@ -0,0 +1,18 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: CIS Benchmark
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
+ catalog.cattle.io/release-name: rancher-cis-benchmark
+ catalog.cattle.io/ui-component: rancher-cis-benchmark
+apiVersion: v1
+appVersion: v1.0.4
+description: The cis-operator enables running CIS benchmark security scans on a kubernetes
+ cluster
+icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
+keywords:
+- security
+name: rancher-cis-benchmark
+version: 1.0.400
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/README.md
new file mode 100755
index 000000000..50beab58b
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/README.md
@@ -0,0 +1,9 @@
+# Rancher CIS Benchmark Chart
+
+The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded.
+
+# Installation
+
+```
+helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system
+```
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/app-readme.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/app-readme.md
new file mode 100755
index 000000000..5e495d605
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/app-readme.md
@@ -0,0 +1,15 @@
+# Rancher CIS Benchmarks
+
+This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/).
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/).
+
+This chart installs the following components:
+
+- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded.
+- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed.
+- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans.
+- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources.
+- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish.
+ - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts.
+ - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/_helpers.tpl b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/_helpers.tpl
new file mode 100755
index 000000000..67f4ce116
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/_helpers.tpl
@@ -0,0 +1,23 @@
+{{/* Ensure namespace is set the same everywhere */}}
+{{- define "cis.namespace" -}}
+ {{- .Release.Namespace | default "cis-operator-system" -}}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux_node_tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/alertingrule.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/alertingrule.yaml
new file mode 100755
index 000000000..1787c88a0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/alertingrule.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.alerts.enabled -}}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+ name: rancher-cis-pod-monitor
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ podMetricsEndpoints:
+ - port: cismetrics
+{{- end }}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-cis-1.5.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-cis-1.5.yaml
new file mode 100755
index 000000000..39e8b834a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-cis-1.5.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.5
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-cis-1.6.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-cis-1.6.yaml
new file mode 100755
index 000000000..93ba064f4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-cis-1.6.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.6
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-eks-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-eks-1.0.yaml
new file mode 100755
index 000000000..bd2e32cd3
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-eks-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: eks-1.0
+spec:
+ clusterProvider: eks
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-gke-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-gke-1.0.yaml
new file mode 100755
index 000000000..72122e8c5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-gke-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: gke-1.0
+spec:
+ clusterProvider: gke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.5-hardened.yaml
new file mode 100755
index 000000000..b5627f966
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.5-permissive.yaml
new file mode 100755
index 000000000..95f80c0f0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.6-hardened.yaml
new file mode 100755
index 000000000..d75de8154
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.6-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.6-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.6-permissive.yaml
new file mode 100755
index 000000000..52428f4a7
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke-cis-1.6-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.6-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.5-hardened.yaml
new file mode 100755
index 000000000..3d83e9bd8
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.5-hardened
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.18.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.5-permissive.yaml
new file mode 100755
index 000000000..f66aa8f6e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.5-permissive
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.18.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.6-hardened.yaml
new file mode 100755
index 000000000..3593bf371
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.6-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.6-hardened
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.20.5"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.6-permissive.yaml
new file mode 100755
index 000000000..522f846ae
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/benchmark-rke2-cis-1.6-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.6-permissive
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.20.5"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/cis-roles.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/cis-roles.yaml
new file mode 100755
index 000000000..23c93dc65
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/cis-roles.yaml
@@ -0,0 +1,49 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-admin
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["create", "update", "delete", "patch","get", "watch", "list"]
+ - apiGroups:
+ - catalog.cattle.io
+ resources: ["apps"]
+ resourceNames: ["rancher-cis-benchmark"]
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-view
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - catalog.cattle.io
+ resources: ["apps"]
+ resourceNames: ["rancher-cis-benchmark"]
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs: ["get", "watch", "list"]
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/configmap.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/configmap.yaml
new file mode 100755
index 000000000..9832ac285
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/configmap.yaml
@@ -0,0 +1,16 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: default-clusterscanprofiles
+ namespace: {{ template "cis.namespace" . }}
+data:
+ # Default ClusterScanProfiles per cluster provider type
+ rke: |-
+ <1.16.0: rke-profile-permissive-1.5
+ >=1.16.0: rke-profile-permissive-1.6
+ rke2: |-
+ <1.20.5: rke2-cis-1.5-profile-permissive
+ >=1.20.5: rke2-cis-1.6-profile-permissive
+ eks: "eks-profile"
+ gke: "gke-profile"
+ default: "cis-1.6-profile"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/deployment.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/deployment.yaml
new file mode 100755
index 000000000..0d3c75e39
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/deployment.yaml
@@ -0,0 +1,57 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: cis-operator
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ cis.cattle.io/operator: cis-operator
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ template:
+ metadata:
+ labels:
+ cis.cattle.io/operator: cis-operator
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ containers:
+ - name: cis-operator
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}'
+ imagePullPolicy: Always
+ ports:
+ - name: cismetrics
+ containerPort: {{ .Values.alerts.metricsPort }}
+ env:
+ - name: SECURITY_SCAN_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }}
+ - name: SECURITY_SCAN_IMAGE_TAG
+ value: {{ .Values.image.securityScan.tag }}
+ - name: SONOBUOY_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }}
+ - name: SONOBUOY_IMAGE_TAG
+ value: {{ .Values.image.sonobuoy.tag }}
+ - name: CIS_ALERTS_METRICS_PORT
+ value: '{{ .Values.alerts.metricsPort }}'
+ - name: CIS_ALERTS_SEVERITY
+ value: {{ .Values.alerts.severity }}
+ - name: CIS_ALERTS_ENABLED
+ value: {{ .Values.alerts.enabled | default "false" | quote }}
+ - name: CLUSTER_NAME
+ value: {{ .Values.global.cattle.clusterName }}
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux_node_tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/network_policy_allow_all.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/network_policy_allow_all.yaml
new file mode 100755
index 000000000..6ed5d645e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/patch_default_serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/patch_default_serviceaccount.yaml
new file mode 100755
index 000000000..1efa3ed1c
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ template "cis.namespace" . }}]
+ backoffLimit: 1
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/rbac.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/rbac.yaml
new file mode 100755
index 000000000..816991f23
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/rbac.yaml
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: cis-operator-role
+subjects:
+- kind: ServiceAccount
+ name: cis-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: cis-operator-installer
+subjects:
+- kind: ServiceAccount
+ name: cis-operator-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-cis-1.5.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-cis-1.5.yml
new file mode 100755
index 000000000..d69ae9dd5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-cis-1.5.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.5-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.5
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-cis-1.6.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-cis-1.6.yaml
new file mode 100755
index 000000000..8a8d8bf88
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-cis-1.6.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.6-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.6
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.5-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.5-hardened.yml
new file mode 100755
index 000000000..4eabe158a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.5-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened-1.5
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-hardened
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.5-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.5-permissive.yml
new file mode 100755
index 000000000..1f78751d1
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.5-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive-1.5
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.6-hardened.yaml
new file mode 100755
index 000000000..d38febd80
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.6-hardened.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened-1.6
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.6-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.6-permissive.yaml
new file mode 100755
index 000000000..d31b5b0d2
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke-1.6-permissive.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive-1.6
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.6-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.5-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.5-hardened.yml
new file mode 100755
index 000000000..83eb3131e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.5-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.5-profile-hardened
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.5-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.5-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.5-permissive.yml
new file mode 100755
index 000000000..40dc44bdf
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.5-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.5-profile-permissive
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.6-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.6-hardened.yml
new file mode 100755
index 000000000..c7ac7f949
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.6-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.6-profile-hardened
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.6-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.6-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.6-permissive.yml
new file mode 100755
index 000000000..96ca1345a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofile-rke2-cis-1.6-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.6-profile-permissive
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.6-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofileeks.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofileeks.yml
new file mode 100755
index 000000000..49c7e0246
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofileeks.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: eks-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: eks-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofilegke.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofilegke.yml
new file mode 100755
index 000000000..2ddd0686f
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/scanprofilegke.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: gke-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: gke-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/serviceaccount.yaml
new file mode 100755
index 000000000..ec48ec622
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/serviceaccount.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ name: cis-operator-serviceaccount
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-serviceaccount
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/validate-install-crd.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/validate-install-crd.yaml
new file mode 100755
index 000000000..562295791
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/values.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/values.yaml
new file mode 100755
index 000000000..6246eb3b3
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.400/values.yaml
@@ -0,0 +1,45 @@
+# Default values for rancher-cis-benchmark.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+image:
+ cisoperator:
+ repository: rancher/cis-operator
+ tag: v1.0.4-rc1
+ securityScan:
+ repository: rancher/security-scan
+ tag: v0.2.3-rc2
+ sonobuoy:
+ repository: rancher/mirrored-sonobuoy-sonobuoy
+ tag: v0.16.3
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ clusterName: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.20.2
+
+alerts:
+ enabled: false
+ severity: warning
+ metricsPort: 8080
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/Chart.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/Chart.yaml
new file mode 100755
index 000000000..a5e64c864
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/Chart.yaml
@@ -0,0 +1,18 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: CIS Benchmark
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1
+ catalog.cattle.io/release-name: rancher-cis-benchmark
+ catalog.cattle.io/ui-component: rancher-cis-benchmark
+apiVersion: v1
+appVersion: v1.0.4
+description: The cis-operator enables running CIS benchmark security scans on a kubernetes
+ cluster
+icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
+keywords:
+- security
+name: rancher-cis-benchmark
+version: 1.0.402
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/README.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/README.md
new file mode 100755
index 000000000..50beab58b
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/README.md
@@ -0,0 +1,9 @@
+# Rancher CIS Benchmark Chart
+
+The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded.
+
+# Installation
+
+```
+helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system
+```
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/app-readme.md b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/app-readme.md
new file mode 100755
index 000000000..5e495d605
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/app-readme.md
@@ -0,0 +1,15 @@
+# Rancher CIS Benchmarks
+
+This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/).
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/).
+
+This chart installs the following components:
+
+- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded.
+- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed.
+- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans.
+- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources.
+- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish.
+ - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts.
+ - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart.
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/_helpers.tpl b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/_helpers.tpl
new file mode 100755
index 000000000..67f4ce116
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/_helpers.tpl
@@ -0,0 +1,23 @@
+{{/* Ensure namespace is set the same everywhere */}}
+{{- define "cis.namespace" -}}
+ {{- .Release.Namespace | default "cis-operator-system" -}}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux_node_tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/alertingrule.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/alertingrule.yaml
new file mode 100755
index 000000000..1787c88a0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/alertingrule.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.alerts.enabled -}}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+ name: rancher-cis-pod-monitor
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ podMetricsEndpoints:
+ - port: cismetrics
+{{- end }}
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-cis-1.5.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-cis-1.5.yaml
new file mode 100755
index 000000000..39e8b834a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-cis-1.5.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.5
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-cis-1.6.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-cis-1.6.yaml
new file mode 100755
index 000000000..93ba064f4
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-cis-1.6.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: cis-1.6
+spec:
+ clusterProvider: ""
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-eks-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-eks-1.0.yaml
new file mode 100755
index 000000000..bd2e32cd3
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-eks-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: eks-1.0
+spec:
+ clusterProvider: eks
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-gke-1.0.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-gke-1.0.yaml
new file mode 100755
index 000000000..72122e8c5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-gke-1.0.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: gke-1.0
+spec:
+ clusterProvider: gke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.5-hardened.yaml
new file mode 100755
index 000000000..b5627f966
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.5-permissive.yaml
new file mode 100755
index 000000000..95f80c0f0
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.5-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.15.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.6-hardened.yaml
new file mode 100755
index 000000000..d75de8154
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.6-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.6-hardened
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.6-permissive.yaml
new file mode 100755
index 000000000..52428f4a7
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke-cis-1.6-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke-cis-1.6-permissive
+spec:
+ clusterProvider: rke
+ minKubernetesVersion: "1.16.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.5-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.5-hardened.yaml
new file mode 100755
index 000000000..3d83e9bd8
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.5-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.5-hardened
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.18.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.5-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.5-permissive.yaml
new file mode 100755
index 000000000..f66aa8f6e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.5-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.5-permissive
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.18.0"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.6-hardened.yaml
new file mode 100755
index 000000000..3593bf371
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.6-hardened.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.6-hardened
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.20.5"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.6-permissive.yaml
new file mode 100755
index 000000000..522f846ae
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/benchmark-rke2-cis-1.6-permissive.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+ name: rke2-cis-1.6-permissive
+spec:
+ clusterProvider: rke2
+ minKubernetesVersion: "1.20.5"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/cis-roles.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/cis-roles.yaml
new file mode 100755
index 000000000..23c93dc65
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/cis-roles.yaml
@@ -0,0 +1,49 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-admin
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["create", "update", "delete", "patch","get", "watch", "list"]
+ - apiGroups:
+ - catalog.cattle.io
+ resources: ["apps"]
+ resourceNames: ["rancher-cis-benchmark"]
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cis-view
+rules:
+ - apiGroups:
+ - cis.cattle.io
+ resources:
+ - clusterscanbenchmarks
+ - clusterscanprofiles
+ - clusterscans
+ - clusterscanreports
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - catalog.cattle.io
+ resources: ["apps"]
+ resourceNames: ["rancher-cis-benchmark"]
+ verbs: ["get", "watch", "list"]
+ - apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs: ["get", "watch", "list"]
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/configmap.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/configmap.yaml
new file mode 100755
index 000000000..620d9abfa
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/configmap.yaml
@@ -0,0 +1,16 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+ name: default-clusterscanprofiles
+ namespace: {{ template "cis.namespace" . }}
+data:
+ # Default ClusterScanProfiles per cluster provider type
+ rke: |-
+ <1.16.0: rke-profile-permissive-1.5
+ >=1.16.0: rke-profile-permissive-1.6
+ rke2: |-
+ <1.20.0: rke2-cis-1.5-profile-permissive
+ >=1.20.0: rke2-cis-1.6-profile-permissive
+ eks: "eks-profile"
+ gke: "gke-profile"
+ default: "cis-1.6-profile"
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/deployment.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/deployment.yaml
new file mode 100755
index 000000000..0d3c75e39
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/deployment.yaml
@@ -0,0 +1,57 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: cis-operator
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ cis.cattle.io/operator: cis-operator
+spec:
+ selector:
+ matchLabels:
+ cis.cattle.io/operator: cis-operator
+ template:
+ metadata:
+ labels:
+ cis.cattle.io/operator: cis-operator
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ containers:
+ - name: cis-operator
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}'
+ imagePullPolicy: Always
+ ports:
+ - name: cismetrics
+ containerPort: {{ .Values.alerts.metricsPort }}
+ env:
+ - name: SECURITY_SCAN_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }}
+ - name: SECURITY_SCAN_IMAGE_TAG
+ value: {{ .Values.image.securityScan.tag }}
+ - name: SONOBUOY_IMAGE
+ value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }}
+ - name: SONOBUOY_IMAGE_TAG
+ value: {{ .Values.image.sonobuoy.tag }}
+ - name: CIS_ALERTS_METRICS_PORT
+ value: '{{ .Values.alerts.metricsPort }}'
+ - name: CIS_ALERTS_SEVERITY
+ value: {{ .Values.alerts.severity }}
+ - name: CIS_ALERTS_ENABLED
+ value: {{ .Values.alerts.enabled | default "false" | quote }}
+ - name: CLUSTER_NAME
+ value: {{ .Values.global.cattle.clusterName }}
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ nodeSelector:
+ kubernetes.io/os: linux
+ {{- with .Values.nodeSelector }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ tolerations:
+ {{- include "linux_node_tolerations" . | nindent 8}}
+ {{- with .Values.tolerations }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/network_policy_allow_all.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/network_policy_allow_all.yaml
new file mode 100755
index 000000000..6ed5d645e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/network_policy_allow_all.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: default-allow-all
+ namespace: {{ template "cis.namespace" . }}
+spec:
+ podSelector: {}
+ ingress:
+ - {}
+ egress:
+ - {}
+ policyTypes:
+ - Ingress
+ - Egress
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/patch_default_serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/patch_default_serviceaccount.yaml
new file mode 100755
index 000000000..1efa3ed1c
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/patch_default_serviceaccount.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: patch-sa
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade
+ "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+ template:
+ spec:
+ serviceAccountName: cis-operator-serviceaccount
+ restartPolicy: Never
+ containers:
+ - name: sa
+ image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}"
+ imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+ command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"]
+ args: ["-n", {{ template "cis.namespace" . }}]
+ backoffLimit: 1
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/rbac.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/rbac.yaml
new file mode 100755
index 000000000..816991f23
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/rbac.yaml
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-operator-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: cis-operator-role
+subjects:
+- kind: ServiceAccount
+ name: cis-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: cis-operator-installer
+subjects:
+- kind: ServiceAccount
+ name: cis-operator-serviceaccount
+ namespace: {{ template "cis.namespace" . }}
+roleRef:
+ kind: ClusterRole
+ name: cluster-admin
+ apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-cis-1.5.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-cis-1.5.yml
new file mode 100755
index 000000000..d69ae9dd5
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-cis-1.5.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.5-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.5
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-cis-1.6.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-cis-1.6.yaml
new file mode 100755
index 000000000..8a8d8bf88
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-cis-1.6.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: cis-1.6-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: cis-1.6
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.5-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.5-hardened.yml
new file mode 100755
index 000000000..4eabe158a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.5-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened-1.5
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-hardened
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.5-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.5-permissive.yml
new file mode 100755
index 000000000..1f78751d1
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.5-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive-1.5
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.6-hardened.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.6-hardened.yaml
new file mode 100755
index 000000000..d38febd80
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.6-hardened.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-hardened-1.6
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.6-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.6-permissive.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.6-permissive.yaml
new file mode 100755
index 000000000..d31b5b0d2
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke-1.6-permissive.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke-profile-permissive-1.6
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke-cis-1.6-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.5-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.5-hardened.yml
new file mode 100755
index 000000000..83eb3131e
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.5-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.5-profile-hardened
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.5-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.5-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.5-permissive.yml
new file mode 100755
index 000000000..40dc44bdf
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.5-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.5-profile-permissive
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.5-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.6-hardened.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.6-hardened.yml
new file mode 100755
index 000000000..c7ac7f949
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.6-hardened.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.6-profile-hardened
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.6-hardened
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.6-permissive.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.6-permissive.yml
new file mode 100755
index 000000000..96ca1345a
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofile-rke2-cis-1.6-permissive.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: rke2-cis-1.6-profile-permissive
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: rke2-cis-1.6-permissive
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofileeks.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofileeks.yml
new file mode 100755
index 000000000..49c7e0246
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofileeks.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: eks-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: eks-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofilegke.yml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofilegke.yml
new file mode 100755
index 000000000..2ddd0686f
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/scanprofilegke.yml
@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+ name: gke-profile
+ annotations:
+ clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+ benchmarkVersion: gke-1.0
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/serviceaccount.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/serviceaccount.yaml
new file mode 100755
index 000000000..ec48ec622
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/serviceaccount.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ name: cis-operator-serviceaccount
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ namespace: {{ template "cis.namespace" . }}
+ labels:
+ app.kubernetes.io/name: rancher-cis-benchmark
+ app.kubernetes.io/instance: release-name
+ name: cis-serviceaccount
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/validate-install-crd.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/validate-install-crd.yaml
new file mode 100755
index 000000000..562295791
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}}
+# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/values.yaml b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/values.yaml
new file mode 100755
index 000000000..ff4a49495
--- /dev/null
+++ b/released/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402/values.yaml
@@ -0,0 +1,45 @@
+# Default values for rancher-cis-benchmark.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+image:
+ cisoperator:
+ repository: rancher/cis-operator
+ tag: v1.0.4-rc1
+ securityScan:
+ repository: rancher/security-scan
+ tag: v0.2.3-rc1
+ sonobuoy:
+ repository: rancher/mirrored-sonobuoy-sonobuoy
+ tag: v0.16.3
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ clusterName: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.20.2
+
+alerts:
+ enabled: false
+ severity: warning
+ metricsPort: 8080
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/.helmignore b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/.helmignore
new file mode 100644
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/Chart.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/Chart.yaml
new file mode 100644
index 000000000..a6867f4ef
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/Chart.yaml
@@ -0,0 +1,24 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: External IP Webhook
+ catalog.cattle.io/namespace: cattle-externalip-system
+ catalog.cattle.io/release-name: rancher-external-ip-webhook
+ catalog.cattle.io/ui-component: rancher-external-ip-webhook
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v0.1.4
+description: |
+ Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
+home: https://github.com/rancher/externalip-webhook
+keywords:
+- cve
+- externalip
+- webhook
+- security
+maintainers:
+- email: raul@rancher.com
+ name: rawmind0
+name: rancher-external-ip-webhook
+sources:
+- https://github.com/rancher/externalip-webhook
+version: 0.1.400
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/README.md b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/README.md
new file mode 100644
index 000000000..9223987da
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/README.md
@@ -0,0 +1,70 @@
+# externalip-webhook
+
+## Chart Details
+
+This chart will create a deployment of `externalip-webhook` within your Kubernetes Cluster. It's required to mitigate k8s CVE-2020-8554.
+
+## Installing the Chart
+
+To install the chart with the release name `rancher-external-ip-webhook`:
+
+
+```bash
+$ helm repo add rancher-chart https://charts.rancher.io
+$ helm repo update
+$ helm install rancher-external-ip-webhook rancher-chart/rancher-external-ip-webhook --namespace cattle-externalip-system -f values.yaml
+```
+
+## Configuration
+
+The following table lists the configurable parameters of the externalip-webhook chart and their default values.
+
+
+| Parameter | Description | Default |
+| ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------- |
+| `allowedExternalIPCidrs` | Set allowed external IP CIDRs separated by a comma | `""` |
+| `certificates.caBundle` | If cert-manager integration is disabled, add here self signed ca.crt in base64 format | `""` |
+| `certificates.certManager.enabled` | Enable cert manager integration. Cert manager should be already installed at the k8s cluster | `true` |
+| `certificates.certManager.version` | Cert manager version to use | `""` |
+| `certificates.secretName` | If cert-manager integration is disabled, upload certs data (ca.crt, tls.crt & tls.key) as k8s secretName in the namespace | `"webhook-server-cert"` |
+| `global.systemDefaultRegistry` | Pull docker images from systemDefaultRegistry | `""` |
+| `image.pullPolicy` | Webhook server docker pull policy | `"IfNotPresent"` |
+| `image.pullSecrets` | Webhook server docker pull secret | `""` |
+| `image.repository` | Webhook server docker image repository | `"rancher/externalip-webhook"` |
+| `image.tag` | Webhook server docker image tag Defaults to | `".Chart.appVersion"` |
+| `metrics.enabled` | Enable metrics endpoint | `false` |
+| `metrics.port` | Webhook metrics pod port | `8443` |
+| `metrics.prometheusExport` | Enable Prometheus export. Follow [exporting-metrics-for-prometheus](https://book.kubebuilder.io/reference/metrics.html#exporting-metrics-for-prometheus) to export the webhook metrics | `false` |
+| `metrics.authProxy.enabled` | Enable auth proxy for metrics endpoint | `false` |
+| `metrics.authProxy.port` | Webhook auth proxy pod port | `8080` |
+| `metrics.authProxy.image.pullPolicy` | Webhook auth proxy docker pull policy | `"IfNotPresent"` |
+| `metrics.authProxy.image.pullSecrets`| Webhook auth proxy docker pull secrets | `""` |
+| `metrics.authProxy.image.repository` | Webhook auth proxy docker image repository | `"gcr.io/kubebuilder/kube-rbac-proxy"` |
+| `metrics.authProxy.image.pullPolicy` | Webhook auth proxy docker image tag | `"v0.5.0"` |
+| `metrics.authProxy.resources.limits.cpu` | Webhook auth proxy resource cpu limit | `"100m"` |
+| `metrics.authProxy.resources.limits.memory` | Webhook auth proxy resource memory limit | `"30Mi"` |
+| `metrics.authProxy.resources.requests.cpu` | Webhook auth proxy wesource cpu reservation | `"100m"` |
+| `metrics.authProxy.resources.requests.memory` | Webhook auth proxy resource memory reservation | `"20Mi"` |
+| `nodeSelector` | Node labels for pod assignment | `{}` |
+| `rbac.apiVersion` | Rbac API version to use | `"v1"` |
+| `resources.limits.cpu` | Resource cpu limit | `"100m"` |
+| `resources.limits.memory` | Resource memory limit | `"30Mi"` |
+| `resources.requests.cpu` | Resource cpu reservation | `"100m"` |
+| `resources.requests.memory` | Resource memory reservation | `"20Mi"` |
+| `service.metricsPort` | Webhook metrics service port | `8443` |
+| `service.webhookPort` | Webhook server service port | `443` |
+| `serviceAccountName` | Webhook serviceAccountName. Just used if metrics.authProxy.enabled = false | `"default"` |
+| `tolerations` | List of node taints to tolerate (requires Kubernetes >= 1.6) | `[]` |
+| `webhookPort` | Webhook server pod port | `9443` |
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example,
+
+```bash
+$ helm repo add rancher-chart https://charts.rancher.io
+$ helm repo update
+$ helm install rancher-external-ip-webhook rancher-chart/rancher-external-ip-webhook --namespace cattle-externalip-system -f values.yaml
+```
+
+> **Tip**: You can use the default [values.yaml](values.yaml)
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/app-README.md b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/app-README.md
new file mode 100644
index 000000000..38c317119
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/app-README.md
@@ -0,0 +1,9 @@
+# externalip-webhook
+
+This chart was created to mitigate [CVE-2020-8554](https://www.cvedetails.com/cve/CVE-2020-8554/)
+
+External IP Webhook is a validating k8s webhook which prevents services from using random external IPs. Cluster administrators
+can specify list of CIDRs allowed to be used as external IP by specifying `allowed-external-ip-cidrs` parameter.
+The webhook will only allow services which either don’t set external IP, or whose external IPs are within the range specified by the administrator.
+
+For more information, review the Helm README of this chart.
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/questions.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/questions.yaml
new file mode 100644
index 000000000..8b0e19040
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/questions.yaml
@@ -0,0 +1,7 @@
+questions:
+# allowedExternalIPCidrs
+- variable: allowedExternalIPCidrs
+ label: Allowed external IP cidrs
+ description: Set allowed external IP CIDRs separated by a comma
+ type: string
+ group: Configuration
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/NOTES.txt b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/NOTES.txt
new file mode 100644
index 000000000..74271bdd5
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/NOTES.txt
@@ -0,0 +1,3 @@
+To verify that externalip-webhook has started, run:
+
+ kubectl --namespace={{ .Release.Namespace }} get pods -l "app={{ template "externalip-webhook.name" . }},release={{ .Release.Name }}"
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/_helpers.tpl b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/_helpers.tpl
new file mode 100644
index 000000000..cc8a9a0d3
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/_helpers.tpl
@@ -0,0 +1,50 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "externalip-webhook.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "externalip-webhook.fullname" -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if ne $name .Release.Name -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s" $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+
+{{/* Generate basic labels */}}
+{{- define "externalip-webhook.labels" }}
+app: {{ template "externalip-webhook.name" . }}
+heritage: {{.Release.Service }}
+release: {{.Release.Name }}
+{{- end }}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+kubernetes.io/os: linux
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/admissionregistration.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/admissionregistration.yaml
new file mode 100644
index 000000000..d8152faa5
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/admissionregistration.yaml
@@ -0,0 +1,30 @@
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+{{- if .Values.certificates.certManager.enabled }}
+ annotations:
+ cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ template "externalip-webhook.fullname" . }}-server-cert
+{{- end }}
+ creationTimestamp: null
+ name: {{ template "externalip-webhook.fullname" . }}-validating-webhook-configuration
+webhooks:
+- clientConfig:
+{{- if not (.Values.certificates.certManager.enabled) }}
+ caBundle: {{ .Values.certificates.caBundle }}
+{{- end }}
+ service:
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+ path: /validate-service
+ failurePolicy: Ignore
+ name: {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc
+ rules:
+ - apiGroups:
+ - ""
+ apiVersions:
+ - v1
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - services
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/clusterrole.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/clusterrole.yaml
new file mode 100644
index 000000000..46e18bf00
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/clusterrole.yaml
@@ -0,0 +1,33 @@
+{{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) -}}
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRole
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-role
+rules:
+- apiGroups:
+ - authentication.k8s.io
+ resources:
+ - tokenreviews
+ verbs:
+ - create
+- apiGroups:
+ - authorization.k8s.io
+ resources:
+ - subjectaccessreviews
+ verbs:
+ - create
+---
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRole
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-metrics-reader
+rules:
+- nonResourceURLs:
+ - /metrics
+ verbs:
+ - get
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/clusterrolebinding.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..2fa40817f
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/clusterrolebinding.yaml
@@ -0,0 +1,31 @@
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRoleBinding
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-cluster-view
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: view
+subjects:
+- kind: ServiceAccount
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+{{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) }}
+---
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRoleBinding
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-role
+subjects:
+- kind: ServiceAccount
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/deployment.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/deployment.yaml
new file mode 100644
index 000000000..c82754deb
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/deployment.yaml
@@ -0,0 +1,107 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/pod: runtime/default
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+spec:
+ replicas: {{ .Values.replicas }}
+ selector:
+ matchLabels:
+ app: {{ template "externalip-webhook.name" . }}
+ template:
+ metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/pod: runtime/default
+ labels: {{ include "externalip-webhook.labels" . | indent 8 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ spec:
+ containers:
+ {{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) }}
+ - name: {{ template "externalip-webhook.fullname" . }}-auth-proxy
+ args:
+ - --secure-listen-address=0.0.0.0:{{ .Values.metrics.port }}
+ - --upstream=http://127.0.0.1:{{ .Values.metrics.authProxy.port }}/
+ - --logtostderr=true
+ - --v=10
+ image: {{ template "system_default_registry" . }}{{ .Values.metrics.authProxy.image.repository}}:{{ .Values.metrics.authProxy.image.tag }}
+ imagePullPolicy: "{{ .Values.metrics.authProxy.image.pullPolicy }}"
+ ports:
+ - containerPort: {{ .Values.metrics.port }}
+ name: webhook-metrics
+ protocol: TCP
+ resources:
+{{ toYaml .Values.metrics.authProxy.resources | indent 10 }}
+ readinessProbe:
+ tcpSocket:
+ port: webhook-metrics
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ livenessProbe:
+ tcpSocket:
+ port: webhook-metrics
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ {{- end }}
+ - name: {{ template "externalip-webhook.fullname" . }}
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository}}:{{ default .Chart.AppVersion .Values.image.tag }}
+ imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+ command:
+ - /webhook
+ args:
+ - --webhook-port={{ .Values.webhookPort }}
+ {{- if .Values.allowedExternalIPCidrs }}
+ - --allowed-external-ip-cidrs={{ .Values.allowedExternalIPCidrs }}
+ {{- end }}
+ {{- if .Values.metrics.enabled }}
+ {{- if .Values.metrics.authProxy.enabled }}
+ - --metrics-addr=127.0.0.1:{{ .Values.metrics.authProxy.port }}
+ {{- else }}
+ - --metrics-addr=0.0.0.0:{{ .Values.metrics.port }}
+ {{- end }}
+ {{- end }}
+ ports:
+ - containerPort: {{ .Values.webhookPort }}
+ name: webhook-server
+ protocol: TCP
+ {{- if and (.Values.metrics.enabled) (not (.Values.metrics.authProxy.enabled)) }}
+ - containerPort: {{ .Values.metrics.port }}
+ name: webhook-metrics
+ protocol: TCP
+ {{- end }}
+ volumeMounts:
+ - name: server-cert
+ mountPath: /tmp/k8s-webhook-server/serving-certs
+ readOnly: true
+ resources:
+{{ toYaml .Values.resources | indent 10 }}
+ readinessProbe:
+ tcpSocket:
+ port: webhook-server
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ livenessProbe:
+ tcpSocket:
+ port: webhook-server
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+ {{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ {{- end }}
+ tolerations: {{ include "linux-node-tolerations" . | nindent 6}}
+ {{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 6 }}
+ {{- end }}
+ serviceAccountName: {{ template "externalip-webhook.fullname" . }}
+ volumes:
+ - name: server-cert
+ secret:
+ defaultMode: 420
+ secretName: {{ .Values.certificates.secretName }}
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/issuer.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/issuer.yaml
new file mode 100644
index 000000000..ff1c2de10
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/issuer.yaml
@@ -0,0 +1,52 @@
+{{- if .Values.certificates.certManager.enabled -}}
+ {{- $certmanagerVer := split "." .Values.certificates.certManager.version -}}
+ {{- if or (.Capabilities.APIVersions.Has "cert-manager.io/v1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 1) (ge (int $certmanagerVer._1) 0)) }}
+apiVersion: cert-manager.io/v1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1beta1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 16)) }}
+apiVersion: cert-manager.io/v1beta1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1alpha2") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 11)) }}
+apiVersion: cert-manager.io/v1alpha2
+ {{- else if or (.Capabilities.APIVersions.Has "certmanager.k8s.io/v1alpha1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (lt (int $certmanagerVer._1) 11)) }}
+apiVersion: certmanager.k8s.io/v1alpha1
+ {{- else }}
+# Setting latest version as default
+apiVersion: cert-manager.io/v1
+ {{- end }}
+kind: Certificate
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-server-cert
+ namespace: {{ .Release.Namespace }}
+spec:
+ dnsNames:
+ - {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc
+ - {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local
+ issuerRef:
+ kind: Issuer
+ name: {{ template "externalip-webhook.fullname" . }}-issuer
+ secretName: {{ .Values.certificates.secretName }}
+---
+ {{- if or (.Capabilities.APIVersions.Has "cert-manager.io/v1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 1) (ge (int $certmanagerVer._1) 0)) }}
+apiVersion: cert-manager.io/v1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1beta1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 16)) }}
+apiVersion: cert-manager.io/v1beta1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1alpha2") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 11)) }}
+apiVersion: cert-manager.io/v1alpha2
+ {{- else if or (.Capabilities.APIVersions.Has "certmanager.k8s.io/v1alpha1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (lt (int $certmanagerVer._1) 11)) }}
+apiVersion: certmanager.k8s.io/v1alpha1
+ {{- else }}
+# Setting latest version as default
+apiVersion: cert-manager.io/v1
+ {{- end }}
+kind: Issuer
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-issuer
+ namespace: {{ .Release.Namespace }}
+spec:
+ selfSigned: {}
+{{- end -}}
+
+
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/service.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/service.yaml
new file mode 100644
index 000000000..256add3e4
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/service.yaml
@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+spec:
+ ports:
+ - name: webhook-server
+ port: {{ .Values.service.webhookPort }}
+ protocol: TCP
+ targetPort: {{ .Values.webhookPort }}
+ selector:
+ app: {{ template "externalip-webhook.name" . }}
+ type: "ClusterIP"
+{{- if .Values.metrics.enabled }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-metrics-service
+ namespace: {{ .Release.Namespace }}
+spec:
+ ports:
+ - name: webhook-metrics
+ port: {{ .Values.service.metricsPort }}
+ protocol: TCP
+ targetPort: {{ .Values.metrics.port }}
+ selector:
+ app: {{ template "externalip-webhook.name" . }}
+ type: "ClusterIP"
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/serviceaccount.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/serviceaccount.yaml
new file mode 100644
index 000000000..895df4f5b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/servicemonitor.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/servicemonitor.yaml
new file mode 100644
index 000000000..c481ea31d
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/templates/servicemonitor.yaml
@@ -0,0 +1,16 @@
+{{- if and (.Values.metrics.enabled) (.Values.metrics.prometheusExport) -}}
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-monitor
+ namespace: {{ .Release.Namespace }}
+spec:
+ endpoints:
+ - path: /metrics
+ port: https
+ selector:
+ matchLabels:
+ app: {{ template "externalip-webhook.name" . }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/admissionregistration_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/admissionregistration_test.yaml
new file mode 100644
index 000000000..0660aa6e8
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/admissionregistration_test.yaml
@@ -0,0 +1,32 @@
+suite: Test Admission Registration
+templates:
+- admissionregistration.yaml
+tests:
+- it: should render Admission Registration
+ asserts:
+ - equal:
+ path: apiVersion
+ value: admissionregistration.k8s.io/v1beta1
+- it: should render Admission Registration annotation and not caBundle if certificates.certManager.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ namespace: test
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: metadata.annotations
+ value:
+ cert-manager.io/inject-ca-from: test/rancher-externalip-webhook-server-cert
+ - isNull:
+ path: webhooks[0].clientConfig.caBundle
+- it: should render Admission Registration caBundle and not annotation if certificates.certManager.enabled = false
+ set:
+ certificates.caBundle: test
+ certificates.certManager.enabled: false
+ asserts:
+ - equal:
+ path: webhooks[0].clientConfig.caBundle
+ value: test
+ - isNull:
+ path: metadata.annotations
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/clusterrole_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/clusterrole_test.yaml
new file mode 100644
index 000000000..9e563807b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/clusterrole_test.yaml
@@ -0,0 +1,37 @@
+suite: Test Cluster Roles
+templates:
+- clusterrole.yaml
+tests:
+- it: should not render Cluster Roles if metrics.enabled = false or metrics.authProxy.enabled = false
+ set:
+ metrics.enabled: false
+ metrics.authProxy.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: clusterrole.yaml
+- it: should render Cluster Roles if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: clusterrole.yaml
+- it: should render Cluster Roles with default rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
+- it: should render Cluster Roles with custom rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ rbac.apiVersion: v1beta
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1beta
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/clusterrolebinding_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/clusterrolebinding_test.yaml
new file mode 100644
index 000000000..2129573a3
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/clusterrolebinding_test.yaml
@@ -0,0 +1,42 @@
+suite: Test Cluster Role Bindings
+templates:
+- clusterrolebinding.yaml
+tests:
+- it: should render Cluster Role Bindings with default rbac api version
+ set:
+ rbac.apiVersion: v1
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
+- it: should render Cluster Role Bindings with custom rbac api version
+ set:
+ rbac.apiVersion: v1beta
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1beta
+- it: should not render Cluster Role Binding proxy if metrics.enabled = false or metrics.authProxy.enabled = false
+ set:
+ metrics.enabled: false
+ metrics.authProxy.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: clusterrolebinding.yaml
+- it: should render Cluster Role Bindings proxy if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: clusterrolebinding.yaml
+- it: should render Cluster Role Bindings with default rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/deployment_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/deployment_test.yaml
new file mode 100644
index 000000000..50e3f9ec1
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/deployment_test.yaml
@@ -0,0 +1,202 @@
+suite: Test Deployments
+templates:
+- deployment.yaml
+tests:
+- it: should render Deployment with allowed-external-ip-cidrs arg if allowedExternalIPCidrs is set
+ release:
+ name: rancher-externalip-webhook
+ set:
+ allowedExternalIPCidrs: "1,2"
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].args[1]
+ value: --allowed-external-ip-cidrs=1,2
+- it: should render Deployment with default port, nodeSelector and tolerations if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.tolerations[0]
+ value:
+ key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.nodeSelector
+ value:
+ kubernetes.io/os: linux
+- it: should render Deployment with default port and custom nodeSelector and tolerations if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ tolerations:
+ - key: "cattle.io/test"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ nodeSelector:
+ kubernetes.io/test: linux
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.tolerations[0]
+ value:
+ key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.tolerations[1]
+ value:
+ key: "cattle.io/test"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.nodeSelector
+ value:
+ kubernetes.io/os: linux
+ kubernetes.io/test: linux
+- it: should render Deployment with custom port and image if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ webhookPort: 9000
+ image.repository: test
+ image.tag: dev-test
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].image
+ value: test:dev-test
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9000
+ name: webhook-server
+ protocol: TCP
+- it: should render Deployment with default metrics port if metrics.enabled = true and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[0].ports[1]
+ value:
+ containerPort: 8443
+ name: webhook-metrics
+ protocol: TCP
+- it: should render Deployment with custom metrics port if metrics.enabled = true and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.port: 8000
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[0].ports[1]
+ value:
+ containerPort: 8000
+ name: webhook-metrics
+ protocol: TCP
+- it: should render Deployment with default metrics port if metrics.enabled = true and metrics.authProxy.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook-auth-proxy
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 8443
+ name: webhook-metrics
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[1].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[1].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+- it: should render Deployment with custom metrics port and image if metrics.enabled = true and metrics.authProxy.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ metrics.port: 8000
+ webhookPort: 9000
+ image.repository: test
+ image.tag: dev-test
+ metrics.authProxy.image.repository: auth
+ metrics.authProxy.image.tag: auth-test
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook-auth-proxy
+ - equal:
+ path: spec.template.spec.containers[0].image
+ value: auth:auth-test
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 8000
+ name: webhook-metrics
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[1].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[1].image
+ value: test:dev-test
+ - equal:
+ path: spec.template.spec.containers[1].ports[0]
+ value:
+ containerPort: 9000
+ name: webhook-server
+ protocol: TCP
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/issuer_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/issuer_test.yaml
new file mode 100644
index 000000000..eeeb660b2
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/issuer_test.yaml
@@ -0,0 +1,106 @@
+suite: Test Issuers
+templates:
+- issuer.yaml
+tests:
+- it: should not render issuer if certificates.certManager.enabled = false
+ set:
+ certificates.certManager.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: issuer.yaml
+- it: should render issuer if certificates.certManager.enabled = true
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: issuer.yaml
+- it: should set issuer apiVersion with default cert-manager
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 1.0.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.16.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1beta1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1beta1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.11.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1alpha2
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1alpha2
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager < 0.11.0 using capabilities
+ capabilities:
+ apiversions:
+ - certmanager.k8s.io/v1alpha1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: certmanager.k8s.io/v1alpha1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 1.0.0 using parameter
+ set:
+ certificates.certManager.version: 1.0.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.16.0 using parameter
+ set:
+ certificates.certManager.version: 0.16.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1beta1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.11.0 using parameter
+ set:
+ certificates.certManager.version: 0.11.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1alpha2
+ template: issuer.yaml
+- it: should set letsEncrypt apiVersion with cert-manager < 0.11.0 using parameter
+ set:
+ certificates.certManager.version: 0.9.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: certmanager.k8s.io/v1alpha1
+ template: issuer.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/service_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/service_test.yaml
new file mode 100644
index 000000000..a0ba4d352
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/service_test.yaml
@@ -0,0 +1,69 @@
+suite: Test Services
+templates:
+- service.yaml
+tests:
+- it: should render webhook-server service with default webhookPort if metrics.enabled = false
+ set:
+ metrics.enabled: false
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9443
+- it: should render webhook-server service with custom webhookPort if metrics.enabled = false
+ set:
+ metrics.enabled: false
+ webhookPort: 9000
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9000
+- it: should render webhook-server and webhook-metrics services with default webhookPort and metrics.port, if metrics.enabled = true
+ set:
+ metrics.enabled: true
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9443
+ documentIndex: 0
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-metrics
+ port: 8443
+ protocol: TCP
+ targetPort: 8443
+ documentIndex: 1
+- it: should render webhook-server and webhook-metrics services with custom webhookPort and metrics.port, if metrics.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.port: 8000
+ webhookPort: 9000
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9000
+ documentIndex: 0
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-metrics
+ port: 8443
+ protocol: TCP
+ targetPort: 8000
+ documentIndex: 1
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/serviceaccount_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/serviceaccount_test.yaml
new file mode 100644
index 000000000..5aebbc74b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/serviceaccount_test.yaml
@@ -0,0 +1,9 @@
+suite: Test Service Accounts
+templates:
+- serviceaccount.yaml
+tests:
+- it: should render Service Account
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: serviceaccount.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/servicemonitor_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/servicemonitor_test.yaml
new file mode 100644
index 000000000..21989265e
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/tests/servicemonitor_test.yaml
@@ -0,0 +1,20 @@
+suite: Test Service Monitors
+templates:
+- servicemonitor.yaml
+tests:
+- it: should not render Service Monitor if metrics.enabled = false or metrics.prometheusExport = false
+ set:
+ metrics.enabled: false
+ metrics.prometheusExport: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: servicemonitor.yaml
+- it: should render Service Account if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.prometheusExport: true
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: servicemonitor.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/values.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/values.yaml
new file mode 100644
index 000000000..dc17e9796
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.400/values.yaml
@@ -0,0 +1,67 @@
+## Allowed external IP cidrs
+allowedExternalIPCidrs: ""
+## Certificates generation for webhook
+certificates:
+ certManager:
+ # Enable cert manager integration. Cert manager should be already installed at the k8s cluster
+ enabled: true
+ version: ""
+ # If cert-manager integration is disabled, add self signed ca.crt in base64 format
+ caBundle: ""
+ # If cert-manager integration is disabled, upload certs data (ca.crt, tls.crt and tls.key) as k8s secretName in the namespace
+ secretName: webhook-server-cert
+## Details about the image to be pulled.
+image:
+ pullPolicy: IfNotPresent
+ pullSecrets: []
+ repository: rancher/externalip-webhook
+ tag: v0.1.4
+## Enabling metrics endpoint
+# Webhook emits `webhook_failed_request_count` metrics whenever it rejects service creation or update operation
+metrics:
+ enabled: false
+ port: 8443
+ # Enable webhook metrics export to Prometheus
+ prometheusExport: false
+ # Webhook metrics auth proxy. This option is just available for amd64 arch
+ authProxy:
+ enabled: false
+ port: 8080
+ image:
+ pullPolicy: IfNotPresent
+ pullSecrets: []
+ repository: rancher/kube-rbac-proxy
+ tag: v0.5.0
+ resources:
+ limits:
+ memory: 30Mi
+ cpu: 100m
+ requests:
+ memory: 20Mi
+ cpu: 100m
+## Node labels for pod assignment
+## Ref: https://kubernetes.io/docs/user-guide/node-selection/
+##
+nodeSelector: {}
+## RBAC
+rbac:
+ apiVersion: v1
+## CPU and Memory limit and request for externalip-webhook
+resources:
+ limits:
+ memory: 30Mi
+ cpu: 100m
+ requests:
+ memory: 20Mi
+ cpu: 100m
+service:
+ metricsPort: 8443
+ webhookPort: 443
+## Webhook serviceAccountName. Just used if metrics.authProxy.enabled = false
+serviceAccountName: default
+## List of node taints to tolerate (requires Kubernetes >= 1.6)
+tolerations: []
+## Webhook server pod port
+webhookPort: 9443
+global:
+ systemDefaultRegistry: ""
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/.helmignore b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/.helmignore
new file mode 100644
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/Chart.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/Chart.yaml
new file mode 100644
index 000000000..3143d5139
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/Chart.yaml
@@ -0,0 +1,24 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: External IP Webhook
+ catalog.cattle.io/namespace: cattle-externalip-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: rancher-external-ip-webhook
+ catalog.cattle.io/ui-component: rancher-external-ip-webhook
+apiVersion: v1
+appVersion: v0.1.6
+description: |
+ Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
+home: https://github.com/rancher/externalip-webhook
+keywords:
+- cve
+- externalip
+- webhook
+- security
+maintainers:
+- email: raul@rancher.com
+ name: rawmind0
+name: rancher-external-ip-webhook
+sources:
+- https://github.com/rancher/externalip-webhook
+version: 0.1.600
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/README.md b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/README.md
new file mode 100644
index 000000000..4890065a7
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/README.md
@@ -0,0 +1,69 @@
+# externalip-webhook
+
+## Chart Details
+
+This chart will create a deployment of `externalip-webhook` within your Kubernetes Cluster. It's required to mitigate k8s CVE-2020-8554.
+
+## Installing the Chart
+
+To install the chart with the release name `rancher-external-ip-webhook`:
+
+```bash
+$ helm repo add rancher-chart https://charts.rancher.io
+$ helm repo update
+$ helm install rancher-external-ip-webhook rancher-chart/rancher-external-ip-webhook --namespace cattle-externalip-system -f values.yaml
+```
+
+## Configuration
+
+The following table lists the configurable parameters of the externalip-webhook chart and their default values.
+
+
+| Parameter | Description | Default |
+| ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------- |
+| `allowedExternalIPCidrs` | Set allowed external IP CIDRs separated by a comma | `""` |
+| `certificates.caBundle` | If cert-manager integration is disabled, add here self signed ca.crt in base64 format | `""` |
+| `certificates.certManager.enabled` | Enable cert manager integration. Cert manager should be already installed at the k8s cluster | `true` |
+| `certificates.certManager.version` | Cert manager version to use | `""` |
+| `certificates.secretName` | If cert-manager integration is disabled, upload certs data (ca.crt, tls.crt & tls.key) as k8s secretName in the namespace | `"webhook-server-cert"` |
+| `global.systemDefaultRegistry` | Pull docker images from systemDefaultRegistry | `""` |
+| `image.pullPolicy` | Webhook server docker pull policy | `"IfNotPresent"` |
+| `image.pullSecrets` | Webhook server docker pull secret | `""` |
+| `image.repository` | Webhook server docker image repository | `"rancher/externalip-webhook"` |
+| `image.tag` | Webhook server docker image tag Defaults to | `".Chart.appVersion"` |
+| `metrics.enabled` | Enable metrics endpoint | `false` |
+| `metrics.port` | Webhook metrics pod port | `8443` |
+| `metrics.prometheusExport` | Enable Prometheus export. Follow [exporting-metrics-for-prometheus](https://book.kubebuilder.io/reference/metrics.html#exporting-metrics-for-prometheus) to export the webhook metrics | `false` |
+| `metrics.authProxy.enabled` | Enable auth proxy for metrics endpoint | `false` |
+| `metrics.authProxy.port` | Webhook auth proxy pod port | `8080` |
+| `metrics.authProxy.image.pullPolicy` | Webhook auth proxy docker pull policy | `"IfNotPresent"` |
+| `metrics.authProxy.image.pullSecrets`| Webhook auth proxy docker pull secrets | `""` |
+| `metrics.authProxy.image.repository` | Webhook auth proxy docker image repository | `"gcr.io/kubebuilder/kube-rbac-proxy"` |
+| `metrics.authProxy.image.pullPolicy` | Webhook auth proxy docker image tag | `"v0.5.0"` |
+| `metrics.authProxy.resources.limits.cpu` | Webhook auth proxy resource cpu limit | `"100m"` |
+| `metrics.authProxy.resources.limits.memory` | Webhook auth proxy resource memory limit | `"30Mi"` |
+| `metrics.authProxy.resources.requests.cpu` | Webhook auth proxy wesource cpu reservation | `"100m"` |
+| `metrics.authProxy.resources.requests.memory` | Webhook auth proxy resource memory reservation | `"20Mi"` |
+| `nodeSelector` | Node labels for pod assignment | `{}` |
+| `rbac.apiVersion` | Rbac API version to use | `"v1"` |
+| `resources.limits.cpu` | Resource cpu limit | `"100m"` |
+| `resources.limits.memory` | Resource memory limit | `"30Mi"` |
+| `resources.requests.cpu` | Resource cpu reservation | `"100m"` |
+| `resources.requests.memory` | Resource memory reservation | `"20Mi"` |
+| `service.metricsPort` | Webhook metrics service port | `8443` |
+| `service.webhookPort` | Webhook server service port | `443` |
+| `serviceAccountName` | Webhook serviceAccountName. Just used if metrics.authProxy.enabled = false | `"default"` |
+| `tolerations` | List of node taints to tolerate (requires Kubernetes >= 1.6) | `[]` |
+| `webhookPort` | Webhook server pod port | `9443` |
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example,
+
+```bash
+$ helm repo add rancher-chart https://charts.rancher.io
+$ helm repo update
+$ helm install rancher-external-ip-webhook rancher-chart/rancher-external-ip-webhook --namespace cattle-externalip-system -f values.yaml
+```
+
+> **Tip**: You can use the default [values.yaml](https://github.com/rancher/externalip-webhook/blob/master/chart/values.yaml)
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/app-README.md b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/app-README.md
new file mode 100644
index 000000000..bd8acd382
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/app-README.md
@@ -0,0 +1,12 @@
+# externalip-webhook
+
+This chart was created to mitigate [CVE-2020-8554](https://www.cvedetails.com/cve/CVE-2020-8554/)
+
+External IP Webhook is a validating k8s webhook which prevents services from using random external IPs.
+Cluster administrators can specify list of CIDRs allowed to be used as external IP by specifying `allowed-external-ip-cidrs` parameter. The webhook will only allow services which either don’t set external IP, or whose external IPs are within the range specified by the administrator.
+
+External IP Webhook certificates are required. They can be generated in 2 ways:
+* cert-manager: This is the default chart configuration. Cert manager should be already installed at the k8s cluster
+* uploading certs: Disable `Cert Manager integration` and set `Secret name` and `CA Bundle` at `Certificates` section.
+
+For more information, review the Helm README of this chart.
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/questions.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/questions.yaml
new file mode 100644
index 000000000..3ea9edd93
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/questions.yaml
@@ -0,0 +1,26 @@
+questions:
+# allowedExternalIPCidrs
+- variable: allowedExternalIPCidrs
+ label: Allowed external IP cidrs
+ description: Set allowed external IP CIDRs separated by a comma
+ type: string
+ group: Configuration
+- variable: certificates.certManager.enabled
+ default: true
+ description: Enable cert manager integration. Cert manager should be already installed
+ label: Enable Cert Manager integration
+ type: boolean
+ group: "Certificates"
+ show_subquestion_if: false
+ subquestions:
+ - variable: certificates.secretName
+ default: webhook-server-cert
+ description: Use certificates from secret. Secret should exists in the app namespace, with certs data (ca.crt, tls.crt & tls.key)
+ label: Secret name
+ type: string
+ required: true
+ - variable: certificates.caBundle
+ description: Use self signed CA Bundle. It should be provided in base64 format
+ label: CA Bundle
+ type: string
+ required: true
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/NOTES.txt b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/NOTES.txt
new file mode 100644
index 000000000..74271bdd5
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/NOTES.txt
@@ -0,0 +1,3 @@
+To verify that externalip-webhook has started, run:
+
+ kubectl --namespace={{ .Release.Namespace }} get pods -l "app={{ template "externalip-webhook.name" . }},release={{ .Release.Name }}"
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/_helpers.tpl b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/_helpers.tpl
new file mode 100644
index 000000000..cc8a9a0d3
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/_helpers.tpl
@@ -0,0 +1,50 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "externalip-webhook.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "externalip-webhook.fullname" -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if ne $name .Release.Name -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s" $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+
+{{/* Generate basic labels */}}
+{{- define "externalip-webhook.labels" }}
+app: {{ template "externalip-webhook.name" . }}
+heritage: {{.Release.Service }}
+release: {{.Release.Name }}
+{{- end }}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+kubernetes.io/os: linux
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/admissionregistration.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/admissionregistration.yaml
new file mode 100644
index 000000000..d8152faa5
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/admissionregistration.yaml
@@ -0,0 +1,30 @@
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+{{- if .Values.certificates.certManager.enabled }}
+ annotations:
+ cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ template "externalip-webhook.fullname" . }}-server-cert
+{{- end }}
+ creationTimestamp: null
+ name: {{ template "externalip-webhook.fullname" . }}-validating-webhook-configuration
+webhooks:
+- clientConfig:
+{{- if not (.Values.certificates.certManager.enabled) }}
+ caBundle: {{ .Values.certificates.caBundle }}
+{{- end }}
+ service:
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+ path: /validate-service
+ failurePolicy: Ignore
+ name: {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc
+ rules:
+ - apiGroups:
+ - ""
+ apiVersions:
+ - v1
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - services
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/clusterrole.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/clusterrole.yaml
new file mode 100644
index 000000000..46e18bf00
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/clusterrole.yaml
@@ -0,0 +1,33 @@
+{{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) -}}
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRole
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-role
+rules:
+- apiGroups:
+ - authentication.k8s.io
+ resources:
+ - tokenreviews
+ verbs:
+ - create
+- apiGroups:
+ - authorization.k8s.io
+ resources:
+ - subjectaccessreviews
+ verbs:
+ - create
+---
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRole
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-metrics-reader
+rules:
+- nonResourceURLs:
+ - /metrics
+ verbs:
+ - get
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/clusterrolebinding.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/clusterrolebinding.yaml
new file mode 100644
index 000000000..2fa40817f
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/clusterrolebinding.yaml
@@ -0,0 +1,31 @@
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRoleBinding
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-cluster-view
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: view
+subjects:
+- kind: ServiceAccount
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+{{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) }}
+---
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRoleBinding
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-role
+subjects:
+- kind: ServiceAccount
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/deployment.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/deployment.yaml
new file mode 100644
index 000000000..c82754deb
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/deployment.yaml
@@ -0,0 +1,107 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/pod: runtime/default
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+spec:
+ replicas: {{ .Values.replicas }}
+ selector:
+ matchLabels:
+ app: {{ template "externalip-webhook.name" . }}
+ template:
+ metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/pod: runtime/default
+ labels: {{ include "externalip-webhook.labels" . | indent 8 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ spec:
+ containers:
+ {{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) }}
+ - name: {{ template "externalip-webhook.fullname" . }}-auth-proxy
+ args:
+ - --secure-listen-address=0.0.0.0:{{ .Values.metrics.port }}
+ - --upstream=http://127.0.0.1:{{ .Values.metrics.authProxy.port }}/
+ - --logtostderr=true
+ - --v=10
+ image: {{ template "system_default_registry" . }}{{ .Values.metrics.authProxy.image.repository}}:{{ .Values.metrics.authProxy.image.tag }}
+ imagePullPolicy: "{{ .Values.metrics.authProxy.image.pullPolicy }}"
+ ports:
+ - containerPort: {{ .Values.metrics.port }}
+ name: webhook-metrics
+ protocol: TCP
+ resources:
+{{ toYaml .Values.metrics.authProxy.resources | indent 10 }}
+ readinessProbe:
+ tcpSocket:
+ port: webhook-metrics
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ livenessProbe:
+ tcpSocket:
+ port: webhook-metrics
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ {{- end }}
+ - name: {{ template "externalip-webhook.fullname" . }}
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository}}:{{ default .Chart.AppVersion .Values.image.tag }}
+ imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+ command:
+ - /webhook
+ args:
+ - --webhook-port={{ .Values.webhookPort }}
+ {{- if .Values.allowedExternalIPCidrs }}
+ - --allowed-external-ip-cidrs={{ .Values.allowedExternalIPCidrs }}
+ {{- end }}
+ {{- if .Values.metrics.enabled }}
+ {{- if .Values.metrics.authProxy.enabled }}
+ - --metrics-addr=127.0.0.1:{{ .Values.metrics.authProxy.port }}
+ {{- else }}
+ - --metrics-addr=0.0.0.0:{{ .Values.metrics.port }}
+ {{- end }}
+ {{- end }}
+ ports:
+ - containerPort: {{ .Values.webhookPort }}
+ name: webhook-server
+ protocol: TCP
+ {{- if and (.Values.metrics.enabled) (not (.Values.metrics.authProxy.enabled)) }}
+ - containerPort: {{ .Values.metrics.port }}
+ name: webhook-metrics
+ protocol: TCP
+ {{- end }}
+ volumeMounts:
+ - name: server-cert
+ mountPath: /tmp/k8s-webhook-server/serving-certs
+ readOnly: true
+ resources:
+{{ toYaml .Values.resources | indent 10 }}
+ readinessProbe:
+ tcpSocket:
+ port: webhook-server
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ livenessProbe:
+ tcpSocket:
+ port: webhook-server
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+ {{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ {{- end }}
+ tolerations: {{ include "linux-node-tolerations" . | nindent 6}}
+ {{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 6 }}
+ {{- end }}
+ serviceAccountName: {{ template "externalip-webhook.fullname" . }}
+ volumes:
+ - name: server-cert
+ secret:
+ defaultMode: 420
+ secretName: {{ .Values.certificates.secretName }}
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/issuer.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/issuer.yaml
new file mode 100644
index 000000000..ff1c2de10
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/issuer.yaml
@@ -0,0 +1,52 @@
+{{- if .Values.certificates.certManager.enabled -}}
+ {{- $certmanagerVer := split "." .Values.certificates.certManager.version -}}
+ {{- if or (.Capabilities.APIVersions.Has "cert-manager.io/v1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 1) (ge (int $certmanagerVer._1) 0)) }}
+apiVersion: cert-manager.io/v1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1beta1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 16)) }}
+apiVersion: cert-manager.io/v1beta1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1alpha2") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 11)) }}
+apiVersion: cert-manager.io/v1alpha2
+ {{- else if or (.Capabilities.APIVersions.Has "certmanager.k8s.io/v1alpha1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (lt (int $certmanagerVer._1) 11)) }}
+apiVersion: certmanager.k8s.io/v1alpha1
+ {{- else }}
+# Setting latest version as default
+apiVersion: cert-manager.io/v1
+ {{- end }}
+kind: Certificate
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-server-cert
+ namespace: {{ .Release.Namespace }}
+spec:
+ dnsNames:
+ - {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc
+ - {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local
+ issuerRef:
+ kind: Issuer
+ name: {{ template "externalip-webhook.fullname" . }}-issuer
+ secretName: {{ .Values.certificates.secretName }}
+---
+ {{- if or (.Capabilities.APIVersions.Has "cert-manager.io/v1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 1) (ge (int $certmanagerVer._1) 0)) }}
+apiVersion: cert-manager.io/v1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1beta1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 16)) }}
+apiVersion: cert-manager.io/v1beta1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1alpha2") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 11)) }}
+apiVersion: cert-manager.io/v1alpha2
+ {{- else if or (.Capabilities.APIVersions.Has "certmanager.k8s.io/v1alpha1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (lt (int $certmanagerVer._1) 11)) }}
+apiVersion: certmanager.k8s.io/v1alpha1
+ {{- else }}
+# Setting latest version as default
+apiVersion: cert-manager.io/v1
+ {{- end }}
+kind: Issuer
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-issuer
+ namespace: {{ .Release.Namespace }}
+spec:
+ selfSigned: {}
+{{- end -}}
+
+
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/service.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/service.yaml
new file mode 100644
index 000000000..256add3e4
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/service.yaml
@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+spec:
+ ports:
+ - name: webhook-server
+ port: {{ .Values.service.webhookPort }}
+ protocol: TCP
+ targetPort: {{ .Values.webhookPort }}
+ selector:
+ app: {{ template "externalip-webhook.name" . }}
+ type: "ClusterIP"
+{{- if .Values.metrics.enabled }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-metrics-service
+ namespace: {{ .Release.Namespace }}
+spec:
+ ports:
+ - name: webhook-metrics
+ port: {{ .Values.service.metricsPort }}
+ protocol: TCP
+ targetPort: {{ .Values.metrics.port }}
+ selector:
+ app: {{ template "externalip-webhook.name" . }}
+ type: "ClusterIP"
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/serviceaccount.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/serviceaccount.yaml
new file mode 100644
index 000000000..895df4f5b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/servicemonitor.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/servicemonitor.yaml
new file mode 100644
index 000000000..c481ea31d
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/templates/servicemonitor.yaml
@@ -0,0 +1,16 @@
+{{- if and (.Values.metrics.enabled) (.Values.metrics.prometheusExport) -}}
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-monitor
+ namespace: {{ .Release.Namespace }}
+spec:
+ endpoints:
+ - path: /metrics
+ port: https
+ selector:
+ matchLabels:
+ app: {{ template "externalip-webhook.name" . }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/admissionregistration_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/admissionregistration_test.yaml
new file mode 100644
index 000000000..0660aa6e8
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/admissionregistration_test.yaml
@@ -0,0 +1,32 @@
+suite: Test Admission Registration
+templates:
+- admissionregistration.yaml
+tests:
+- it: should render Admission Registration
+ asserts:
+ - equal:
+ path: apiVersion
+ value: admissionregistration.k8s.io/v1beta1
+- it: should render Admission Registration annotation and not caBundle if certificates.certManager.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ namespace: test
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: metadata.annotations
+ value:
+ cert-manager.io/inject-ca-from: test/rancher-externalip-webhook-server-cert
+ - isNull:
+ path: webhooks[0].clientConfig.caBundle
+- it: should render Admission Registration caBundle and not annotation if certificates.certManager.enabled = false
+ set:
+ certificates.caBundle: test
+ certificates.certManager.enabled: false
+ asserts:
+ - equal:
+ path: webhooks[0].clientConfig.caBundle
+ value: test
+ - isNull:
+ path: metadata.annotations
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/clusterrole_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/clusterrole_test.yaml
new file mode 100644
index 000000000..9e563807b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/clusterrole_test.yaml
@@ -0,0 +1,37 @@
+suite: Test Cluster Roles
+templates:
+- clusterrole.yaml
+tests:
+- it: should not render Cluster Roles if metrics.enabled = false or metrics.authProxy.enabled = false
+ set:
+ metrics.enabled: false
+ metrics.authProxy.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: clusterrole.yaml
+- it: should render Cluster Roles if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: clusterrole.yaml
+- it: should render Cluster Roles with default rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
+- it: should render Cluster Roles with custom rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ rbac.apiVersion: v1beta
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1beta
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/clusterrolebinding_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/clusterrolebinding_test.yaml
new file mode 100644
index 000000000..2129573a3
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/clusterrolebinding_test.yaml
@@ -0,0 +1,42 @@
+suite: Test Cluster Role Bindings
+templates:
+- clusterrolebinding.yaml
+tests:
+- it: should render Cluster Role Bindings with default rbac api version
+ set:
+ rbac.apiVersion: v1
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
+- it: should render Cluster Role Bindings with custom rbac api version
+ set:
+ rbac.apiVersion: v1beta
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1beta
+- it: should not render Cluster Role Binding proxy if metrics.enabled = false or metrics.authProxy.enabled = false
+ set:
+ metrics.enabled: false
+ metrics.authProxy.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: clusterrolebinding.yaml
+- it: should render Cluster Role Bindings proxy if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: clusterrolebinding.yaml
+- it: should render Cluster Role Bindings with default rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/deployment_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/deployment_test.yaml
new file mode 100644
index 000000000..50e3f9ec1
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/deployment_test.yaml
@@ -0,0 +1,202 @@
+suite: Test Deployments
+templates:
+- deployment.yaml
+tests:
+- it: should render Deployment with allowed-external-ip-cidrs arg if allowedExternalIPCidrs is set
+ release:
+ name: rancher-externalip-webhook
+ set:
+ allowedExternalIPCidrs: "1,2"
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].args[1]
+ value: --allowed-external-ip-cidrs=1,2
+- it: should render Deployment with default port, nodeSelector and tolerations if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.tolerations[0]
+ value:
+ key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.nodeSelector
+ value:
+ kubernetes.io/os: linux
+- it: should render Deployment with default port and custom nodeSelector and tolerations if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ tolerations:
+ - key: "cattle.io/test"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ nodeSelector:
+ kubernetes.io/test: linux
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.tolerations[0]
+ value:
+ key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.tolerations[1]
+ value:
+ key: "cattle.io/test"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.nodeSelector
+ value:
+ kubernetes.io/os: linux
+ kubernetes.io/test: linux
+- it: should render Deployment with custom port and image if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ webhookPort: 9000
+ image.repository: test
+ image.tag: dev-test
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].image
+ value: test:dev-test
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9000
+ name: webhook-server
+ protocol: TCP
+- it: should render Deployment with default metrics port if metrics.enabled = true and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[0].ports[1]
+ value:
+ containerPort: 8443
+ name: webhook-metrics
+ protocol: TCP
+- it: should render Deployment with custom metrics port if metrics.enabled = true and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.port: 8000
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[0].ports[1]
+ value:
+ containerPort: 8000
+ name: webhook-metrics
+ protocol: TCP
+- it: should render Deployment with default metrics port if metrics.enabled = true and metrics.authProxy.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook-auth-proxy
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 8443
+ name: webhook-metrics
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[1].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[1].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+- it: should render Deployment with custom metrics port and image if metrics.enabled = true and metrics.authProxy.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ metrics.port: 8000
+ webhookPort: 9000
+ image.repository: test
+ image.tag: dev-test
+ metrics.authProxy.image.repository: auth
+ metrics.authProxy.image.tag: auth-test
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook-auth-proxy
+ - equal:
+ path: spec.template.spec.containers[0].image
+ value: auth:auth-test
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 8000
+ name: webhook-metrics
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[1].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[1].image
+ value: test:dev-test
+ - equal:
+ path: spec.template.spec.containers[1].ports[0]
+ value:
+ containerPort: 9000
+ name: webhook-server
+ protocol: TCP
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/issuer_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/issuer_test.yaml
new file mode 100644
index 000000000..eeeb660b2
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/issuer_test.yaml
@@ -0,0 +1,106 @@
+suite: Test Issuers
+templates:
+- issuer.yaml
+tests:
+- it: should not render issuer if certificates.certManager.enabled = false
+ set:
+ certificates.certManager.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: issuer.yaml
+- it: should render issuer if certificates.certManager.enabled = true
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: issuer.yaml
+- it: should set issuer apiVersion with default cert-manager
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 1.0.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.16.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1beta1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1beta1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.11.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1alpha2
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1alpha2
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager < 0.11.0 using capabilities
+ capabilities:
+ apiversions:
+ - certmanager.k8s.io/v1alpha1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: certmanager.k8s.io/v1alpha1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 1.0.0 using parameter
+ set:
+ certificates.certManager.version: 1.0.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.16.0 using parameter
+ set:
+ certificates.certManager.version: 0.16.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1beta1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.11.0 using parameter
+ set:
+ certificates.certManager.version: 0.11.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1alpha2
+ template: issuer.yaml
+- it: should set letsEncrypt apiVersion with cert-manager < 0.11.0 using parameter
+ set:
+ certificates.certManager.version: 0.9.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: certmanager.k8s.io/v1alpha1
+ template: issuer.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/service_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/service_test.yaml
new file mode 100644
index 000000000..a0ba4d352
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/service_test.yaml
@@ -0,0 +1,69 @@
+suite: Test Services
+templates:
+- service.yaml
+tests:
+- it: should render webhook-server service with default webhookPort if metrics.enabled = false
+ set:
+ metrics.enabled: false
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9443
+- it: should render webhook-server service with custom webhookPort if metrics.enabled = false
+ set:
+ metrics.enabled: false
+ webhookPort: 9000
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9000
+- it: should render webhook-server and webhook-metrics services with default webhookPort and metrics.port, if metrics.enabled = true
+ set:
+ metrics.enabled: true
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9443
+ documentIndex: 0
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-metrics
+ port: 8443
+ protocol: TCP
+ targetPort: 8443
+ documentIndex: 1
+- it: should render webhook-server and webhook-metrics services with custom webhookPort and metrics.port, if metrics.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.port: 8000
+ webhookPort: 9000
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9000
+ documentIndex: 0
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-metrics
+ port: 8443
+ protocol: TCP
+ targetPort: 8000
+ documentIndex: 1
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/serviceaccount_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/serviceaccount_test.yaml
new file mode 100644
index 000000000..5aebbc74b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/serviceaccount_test.yaml
@@ -0,0 +1,9 @@
+suite: Test Service Accounts
+templates:
+- serviceaccount.yaml
+tests:
+- it: should render Service Account
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: serviceaccount.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/servicemonitor_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/servicemonitor_test.yaml
new file mode 100644
index 000000000..21989265e
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/tests/servicemonitor_test.yaml
@@ -0,0 +1,20 @@
+suite: Test Service Monitors
+templates:
+- servicemonitor.yaml
+tests:
+- it: should not render Service Monitor if metrics.enabled = false or metrics.prometheusExport = false
+ set:
+ metrics.enabled: false
+ metrics.prometheusExport: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: servicemonitor.yaml
+- it: should render Service Account if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.prometheusExport: true
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: servicemonitor.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/values.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/values.yaml
new file mode 100644
index 000000000..19145a81b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.600/values.yaml
@@ -0,0 +1,67 @@
+## Allowed external IP cidrs
+allowedExternalIPCidrs: ""
+## Certificates generation for webhook
+certificates:
+ certManager:
+ # Enable cert manager integration. Cert manager should be already installed at the k8s cluster
+ enabled: true
+ version: ""
+ # If cert-manager integration is disabled, add self signed ca.crt in base64 format
+ caBundle: ""
+ # If cert-manager integration is disabled, upload certs data (ca.crt, tls.crt and tls.key) as k8s secretName in the namespace
+ secretName: webhook-server-cert
+## Details about the image to be pulled.
+image:
+ pullPolicy: IfNotPresent
+ pullSecrets: []
+ repository: rancher/externalip-webhook
+ tag: v0.1.6
+## Enabling metrics endpoint
+# Webhook emits `webhook_failed_request_count` metrics whenever it rejects service creation or update operation
+metrics:
+ enabled: false
+ port: 8443
+ # Enable webhook metrics export to Prometheus
+ prometheusExport: false
+ # Webhook metrics auth proxy. This option is just available for amd64 arch
+ authProxy:
+ enabled: false
+ port: 8080
+ image:
+ pullPolicy: IfNotPresent
+ pullSecrets: []
+ repository: rancher/kube-rbac-proxy
+ tag: v0.5.0
+ resources:
+ limits:
+ memory: 30Mi
+ cpu: 100m
+ requests:
+ memory: 20Mi
+ cpu: 100m
+## Node labels for pod assignment
+## Ref: https://kubernetes.io/docs/user-guide/node-selection/
+##
+nodeSelector: {}
+## RBAC
+rbac:
+ apiVersion: v1
+## CPU and Memory limit and request for externalip-webhook
+resources:
+ limits:
+ memory: 30Mi
+ cpu: 100m
+ requests:
+ memory: 20Mi
+ cpu: 100m
+service:
+ metricsPort: 8443
+ webhookPort: 443
+## Webhook serviceAccountName. Just used if metrics.authProxy.enabled = false
+serviceAccountName: default
+## List of node taints to tolerate (requires Kubernetes >= 1.6)
+tolerations: []
+## Webhook server pod port
+webhookPort: 9443
+global:
+ systemDefaultRegistry: ""
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/.helmignore b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/.helmignore
new file mode 100755
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/Chart.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/Chart.yaml
new file mode 100755
index 000000000..aebc35572
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/Chart.yaml
@@ -0,0 +1,24 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: External IP Webhook
+ catalog.cattle.io/namespace: cattle-externalip-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/release-name: rancher-external-ip-webhook
+ catalog.cattle.io/ui-component: rancher-external-ip-webhook
+apiVersion: v1
+appVersion: v0.1.6
+description: |
+ Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554
+home: https://github.com/rancher/externalip-webhook
+keywords:
+- cve
+- externalip
+- webhook
+- security
+maintainers:
+- email: raul@rancher.com
+ name: rawmind0
+name: rancher-external-ip-webhook
+sources:
+- https://github.com/rancher/externalip-webhook
+version: 0.1.601
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/README.md b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/README.md
new file mode 100755
index 000000000..4890065a7
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/README.md
@@ -0,0 +1,69 @@
+# externalip-webhook
+
+## Chart Details
+
+This chart will create a deployment of `externalip-webhook` within your Kubernetes Cluster. It's required to mitigate k8s CVE-2020-8554.
+
+## Installing the Chart
+
+To install the chart with the release name `rancher-external-ip-webhook`:
+
+```bash
+$ helm repo add rancher-chart https://charts.rancher.io
+$ helm repo update
+$ helm install rancher-external-ip-webhook rancher-chart/rancher-external-ip-webhook --namespace cattle-externalip-system -f values.yaml
+```
+
+## Configuration
+
+The following table lists the configurable parameters of the externalip-webhook chart and their default values.
+
+
+| Parameter | Description | Default |
+| ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------- |
+| `allowedExternalIPCidrs` | Set allowed external IP CIDRs separated by a comma | `""` |
+| `certificates.caBundle` | If cert-manager integration is disabled, add here self signed ca.crt in base64 format | `""` |
+| `certificates.certManager.enabled` | Enable cert manager integration. Cert manager should be already installed at the k8s cluster | `true` |
+| `certificates.certManager.version` | Cert manager version to use | `""` |
+| `certificates.secretName` | If cert-manager integration is disabled, upload certs data (ca.crt, tls.crt & tls.key) as k8s secretName in the namespace | `"webhook-server-cert"` |
+| `global.systemDefaultRegistry` | Pull docker images from systemDefaultRegistry | `""` |
+| `image.pullPolicy` | Webhook server docker pull policy | `"IfNotPresent"` |
+| `image.pullSecrets` | Webhook server docker pull secret | `""` |
+| `image.repository` | Webhook server docker image repository | `"rancher/externalip-webhook"` |
+| `image.tag` | Webhook server docker image tag Defaults to | `".Chart.appVersion"` |
+| `metrics.enabled` | Enable metrics endpoint | `false` |
+| `metrics.port` | Webhook metrics pod port | `8443` |
+| `metrics.prometheusExport` | Enable Prometheus export. Follow [exporting-metrics-for-prometheus](https://book.kubebuilder.io/reference/metrics.html#exporting-metrics-for-prometheus) to export the webhook metrics | `false` |
+| `metrics.authProxy.enabled` | Enable auth proxy for metrics endpoint | `false` |
+| `metrics.authProxy.port` | Webhook auth proxy pod port | `8080` |
+| `metrics.authProxy.image.pullPolicy` | Webhook auth proxy docker pull policy | `"IfNotPresent"` |
+| `metrics.authProxy.image.pullSecrets`| Webhook auth proxy docker pull secrets | `""` |
+| `metrics.authProxy.image.repository` | Webhook auth proxy docker image repository | `"gcr.io/kubebuilder/kube-rbac-proxy"` |
+| `metrics.authProxy.image.pullPolicy` | Webhook auth proxy docker image tag | `"v0.5.0"` |
+| `metrics.authProxy.resources.limits.cpu` | Webhook auth proxy resource cpu limit | `"100m"` |
+| `metrics.authProxy.resources.limits.memory` | Webhook auth proxy resource memory limit | `"30Mi"` |
+| `metrics.authProxy.resources.requests.cpu` | Webhook auth proxy wesource cpu reservation | `"100m"` |
+| `metrics.authProxy.resources.requests.memory` | Webhook auth proxy resource memory reservation | `"20Mi"` |
+| `nodeSelector` | Node labels for pod assignment | `{}` |
+| `rbac.apiVersion` | Rbac API version to use | `"v1"` |
+| `resources.limits.cpu` | Resource cpu limit | `"100m"` |
+| `resources.limits.memory` | Resource memory limit | `"30Mi"` |
+| `resources.requests.cpu` | Resource cpu reservation | `"100m"` |
+| `resources.requests.memory` | Resource memory reservation | `"20Mi"` |
+| `service.metricsPort` | Webhook metrics service port | `8443` |
+| `service.webhookPort` | Webhook server service port | `443` |
+| `serviceAccountName` | Webhook serviceAccountName. Just used if metrics.authProxy.enabled = false | `"default"` |
+| `tolerations` | List of node taints to tolerate (requires Kubernetes >= 1.6) | `[]` |
+| `webhookPort` | Webhook server pod port | `9443` |
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example,
+
+```bash
+$ helm repo add rancher-chart https://charts.rancher.io
+$ helm repo update
+$ helm install rancher-external-ip-webhook rancher-chart/rancher-external-ip-webhook --namespace cattle-externalip-system -f values.yaml
+```
+
+> **Tip**: You can use the default [values.yaml](https://github.com/rancher/externalip-webhook/blob/master/chart/values.yaml)
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/app-README.md b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/app-README.md
new file mode 100755
index 000000000..bd8acd382
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/app-README.md
@@ -0,0 +1,12 @@
+# externalip-webhook
+
+This chart was created to mitigate [CVE-2020-8554](https://www.cvedetails.com/cve/CVE-2020-8554/)
+
+External IP Webhook is a validating k8s webhook which prevents services from using random external IPs.
+Cluster administrators can specify list of CIDRs allowed to be used as external IP by specifying `allowed-external-ip-cidrs` parameter. The webhook will only allow services which either don’t set external IP, or whose external IPs are within the range specified by the administrator.
+
+External IP Webhook certificates are required. They can be generated in 2 ways:
+* cert-manager: This is the default chart configuration. Cert manager should be already installed at the k8s cluster
+* uploading certs: Disable `Cert Manager integration` and set `Secret name` and `CA Bundle` at `Certificates` section.
+
+For more information, review the Helm README of this chart.
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/questions.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/questions.yaml
new file mode 100755
index 000000000..3ea9edd93
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/questions.yaml
@@ -0,0 +1,26 @@
+questions:
+# allowedExternalIPCidrs
+- variable: allowedExternalIPCidrs
+ label: Allowed external IP cidrs
+ description: Set allowed external IP CIDRs separated by a comma
+ type: string
+ group: Configuration
+- variable: certificates.certManager.enabled
+ default: true
+ description: Enable cert manager integration. Cert manager should be already installed
+ label: Enable Cert Manager integration
+ type: boolean
+ group: "Certificates"
+ show_subquestion_if: false
+ subquestions:
+ - variable: certificates.secretName
+ default: webhook-server-cert
+ description: Use certificates from secret. Secret should exists in the app namespace, with certs data (ca.crt, tls.crt & tls.key)
+ label: Secret name
+ type: string
+ required: true
+ - variable: certificates.caBundle
+ description: Use self signed CA Bundle. It should be provided in base64 format
+ label: CA Bundle
+ type: string
+ required: true
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/NOTES.txt b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/NOTES.txt
new file mode 100755
index 000000000..74271bdd5
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/NOTES.txt
@@ -0,0 +1,3 @@
+To verify that externalip-webhook has started, run:
+
+ kubectl --namespace={{ .Release.Namespace }} get pods -l "app={{ template "externalip-webhook.name" . }},release={{ .Release.Name }}"
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/_helpers.tpl b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/_helpers.tpl
new file mode 100755
index 000000000..cc8a9a0d3
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/_helpers.tpl
@@ -0,0 +1,50 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "externalip-webhook.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "externalip-webhook.fullname" -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if ne $name .Release.Name -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s" $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+
+{{/* Generate basic labels */}}
+{{- define "externalip-webhook.labels" }}
+app: {{ template "externalip-webhook.name" . }}
+heritage: {{.Release.Service }}
+release: {{.Release.Name }}
+{{- end }}
+
+{{/*
+Windows cluster will add default taint for linux nodes,
+add below linux tolerations to workloads could be scheduled to those linux nodes
+*/}}
+{{- define "linux-node-tolerations" -}}
+- key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+{{- end -}}
+
+{{- define "linux-node-selector" -}}
+kubernetes.io/os: linux
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/admissionregistration.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/admissionregistration.yaml
new file mode 100755
index 000000000..d8152faa5
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/admissionregistration.yaml
@@ -0,0 +1,30 @@
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+{{- if .Values.certificates.certManager.enabled }}
+ annotations:
+ cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ template "externalip-webhook.fullname" . }}-server-cert
+{{- end }}
+ creationTimestamp: null
+ name: {{ template "externalip-webhook.fullname" . }}-validating-webhook-configuration
+webhooks:
+- clientConfig:
+{{- if not (.Values.certificates.certManager.enabled) }}
+ caBundle: {{ .Values.certificates.caBundle }}
+{{- end }}
+ service:
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+ path: /validate-service
+ failurePolicy: Ignore
+ name: {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc
+ rules:
+ - apiGroups:
+ - ""
+ apiVersions:
+ - v1
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - services
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/clusterrole.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/clusterrole.yaml
new file mode 100755
index 000000000..46e18bf00
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/clusterrole.yaml
@@ -0,0 +1,33 @@
+{{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) -}}
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRole
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-role
+rules:
+- apiGroups:
+ - authentication.k8s.io
+ resources:
+ - tokenreviews
+ verbs:
+ - create
+- apiGroups:
+ - authorization.k8s.io
+ resources:
+ - subjectaccessreviews
+ verbs:
+ - create
+---
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRole
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-metrics-reader
+rules:
+- nonResourceURLs:
+ - /metrics
+ verbs:
+ - get
+{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/clusterrolebinding.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/clusterrolebinding.yaml
new file mode 100755
index 000000000..2fa40817f
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/clusterrolebinding.yaml
@@ -0,0 +1,31 @@
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRoleBinding
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-cluster-view
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: view
+subjects:
+- kind: ServiceAccount
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+{{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) }}
+---
+apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
+kind: ClusterRoleBinding
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: {{ template "externalip-webhook.fullname" . }}-proxy-role
+subjects:
+- kind: ServiceAccount
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/deployment.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/deployment.yaml
new file mode 100755
index 000000000..c82754deb
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/deployment.yaml
@@ -0,0 +1,107 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/pod: runtime/default
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+spec:
+ replicas: {{ .Values.replicas }}
+ selector:
+ matchLabels:
+ app: {{ template "externalip-webhook.name" . }}
+ template:
+ metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/pod: runtime/default
+ labels: {{ include "externalip-webhook.labels" . | indent 8 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ spec:
+ containers:
+ {{- if and (.Values.metrics.enabled) (.Values.metrics.authProxy.enabled) }}
+ - name: {{ template "externalip-webhook.fullname" . }}-auth-proxy
+ args:
+ - --secure-listen-address=0.0.0.0:{{ .Values.metrics.port }}
+ - --upstream=http://127.0.0.1:{{ .Values.metrics.authProxy.port }}/
+ - --logtostderr=true
+ - --v=10
+ image: {{ template "system_default_registry" . }}{{ .Values.metrics.authProxy.image.repository}}:{{ .Values.metrics.authProxy.image.tag }}
+ imagePullPolicy: "{{ .Values.metrics.authProxy.image.pullPolicy }}"
+ ports:
+ - containerPort: {{ .Values.metrics.port }}
+ name: webhook-metrics
+ protocol: TCP
+ resources:
+{{ toYaml .Values.metrics.authProxy.resources | indent 10 }}
+ readinessProbe:
+ tcpSocket:
+ port: webhook-metrics
+ initialDelaySeconds: 5
+ periodSeconds: 10
+ livenessProbe:
+ tcpSocket:
+ port: webhook-metrics
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ {{- end }}
+ - name: {{ template "externalip-webhook.fullname" . }}
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository}}:{{ default .Chart.AppVersion .Values.image.tag }}
+ imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+ command:
+ - /webhook
+ args:
+ - --webhook-port={{ .Values.webhookPort }}
+ {{- if .Values.allowedExternalIPCidrs }}
+ - --allowed-external-ip-cidrs={{ .Values.allowedExternalIPCidrs }}
+ {{- end }}
+ {{- if .Values.metrics.enabled }}
+ {{- if .Values.metrics.authProxy.enabled }}
+ - --metrics-addr=127.0.0.1:{{ .Values.metrics.authProxy.port }}
+ {{- else }}
+ - --metrics-addr=0.0.0.0:{{ .Values.metrics.port }}
+ {{- end }}
+ {{- end }}
+ ports:
+ - containerPort: {{ .Values.webhookPort }}
+ name: webhook-server
+ protocol: TCP
+ {{- if and (.Values.metrics.enabled) (not (.Values.metrics.authProxy.enabled)) }}
+ - containerPort: {{ .Values.metrics.port }}
+ name: webhook-metrics
+ protocol: TCP
+ {{- end }}
+ volumeMounts:
+ - name: server-cert
+ mountPath: /tmp/k8s-webhook-server/serving-certs
+ readOnly: true
+ resources:
+{{ toYaml .Values.resources | indent 10 }}
+ readinessProbe:
+ tcpSocket:
+ port: webhook-server
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ livenessProbe:
+ tcpSocket:
+ port: webhook-server
+ initialDelaySeconds: 5
+ failureThreshold: 10
+ periodSeconds: 30
+ nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
+ {{- if .Values.nodeSelector }}
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ {{- end }}
+ tolerations: {{ include "linux-node-tolerations" . | nindent 6}}
+ {{- if .Values.tolerations }}
+{{ toYaml .Values.tolerations | indent 6 }}
+ {{- end }}
+ serviceAccountName: {{ template "externalip-webhook.fullname" . }}
+ volumes:
+ - name: server-cert
+ secret:
+ defaultMode: 420
+ secretName: {{ .Values.certificates.secretName }}
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/issuer.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/issuer.yaml
new file mode 100755
index 000000000..ff1c2de10
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/issuer.yaml
@@ -0,0 +1,52 @@
+{{- if .Values.certificates.certManager.enabled -}}
+ {{- $certmanagerVer := split "." .Values.certificates.certManager.version -}}
+ {{- if or (.Capabilities.APIVersions.Has "cert-manager.io/v1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 1) (ge (int $certmanagerVer._1) 0)) }}
+apiVersion: cert-manager.io/v1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1beta1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 16)) }}
+apiVersion: cert-manager.io/v1beta1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1alpha2") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 11)) }}
+apiVersion: cert-manager.io/v1alpha2
+ {{- else if or (.Capabilities.APIVersions.Has "certmanager.k8s.io/v1alpha1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (lt (int $certmanagerVer._1) 11)) }}
+apiVersion: certmanager.k8s.io/v1alpha1
+ {{- else }}
+# Setting latest version as default
+apiVersion: cert-manager.io/v1
+ {{- end }}
+kind: Certificate
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-server-cert
+ namespace: {{ .Release.Namespace }}
+spec:
+ dnsNames:
+ - {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc
+ - {{ template "externalip-webhook.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local
+ issuerRef:
+ kind: Issuer
+ name: {{ template "externalip-webhook.fullname" . }}-issuer
+ secretName: {{ .Values.certificates.secretName }}
+---
+ {{- if or (.Capabilities.APIVersions.Has "cert-manager.io/v1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 1) (ge (int $certmanagerVer._1) 0)) }}
+apiVersion: cert-manager.io/v1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1beta1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 16)) }}
+apiVersion: cert-manager.io/v1beta1
+ {{- else if or (.Capabilities.APIVersions.Has "cert-manager.io/v1alpha2") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (ge (int $certmanagerVer._1) 11)) }}
+apiVersion: cert-manager.io/v1alpha2
+ {{- else if or (.Capabilities.APIVersions.Has "certmanager.k8s.io/v1alpha1") (and (gt (len $certmanagerVer._0) 0) (eq (int $certmanagerVer._0) 0) (lt (int $certmanagerVer._1) 11)) }}
+apiVersion: certmanager.k8s.io/v1alpha1
+ {{- else }}
+# Setting latest version as default
+apiVersion: cert-manager.io/v1
+ {{- end }}
+kind: Issuer
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-issuer
+ namespace: {{ .Release.Namespace }}
+spec:
+ selfSigned: {}
+{{- end -}}
+
+
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/service.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/service.yaml
new file mode 100755
index 000000000..256add3e4
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/service.yaml
@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
+spec:
+ ports:
+ - name: webhook-server
+ port: {{ .Values.service.webhookPort }}
+ protocol: TCP
+ targetPort: {{ .Values.webhookPort }}
+ selector:
+ app: {{ template "externalip-webhook.name" . }}
+ type: "ClusterIP"
+{{- if .Values.metrics.enabled }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-metrics-service
+ namespace: {{ .Release.Namespace }}
+spec:
+ ports:
+ - name: webhook-metrics
+ port: {{ .Values.service.metricsPort }}
+ protocol: TCP
+ targetPort: {{ .Values.metrics.port }}
+ selector:
+ app: {{ template "externalip-webhook.name" . }}
+ type: "ClusterIP"
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/serviceaccount.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/serviceaccount.yaml
new file mode 100755
index 000000000..895df4f5b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}
+ namespace: {{ .Release.Namespace }}
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/servicemonitor.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/servicemonitor.yaml
new file mode 100755
index 000000000..c481ea31d
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/templates/servicemonitor.yaml
@@ -0,0 +1,16 @@
+{{- if and (.Values.metrics.enabled) (.Values.metrics.prometheusExport) -}}
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ labels: {{ include "externalip-webhook.labels" . | indent 4 }}
+ chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+ name: {{ template "externalip-webhook.fullname" . }}-monitor
+ namespace: {{ .Release.Namespace }}
+spec:
+ endpoints:
+ - path: /metrics
+ port: https
+ selector:
+ matchLabels:
+ app: {{ template "externalip-webhook.name" . }}
+{{- end }}
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/admissionregistration_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/admissionregistration_test.yaml
new file mode 100755
index 000000000..0660aa6e8
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/admissionregistration_test.yaml
@@ -0,0 +1,32 @@
+suite: Test Admission Registration
+templates:
+- admissionregistration.yaml
+tests:
+- it: should render Admission Registration
+ asserts:
+ - equal:
+ path: apiVersion
+ value: admissionregistration.k8s.io/v1beta1
+- it: should render Admission Registration annotation and not caBundle if certificates.certManager.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ namespace: test
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: metadata.annotations
+ value:
+ cert-manager.io/inject-ca-from: test/rancher-externalip-webhook-server-cert
+ - isNull:
+ path: webhooks[0].clientConfig.caBundle
+- it: should render Admission Registration caBundle and not annotation if certificates.certManager.enabled = false
+ set:
+ certificates.caBundle: test
+ certificates.certManager.enabled: false
+ asserts:
+ - equal:
+ path: webhooks[0].clientConfig.caBundle
+ value: test
+ - isNull:
+ path: metadata.annotations
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/clusterrole_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/clusterrole_test.yaml
new file mode 100755
index 000000000..9e563807b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/clusterrole_test.yaml
@@ -0,0 +1,37 @@
+suite: Test Cluster Roles
+templates:
+- clusterrole.yaml
+tests:
+- it: should not render Cluster Roles if metrics.enabled = false or metrics.authProxy.enabled = false
+ set:
+ metrics.enabled: false
+ metrics.authProxy.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: clusterrole.yaml
+- it: should render Cluster Roles if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: clusterrole.yaml
+- it: should render Cluster Roles with default rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
+- it: should render Cluster Roles with custom rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ rbac.apiVersion: v1beta
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1beta
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/clusterrolebinding_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/clusterrolebinding_test.yaml
new file mode 100755
index 000000000..2129573a3
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/clusterrolebinding_test.yaml
@@ -0,0 +1,42 @@
+suite: Test Cluster Role Bindings
+templates:
+- clusterrolebinding.yaml
+tests:
+- it: should render Cluster Role Bindings with default rbac api version
+ set:
+ rbac.apiVersion: v1
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
+- it: should render Cluster Role Bindings with custom rbac api version
+ set:
+ rbac.apiVersion: v1beta
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1beta
+- it: should not render Cluster Role Binding proxy if metrics.enabled = false or metrics.authProxy.enabled = false
+ set:
+ metrics.enabled: false
+ metrics.authProxy.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: clusterrolebinding.yaml
+- it: should render Cluster Role Bindings proxy if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: clusterrolebinding.yaml
+- it: should render Cluster Role Bindings with default rbac api version if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: rbac.authorization.k8s.io/v1
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/deployment_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/deployment_test.yaml
new file mode 100755
index 000000000..50e3f9ec1
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/deployment_test.yaml
@@ -0,0 +1,202 @@
+suite: Test Deployments
+templates:
+- deployment.yaml
+tests:
+- it: should render Deployment with allowed-external-ip-cidrs arg if allowedExternalIPCidrs is set
+ release:
+ name: rancher-externalip-webhook
+ set:
+ allowedExternalIPCidrs: "1,2"
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].args[1]
+ value: --allowed-external-ip-cidrs=1,2
+- it: should render Deployment with default port, nodeSelector and tolerations if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.tolerations[0]
+ value:
+ key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.nodeSelector
+ value:
+ kubernetes.io/os: linux
+- it: should render Deployment with default port and custom nodeSelector and tolerations if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ tolerations:
+ - key: "cattle.io/test"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ nodeSelector:
+ kubernetes.io/test: linux
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.tolerations[0]
+ value:
+ key: "cattle.io/os"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.tolerations[1]
+ value:
+ key: "cattle.io/test"
+ value: "linux"
+ effect: "NoSchedule"
+ operator: "Equal"
+ - equal:
+ path: spec.template.spec.nodeSelector
+ value:
+ kubernetes.io/os: linux
+ kubernetes.io/test: linux
+- it: should render Deployment with custom port and image if metrics.enabled = false and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ webhookPort: 9000
+ image.repository: test
+ image.tag: dev-test
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].image
+ value: test:dev-test
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9000
+ name: webhook-server
+ protocol: TCP
+- it: should render Deployment with default metrics port if metrics.enabled = true and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[0].ports[1]
+ value:
+ containerPort: 8443
+ name: webhook-metrics
+ protocol: TCP
+- it: should render Deployment with custom metrics port if metrics.enabled = true and metrics.authProxy.enabled = false
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.port: 8000
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[0].ports[1]
+ value:
+ containerPort: 8000
+ name: webhook-metrics
+ protocol: TCP
+- it: should render Deployment with default metrics port if metrics.enabled = true and metrics.authProxy.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook-auth-proxy
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 8443
+ name: webhook-metrics
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[1].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[1].ports[0]
+ value:
+ containerPort: 9443
+ name: webhook-server
+ protocol: TCP
+- it: should render Deployment with custom metrics port and image if metrics.enabled = true and metrics.authProxy.enabled = true
+ release:
+ name: rancher-externalip-webhook
+ set:
+ metrics.enabled: true
+ metrics.authProxy.enabled: true
+ metrics.port: 8000
+ webhookPort: 9000
+ image.repository: test
+ image.tag: dev-test
+ metrics.authProxy.image.repository: auth
+ metrics.authProxy.image.tag: auth-test
+ asserts:
+ - equal:
+ path: spec.template.spec.containers[0].name
+ value: rancher-externalip-webhook-auth-proxy
+ - equal:
+ path: spec.template.spec.containers[0].image
+ value: auth:auth-test
+ - equal:
+ path: spec.template.spec.containers[0].ports[0]
+ value:
+ containerPort: 8000
+ name: webhook-metrics
+ protocol: TCP
+ - equal:
+ path: spec.template.spec.containers[1].name
+ value: rancher-externalip-webhook
+ - equal:
+ path: spec.template.spec.containers[1].image
+ value: test:dev-test
+ - equal:
+ path: spec.template.spec.containers[1].ports[0]
+ value:
+ containerPort: 9000
+ name: webhook-server
+ protocol: TCP
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/issuer_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/issuer_test.yaml
new file mode 100755
index 000000000..eeeb660b2
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/issuer_test.yaml
@@ -0,0 +1,106 @@
+suite: Test Issuers
+templates:
+- issuer.yaml
+tests:
+- it: should not render issuer if certificates.certManager.enabled = false
+ set:
+ certificates.certManager.enabled: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: issuer.yaml
+- it: should render issuer if certificates.certManager.enabled = true
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - hasDocuments:
+ count: 2
+ template: issuer.yaml
+- it: should set issuer apiVersion with default cert-manager
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 1.0.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.16.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1beta1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1beta1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.11.0 using capabilities
+ capabilities:
+ apiversions:
+ - cert-manager.io/v1alpha2
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1alpha2
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager < 0.11.0 using capabilities
+ capabilities:
+ apiversions:
+ - certmanager.k8s.io/v1alpha1
+ set:
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: certmanager.k8s.io/v1alpha1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 1.0.0 using parameter
+ set:
+ certificates.certManager.version: 1.0.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.16.0 using parameter
+ set:
+ certificates.certManager.version: 0.16.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1beta1
+ template: issuer.yaml
+- it: should set issuer apiVersion with cert-manager >= 0.11.0 using parameter
+ set:
+ certificates.certManager.version: 0.11.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: cert-manager.io/v1alpha2
+ template: issuer.yaml
+- it: should set letsEncrypt apiVersion with cert-manager < 0.11.0 using parameter
+ set:
+ certificates.certManager.version: 0.9.0
+ certificates.certManager.enabled: true
+ asserts:
+ - equal:
+ path: apiVersion
+ value: certmanager.k8s.io/v1alpha1
+ template: issuer.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/service_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/service_test.yaml
new file mode 100755
index 000000000..a0ba4d352
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/service_test.yaml
@@ -0,0 +1,69 @@
+suite: Test Services
+templates:
+- service.yaml
+tests:
+- it: should render webhook-server service with default webhookPort if metrics.enabled = false
+ set:
+ metrics.enabled: false
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9443
+- it: should render webhook-server service with custom webhookPort if metrics.enabled = false
+ set:
+ metrics.enabled: false
+ webhookPort: 9000
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9000
+- it: should render webhook-server and webhook-metrics services with default webhookPort and metrics.port, if metrics.enabled = true
+ set:
+ metrics.enabled: true
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9443
+ documentIndex: 0
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-metrics
+ port: 8443
+ protocol: TCP
+ targetPort: 8443
+ documentIndex: 1
+- it: should render webhook-server and webhook-metrics services with custom webhookPort and metrics.port, if metrics.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.port: 8000
+ webhookPort: 9000
+ asserts:
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-server
+ port: 443
+ protocol: TCP
+ targetPort: 9000
+ documentIndex: 0
+ - equal:
+ path: spec.ports[0]
+ value:
+ name: webhook-metrics
+ port: 8443
+ protocol: TCP
+ targetPort: 8000
+ documentIndex: 1
\ No newline at end of file
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/serviceaccount_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/serviceaccount_test.yaml
new file mode 100755
index 000000000..5aebbc74b
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/serviceaccount_test.yaml
@@ -0,0 +1,9 @@
+suite: Test Service Accounts
+templates:
+- serviceaccount.yaml
+tests:
+- it: should render Service Account
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: serviceaccount.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/servicemonitor_test.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/servicemonitor_test.yaml
new file mode 100755
index 000000000..21989265e
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/tests/servicemonitor_test.yaml
@@ -0,0 +1,20 @@
+suite: Test Service Monitors
+templates:
+- servicemonitor.yaml
+tests:
+- it: should not render Service Monitor if metrics.enabled = false or metrics.prometheusExport = false
+ set:
+ metrics.enabled: false
+ metrics.prometheusExport: false
+ asserts:
+ - hasDocuments:
+ count: 0
+ template: servicemonitor.yaml
+- it: should render Service Account if metrics.enabled = true and metrics.authProxy.enabled = true
+ set:
+ metrics.enabled: true
+ metrics.prometheusExport: true
+ asserts:
+ - hasDocuments:
+ count: 1
+ template: servicemonitor.yaml
diff --git a/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/values.yaml b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/values.yaml
new file mode 100755
index 000000000..832d2199e
--- /dev/null
+++ b/released/charts/rancher-external-ip-webhook/rancher-external-ip-webhook/0.1.601/values.yaml
@@ -0,0 +1,67 @@
+## Allowed external IP cidrs
+allowedExternalIPCidrs: ""
+## Certificates generation for webhook
+certificates:
+ certManager:
+ # Enable cert manager integration. Cert manager should be already installed at the k8s cluster
+ enabled: true
+ version: ""
+ # If cert-manager integration is disabled, add self signed ca.crt in base64 format
+ caBundle: ""
+ # If cert-manager integration is disabled, upload certs data (ca.crt, tls.crt and tls.key) as k8s secretName in the namespace
+ secretName: webhook-server-cert
+## Details about the image to be pulled.
+image:
+ pullPolicy: IfNotPresent
+ pullSecrets: []
+ repository: rancher/externalip-webhook
+ tag: v0.1.6
+## Enabling metrics endpoint
+# Webhook emits `webhook_failed_request_count` metrics whenever it rejects service creation or update operation
+metrics:
+ enabled: false
+ port: 8443
+ # Enable webhook metrics export to Prometheus
+ prometheusExport: false
+ # Webhook metrics auth proxy. This option is just available for amd64 arch
+ authProxy:
+ enabled: false
+ port: 8080
+ image:
+ pullPolicy: IfNotPresent
+ pullSecrets: []
+ repository: rancher/mirrored-kube-rbac-proxy
+ tag: v0.5.0
+ resources:
+ limits:
+ memory: 30Mi
+ cpu: 100m
+ requests:
+ memory: 20Mi
+ cpu: 100m
+## Node labels for pod assignment
+## Ref: https://kubernetes.io/docs/user-guide/node-selection/
+##
+nodeSelector: {}
+## RBAC
+rbac:
+ apiVersion: v1
+## CPU and Memory limit and request for externalip-webhook
+resources:
+ limits:
+ memory: 30Mi
+ cpu: 100m
+ requests:
+ memory: 20Mi
+ cpu: 100m
+service:
+ metricsPort: 8443
+ webhookPort: 443
+## Webhook serviceAccountName. Just used if metrics.authProxy.enabled = false
+serviceAccountName: default
+## List of node taints to tolerate (requires Kubernetes >= 1.6)
+tolerations: []
+## Webhook server pod port
+webhookPort: 9443
+global:
+ systemDefaultRegistry: ""
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/Chart.yaml
new file mode 100644
index 000000000..5ed89e38d
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/Chart.yaml
@@ -0,0 +1,11 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/release-name: rancher-gatekeeper-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-gatekeeper.
+name: rancher-gatekeeper-crd
+type: application
+version: 3.1.100
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/README.md
new file mode 100644
index 000000000..a499b53e7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/README.md
@@ -0,0 +1,2 @@
+# rancher-gatekeeper-crd
+A Rancher chart that installs the CRDs used by [rancher-gatekeeper](https://github.com/rancher/dev-charts/tree/master/packages/rancher-gatekeeper).
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/config-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/config-customresourcedefinition.yaml
new file mode 100644
index 000000000..73ffbdc32
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/config-customresourcedefinition.yaml
@@ -0,0 +1,106 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: configs.config.gatekeeper.sh
+spec:
+ group: config.gatekeeper.sh
+ names:
+ kind: Config
+ listKind: ConfigList
+ plural: configs
+ shortNames:
+ - config
+ singular: config
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: Config is the Schema for the configs API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: ConfigSpec defines the desired state of Config
+ properties:
+ match:
+ description: Configuration for namespace exclusion
+ items:
+ properties:
+ excludedNamespaces:
+ items:
+ type: string
+ type: array
+ processes:
+ items:
+ type: string
+ type: array
+ type: object
+ type: array
+ readiness:
+ description: Configuration for readiness tracker
+ properties:
+ statsEnabled:
+ type: boolean
+ type: object
+ sync:
+ description: Configuration for syncing k8s objects
+ properties:
+ syncOnly:
+ description: If non-empty, only entries on this list will be replicated into OPA
+ items:
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ type: array
+ type: object
+ validation:
+ description: Configuration for validation
+ properties:
+ traces:
+ description: List of requests to trace. Both "user" and "kinds" must be specified
+ items:
+ properties:
+ dump:
+ description: Also dump the state of OPA with the trace. Set to `All` to dump everything.
+ type: string
+ kind:
+ description: Only trace requests of the following GroupVersionKind
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ user:
+ description: Only trace requests from the specified user
+ type: string
+ type: object
+ type: array
+ type: object
+ type: object
+ status:
+ description: ConfigStatus defines the observed state of Config
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constraintpodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constraintpodstatus-customresourcedefinition.yaml
new file mode 100644
index 000000000..f8e552080
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constraintpodstatus-customresourcedefinition.yaml
@@ -0,0 +1,68 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constraintpodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintPodStatus
+ listKind: ConstraintPodStatusList
+ plural: constraintpodstatuses
+ singular: constraintpodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintPodStatus is the Schema for the constraintpodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintPodStatusStatus defines the observed state of ConstraintPodStatus
+ properties:
+ constraintUID:
+ description: Storing the constraint UID allows us to detect drift, such as when a constraint has been recreated after its CRD was deleted out from under it, interrupting the watch
+ type: string
+ enforced:
+ type: boolean
+ errors:
+ items:
+ description: Error represents a single error caught while adding a constraint to OPA
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constrainttemplate-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constrainttemplate-customresourcedefinition.yaml
new file mode 100644
index 000000000..ca171c738
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constrainttemplate-customresourcedefinition.yaml
@@ -0,0 +1,99 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplates.templates.gatekeeper.sh
+spec:
+ group: templates.gatekeeper.sh
+ names:
+ kind: ConstraintTemplate
+ plural: constrainttemplates
+ shortNames:
+ - constraints
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ properties:
+ crd:
+ properties:
+ spec:
+ properties:
+ names:
+ properties:
+ kind:
+ type: string
+ shortNames:
+ items:
+ type: string
+ type: array
+ type: object
+ validation:
+ type: object
+ type: object
+ type: object
+ targets:
+ items:
+ properties:
+ libs:
+ items:
+ type: string
+ type: array
+ rego:
+ type: string
+ target:
+ type: string
+ type: object
+ type: array
+ type: object
+ status:
+ properties:
+ byPod:
+ items:
+ properties:
+ errors:
+ items:
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: a unique identifier for the pod that wrote the status
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ type: object
+ type: array
+ created:
+ type: boolean
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ - name: v1alpha1
+ served: true
+ storage: false
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constrainttemplatepodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constrainttemplatepodstatus-customresourcedefinition.yaml
new file mode 100644
index 000000000..804dca48c
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.100/templates/constrainttemplatepodstatus-customresourcedefinition.yaml
@@ -0,0 +1,67 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplatepodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintTemplatePodStatus
+ listKind: ConstraintTemplatePodStatusList
+ plural: constrainttemplatepodstatuses
+ singular: constrainttemplatepodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintTemplatePodStatusStatus defines the observed state of ConstraintTemplatePodStatus
+ properties:
+ errors:
+ items:
+ description: CreateCRDError represents a single error caught during parsing, compiling, etc.
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: 'Important: Run "make" to regenerate code after modifying this file'
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ templateUID:
+ description: UID is a type that holds unique ID values, including UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being a type captures intent and helps make sure that UIDs and names do not get conflated.
+ type: string
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/Chart.yaml
new file mode 100644
index 000000000..8d1a18729
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/Chart.yaml
@@ -0,0 +1,11 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/release-name: rancher-gatekeeper-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-gatekeeper.
+name: rancher-gatekeeper-crd
+type: application
+version: 3.1.101
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/README.md
new file mode 100644
index 000000000..26079c833
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/README.md
@@ -0,0 +1,2 @@
+# rancher-gatekeeper-crd
+A Rancher chart that installs the CRDs used by rancher-gatekeeper.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/config-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/config-customresourcedefinition.yaml
new file mode 100644
index 000000000..73ffbdc32
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/config-customresourcedefinition.yaml
@@ -0,0 +1,106 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: configs.config.gatekeeper.sh
+spec:
+ group: config.gatekeeper.sh
+ names:
+ kind: Config
+ listKind: ConfigList
+ plural: configs
+ shortNames:
+ - config
+ singular: config
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: Config is the Schema for the configs API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: ConfigSpec defines the desired state of Config
+ properties:
+ match:
+ description: Configuration for namespace exclusion
+ items:
+ properties:
+ excludedNamespaces:
+ items:
+ type: string
+ type: array
+ processes:
+ items:
+ type: string
+ type: array
+ type: object
+ type: array
+ readiness:
+ description: Configuration for readiness tracker
+ properties:
+ statsEnabled:
+ type: boolean
+ type: object
+ sync:
+ description: Configuration for syncing k8s objects
+ properties:
+ syncOnly:
+ description: If non-empty, only entries on this list will be replicated into OPA
+ items:
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ type: array
+ type: object
+ validation:
+ description: Configuration for validation
+ properties:
+ traces:
+ description: List of requests to trace. Both "user" and "kinds" must be specified
+ items:
+ properties:
+ dump:
+ description: Also dump the state of OPA with the trace. Set to `All` to dump everything.
+ type: string
+ kind:
+ description: Only trace requests of the following GroupVersionKind
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ user:
+ description: Only trace requests from the specified user
+ type: string
+ type: object
+ type: array
+ type: object
+ type: object
+ status:
+ description: ConfigStatus defines the observed state of Config
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constraintpodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constraintpodstatus-customresourcedefinition.yaml
new file mode 100644
index 000000000..f8e552080
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constraintpodstatus-customresourcedefinition.yaml
@@ -0,0 +1,68 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constraintpodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintPodStatus
+ listKind: ConstraintPodStatusList
+ plural: constraintpodstatuses
+ singular: constraintpodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintPodStatus is the Schema for the constraintpodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintPodStatusStatus defines the observed state of ConstraintPodStatus
+ properties:
+ constraintUID:
+ description: Storing the constraint UID allows us to detect drift, such as when a constraint has been recreated after its CRD was deleted out from under it, interrupting the watch
+ type: string
+ enforced:
+ type: boolean
+ errors:
+ items:
+ description: Error represents a single error caught while adding a constraint to OPA
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constrainttemplate-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constrainttemplate-customresourcedefinition.yaml
new file mode 100644
index 000000000..ca171c738
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constrainttemplate-customresourcedefinition.yaml
@@ -0,0 +1,99 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplates.templates.gatekeeper.sh
+spec:
+ group: templates.gatekeeper.sh
+ names:
+ kind: ConstraintTemplate
+ plural: constrainttemplates
+ shortNames:
+ - constraints
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ properties:
+ crd:
+ properties:
+ spec:
+ properties:
+ names:
+ properties:
+ kind:
+ type: string
+ shortNames:
+ items:
+ type: string
+ type: array
+ type: object
+ validation:
+ type: object
+ type: object
+ type: object
+ targets:
+ items:
+ properties:
+ libs:
+ items:
+ type: string
+ type: array
+ rego:
+ type: string
+ target:
+ type: string
+ type: object
+ type: array
+ type: object
+ status:
+ properties:
+ byPod:
+ items:
+ properties:
+ errors:
+ items:
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: a unique identifier for the pod that wrote the status
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ type: object
+ type: array
+ created:
+ type: boolean
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ - name: v1alpha1
+ served: true
+ storage: false
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constrainttemplatepodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constrainttemplatepodstatus-customresourcedefinition.yaml
new file mode 100644
index 000000000..804dca48c
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.1.101/templates/constrainttemplatepodstatus-customresourcedefinition.yaml
@@ -0,0 +1,67 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplatepodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintTemplatePodStatus
+ listKind: ConstraintTemplatePodStatusList
+ plural: constrainttemplatepodstatuses
+ singular: constrainttemplatepodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintTemplatePodStatusStatus defines the observed state of ConstraintTemplatePodStatus
+ properties:
+ errors:
+ items:
+ description: CreateCRDError represents a single error caught during parsing, compiling, etc.
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: 'Important: Run "make" to regenerate code after modifying this file'
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ templateUID:
+ description: UID is a type that holds unique ID values, including UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being a type captures intent and helps make sure that UIDs and names do not get conflated.
+ type: string
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/Chart.yaml
new file mode 100644
index 000000000..0528569c7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/Chart.yaml
@@ -0,0 +1,11 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/release-name: rancher-gatekeeper-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-gatekeeper.
+name: rancher-gatekeeper-crd
+type: application
+version: 3.2.101
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/README.md
new file mode 100644
index 000000000..26079c833
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/README.md
@@ -0,0 +1,2 @@
+# rancher-gatekeeper-crd
+A Rancher chart that installs the CRDs used by rancher-gatekeeper.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/config-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/config-customresourcedefinition.yaml
new file mode 100644
index 000000000..73ffbdc32
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/config-customresourcedefinition.yaml
@@ -0,0 +1,106 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: configs.config.gatekeeper.sh
+spec:
+ group: config.gatekeeper.sh
+ names:
+ kind: Config
+ listKind: ConfigList
+ plural: configs
+ shortNames:
+ - config
+ singular: config
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: Config is the Schema for the configs API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: ConfigSpec defines the desired state of Config
+ properties:
+ match:
+ description: Configuration for namespace exclusion
+ items:
+ properties:
+ excludedNamespaces:
+ items:
+ type: string
+ type: array
+ processes:
+ items:
+ type: string
+ type: array
+ type: object
+ type: array
+ readiness:
+ description: Configuration for readiness tracker
+ properties:
+ statsEnabled:
+ type: boolean
+ type: object
+ sync:
+ description: Configuration for syncing k8s objects
+ properties:
+ syncOnly:
+ description: If non-empty, only entries on this list will be replicated into OPA
+ items:
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ type: array
+ type: object
+ validation:
+ description: Configuration for validation
+ properties:
+ traces:
+ description: List of requests to trace. Both "user" and "kinds" must be specified
+ items:
+ properties:
+ dump:
+ description: Also dump the state of OPA with the trace. Set to `All` to dump everything.
+ type: string
+ kind:
+ description: Only trace requests of the following GroupVersionKind
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ user:
+ description: Only trace requests from the specified user
+ type: string
+ type: object
+ type: array
+ type: object
+ type: object
+ status:
+ description: ConfigStatus defines the observed state of Config
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constraintpodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constraintpodstatus-customresourcedefinition.yaml
new file mode 100644
index 000000000..f8e552080
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constraintpodstatus-customresourcedefinition.yaml
@@ -0,0 +1,68 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constraintpodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintPodStatus
+ listKind: ConstraintPodStatusList
+ plural: constraintpodstatuses
+ singular: constraintpodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintPodStatus is the Schema for the constraintpodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintPodStatusStatus defines the observed state of ConstraintPodStatus
+ properties:
+ constraintUID:
+ description: Storing the constraint UID allows us to detect drift, such as when a constraint has been recreated after its CRD was deleted out from under it, interrupting the watch
+ type: string
+ enforced:
+ type: boolean
+ errors:
+ items:
+ description: Error represents a single error caught while adding a constraint to OPA
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constrainttemplate-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constrainttemplate-customresourcedefinition.yaml
new file mode 100644
index 000000000..41daf22de
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constrainttemplate-customresourcedefinition.yaml
@@ -0,0 +1,97 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplates.templates.gatekeeper.sh
+spec:
+ group: templates.gatekeeper.sh
+ names:
+ kind: ConstraintTemplate
+ plural: constrainttemplates
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ properties:
+ crd:
+ properties:
+ spec:
+ properties:
+ names:
+ properties:
+ kind:
+ type: string
+ shortNames:
+ items:
+ type: string
+ type: array
+ type: object
+ validation:
+ type: object
+ type: object
+ type: object
+ targets:
+ items:
+ properties:
+ libs:
+ items:
+ type: string
+ type: array
+ rego:
+ type: string
+ target:
+ type: string
+ type: object
+ type: array
+ type: object
+ status:
+ properties:
+ byPod:
+ items:
+ properties:
+ errors:
+ items:
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: a unique identifier for the pod that wrote the status
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ type: object
+ type: array
+ created:
+ type: boolean
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ - name: v1alpha1
+ served: true
+ storage: false
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml
new file mode 100644
index 000000000..804dca48c
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml
@@ -0,0 +1,67 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplatepodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintTemplatePodStatus
+ listKind: ConstraintTemplatePodStatusList
+ plural: constrainttemplatepodstatuses
+ singular: constrainttemplatepodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintTemplatePodStatusStatus defines the observed state of ConstraintTemplatePodStatus
+ properties:
+ errors:
+ items:
+ description: CreateCRDError represents a single error caught during parsing, compiling, etc.
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: 'Important: Run "make" to regenerate code after modifying this file'
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ templateUID:
+ description: UID is a type that holds unique ID values, including UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being a type captures intent and helps make sure that UIDs and names do not get conflated.
+ type: string
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/_helpers.tpl b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/_helpers.tpl
new file mode 100644
index 000000000..39b26c195
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+# Rancher
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/jobs.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/jobs.yaml
new file mode 100644
index 000000000..709005fd9
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/jobs.yaml
@@ -0,0 +1,92 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: {{ .Chart.Name }}-create
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade, post-rollback
+ "helm.sh/hook-delete-policy": hook-succeeded
+spec:
+ template:
+ metadata:
+ name: {{ .Chart.Name }}-create
+ labels:
+ app: {{ .Chart.Name }}
+ spec:
+ serviceAccountName: {{ .Chart.Name }}-manager
+ securityContext:
+ runAsNonRoot: true
+ runAsUser: 1000
+ containers:
+ - name: create-crds
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - apply
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ restartPolicy: OnFailure
+ volumes:
+ - name: crd-manifest
+ configMap:
+ name: {{ .Chart.Name }}-manifest
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: {{ .Chart.Name }}-delete
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}
+ annotations:
+ "helm.sh/hook": pre-delete
+ "helm.sh/hook-delete-policy": hook-succeeded
+spec:
+ template:
+ metadata:
+ name: {{ .Chart.Name }}-delete
+ labels:
+ app: {{ .Chart.Name }}
+ spec:
+ serviceAccountName: {{ .Chart.Name }}-manager
+ securityContext:
+ runAsNonRoot: true
+ runAsUser: 1000
+ initContainers:
+ - name: remove-finalizers
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - apply
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ containers:
+ - name: delete-crds
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - delete
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ restartPolicy: OnFailure
+ volumes:
+ - name: crd-manifest
+ configMap:
+ name: {{ .Chart.Name }}-manifest
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/manifest.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/manifest.yaml
new file mode 100644
index 000000000..31016b6ef
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/manifest.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: {{ .Chart.Name }}-manifest
+ namespace: {{ .Release.Namespace }}
+data:
+ crd-manifest.yaml: |
+ {{- $currentScope := . -}}
+ {{- $crds := (.Files.Glob "crd-manifest/**.yaml") -}}
+ {{- range $path, $_ := $crds -}}
+ {{- with $currentScope -}}
+ {{ .Files.Get $path | nindent 4 }}
+ ---
+ {{- end -}}{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/rbac.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/rbac.yaml
new file mode 100644
index 000000000..bdda1ddad
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/templates/rbac.yaml
@@ -0,0 +1,72 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: {{ .Chart.Name }}-manager
+ labels:
+ app: {{ .Chart.Name }}-manager
+rules:
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs: ['create', 'get', 'patch', 'delete']
+- apiGroups: ['policy']
+ resources: ['podsecuritypolicies']
+ verbs: ['use']
+ resourceNames:
+ - {{ .Chart.Name }}-manager
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: {{ .Chart.Name }}-manager
+ labels:
+ app: {{ .Chart.Name }}-manager
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: {{ .Chart.Name }}-manager
+subjects:
+- kind: ServiceAccount
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}-manager
+---
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}-manager
+spec:
+ privileged: false
+ allowPrivilegeEscalation: false
+ hostNetwork: false
+ hostIPC: false
+ hostPID: false
+ runAsUser:
+ rule: 'MustRunAsNonRoot'
+ seLinux:
+ rule: 'RunAsAny'
+ supplementalGroups:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ fsGroup:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ readOnlyRootFilesystem: false
+ volumes:
+ - 'configMap'
+ - 'secret'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/values.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/values.yaml
new file mode 100644
index 000000000..f65bba463
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.2.101/values.yaml
@@ -0,0 +1,11 @@
+# Default values for rancher-gatekeeper-crd.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+image:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/Chart.yaml
new file mode 100755
index 000000000..f8022e80b
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/release-name: rancher-gatekeeper-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-gatekeeper.
+name: rancher-gatekeeper-crd
+type: application
+version: 3.3.000
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/README.md
new file mode 100755
index 000000000..26079c833
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/README.md
@@ -0,0 +1,2 @@
+# rancher-gatekeeper-crd
+A Rancher chart that installs the CRDs used by rancher-gatekeeper.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/config-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/config-customresourcedefinition.yaml
new file mode 100755
index 000000000..73ffbdc32
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/config-customresourcedefinition.yaml
@@ -0,0 +1,106 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: configs.config.gatekeeper.sh
+spec:
+ group: config.gatekeeper.sh
+ names:
+ kind: Config
+ listKind: ConfigList
+ plural: configs
+ shortNames:
+ - config
+ singular: config
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: Config is the Schema for the configs API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: ConfigSpec defines the desired state of Config
+ properties:
+ match:
+ description: Configuration for namespace exclusion
+ items:
+ properties:
+ excludedNamespaces:
+ items:
+ type: string
+ type: array
+ processes:
+ items:
+ type: string
+ type: array
+ type: object
+ type: array
+ readiness:
+ description: Configuration for readiness tracker
+ properties:
+ statsEnabled:
+ type: boolean
+ type: object
+ sync:
+ description: Configuration for syncing k8s objects
+ properties:
+ syncOnly:
+ description: If non-empty, only entries on this list will be replicated into OPA
+ items:
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ type: array
+ type: object
+ validation:
+ description: Configuration for validation
+ properties:
+ traces:
+ description: List of requests to trace. Both "user" and "kinds" must be specified
+ items:
+ properties:
+ dump:
+ description: Also dump the state of OPA with the trace. Set to `All` to dump everything.
+ type: string
+ kind:
+ description: Only trace requests of the following GroupVersionKind
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ user:
+ description: Only trace requests from the specified user
+ type: string
+ type: object
+ type: array
+ type: object
+ type: object
+ status:
+ description: ConfigStatus defines the observed state of Config
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constraintpodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constraintpodstatus-customresourcedefinition.yaml
new file mode 100755
index 000000000..f8e552080
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constraintpodstatus-customresourcedefinition.yaml
@@ -0,0 +1,68 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constraintpodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintPodStatus
+ listKind: ConstraintPodStatusList
+ plural: constraintpodstatuses
+ singular: constraintpodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintPodStatus is the Schema for the constraintpodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintPodStatusStatus defines the observed state of ConstraintPodStatus
+ properties:
+ constraintUID:
+ description: Storing the constraint UID allows us to detect drift, such as when a constraint has been recreated after its CRD was deleted out from under it, interrupting the watch
+ type: string
+ enforced:
+ type: boolean
+ errors:
+ items:
+ description: Error represents a single error caught while adding a constraint to OPA
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constrainttemplate-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constrainttemplate-customresourcedefinition.yaml
new file mode 100755
index 000000000..41daf22de
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constrainttemplate-customresourcedefinition.yaml
@@ -0,0 +1,97 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplates.templates.gatekeeper.sh
+spec:
+ group: templates.gatekeeper.sh
+ names:
+ kind: ConstraintTemplate
+ plural: constrainttemplates
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ properties:
+ crd:
+ properties:
+ spec:
+ properties:
+ names:
+ properties:
+ kind:
+ type: string
+ shortNames:
+ items:
+ type: string
+ type: array
+ type: object
+ validation:
+ type: object
+ type: object
+ type: object
+ targets:
+ items:
+ properties:
+ libs:
+ items:
+ type: string
+ type: array
+ rego:
+ type: string
+ target:
+ type: string
+ type: object
+ type: array
+ type: object
+ status:
+ properties:
+ byPod:
+ items:
+ properties:
+ errors:
+ items:
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: a unique identifier for the pod that wrote the status
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ type: object
+ type: array
+ created:
+ type: boolean
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ - name: v1alpha1
+ served: true
+ storage: false
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml
new file mode 100755
index 000000000..804dca48c
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml
@@ -0,0 +1,67 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplatepodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintTemplatePodStatus
+ listKind: ConstraintTemplatePodStatusList
+ plural: constrainttemplatepodstatuses
+ singular: constrainttemplatepodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintTemplatePodStatusStatus defines the observed state of ConstraintTemplatePodStatus
+ properties:
+ errors:
+ items:
+ description: CreateCRDError represents a single error caught during parsing, compiling, etc.
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: 'Important: Run "make" to regenerate code after modifying this file'
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ templateUID:
+ description: UID is a type that holds unique ID values, including UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being a type captures intent and helps make sure that UIDs and names do not get conflated.
+ type: string
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/_helpers.tpl b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/_helpers.tpl
new file mode 100755
index 000000000..39b26c195
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+# Rancher
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/jobs.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/jobs.yaml
new file mode 100755
index 000000000..709005fd9
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/jobs.yaml
@@ -0,0 +1,92 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: {{ .Chart.Name }}-create
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade, post-rollback
+ "helm.sh/hook-delete-policy": hook-succeeded
+spec:
+ template:
+ metadata:
+ name: {{ .Chart.Name }}-create
+ labels:
+ app: {{ .Chart.Name }}
+ spec:
+ serviceAccountName: {{ .Chart.Name }}-manager
+ securityContext:
+ runAsNonRoot: true
+ runAsUser: 1000
+ containers:
+ - name: create-crds
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - apply
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ restartPolicy: OnFailure
+ volumes:
+ - name: crd-manifest
+ configMap:
+ name: {{ .Chart.Name }}-manifest
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: {{ .Chart.Name }}-delete
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}
+ annotations:
+ "helm.sh/hook": pre-delete
+ "helm.sh/hook-delete-policy": hook-succeeded
+spec:
+ template:
+ metadata:
+ name: {{ .Chart.Name }}-delete
+ labels:
+ app: {{ .Chart.Name }}
+ spec:
+ serviceAccountName: {{ .Chart.Name }}-manager
+ securityContext:
+ runAsNonRoot: true
+ runAsUser: 1000
+ initContainers:
+ - name: remove-finalizers
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - apply
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ containers:
+ - name: delete-crds
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - delete
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ restartPolicy: OnFailure
+ volumes:
+ - name: crd-manifest
+ configMap:
+ name: {{ .Chart.Name }}-manifest
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/manifest.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/manifest.yaml
new file mode 100755
index 000000000..31016b6ef
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/manifest.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: {{ .Chart.Name }}-manifest
+ namespace: {{ .Release.Namespace }}
+data:
+ crd-manifest.yaml: |
+ {{- $currentScope := . -}}
+ {{- $crds := (.Files.Glob "crd-manifest/**.yaml") -}}
+ {{- range $path, $_ := $crds -}}
+ {{- with $currentScope -}}
+ {{ .Files.Get $path | nindent 4 }}
+ ---
+ {{- end -}}{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/rbac.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/rbac.yaml
new file mode 100755
index 000000000..bdda1ddad
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/templates/rbac.yaml
@@ -0,0 +1,72 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: {{ .Chart.Name }}-manager
+ labels:
+ app: {{ .Chart.Name }}-manager
+rules:
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs: ['create', 'get', 'patch', 'delete']
+- apiGroups: ['policy']
+ resources: ['podsecuritypolicies']
+ verbs: ['use']
+ resourceNames:
+ - {{ .Chart.Name }}-manager
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: {{ .Chart.Name }}-manager
+ labels:
+ app: {{ .Chart.Name }}-manager
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: {{ .Chart.Name }}-manager
+subjects:
+- kind: ServiceAccount
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}-manager
+---
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}-manager
+spec:
+ privileged: false
+ allowPrivilegeEscalation: false
+ hostNetwork: false
+ hostIPC: false
+ hostPID: false
+ runAsUser:
+ rule: 'MustRunAsNonRoot'
+ seLinux:
+ rule: 'RunAsAny'
+ supplementalGroups:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ fsGroup:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ readOnlyRootFilesystem: false
+ volumes:
+ - 'configMap'
+ - 'secret'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/values.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/values.yaml
new file mode 100755
index 000000000..f65bba463
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.000/values.yaml
@@ -0,0 +1,11 @@
+# Default values for rancher-gatekeeper-crd.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+image:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/Chart.yaml
new file mode 100755
index 000000000..00336402c
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/Chart.yaml
@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/release-name: rancher-gatekeeper-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-gatekeeper.
+name: rancher-gatekeeper-crd
+type: application
+version: 3.3.001
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/README.md
new file mode 100755
index 000000000..26079c833
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/README.md
@@ -0,0 +1,2 @@
+# rancher-gatekeeper-crd
+A Rancher chart that installs the CRDs used by rancher-gatekeeper.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/config-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/config-customresourcedefinition.yaml
new file mode 100755
index 000000000..73ffbdc32
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/config-customresourcedefinition.yaml
@@ -0,0 +1,106 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: configs.config.gatekeeper.sh
+spec:
+ group: config.gatekeeper.sh
+ names:
+ kind: Config
+ listKind: ConfigList
+ plural: configs
+ shortNames:
+ - config
+ singular: config
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: Config is the Schema for the configs API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: ConfigSpec defines the desired state of Config
+ properties:
+ match:
+ description: Configuration for namespace exclusion
+ items:
+ properties:
+ excludedNamespaces:
+ items:
+ type: string
+ type: array
+ processes:
+ items:
+ type: string
+ type: array
+ type: object
+ type: array
+ readiness:
+ description: Configuration for readiness tracker
+ properties:
+ statsEnabled:
+ type: boolean
+ type: object
+ sync:
+ description: Configuration for syncing k8s objects
+ properties:
+ syncOnly:
+ description: If non-empty, only entries on this list will be replicated into OPA
+ items:
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ type: array
+ type: object
+ validation:
+ description: Configuration for validation
+ properties:
+ traces:
+ description: List of requests to trace. Both "user" and "kinds" must be specified
+ items:
+ properties:
+ dump:
+ description: Also dump the state of OPA with the trace. Set to `All` to dump everything.
+ type: string
+ kind:
+ description: Only trace requests of the following GroupVersionKind
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ user:
+ description: Only trace requests from the specified user
+ type: string
+ type: object
+ type: array
+ type: object
+ type: object
+ status:
+ description: ConfigStatus defines the observed state of Config
+ type: object
+ type: object
+ version: v1alpha1
+ versions:
+ - name: v1alpha1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constraintpodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constraintpodstatus-customresourcedefinition.yaml
new file mode 100755
index 000000000..f8e552080
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constraintpodstatus-customresourcedefinition.yaml
@@ -0,0 +1,68 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constraintpodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintPodStatus
+ listKind: ConstraintPodStatusList
+ plural: constraintpodstatuses
+ singular: constraintpodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintPodStatus is the Schema for the constraintpodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintPodStatusStatus defines the observed state of ConstraintPodStatus
+ properties:
+ constraintUID:
+ description: Storing the constraint UID allows us to detect drift, such as when a constraint has been recreated after its CRD was deleted out from under it, interrupting the watch
+ type: string
+ enforced:
+ type: boolean
+ errors:
+ items:
+ description: Error represents a single error caught while adding a constraint to OPA
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constrainttemplate-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constrainttemplate-customresourcedefinition.yaml
new file mode 100755
index 000000000..41daf22de
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constrainttemplate-customresourcedefinition.yaml
@@ -0,0 +1,97 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplates.templates.gatekeeper.sh
+spec:
+ group: templates.gatekeeper.sh
+ names:
+ kind: ConstraintTemplate
+ plural: constrainttemplates
+ scope: Cluster
+ subresources:
+ status: {}
+ validation:
+ openAPIV3Schema:
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ properties:
+ crd:
+ properties:
+ spec:
+ properties:
+ names:
+ properties:
+ kind:
+ type: string
+ shortNames:
+ items:
+ type: string
+ type: array
+ type: object
+ validation:
+ type: object
+ type: object
+ type: object
+ targets:
+ items:
+ properties:
+ libs:
+ items:
+ type: string
+ type: array
+ rego:
+ type: string
+ target:
+ type: string
+ type: object
+ type: array
+ type: object
+ status:
+ properties:
+ byPod:
+ items:
+ properties:
+ errors:
+ items:
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: a unique identifier for the pod that wrote the status
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ type: object
+ type: array
+ created:
+ type: boolean
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
+ - name: v1alpha1
+ served: true
+ storage: false
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml
new file mode 100755
index 000000000..804dca48c
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/crd-manifest/constrainttemplatepodstatus-customresourcedefinition.yaml
@@ -0,0 +1,67 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ controller-gen.kubebuilder.io/version: v0.3.0
+ creationTimestamp: null
+ labels:
+ gatekeeper.sh/system: "yes"
+ name: constrainttemplatepodstatuses.status.gatekeeper.sh
+spec:
+ group: status.gatekeeper.sh
+ names:
+ kind: ConstraintTemplatePodStatus
+ listKind: ConstraintTemplatePodStatusList
+ plural: constrainttemplatepodstatuses
+ singular: constrainttemplatepodstatus
+ scope: Namespaced
+ validation:
+ openAPIV3Schema:
+ description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintTemplatePodStatusStatus defines the observed state of ConstraintTemplatePodStatus
+ properties:
+ errors:
+ items:
+ description: CreateCRDError represents a single error caught during parsing, compiling, etc.
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: 'Important: Run "make" to regenerate code after modifying this file'
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ templateUID:
+ description: UID is a type that holds unique ID values, including UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being a type captures intent and helps make sure that UIDs and names do not get conflated.
+ type: string
+ type: object
+ type: object
+ version: v1beta1
+ versions:
+ - name: v1beta1
+ served: true
+ storage: true
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/_helpers.tpl b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/_helpers.tpl
new file mode 100755
index 000000000..39b26c195
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/_helpers.tpl
@@ -0,0 +1,7 @@
+# Rancher
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/jobs.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/jobs.yaml
new file mode 100755
index 000000000..709005fd9
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/jobs.yaml
@@ -0,0 +1,92 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: {{ .Chart.Name }}-create
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}
+ annotations:
+ "helm.sh/hook": post-install, post-upgrade, post-rollback
+ "helm.sh/hook-delete-policy": hook-succeeded
+spec:
+ template:
+ metadata:
+ name: {{ .Chart.Name }}-create
+ labels:
+ app: {{ .Chart.Name }}
+ spec:
+ serviceAccountName: {{ .Chart.Name }}-manager
+ securityContext:
+ runAsNonRoot: true
+ runAsUser: 1000
+ containers:
+ - name: create-crds
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - apply
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ restartPolicy: OnFailure
+ volumes:
+ - name: crd-manifest
+ configMap:
+ name: {{ .Chart.Name }}-manifest
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: {{ .Chart.Name }}-delete
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}
+ annotations:
+ "helm.sh/hook": pre-delete
+ "helm.sh/hook-delete-policy": hook-succeeded
+spec:
+ template:
+ metadata:
+ name: {{ .Chart.Name }}-delete
+ labels:
+ app: {{ .Chart.Name }}
+ spec:
+ serviceAccountName: {{ .Chart.Name }}-manager
+ securityContext:
+ runAsNonRoot: true
+ runAsUser: 1000
+ initContainers:
+ - name: remove-finalizers
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - apply
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ containers:
+ - name: delete-crds
+ image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
+ imagePullPolicy: IfNotPresent
+ command:
+ - /bin/kubectl
+ - delete
+ - -f
+ - /etc/config/crd-manifest.yaml
+ volumeMounts:
+ - name: crd-manifest
+ readOnly: true
+ mountPath: /etc/config
+ restartPolicy: OnFailure
+ volumes:
+ - name: crd-manifest
+ configMap:
+ name: {{ .Chart.Name }}-manifest
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/manifest.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/manifest.yaml
new file mode 100755
index 000000000..31016b6ef
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/manifest.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: {{ .Chart.Name }}-manifest
+ namespace: {{ .Release.Namespace }}
+data:
+ crd-manifest.yaml: |
+ {{- $currentScope := . -}}
+ {{- $crds := (.Files.Glob "crd-manifest/**.yaml") -}}
+ {{- range $path, $_ := $crds -}}
+ {{- with $currentScope -}}
+ {{ .Files.Get $path | nindent 4 }}
+ ---
+ {{- end -}}{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/rbac.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/rbac.yaml
new file mode 100755
index 000000000..bdda1ddad
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/templates/rbac.yaml
@@ -0,0 +1,72 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: {{ .Chart.Name }}-manager
+ labels:
+ app: {{ .Chart.Name }}-manager
+rules:
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs: ['create', 'get', 'patch', 'delete']
+- apiGroups: ['policy']
+ resources: ['podsecuritypolicies']
+ verbs: ['use']
+ resourceNames:
+ - {{ .Chart.Name }}-manager
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: {{ .Chart.Name }}-manager
+ labels:
+ app: {{ .Chart.Name }}-manager
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: {{ .Chart.Name }}-manager
+subjects:
+- kind: ServiceAccount
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}-manager
+---
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ name: {{ .Chart.Name }}-manager
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app: {{ .Chart.Name }}-manager
+spec:
+ privileged: false
+ allowPrivilegeEscalation: false
+ hostNetwork: false
+ hostIPC: false
+ hostPID: false
+ runAsUser:
+ rule: 'MustRunAsNonRoot'
+ seLinux:
+ rule: 'RunAsAny'
+ supplementalGroups:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ fsGroup:
+ rule: 'MustRunAs'
+ ranges:
+ - min: 1
+ max: 65535
+ readOnlyRootFilesystem: false
+ volumes:
+ - 'configMap'
+ - 'secret'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/values.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/values.yaml
new file mode 100755
index 000000000..657ccacf8
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper-crd/3.3.001/values.yaml
@@ -0,0 +1,11 @@
+# Default values for rancher-gatekeeper-crd.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+global:
+ cattle:
+ systemDefaultRegistry: ""
+
+image:
+ repository: rancher/kubectl
+ tag: v1.20.2
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/.helmignore b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/.helmignore
new file mode 100644
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/CHANGELOG.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/CHANGELOG.md
new file mode 100644
index 000000000..c68d23c24
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+All notable changes from the upstream OPA Gatekeeper chart will be added to this file
+
+## [Package Version 00] - 2020-09-10
+### Added
+- Enabled the CRD chart generator in `package.yaml`
+
+### Modified
+- Updated namespace to `cattle-gatekeeper-system`
+- Updated for Helm 3 compatibility
+ - Moved crds to `crds` directory
+ - Removed `crd-install` hooks and templates from crds
+
+### Removed
+- Removed `gatekeeper-system-namespace.yaml` as Rancher handles namespaces for chart installation
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/Chart.yaml
new file mode 100644
index 000000000..0d94d3278
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/Chart.yaml
@@ -0,0 +1,21 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
+ catalog.cattle.io/release-name: rancher-gatekeeper
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v3.1.1
+description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
+ policy-based control for cloud native environments
+home: https://github.com/open-policy-agent/gatekeeper
+icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
+keywords:
+- open policy agent
+- security
+name: rancher-gatekeeper
+sources:
+- https://github.com/open-policy-agent/gatekeeper.git
+version: 3.1.100
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/README.md
new file mode 100644
index 000000000..280a64565
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/README.md
@@ -0,0 +1,33 @@
+# Gatekeeper Helm Chart
+
+## Parameters
+
+| Parameter | Description | Default |
+| :------------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------ |
+| auditInterval | The frequency with which audit is run | `300` |
+| constraintViolationsLimit | The maximum # of audit violations reported on a constraint | `20` |
+| auditFromCache | Take the roster of resources to audit from the OPA cache | `false` |
+| auditChunkSize | Chunk size for listing cluster resources for audit (alpha feature) | `0` |
+| disableValidatingWebhook | Disable ValidatingWebhook | `false` |
+| emitAdmissionEvents | Emit K8s events in gatekeeper namespace for admission violations (alpha feature) | `false` |
+| emitAuditEvents | Emit K8s events in gatekeeper namespace for audit violations (alpha feature) | `false` |
+| logLevel | Minimum log level | `INFO` |
+| image.pullPolicy | The image pull policy | `IfNotPresent` |
+| image.repository | Image repository | `openpolicyagent/gatekeeper` |
+| image.release | The image release tag to use | Current release version: `v3.1.1` |
+| resources | The resource request/limits for the container image | limits: 1 CPU, 512Mi, requests: 100mCPU, 256Mi |
+| nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
+| affinity | The node affinity to use for pod scheduling | `{}` |
+| tolerations | The tolerations to use for pod scheduling | `[]` |
+| replicas | The number of Gatekeeper replicas to deploy for the webhook | `1` |
+| podAnnotations | The annotations to add to the Gatekeeper pods | `container.seccomp.security.alpha.kubernetes.io/manager: runtime/default` |
+| customResourceDefinitions.create | Whether the release should install CRDs. Regardless of this value, Helm v3+ will install the CRDs if those are not present already. Use --skip-crds with helm install if you want to skip CRD creation | `true` |
+
+## Contributing Changes
+
+This Helm chart is autogenerated from the Gatekeeper static manifest. The
+generator code lives under `cmd/build/helmify`. To make modifications to this
+template, please edit `kustomization.yaml` and `replacements.go` under that
+directory and then run `make manifests`. Your changes will show up in the
+`manifest_staging` directory and will be promoted to the root `charts` directory
+the next time a Gatekeeper release is cut.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/_helpers.tpl b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/_helpers.tpl
new file mode 100644
index 000000000..f5d0ab307
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/_helpers.tpl
@@ -0,0 +1,52 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "gatekeeper.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "gatekeeper.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "gatekeeper.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "gatekeeper.labels" -}}
+app.kubernetes.io/name: {{ include "gatekeeper.name" . }}
+helm.sh/chart: {{ include "gatekeeper.chart" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/allowedrepos.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/allowedrepos.yaml
new file mode 100644
index 000000000..9abb84ecb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/allowedrepos.yaml
@@ -0,0 +1,35 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8sallowedrepos
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sAllowedRepos
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ repos:
+ type: array
+ items:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8sallowedrepos
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.containers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.initContainers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-admin-serviceaccount.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-admin-serviceaccount.yaml
new file mode 100644
index 000000000..4b68998cb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-admin-serviceaccount.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-audit-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-audit-deployment.yaml
new file mode 100644
index 000000000..561ac5c6e
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-audit-deployment.yaml
@@ -0,0 +1,96 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-audit
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ containers:
+ - args:
+ - --audit-interval={{ .Values.auditInterval }}
+ - --log-level={{ .Values.logLevel }}
+ - --constraint-violations-limit={{ .Values.constraintViolationsLimit }}
+ - --audit-from-cache={{ .Values.auditFromCache }}
+ - --audit-chunk-size={{ .Values.auditChunkSize }}
+ - --emit-audit-events={{ .Values.emitAuditEvents }}
+ - --operation=audit
+ - --operation=status
+ - --logtostderr
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ nodeSelector:
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.tolerations | indent 8 }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-controller-manager-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-controller-manager-deployment.yaml
new file mode 100644
index 000000000..06a54b686
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-controller-manager-deployment.yaml
@@ -0,0 +1,117 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-controller-manager
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: {{ .Values.replicas }}
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: gatekeeper.sh/operation
+ operator: In
+ values:
+ - webhook
+ topologyKey: kubernetes.io/hostname
+ weight: 100
+ containers:
+ - args:
+ - --port=8443
+ - --logtostderr
+ - --emit-admission-events={{ .Values.emitAdmissionEvents }}
+ - --log-level={{ .Values.logLevel }}
+ - --exempt-namespace=gatekeeper-system
+ - --operation=webhook
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8443
+ name: webhook-server
+ protocol: TCP
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ volumeMounts:
+ - mountPath: /certs
+ name: cert
+ readOnly: true
+ nodeSelector:
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.tolerations | indent 8 }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
+ volumes:
+ - name: cert
+ secret:
+ defaultMode: 420
+ secretName: gatekeeper-webhook-server-cert
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-role-clusterrole.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-role-clusterrole.yaml
new file mode 100644
index 000000000..b03f23f63
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-role-clusterrole.yaml
@@ -0,0 +1,125 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - constraints.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - policy
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+- apiGroups:
+ - status.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/finalizers
+ verbs:
+ - delete
+ - get
+ - patch
+ - update
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - admissionregistration.k8s.io
+ resourceNames:
+ - gatekeeper-validating-webhook-configuration
+ resources:
+ - validatingwebhookconfigurations
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-role-role.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-role-role.yaml
new file mode 100644
index 000000000..73e2c5cf7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-role-role.yaml
@@ -0,0 +1,32 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+ namespace: '{{ .Release.Namespace }}'
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
new file mode 100644
index 000000000..22194d2ad
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
@@ -0,0 +1,18 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-rolebinding-rolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
new file mode 100644
index 000000000..4bf6087dc
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+ namespace: '{{ .Release.Namespace }}'
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
new file mode 100644
index 000000000..f19216687
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
@@ -0,0 +1,58 @@
+{{- if not .Values.disableValidatingWebhook }}
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-validating-webhook-configuration
+webhooks:
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admit
+ failurePolicy: Ignore
+ name: validation.gatekeeper.sh
+ namespaceSelector:
+ matchExpressions:
+ - key: admission.gatekeeper.sh/ignore
+ operator: DoesNotExist
+ rules:
+ - apiGroups:
+ - '*'
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - '*'
+ sideEffects: None
+ timeoutSeconds: 5
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admitlabel
+ failurePolicy: Fail
+ name: check-ignore-label.gatekeeper.sh
+ rules:
+ - apiGroups:
+ - ""
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - namespaces
+ sideEffects: None
+ timeoutSeconds: 5
+{{- end }}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-webhook-server-cert-secret.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-webhook-server-cert-secret.yaml
new file mode 100644
index 000000000..bf89ae8b4
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-webhook-server-cert-secret.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-server-cert
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-webhook-service-service.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-webhook-service-service.yaml
new file mode 100644
index 000000000..473bc4b25
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/gatekeeper-webhook-service-service.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ ports:
+ - port: 443
+ targetPort: 8443
+ selector:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/requiredlabels.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/requiredlabels.yaml
new file mode 100644
index 000000000..e93e6a0a7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/requiredlabels.yaml
@@ -0,0 +1,57 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8srequiredlabels
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sRequiredLabels
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ message:
+ type: string
+ labels:
+ type: array
+ items:
+ type: object
+ properties:
+ key:
+ type: string
+ allowedRegex:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8srequiredlabels
+
+ get_message(parameters, _default) = msg {
+ not parameters.message
+ msg := _default
+ }
+
+ get_message(parameters, _default) = msg {
+ msg := parameters.message
+ }
+
+ violation[{"msg": msg, "details": {"missing_labels": missing}}] {
+ provided := {label | input.review.object.metadata.labels[label]}
+ required := {label | label := input.parameters.labels[_].key}
+ missing := required - provided
+ count(missing) > 0
+ def_msg := sprintf("you must provide labels: %v", [missing])
+ msg := get_message(input.parameters, def_msg)
+ }
+
+ violation[{"msg": msg}] {
+ value := input.review.object.metadata.labels[key]
+ expected := input.parameters.labels[_]
+ expected.key == key
+ # do not match if allowedRegex is not defined, or is an empty string
+ expected.allowedRegex != ""
+ not re_match(expected.allowedRegex, value)
+ def_msg := sprintf("Label <%v: %v> does not satisfy allowed regex: %v", [key, value, expected.allowedRegex])
+ msg := get_message(input.parameters, def_msg)
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/validate-install-crd.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..10977fd7d
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "config.gatekeeper.sh/v1alpha1/Config" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintPodStatus" false -}}
+# {{- set $found "templates.gatekeeper.sh/v1beta1/ConstraintTemplate" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintTemplatePodStatus" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-gatekeeper-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/values.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/values.yaml
new file mode 100644
index 000000000..2afac2bfe
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.100/values.yaml
@@ -0,0 +1,31 @@
+replicas: 3
+auditInterval: 300
+constraintViolationsLimit: 20
+auditFromCache: false
+disableValidatingWebhook: false
+auditChunkSize: 0
+logLevel: INFO
+emitAdmissionEvents: false
+emitAuditEvents: false
+image:
+ repository: rancher/openpolicyagent-gatekeeper
+ tag: v3.1.1
+ pullPolicy: IfNotPresent
+nodeSelector: { kubernetes.io/os: linux }
+affinity: {}
+tolerations: []
+podAnnotations:
+ { container.seccomp.security.alpha.kubernetes.io/manager: runtime/default }
+resources:
+ limits:
+ cpu: 1000m
+ memory: 512Mi
+ requests:
+ cpu: 100m
+ memory: 256Mi
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/.helmignore b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/.helmignore
new file mode 100644
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/CHANGELOG.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/CHANGELOG.md
new file mode 100644
index 000000000..c68d23c24
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+All notable changes from the upstream OPA Gatekeeper chart will be added to this file
+
+## [Package Version 00] - 2020-09-10
+### Added
+- Enabled the CRD chart generator in `package.yaml`
+
+### Modified
+- Updated namespace to `cattle-gatekeeper-system`
+- Updated for Helm 3 compatibility
+ - Moved crds to `crds` directory
+ - Removed `crd-install` hooks and templates from crds
+
+### Removed
+- Removed `gatekeeper-system-namespace.yaml` as Rancher handles namespaces for chart installation
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/Chart.yaml
new file mode 100644
index 000000000..a77621b17
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/Chart.yaml
@@ -0,0 +1,22 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: OPA Gatekeeper
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
+ catalog.cattle.io/release-name: rancher-gatekeeper
+ catalog.cattle.io/os: linux
+apiVersion: v1
+appVersion: v3.1.1
+description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
+ policy-based control for cloud native environments
+home: https://github.com/open-policy-agent/gatekeeper
+icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
+keywords:
+- open policy agent
+- security
+name: rancher-gatekeeper
+sources:
+- https://github.com/open-policy-agent/gatekeeper.git
+version: 3.1.101
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/README.md
new file mode 100644
index 000000000..280a64565
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/README.md
@@ -0,0 +1,33 @@
+# Gatekeeper Helm Chart
+
+## Parameters
+
+| Parameter | Description | Default |
+| :------------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------ |
+| auditInterval | The frequency with which audit is run | `300` |
+| constraintViolationsLimit | The maximum # of audit violations reported on a constraint | `20` |
+| auditFromCache | Take the roster of resources to audit from the OPA cache | `false` |
+| auditChunkSize | Chunk size for listing cluster resources for audit (alpha feature) | `0` |
+| disableValidatingWebhook | Disable ValidatingWebhook | `false` |
+| emitAdmissionEvents | Emit K8s events in gatekeeper namespace for admission violations (alpha feature) | `false` |
+| emitAuditEvents | Emit K8s events in gatekeeper namespace for audit violations (alpha feature) | `false` |
+| logLevel | Minimum log level | `INFO` |
+| image.pullPolicy | The image pull policy | `IfNotPresent` |
+| image.repository | Image repository | `openpolicyagent/gatekeeper` |
+| image.release | The image release tag to use | Current release version: `v3.1.1` |
+| resources | The resource request/limits for the container image | limits: 1 CPU, 512Mi, requests: 100mCPU, 256Mi |
+| nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
+| affinity | The node affinity to use for pod scheduling | `{}` |
+| tolerations | The tolerations to use for pod scheduling | `[]` |
+| replicas | The number of Gatekeeper replicas to deploy for the webhook | `1` |
+| podAnnotations | The annotations to add to the Gatekeeper pods | `container.seccomp.security.alpha.kubernetes.io/manager: runtime/default` |
+| customResourceDefinitions.create | Whether the release should install CRDs. Regardless of this value, Helm v3+ will install the CRDs if those are not present already. Use --skip-crds with helm install if you want to skip CRD creation | `true` |
+
+## Contributing Changes
+
+This Helm chart is autogenerated from the Gatekeeper static manifest. The
+generator code lives under `cmd/build/helmify`. To make modifications to this
+template, please edit `kustomization.yaml` and `replacements.go` under that
+directory and then run `make manifests`. Your changes will show up in the
+`manifest_staging` directory and will be promoted to the root `charts` directory
+the next time a Gatekeeper release is cut.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/app-readme.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/app-readme.md
new file mode 100644
index 000000000..d44cf7b2b
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/app-readme.md
@@ -0,0 +1,14 @@
+# Rancher OPA Gatekeeper
+
+This chart is based off of the upstream [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper/tree/master/charts/gatekeeper) chart.
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/opa-gatekeper/).
+
+The chart installs the following components:
+
+- OPA Gatekeeper Controller-Manager - OPA Gatekeeper is a policy engine for providing policy based governance for Kubernetes clusters. The controller installs as a [validating admission controller webhook](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook) on the cluster and intercepts all admission requests that create, update or delete a resource in the cluster.
+- [Audit](https://github.com/open-policy-agent/gatekeeper#audit) - A periodic audit of the cluster resources against the enforced policies. Any existing resource that violates a policy will be recorded as violations.
+- [Constraint Template](https://github.com/open-policy-agent/gatekeeper#constraint-templates) - A template is a CRD (`ConstraintTemplate`) that defines the schema and Rego logic of a policy to be applied to the cluster by Gatekeeper's admission controller webhook. This chart installs a few default `ConstraintTemplate` custom resources.
+- [Constraint](https://github.com/open-policy-agent/gatekeeper#constraints) - A constraint is a custom resource that defines the scope of resources which a specific constraint template should apply to. The complete policy is defined by a combination of `ConstraintTemplates` (i.e. what the policy is) and `Constraints` (i.e. what resource to apply the policy to).
+
+For more information on how to configure the Helm chart, refer to the Helm README.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/_helpers.tpl b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/_helpers.tpl
new file mode 100644
index 000000000..f5d0ab307
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/_helpers.tpl
@@ -0,0 +1,52 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "gatekeeper.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "gatekeeper.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "gatekeeper.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "gatekeeper.labels" -}}
+app.kubernetes.io/name: {{ include "gatekeeper.name" . }}
+helm.sh/chart: {{ include "gatekeeper.chart" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/allowedrepos.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/allowedrepos.yaml
new file mode 100644
index 000000000..9abb84ecb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/allowedrepos.yaml
@@ -0,0 +1,35 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8sallowedrepos
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sAllowedRepos
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ repos:
+ type: array
+ items:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8sallowedrepos
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.containers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.initContainers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-admin-serviceaccount.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-admin-serviceaccount.yaml
new file mode 100644
index 000000000..4b68998cb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-admin-serviceaccount.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-audit-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-audit-deployment.yaml
new file mode 100644
index 000000000..561ac5c6e
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-audit-deployment.yaml
@@ -0,0 +1,96 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-audit
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ containers:
+ - args:
+ - --audit-interval={{ .Values.auditInterval }}
+ - --log-level={{ .Values.logLevel }}
+ - --constraint-violations-limit={{ .Values.constraintViolationsLimit }}
+ - --audit-from-cache={{ .Values.auditFromCache }}
+ - --audit-chunk-size={{ .Values.auditChunkSize }}
+ - --emit-audit-events={{ .Values.emitAuditEvents }}
+ - --operation=audit
+ - --operation=status
+ - --logtostderr
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ nodeSelector:
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.tolerations | indent 8 }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-controller-manager-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-controller-manager-deployment.yaml
new file mode 100644
index 000000000..06a54b686
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-controller-manager-deployment.yaml
@@ -0,0 +1,117 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-controller-manager
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: {{ .Values.replicas }}
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: gatekeeper.sh/operation
+ operator: In
+ values:
+ - webhook
+ topologyKey: kubernetes.io/hostname
+ weight: 100
+ containers:
+ - args:
+ - --port=8443
+ - --logtostderr
+ - --emit-admission-events={{ .Values.emitAdmissionEvents }}
+ - --log-level={{ .Values.logLevel }}
+ - --exempt-namespace=gatekeeper-system
+ - --operation=webhook
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8443
+ name: webhook-server
+ protocol: TCP
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ volumeMounts:
+ - mountPath: /certs
+ name: cert
+ readOnly: true
+ nodeSelector:
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.tolerations | indent 8 }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
+ volumes:
+ - name: cert
+ secret:
+ defaultMode: 420
+ secretName: gatekeeper-webhook-server-cert
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-role-clusterrole.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-role-clusterrole.yaml
new file mode 100644
index 000000000..b03f23f63
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-role-clusterrole.yaml
@@ -0,0 +1,125 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - constraints.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - policy
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+- apiGroups:
+ - status.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/finalizers
+ verbs:
+ - delete
+ - get
+ - patch
+ - update
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - admissionregistration.k8s.io
+ resourceNames:
+ - gatekeeper-validating-webhook-configuration
+ resources:
+ - validatingwebhookconfigurations
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-role-role.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-role-role.yaml
new file mode 100644
index 000000000..73e2c5cf7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-role-role.yaml
@@ -0,0 +1,32 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+ namespace: '{{ .Release.Namespace }}'
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
new file mode 100644
index 000000000..22194d2ad
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
@@ -0,0 +1,18 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-rolebinding-rolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
new file mode 100644
index 000000000..4bf6087dc
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+ namespace: '{{ .Release.Namespace }}'
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
new file mode 100644
index 000000000..f19216687
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
@@ -0,0 +1,58 @@
+{{- if not .Values.disableValidatingWebhook }}
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-validating-webhook-configuration
+webhooks:
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admit
+ failurePolicy: Ignore
+ name: validation.gatekeeper.sh
+ namespaceSelector:
+ matchExpressions:
+ - key: admission.gatekeeper.sh/ignore
+ operator: DoesNotExist
+ rules:
+ - apiGroups:
+ - '*'
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - '*'
+ sideEffects: None
+ timeoutSeconds: 5
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admitlabel
+ failurePolicy: Fail
+ name: check-ignore-label.gatekeeper.sh
+ rules:
+ - apiGroups:
+ - ""
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - namespaces
+ sideEffects: None
+ timeoutSeconds: 5
+{{- end }}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-webhook-server-cert-secret.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-webhook-server-cert-secret.yaml
new file mode 100644
index 000000000..bf89ae8b4
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-webhook-server-cert-secret.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-server-cert
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-webhook-service-service.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-webhook-service-service.yaml
new file mode 100644
index 000000000..473bc4b25
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/gatekeeper-webhook-service-service.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ ports:
+ - port: 443
+ targetPort: 8443
+ selector:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/requiredlabels.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/requiredlabels.yaml
new file mode 100644
index 000000000..e93e6a0a7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/requiredlabels.yaml
@@ -0,0 +1,57 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8srequiredlabels
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sRequiredLabels
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ message:
+ type: string
+ labels:
+ type: array
+ items:
+ type: object
+ properties:
+ key:
+ type: string
+ allowedRegex:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8srequiredlabels
+
+ get_message(parameters, _default) = msg {
+ not parameters.message
+ msg := _default
+ }
+
+ get_message(parameters, _default) = msg {
+ msg := parameters.message
+ }
+
+ violation[{"msg": msg, "details": {"missing_labels": missing}}] {
+ provided := {label | input.review.object.metadata.labels[label]}
+ required := {label | label := input.parameters.labels[_].key}
+ missing := required - provided
+ count(missing) > 0
+ def_msg := sprintf("you must provide labels: %v", [missing])
+ msg := get_message(input.parameters, def_msg)
+ }
+
+ violation[{"msg": msg}] {
+ value := input.review.object.metadata.labels[key]
+ expected := input.parameters.labels[_]
+ expected.key == key
+ # do not match if allowedRegex is not defined, or is an empty string
+ expected.allowedRegex != ""
+ not re_match(expected.allowedRegex, value)
+ def_msg := sprintf("Label <%v: %v> does not satisfy allowed regex: %v", [key, value, expected.allowedRegex])
+ msg := get_message(input.parameters, def_msg)
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/validate-install-crd.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..10977fd7d
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "config.gatekeeper.sh/v1alpha1/Config" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintPodStatus" false -}}
+# {{- set $found "templates.gatekeeper.sh/v1beta1/ConstraintTemplate" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintTemplatePodStatus" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-gatekeeper-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/values.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/values.yaml
new file mode 100644
index 000000000..2afac2bfe
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.1.101/values.yaml
@@ -0,0 +1,31 @@
+replicas: 3
+auditInterval: 300
+constraintViolationsLimit: 20
+auditFromCache: false
+disableValidatingWebhook: false
+auditChunkSize: 0
+logLevel: INFO
+emitAdmissionEvents: false
+emitAuditEvents: false
+image:
+ repository: rancher/openpolicyagent-gatekeeper
+ tag: v3.1.1
+ pullPolicy: IfNotPresent
+nodeSelector: { kubernetes.io/os: linux }
+affinity: {}
+tolerations: []
+podAnnotations:
+ { container.seccomp.security.alpha.kubernetes.io/manager: runtime/default }
+resources:
+ limits:
+ cpu: 1000m
+ memory: 512Mi
+ requests:
+ cpu: 100m
+ memory: 256Mi
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/.helmignore b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/.helmignore
new file mode 100644
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/CHANGELOG.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/CHANGELOG.md
new file mode 100644
index 000000000..c68d23c24
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+All notable changes from the upstream OPA Gatekeeper chart will be added to this file
+
+## [Package Version 00] - 2020-09-10
+### Added
+- Enabled the CRD chart generator in `package.yaml`
+
+### Modified
+- Updated namespace to `cattle-gatekeeper-system`
+- Updated for Helm 3 compatibility
+ - Moved crds to `crds` directory
+ - Removed `crd-install` hooks and templates from crds
+
+### Removed
+- Removed `gatekeeper-system-namespace.yaml` as Rancher handles namespaces for chart installation
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/Chart.yaml
new file mode 100644
index 000000000..b2d23d5b0
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/Chart.yaml
@@ -0,0 +1,23 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: OPA Gatekeeper
+ catalog.cattle.io/experimental: "true"
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
+ catalog.cattle.io/release-name: rancher-gatekeeper
+ catalog.cattle.io/ui-component: gatekeeper
+apiVersion: v1
+appVersion: v3.2.1
+description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
+ policy-based control for cloud native environments
+home: https://github.com/open-policy-agent/gatekeeper
+icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
+keywords:
+- open policy agent
+- security
+name: rancher-gatekeeper
+sources:
+- https://github.com/open-policy-agent/gatekeeper.git
+version: 3.2.101
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/README.md
new file mode 100644
index 000000000..8a5157bf3
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/README.md
@@ -0,0 +1,33 @@
+# Gatekeeper Helm Chart
+
+## Parameters
+
+| Parameter | Description | Default |
+| :------------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------ |
+| auditInterval | The frequency with which audit is run | `300` |
+| constraintViolationsLimit | The maximum # of audit violations reported on a constraint | `20` |
+| auditFromCache | Take the roster of resources to audit from the OPA cache | `false` |
+| auditChunkSize | Chunk size for listing cluster resources for audit (alpha feature) | `0` |
+| disableValidatingWebhook | Disable ValidatingWebhook | `false` |
+| emitAdmissionEvents | Emit K8s events in gatekeeper namespace for admission violations (alpha feature) | `false` |
+| emitAuditEvents | Emit K8s events in gatekeeper namespace for audit violations (alpha feature) | `false` |
+| logLevel | Minimum log level | `INFO` |
+| image.pullPolicy | The image pull policy | `IfNotPresent` |
+| image.repository | Image repository | `openpolicyagent/gatekeeper` |
+| image.release | The image release tag to use | Current release version: `v3.2.1` |
+| resources | The resource request/limits for the container image | limits: 1 CPU, 512Mi, requests: 100mCPU, 256Mi |
+| nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
+| affinity | The node affinity to use for pod scheduling | `{}` |
+| tolerations | The tolerations to use for pod scheduling | `[]` |
+| replicas | The number of Gatekeeper replicas to deploy for the webhook | `1` |
+| podAnnotations | The annotations to add to the Gatekeeper pods | `container.seccomp.security.alpha.kubernetes.io/manager: runtime/default` |
+| customResourceDefinitions.create | Whether the release should install CRDs. Regardless of this value, Helm v3+ will install the CRDs if those are not present already. Use --skip-crds with helm install if you want to skip CRD creation | `true` |
+
+## Contributing Changes
+
+This Helm chart is autogenerated from the Gatekeeper static manifest. The
+generator code lives under `cmd/build/helmify`. To make modifications to this
+template, please edit `kustomization.yaml` and `replacements.go` under that
+directory and then run `make manifests`. Your changes will show up in the
+`manifest_staging` directory and will be promoted to the root `charts` directory
+the next time a Gatekeeper release is cut.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/app-readme.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/app-readme.md
new file mode 100644
index 000000000..d44cf7b2b
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/app-readme.md
@@ -0,0 +1,14 @@
+# Rancher OPA Gatekeeper
+
+This chart is based off of the upstream [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper/tree/master/charts/gatekeeper) chart.
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/opa-gatekeper/).
+
+The chart installs the following components:
+
+- OPA Gatekeeper Controller-Manager - OPA Gatekeeper is a policy engine for providing policy based governance for Kubernetes clusters. The controller installs as a [validating admission controller webhook](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook) on the cluster and intercepts all admission requests that create, update or delete a resource in the cluster.
+- [Audit](https://github.com/open-policy-agent/gatekeeper#audit) - A periodic audit of the cluster resources against the enforced policies. Any existing resource that violates a policy will be recorded as violations.
+- [Constraint Template](https://github.com/open-policy-agent/gatekeeper#constraint-templates) - A template is a CRD (`ConstraintTemplate`) that defines the schema and Rego logic of a policy to be applied to the cluster by Gatekeeper's admission controller webhook. This chart installs a few default `ConstraintTemplate` custom resources.
+- [Constraint](https://github.com/open-policy-agent/gatekeeper#constraints) - A constraint is a custom resource that defines the scope of resources which a specific constraint template should apply to. The complete policy is defined by a combination of `ConstraintTemplates` (i.e. what the policy is) and `Constraints` (i.e. what resource to apply the policy to).
+
+For more information on how to configure the Helm chart, refer to the Helm README.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/_helpers.tpl b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/_helpers.tpl
new file mode 100644
index 000000000..f5d0ab307
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/_helpers.tpl
@@ -0,0 +1,52 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "gatekeeper.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "gatekeeper.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "gatekeeper.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "gatekeeper.labels" -}}
+app.kubernetes.io/name: {{ include "gatekeeper.name" . }}
+helm.sh/chart: {{ include "gatekeeper.chart" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/allowedrepos.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/allowedrepos.yaml
new file mode 100644
index 000000000..9abb84ecb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/allowedrepos.yaml
@@ -0,0 +1,35 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8sallowedrepos
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sAllowedRepos
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ repos:
+ type: array
+ items:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8sallowedrepos
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.containers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.initContainers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-admin-podsecuritypolicy.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-admin-podsecuritypolicy.yaml
new file mode 100644
index 000000000..78f36ecfb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-admin-podsecuritypolicy.yaml
@@ -0,0 +1,35 @@
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-admin
+spec:
+ allowPrivilegeEscalation: false
+ fsGroup:
+ ranges:
+ - max: 65535
+ min: 1
+ rule: MustRunAs
+ requiredDropCapabilities:
+ - ALL
+ runAsUser:
+ rule: MustRunAsNonRoot
+ seLinux:
+ rule: RunAsAny
+ supplementalGroups:
+ ranges:
+ - max: 65535
+ min: 1
+ rule: MustRunAs
+ volumes:
+ - configMap
+ - projected
+ - secret
+ - downwardAPI
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-admin-serviceaccount.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-admin-serviceaccount.yaml
new file mode 100644
index 000000000..4b68998cb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-admin-serviceaccount.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-audit-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-audit-deployment.yaml
new file mode 100644
index 000000000..d9ee16076
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-audit-deployment.yaml
@@ -0,0 +1,96 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-audit
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ containers:
+ - args:
+ - --audit-interval={{ .Values.auditInterval }}
+ - --log-level={{ .Values.logLevel }}
+ - --constraint-violations-limit={{ .Values.constraintViolationsLimit }}
+ - --audit-from-cache={{ .Values.auditFromCache }}
+ - --audit-chunk-size={{ .Values.auditChunkSize }}
+ - --emit-audit-events={{ .Values.emitAuditEvents }}
+ - --operation=audit
+ - --operation=status
+ - --logtostderr
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.audit.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ nodeSelector:
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.tolerations | indent 8 }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-controller-manager-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-controller-manager-deployment.yaml
new file mode 100644
index 000000000..22ceed00a
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-controller-manager-deployment.yaml
@@ -0,0 +1,117 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-controller-manager
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: {{ .Values.replicas }}
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: gatekeeper.sh/operation
+ operator: In
+ values:
+ - webhook
+ topologyKey: kubernetes.io/hostname
+ weight: 100
+ containers:
+ - args:
+ - --port=8443
+ - --logtostderr
+ - --emit-admission-events={{ .Values.emitAdmissionEvents }}
+ - --log-level={{ .Values.logLevel }}
+ - --exempt-namespace=gatekeeper-system
+ - --operation=webhook
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8443
+ name: webhook-server
+ protocol: TCP
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.controllerManager.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ volumeMounts:
+ - mountPath: /certs
+ name: cert
+ readOnly: true
+ nodeSelector:
+{{ toYaml .Values.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.tolerations | indent 8 }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
+ volumes:
+ - name: cert
+ secret:
+ defaultMode: 420
+ secretName: gatekeeper-webhook-server-cert
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-role-clusterrole.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-role-clusterrole.yaml
new file mode 100644
index 000000000..690aebcfd
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-role-clusterrole.yaml
@@ -0,0 +1,127 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - constraints.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - policy
+ resourceNames:
+ - gatekeeper-admin
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+- apiGroups:
+ - status.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/finalizers
+ verbs:
+ - delete
+ - get
+ - patch
+ - update
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - admissionregistration.k8s.io
+ resourceNames:
+ - gatekeeper-validating-webhook-configuration
+ resources:
+ - validatingwebhookconfigurations
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-role-role.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-role-role.yaml
new file mode 100644
index 000000000..73e2c5cf7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-role-role.yaml
@@ -0,0 +1,32 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+ namespace: '{{ .Release.Namespace }}'
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
new file mode 100644
index 000000000..22194d2ad
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
@@ -0,0 +1,18 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-rolebinding-rolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
new file mode 100644
index 000000000..4bf6087dc
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+ namespace: '{{ .Release.Namespace }}'
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
new file mode 100644
index 000000000..dade6a945
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
@@ -0,0 +1,58 @@
+{{- if not .Values.disableValidatingWebhook }}
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-validating-webhook-configuration
+webhooks:
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admit
+ failurePolicy: Ignore
+ name: validation.gatekeeper.sh
+ namespaceSelector:
+ matchExpressions:
+ - key: admission.gatekeeper.sh/ignore
+ operator: DoesNotExist
+ rules:
+ - apiGroups:
+ - '*'
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - '*'
+ sideEffects: None
+ timeoutSeconds: 3
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admitlabel
+ failurePolicy: Fail
+ name: check-ignore-label.gatekeeper.sh
+ rules:
+ - apiGroups:
+ - ""
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - namespaces
+ sideEffects: None
+ timeoutSeconds: 3
+{{- end }}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-webhook-server-cert-secret.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-webhook-server-cert-secret.yaml
new file mode 100644
index 000000000..bf89ae8b4
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-webhook-server-cert-secret.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-server-cert
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-webhook-service-service.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-webhook-service-service.yaml
new file mode 100644
index 000000000..473bc4b25
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/gatekeeper-webhook-service-service.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ ports:
+ - port: 443
+ targetPort: 8443
+ selector:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/requiredlabels.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/requiredlabels.yaml
new file mode 100644
index 000000000..e93e6a0a7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/requiredlabels.yaml
@@ -0,0 +1,57 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8srequiredlabels
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sRequiredLabels
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ message:
+ type: string
+ labels:
+ type: array
+ items:
+ type: object
+ properties:
+ key:
+ type: string
+ allowedRegex:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8srequiredlabels
+
+ get_message(parameters, _default) = msg {
+ not parameters.message
+ msg := _default
+ }
+
+ get_message(parameters, _default) = msg {
+ msg := parameters.message
+ }
+
+ violation[{"msg": msg, "details": {"missing_labels": missing}}] {
+ provided := {label | input.review.object.metadata.labels[label]}
+ required := {label | label := input.parameters.labels[_].key}
+ missing := required - provided
+ count(missing) > 0
+ def_msg := sprintf("you must provide labels: %v", [missing])
+ msg := get_message(input.parameters, def_msg)
+ }
+
+ violation[{"msg": msg}] {
+ value := input.review.object.metadata.labels[key]
+ expected := input.parameters.labels[_]
+ expected.key == key
+ # do not match if allowedRegex is not defined, or is an empty string
+ expected.allowedRegex != ""
+ not re_match(expected.allowedRegex, value)
+ def_msg := sprintf("Label <%v: %v> does not satisfy allowed regex: %v", [key, value, expected.allowedRegex])
+ msg := get_message(input.parameters, def_msg)
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/validate-install-crd.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/validate-install-crd.yaml
new file mode 100644
index 000000000..10977fd7d
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "config.gatekeeper.sh/v1alpha1/Config" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintPodStatus" false -}}
+# {{- set $found "templates.gatekeeper.sh/v1beta1/ConstraintTemplate" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintTemplatePodStatus" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the rancher-gatekeeper-crd chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/values.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/values.yaml
new file mode 100644
index 000000000..bec986402
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.2.101/values.yaml
@@ -0,0 +1,40 @@
+replicas: 3
+auditInterval: 300
+constraintViolationsLimit: 20
+auditFromCache: false
+disableValidatingWebhook: false
+auditChunkSize: 0
+logLevel: INFO
+emitAdmissionEvents: false
+emitAuditEvents: false
+image:
+ repository: rancher/openpolicyagent-gatekeeper
+ tag: v3.2.1
+ pullPolicy: IfNotPresent
+nodeSelector: { kubernetes.io/os: linux }
+affinity: {}
+tolerations: []
+podAnnotations:
+ { container.seccomp.security.alpha.kubernetes.io/manager: runtime/default }
+controllerManager:
+ resources:
+ limits:
+ cpu: 1000m
+ memory: 512Mi
+ requests:
+ cpu: 100m
+ memory: 256Mi
+audit:
+ resources:
+ limits:
+ cpu: 1000m
+ memory: 512Mi
+ requests:
+ cpu: 100m
+ memory: 256Mi
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/.helmignore b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/.helmignore
new file mode 100755
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/CHANGELOG.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/CHANGELOG.md
new file mode 100755
index 000000000..c68d23c24
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+All notable changes from the upstream OPA Gatekeeper chart will be added to this file
+
+## [Package Version 00] - 2020-09-10
+### Added
+- Enabled the CRD chart generator in `package.yaml`
+
+### Modified
+- Updated namespace to `cattle-gatekeeper-system`
+- Updated for Helm 3 compatibility
+ - Moved crds to `crds` directory
+ - Removed `crd-install` hooks and templates from crds
+
+### Removed
+- Removed `gatekeeper-system-namespace.yaml` as Rancher handles namespaces for chart installation
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/Chart.yaml
new file mode 100755
index 000000000..6e7996477
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/Chart.yaml
@@ -0,0 +1,22 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: OPA Gatekeeper
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
+ catalog.cattle.io/release-name: rancher-gatekeeper
+ catalog.cattle.io/ui-component: gatekeeper
+apiVersion: v1
+appVersion: v3.3.0
+description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
+ policy-based control for cloud native environments
+home: https://github.com/open-policy-agent/gatekeeper
+icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
+keywords:
+- open policy agent
+- security
+name: rancher-gatekeeper
+sources:
+- https://github.com/open-policy-agent/gatekeeper.git
+version: 3.3.000
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/README.md
new file mode 100755
index 000000000..45cf27c79
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/README.md
@@ -0,0 +1,39 @@
+# Gatekeeper Helm Chart
+
+## Parameters
+
+| Parameter | Description | Default |
+| :---------------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------ |
+| auditInterval | The frequency with which audit is run | `300` |
+| constraintViolationsLimit | The maximum # of audit violations reported on a constraint | `20` |
+| auditFromCache | Take the roster of resources to audit from the OPA cache | `false` |
+| auditChunkSize | Chunk size for listing cluster resources for audit (alpha feature) | `0` |
+| disableValidatingWebhook | Disable the validating webhook | `false` |
+| validatingWebhookTimeoutSeconds | The timeout for the validating webhook in seconds | `3` |
+| enableDeleteOperations | Enable validating webhook for delete operations | `false` |
+| emitAdmissionEvents | Emit K8s events in gatekeeper namespace for admission violations (alpha feature) | `false` |
+| emitAuditEvents | Emit K8s events in gatekeeper namespace for audit violations (alpha feature) | `false` |
+| logLevel | Minimum log level | `INFO` |
+| image.pullPolicy | The image pull policy | `IfNotPresent` |
+| image.repository | Image repository | `openpolicyagent/gatekeeper` |
+| image.release | The image release tag to use | Current release version: `v3.3.0` |
+| image.pullSecrets | Specify an array of imagePullSecrets | `[]` |
+| resources | The resource request/limits for the container image | limits: 1 CPU, 512Mi, requests: 100mCPU, 256Mi |
+| nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
+| affinity | The node affinity to use for pod scheduling | `{}` |
+| tolerations | The tolerations to use for pod scheduling | `[]` |
+| controllerManager.priorityClassName | Priority class name for controller manager | `system-cluster-critical` |
+| audit.priorityClassName | Priority class name for audit controller | `system-cluster-critical` |
+| replicas | The number of Gatekeeper replicas to deploy for the webhook | `1` |
+| podAnnotations | The annotations to add to the Gatekeeper pods | `container.seccomp.security.alpha.kubernetes.io/manager: runtime/default` |
+| secretAnnotations | The annotations to add to the Gatekeeper secrets | `{}` |
+| customResourceDefinitions.create | Whether the release should install CRDs. Regardless of this value, Helm v3+ will install the CRDs if those are not present already. Use --skip-crds with helm install if you want to skip CRD creation | `true` |
+
+## Contributing Changes
+
+This Helm chart is autogenerated from the Gatekeeper static manifest. The
+generator code lives under `cmd/build/helmify`. To make modifications to this
+template, please edit `kustomization.yaml` and `replacements.go` under that
+directory and then run `make manifests`. Your changes will show up in the
+`manifest_staging` directory and will be promoted to the root `charts` directory
+the next time a Gatekeeper release is cut.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/app-readme.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/app-readme.md
new file mode 100755
index 000000000..d44cf7b2b
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/app-readme.md
@@ -0,0 +1,14 @@
+# Rancher OPA Gatekeeper
+
+This chart is based off of the upstream [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper/tree/master/charts/gatekeeper) chart.
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/opa-gatekeper/).
+
+The chart installs the following components:
+
+- OPA Gatekeeper Controller-Manager - OPA Gatekeeper is a policy engine for providing policy based governance for Kubernetes clusters. The controller installs as a [validating admission controller webhook](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook) on the cluster and intercepts all admission requests that create, update or delete a resource in the cluster.
+- [Audit](https://github.com/open-policy-agent/gatekeeper#audit) - A periodic audit of the cluster resources against the enforced policies. Any existing resource that violates a policy will be recorded as violations.
+- [Constraint Template](https://github.com/open-policy-agent/gatekeeper#constraint-templates) - A template is a CRD (`ConstraintTemplate`) that defines the schema and Rego logic of a policy to be applied to the cluster by Gatekeeper's admission controller webhook. This chart installs a few default `ConstraintTemplate` custom resources.
+- [Constraint](https://github.com/open-policy-agent/gatekeeper#constraints) - A constraint is a custom resource that defines the scope of resources which a specific constraint template should apply to. The complete policy is defined by a combination of `ConstraintTemplates` (i.e. what the policy is) and `Constraints` (i.e. what resource to apply the policy to).
+
+For more information on how to configure the Helm chart, refer to the Helm README.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/_helpers.tpl b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/_helpers.tpl
new file mode 100755
index 000000000..f5d0ab307
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/_helpers.tpl
@@ -0,0 +1,52 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "gatekeeper.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "gatekeeper.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "gatekeeper.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "gatekeeper.labels" -}}
+app.kubernetes.io/name: {{ include "gatekeeper.name" . }}
+helm.sh/chart: {{ include "gatekeeper.chart" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/allowedrepos.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/allowedrepos.yaml
new file mode 100755
index 000000000..9abb84ecb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/allowedrepos.yaml
@@ -0,0 +1,35 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8sallowedrepos
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sAllowedRepos
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ repos:
+ type: array
+ items:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8sallowedrepos
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.containers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.initContainers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-admin-podsecuritypolicy.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-admin-podsecuritypolicy.yaml
new file mode 100755
index 000000000..78f36ecfb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-admin-podsecuritypolicy.yaml
@@ -0,0 +1,35 @@
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-admin
+spec:
+ allowPrivilegeEscalation: false
+ fsGroup:
+ ranges:
+ - max: 65535
+ min: 1
+ rule: MustRunAs
+ requiredDropCapabilities:
+ - ALL
+ runAsUser:
+ rule: MustRunAsNonRoot
+ seLinux:
+ rule: RunAsAny
+ supplementalGroups:
+ ranges:
+ - max: 65535
+ min: 1
+ rule: MustRunAs
+ volumes:
+ - configMap
+ - projected
+ - secret
+ - downwardAPI
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-admin-serviceaccount.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-admin-serviceaccount.yaml
new file mode 100755
index 000000000..4b68998cb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-admin-serviceaccount.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-audit-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-audit-deployment.yaml
new file mode 100755
index 000000000..95ccaa767
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-audit-deployment.yaml
@@ -0,0 +1,103 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-audit
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ automountServiceAccountToken: true
+ containers:
+ - args:
+ - --audit-interval={{ .Values.auditInterval }}
+ - --log-level={{ .Values.logLevel }}
+ - --constraint-violations-limit={{ .Values.constraintViolationsLimit }}
+ - --audit-from-cache={{ .Values.auditFromCache }}
+ - --audit-chunk-size={{ .Values.auditChunkSize }}
+ - --emit-audit-events={{ .Values.emitAuditEvents }}
+ - --operation=audit
+ - --operation=status
+ - --logtostderr
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.audit.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ readOnlyRootFilesystem: true
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ nodeSelector:
+{{ toYaml .Values.audit.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.audit.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.audit.tolerations | indent 8 }}
+ imagePullSecrets:
+{{ toYaml .Values.image.pullSecrets | indent 8 }}
+{{- if .Values.audit.priorityClassName }}
+ priorityClassName: {{ .Values.audit.priorityClassName }}
+{{- end }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-controller-manager-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-controller-manager-deployment.yaml
new file mode 100755
index 000000000..b050f3574
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-controller-manager-deployment.yaml
@@ -0,0 +1,124 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-controller-manager
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: {{ .Values.replicas }}
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: gatekeeper.sh/operation
+ operator: In
+ values:
+ - webhook
+ topologyKey: kubernetes.io/hostname
+ weight: 100
+ automountServiceAccountToken: true
+ containers:
+ - args:
+ - --port=8443
+ - --logtostderr
+ - --emit-admission-events={{ .Values.emitAdmissionEvents }}
+ - --log-level={{ .Values.logLevel }}
+ - --exempt-namespace=gatekeeper-system
+ - --operation=webhook
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8443
+ name: webhook-server
+ protocol: TCP
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.controllerManager.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ readOnlyRootFilesystem: true
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ volumeMounts:
+ - mountPath: /certs
+ name: cert
+ readOnly: true
+ nodeSelector:
+{{ toYaml .Values.controllerManager.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.controllerManager.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.controllerManager.tolerations | indent 8 }}
+ imagePullSecrets:
+{{ toYaml .Values.image.pullSecrets | indent 8 }}
+{{- if .Values.controllerManager.priorityClassName }}
+ priorityClassName: {{ .Values.controllerManager.priorityClassName }}
+{{- end }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
+ volumes:
+ - name: cert
+ secret:
+ defaultMode: 420
+ secretName: gatekeeper-webhook-server-cert
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-role-clusterrole.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-role-clusterrole.yaml
new file mode 100755
index 000000000..05577fb22
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-role-clusterrole.yaml
@@ -0,0 +1,139 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - constraints.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - mutations.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - policy
+ resourceNames:
+ - gatekeeper-admin
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+- apiGroups:
+ - status.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/finalizers
+ verbs:
+ - delete
+ - get
+ - patch
+ - update
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - admissionregistration.k8s.io
+ resourceNames:
+ - gatekeeper-validating-webhook-configuration
+ resources:
+ - validatingwebhookconfigurations
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-role-role.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-role-role.yaml
new file mode 100755
index 000000000..73e2c5cf7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-role-role.yaml
@@ -0,0 +1,32 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+ namespace: '{{ .Release.Namespace }}'
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
new file mode 100755
index 000000000..22194d2ad
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
@@ -0,0 +1,18 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-rolebinding-rolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
new file mode 100755
index 000000000..4bf6087dc
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+ namespace: '{{ .Release.Namespace }}'
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
new file mode 100755
index 000000000..ba72d918e
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
@@ -0,0 +1,61 @@
+{{- if not .Values.disableValidatingWebhook }}
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-validating-webhook-configuration
+webhooks:
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admit
+ failurePolicy: Ignore
+ name: validation.gatekeeper.sh
+ namespaceSelector:
+ matchExpressions:
+ - key: admission.gatekeeper.sh/ignore
+ operator: DoesNotExist
+ rules:
+ - apiGroups:
+ - '*'
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ {{- if .Values.enableDeleteOperations }}
+ - DELETE
+ {{- end}}
+ resources:
+ - '*'
+ sideEffects: None
+ timeoutSeconds: {{ .Values.validatingWebhookTimeoutSeconds }}
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admitlabel
+ failurePolicy: Fail
+ name: check-ignore-label.gatekeeper.sh
+ rules:
+ - apiGroups:
+ - ""
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - namespaces
+ sideEffects: None
+ timeoutSeconds: {{ .Values.validatingWebhookTimeoutSeconds }}
+{{- end }}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-webhook-server-cert-secret.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-webhook-server-cert-secret.yaml
new file mode 100755
index 000000000..5438a377d
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-webhook-server-cert-secret.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ annotations:
+{{- toYaml .Values.secretAnnotations | trim | nindent 4 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-server-cert
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-webhook-service-service.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-webhook-service-service.yaml
new file mode 100755
index 000000000..473bc4b25
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/gatekeeper-webhook-service-service.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ ports:
+ - port: 443
+ targetPort: 8443
+ selector:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/requiredlabels.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/requiredlabels.yaml
new file mode 100755
index 000000000..e93e6a0a7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/requiredlabels.yaml
@@ -0,0 +1,57 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8srequiredlabels
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sRequiredLabels
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ message:
+ type: string
+ labels:
+ type: array
+ items:
+ type: object
+ properties:
+ key:
+ type: string
+ allowedRegex:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8srequiredlabels
+
+ get_message(parameters, _default) = msg {
+ not parameters.message
+ msg := _default
+ }
+
+ get_message(parameters, _default) = msg {
+ msg := parameters.message
+ }
+
+ violation[{"msg": msg, "details": {"missing_labels": missing}}] {
+ provided := {label | input.review.object.metadata.labels[label]}
+ required := {label | label := input.parameters.labels[_].key}
+ missing := required - provided
+ count(missing) > 0
+ def_msg := sprintf("you must provide labels: %v", [missing])
+ msg := get_message(input.parameters, def_msg)
+ }
+
+ violation[{"msg": msg}] {
+ value := input.review.object.metadata.labels[key]
+ expected := input.parameters.labels[_]
+ expected.key == key
+ # do not match if allowedRegex is not defined, or is an empty string
+ expected.allowedRegex != ""
+ not re_match(expected.allowedRegex, value)
+ def_msg := sprintf("Label <%v: %v> does not satisfy allowed regex: %v", [key, value, expected.allowedRegex])
+ msg := get_message(input.parameters, def_msg)
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/validate-install-crd.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/validate-install-crd.yaml
new file mode 100755
index 000000000..875d7af02
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "config.gatekeeper.sh/v1alpha1/Config" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintPodStatus" false -}}
+# {{- set $found "templates.gatekeeper.sh/v1beta1/ConstraintTemplate" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintTemplatePodStatus" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/values.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/values.yaml
new file mode 100755
index 000000000..717517977
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.000/values.yaml
@@ -0,0 +1,60 @@
+replicas: 3
+auditInterval: 300
+constraintViolationsLimit: 20
+auditFromCache: false
+disableValidatingWebhook: false
+validatingWebhookTimeoutSeconds: 3
+enableDeleteOperations: false
+auditChunkSize: 0
+logLevel: INFO
+emitAdmissionEvents: false
+emitAuditEvents: false
+image:
+ repository: rancher/mirrored-openpolicyagent-gatekeeper
+ tag: v3.3.0
+ pullPolicy: IfNotPresent
+ pullSecrets: []
+podAnnotations:
+ { container.seccomp.security.alpha.kubernetes.io/manager: runtime/default }
+secretAnnotations: {}
+controllerManager:
+ priorityClassName: system-cluster-critical
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: gatekeeper.sh/operation
+ operator: In
+ values:
+ - webhook
+ topologyKey: kubernetes.io/hostname
+ weight: 100
+ tolerations: []
+ nodeSelector: { kubernetes.io/os: linux }
+ resources:
+ limits:
+ cpu: 1000m
+ memory: 512Mi
+ requests:
+ cpu: 100m
+ memory: 256Mi
+audit:
+ priorityClassName: system-cluster-critical
+ affinity: {}
+ tolerations: []
+ nodeSelector: { kubernetes.io/os: linux }
+ resources:
+ limits:
+ cpu: 1000m
+ memory: 512Mi
+ requests:
+ cpu: 100m
+ memory: 256Mi
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.18.6
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/.helmignore b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/.helmignore
new file mode 100755
index 000000000..f0c131944
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/.helmignore
@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/CHANGELOG.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/CHANGELOG.md
new file mode 100755
index 000000000..c68d23c24
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+All notable changes from the upstream OPA Gatekeeper chart will be added to this file
+
+## [Package Version 00] - 2020-09-10
+### Added
+- Enabled the CRD chart generator in `package.yaml`
+
+### Modified
+- Updated namespace to `cattle-gatekeeper-system`
+- Updated for Helm 3 compatibility
+ - Moved crds to `crds` directory
+ - Removed `crd-install` hooks and templates from crds
+
+### Removed
+- Removed `gatekeeper-system-namespace.yaml` as Rancher handles namespaces for chart installation
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/Chart.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/Chart.yaml
new file mode 100755
index 000000000..95989f1f6
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/Chart.yaml
@@ -0,0 +1,22 @@
+annotations:
+ catalog.cattle.io/auto-install: rancher-gatekeeper-crd=match
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/display-name: OPA Gatekeeper
+ catalog.cattle.io/namespace: cattle-gatekeeper-system
+ catalog.cattle.io/os: linux
+ catalog.cattle.io/provides-gvr: config.gatekeeper.sh.config/v1alpha1
+ catalog.cattle.io/release-name: rancher-gatekeeper
+ catalog.cattle.io/ui-component: gatekeeper
+apiVersion: v1
+appVersion: v3.3.0
+description: Modifies Open Policy Agent's upstream gatekeeper chart that provides
+ policy-based control for cloud native environments
+home: https://github.com/open-policy-agent/gatekeeper
+icon: https://charts.rancher.io/assets/logos/gatekeeper.svg
+keywords:
+- open policy agent
+- security
+name: rancher-gatekeeper
+sources:
+- https://github.com/open-policy-agent/gatekeeper.git
+version: 3.3.001
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/README.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/README.md
new file mode 100755
index 000000000..45cf27c79
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/README.md
@@ -0,0 +1,39 @@
+# Gatekeeper Helm Chart
+
+## Parameters
+
+| Parameter | Description | Default |
+| :---------------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------ |
+| auditInterval | The frequency with which audit is run | `300` |
+| constraintViolationsLimit | The maximum # of audit violations reported on a constraint | `20` |
+| auditFromCache | Take the roster of resources to audit from the OPA cache | `false` |
+| auditChunkSize | Chunk size for listing cluster resources for audit (alpha feature) | `0` |
+| disableValidatingWebhook | Disable the validating webhook | `false` |
+| validatingWebhookTimeoutSeconds | The timeout for the validating webhook in seconds | `3` |
+| enableDeleteOperations | Enable validating webhook for delete operations | `false` |
+| emitAdmissionEvents | Emit K8s events in gatekeeper namespace for admission violations (alpha feature) | `false` |
+| emitAuditEvents | Emit K8s events in gatekeeper namespace for audit violations (alpha feature) | `false` |
+| logLevel | Minimum log level | `INFO` |
+| image.pullPolicy | The image pull policy | `IfNotPresent` |
+| image.repository | Image repository | `openpolicyagent/gatekeeper` |
+| image.release | The image release tag to use | Current release version: `v3.3.0` |
+| image.pullSecrets | Specify an array of imagePullSecrets | `[]` |
+| resources | The resource request/limits for the container image | limits: 1 CPU, 512Mi, requests: 100mCPU, 256Mi |
+| nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` |
+| affinity | The node affinity to use for pod scheduling | `{}` |
+| tolerations | The tolerations to use for pod scheduling | `[]` |
+| controllerManager.priorityClassName | Priority class name for controller manager | `system-cluster-critical` |
+| audit.priorityClassName | Priority class name for audit controller | `system-cluster-critical` |
+| replicas | The number of Gatekeeper replicas to deploy for the webhook | `1` |
+| podAnnotations | The annotations to add to the Gatekeeper pods | `container.seccomp.security.alpha.kubernetes.io/manager: runtime/default` |
+| secretAnnotations | The annotations to add to the Gatekeeper secrets | `{}` |
+| customResourceDefinitions.create | Whether the release should install CRDs. Regardless of this value, Helm v3+ will install the CRDs if those are not present already. Use --skip-crds with helm install if you want to skip CRD creation | `true` |
+
+## Contributing Changes
+
+This Helm chart is autogenerated from the Gatekeeper static manifest. The
+generator code lives under `cmd/build/helmify`. To make modifications to this
+template, please edit `kustomization.yaml` and `replacements.go` under that
+directory and then run `make manifests`. Your changes will show up in the
+`manifest_staging` directory and will be promoted to the root `charts` directory
+the next time a Gatekeeper release is cut.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/app-readme.md b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/app-readme.md
new file mode 100755
index 000000000..d44cf7b2b
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/app-readme.md
@@ -0,0 +1,14 @@
+# Rancher OPA Gatekeeper
+
+This chart is based off of the upstream [OPA Gatekeeper](https://github.com/open-policy-agent/gatekeeper/tree/master/charts/gatekeeper) chart.
+
+For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/opa-gatekeper/).
+
+The chart installs the following components:
+
+- OPA Gatekeeper Controller-Manager - OPA Gatekeeper is a policy engine for providing policy based governance for Kubernetes clusters. The controller installs as a [validating admission controller webhook](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook) on the cluster and intercepts all admission requests that create, update or delete a resource in the cluster.
+- [Audit](https://github.com/open-policy-agent/gatekeeper#audit) - A periodic audit of the cluster resources against the enforced policies. Any existing resource that violates a policy will be recorded as violations.
+- [Constraint Template](https://github.com/open-policy-agent/gatekeeper#constraint-templates) - A template is a CRD (`ConstraintTemplate`) that defines the schema and Rego logic of a policy to be applied to the cluster by Gatekeeper's admission controller webhook. This chart installs a few default `ConstraintTemplate` custom resources.
+- [Constraint](https://github.com/open-policy-agent/gatekeeper#constraints) - A constraint is a custom resource that defines the scope of resources which a specific constraint template should apply to. The complete policy is defined by a combination of `ConstraintTemplates` (i.e. what the policy is) and `Constraints` (i.e. what resource to apply the policy to).
+
+For more information on how to configure the Helm chart, refer to the Helm README.
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/_helpers.tpl b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/_helpers.tpl
new file mode 100755
index 000000000..f5d0ab307
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/_helpers.tpl
@@ -0,0 +1,52 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "gatekeeper.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "gatekeeper.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "gatekeeper.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "gatekeeper.labels" -}}
+app.kubernetes.io/name: {{ include "gatekeeper.name" . }}
+helm.sh/chart: {{ include "gatekeeper.chart" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end -}}
+
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/allowedrepos.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/allowedrepos.yaml
new file mode 100755
index 000000000..9abb84ecb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/allowedrepos.yaml
@@ -0,0 +1,35 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8sallowedrepos
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sAllowedRepos
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ repos:
+ type: array
+ items:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8sallowedrepos
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.containers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
+
+ violation[{"msg": msg}] {
+ container := input.review.object.spec.initContainers[_]
+ satisfied := [good | repo = input.parameters.repos[_] ; good = startswith(container.image, repo)]
+ not any(satisfied)
+ msg := sprintf("container <%v> has an invalid image repo <%v>, allowed repos are %v", [container.name, container.image, input.parameters.repos])
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-admin-podsecuritypolicy.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-admin-podsecuritypolicy.yaml
new file mode 100755
index 000000000..78f36ecfb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-admin-podsecuritypolicy.yaml
@@ -0,0 +1,35 @@
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+ annotations:
+ seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-admin
+spec:
+ allowPrivilegeEscalation: false
+ fsGroup:
+ ranges:
+ - max: 65535
+ min: 1
+ rule: MustRunAs
+ requiredDropCapabilities:
+ - ALL
+ runAsUser:
+ rule: MustRunAsNonRoot
+ seLinux:
+ rule: RunAsAny
+ supplementalGroups:
+ ranges:
+ - max: 65535
+ min: 1
+ rule: MustRunAs
+ volumes:
+ - configMap
+ - projected
+ - secret
+ - downwardAPI
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-admin-serviceaccount.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-admin-serviceaccount.yaml
new file mode 100755
index 000000000..4b68998cb
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-admin-serviceaccount.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-audit-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-audit-deployment.yaml
new file mode 100755
index 000000000..95ccaa767
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-audit-deployment.yaml
@@ -0,0 +1,103 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-audit
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: audit-controller
+ gatekeeper.sh/operation: audit
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ automountServiceAccountToken: true
+ containers:
+ - args:
+ - --audit-interval={{ .Values.auditInterval }}
+ - --log-level={{ .Values.logLevel }}
+ - --constraint-violations-limit={{ .Values.constraintViolationsLimit }}
+ - --audit-from-cache={{ .Values.auditFromCache }}
+ - --audit-chunk-size={{ .Values.auditChunkSize }}
+ - --emit-audit-events={{ .Values.emitAuditEvents }}
+ - --operation=audit
+ - --operation=status
+ - --logtostderr
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.audit.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ readOnlyRootFilesystem: true
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ nodeSelector:
+{{ toYaml .Values.audit.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.audit.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.audit.tolerations | indent 8 }}
+ imagePullSecrets:
+{{ toYaml .Values.image.pullSecrets | indent 8 }}
+{{- if .Values.audit.priorityClassName }}
+ priorityClassName: {{ .Values.audit.priorityClassName }}
+{{- end }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-controller-manager-deployment.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-controller-manager-deployment.yaml
new file mode 100755
index 000000000..b050f3574
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-controller-manager-deployment.yaml
@@ -0,0 +1,124 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-controller-manager
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ replicas: {{ .Values.replicas }}
+ selector:
+ matchLabels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ template:
+ metadata:
+ annotations:
+{{- toYaml .Values.podAnnotations | trim | nindent 8 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ spec:
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: gatekeeper.sh/operation
+ operator: In
+ values:
+ - webhook
+ topologyKey: kubernetes.io/hostname
+ weight: 100
+ automountServiceAccountToken: true
+ containers:
+ - args:
+ - --port=8443
+ - --logtostderr
+ - --emit-admission-events={{ .Values.emitAdmissionEvents }}
+ - --log-level={{ .Values.logLevel }}
+ - --exempt-namespace=gatekeeper-system
+ - --operation=webhook
+ command:
+ - /manager
+ env:
+ - name: POD_NAMESPACE
+ valueFrom:
+ fieldRef:
+ apiVersion: v1
+ fieldPath: metadata.namespace
+ - name: POD_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: metadata.name
+ image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+ imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 9090
+ name: manager
+ ports:
+ - containerPort: 8443
+ name: webhook-server
+ protocol: TCP
+ - containerPort: 8888
+ name: metrics
+ protocol: TCP
+ - containerPort: 9090
+ name: healthz
+ protocol: TCP
+ readinessProbe:
+ httpGet:
+ path: /readyz
+ port: 9090
+ resources:
+{{ toYaml .Values.controllerManager.resources | indent 10 }}
+ securityContext:
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - all
+ readOnlyRootFilesystem: true
+ runAsGroup: 999
+ runAsNonRoot: true
+ runAsUser: 1000
+ volumeMounts:
+ - mountPath: /certs
+ name: cert
+ readOnly: true
+ nodeSelector:
+{{ toYaml .Values.controllerManager.nodeSelector | indent 8 }}
+ affinity:
+{{ toYaml .Values.controllerManager.affinity | indent 8 }}
+ tolerations:
+{{ toYaml .Values.controllerManager.tolerations | indent 8 }}
+ imagePullSecrets:
+{{ toYaml .Values.image.pullSecrets | indent 8 }}
+{{- if .Values.controllerManager.priorityClassName }}
+ priorityClassName: {{ .Values.controllerManager.priorityClassName }}
+{{- end }}
+ serviceAccountName: gatekeeper-admin
+ terminationGracePeriodSeconds: 60
+ volumes:
+ - name: cert
+ secret:
+ defaultMode: 420
+ secretName: gatekeeper-webhook-server-cert
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-role-clusterrole.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-role-clusterrole.yaml
new file mode 100755
index 000000000..05577fb22
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-role-clusterrole.yaml
@@ -0,0 +1,139 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+rules:
+- apiGroups:
+ - '*'
+ resources:
+ - '*'
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - config.gatekeeper.sh
+ resources:
+ - configs/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - constraints.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - mutations.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - policy
+ resourceNames:
+ - gatekeeper-admin
+ resources:
+ - podsecuritypolicies
+ verbs:
+ - use
+- apiGroups:
+ - status.gatekeeper.sh
+ resources:
+ - '*'
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/finalizers
+ verbs:
+ - delete
+ - get
+ - patch
+ - update
+- apiGroups:
+ - templates.gatekeeper.sh
+ resources:
+ - constrainttemplates/status
+ verbs:
+ - get
+ - patch
+ - update
+- apiGroups:
+ - admissionregistration.k8s.io
+ resourceNames:
+ - gatekeeper-validating-webhook-configuration
+ resources:
+ - validatingwebhookconfigurations
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-role-role.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-role-role.yaml
new file mode 100755
index 000000000..73e2c5cf7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-role-role.yaml
@@ -0,0 +1,32 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-role
+ namespace: '{{ .Release.Namespace }}'
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - patch
+ - update
+ - watch
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
new file mode 100755
index 000000000..22194d2ad
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml
@@ -0,0 +1,18 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-rolebinding-rolebinding.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
new file mode 100755
index 000000000..4bf6087dc
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-manager-rolebinding-rolebinding.yaml
@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-manager-rolebinding
+ namespace: '{{ .Release.Namespace }}'
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: Role
+ name: gatekeeper-manager-role
+subjects:
+- kind: ServiceAccount
+ name: gatekeeper-admin
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
new file mode 100755
index 000000000..ba72d918e
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml
@@ -0,0 +1,61 @@
+{{- if not .Values.disableValidatingWebhook }}
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+ creationTimestamp: null
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-validating-webhook-configuration
+webhooks:
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admit
+ failurePolicy: Ignore
+ name: validation.gatekeeper.sh
+ namespaceSelector:
+ matchExpressions:
+ - key: admission.gatekeeper.sh/ignore
+ operator: DoesNotExist
+ rules:
+ - apiGroups:
+ - '*'
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ {{- if .Values.enableDeleteOperations }}
+ - DELETE
+ {{- end}}
+ resources:
+ - '*'
+ sideEffects: None
+ timeoutSeconds: {{ .Values.validatingWebhookTimeoutSeconds }}
+- clientConfig:
+ caBundle: Cg==
+ service:
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+ path: /v1/admitlabel
+ failurePolicy: Fail
+ name: check-ignore-label.gatekeeper.sh
+ rules:
+ - apiGroups:
+ - ""
+ apiVersions:
+ - '*'
+ operations:
+ - CREATE
+ - UPDATE
+ resources:
+ - namespaces
+ sideEffects: None
+ timeoutSeconds: {{ .Values.validatingWebhookTimeoutSeconds }}
+{{- end }}
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-webhook-server-cert-secret.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-webhook-server-cert-secret.yaml
new file mode 100755
index 000000000..5438a377d
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-webhook-server-cert-secret.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ annotations:
+{{- toYaml .Values.secretAnnotations | trim | nindent 4 }}
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-server-cert
+ namespace: '{{ .Release.Namespace }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-webhook-service-service.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-webhook-service-service.yaml
new file mode 100755
index 000000000..473bc4b25
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/gatekeeper-webhook-service-service.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
+ name: gatekeeper-webhook-service
+ namespace: '{{ .Release.Namespace }}'
+spec:
+ ports:
+ - port: 443
+ targetPort: 8443
+ selector:
+ app: '{{ template "gatekeeper.name" . }}'
+ chart: '{{ template "gatekeeper.name" . }}'
+ control-plane: controller-manager
+ gatekeeper.sh/operation: webhook
+ gatekeeper.sh/system: "yes"
+ heritage: '{{ .Release.Service }}'
+ release: '{{ .Release.Name }}'
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/requiredlabels.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/requiredlabels.yaml
new file mode 100755
index 000000000..e93e6a0a7
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/requiredlabels.yaml
@@ -0,0 +1,57 @@
+apiVersion: templates.gatekeeper.sh/v1beta1
+kind: ConstraintTemplate
+metadata:
+ name: k8srequiredlabels
+spec:
+ crd:
+ spec:
+ names:
+ kind: K8sRequiredLabels
+ validation:
+ # Schema for the `parameters` field
+ openAPIV3Schema:
+ properties:
+ message:
+ type: string
+ labels:
+ type: array
+ items:
+ type: object
+ properties:
+ key:
+ type: string
+ allowedRegex:
+ type: string
+ targets:
+ - target: admission.k8s.gatekeeper.sh
+ rego: |
+ package k8srequiredlabels
+
+ get_message(parameters, _default) = msg {
+ not parameters.message
+ msg := _default
+ }
+
+ get_message(parameters, _default) = msg {
+ msg := parameters.message
+ }
+
+ violation[{"msg": msg, "details": {"missing_labels": missing}}] {
+ provided := {label | input.review.object.metadata.labels[label]}
+ required := {label | label := input.parameters.labels[_].key}
+ missing := required - provided
+ count(missing) > 0
+ def_msg := sprintf("you must provide labels: %v", [missing])
+ msg := get_message(input.parameters, def_msg)
+ }
+
+ violation[{"msg": msg}] {
+ value := input.review.object.metadata.labels[key]
+ expected := input.parameters.labels[_]
+ expected.key == key
+ # do not match if allowedRegex is not defined, or is an empty string
+ expected.allowedRegex != ""
+ not re_match(expected.allowedRegex, value)
+ def_msg := sprintf("Label <%v: %v> does not satisfy allowed regex: %v", [key, value, expected.allowedRegex])
+ msg := get_message(input.parameters, def_msg)
+ }
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/validate-install-crd.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/validate-install-crd.yaml
new file mode 100755
index 000000000..875d7af02
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/templates/validate-install-crd.yaml
@@ -0,0 +1,17 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+# {{- $found := dict -}}
+# {{- set $found "config.gatekeeper.sh/v1alpha1/Config" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintPodStatus" false -}}
+# {{- set $found "templates.gatekeeper.sh/v1beta1/ConstraintTemplate" false -}}
+# {{- set $found "status.gatekeeper.sh/v1beta1/ConstraintTemplatePodStatus" false -}}
+# {{- range .Capabilities.APIVersions -}}
+# {{- if hasKey $found (toString .) -}}
+# {{- set $found (toString .) true -}}
+# {{- end -}}
+# {{- end -}}
+# {{- range $_, $exists := $found -}}
+# {{- if (eq $exists false) -}}
+# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}}
+# {{- end -}}
+# {{- end -}}
+#{{- end -}}
\ No newline at end of file
diff --git a/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/values.yaml b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/values.yaml
new file mode 100755
index 000000000..899119fc6
--- /dev/null
+++ b/released/charts/rancher-gatekeeper/rancher-gatekeeper/3.3.001/values.yaml
@@ -0,0 +1,60 @@
+replicas: 3
+auditInterval: 300
+constraintViolationsLimit: 20
+auditFromCache: false
+disableValidatingWebhook: false
+validatingWebhookTimeoutSeconds: 3
+enableDeleteOperations: false
+auditChunkSize: 0
+logLevel: INFO
+emitAdmissionEvents: false
+emitAuditEvents: false
+image:
+ repository: rancher/mirrored-openpolicyagent-gatekeeper
+ tag: v3.3.0
+ pullPolicy: IfNotPresent
+ pullSecrets: []
+podAnnotations:
+ { container.seccomp.security.alpha.kubernetes.io/manager: runtime/default }
+secretAnnotations: {}
+controllerManager:
+ priorityClassName: system-cluster-critical
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: gatekeeper.sh/operation
+ operator: In
+ values:
+ - webhook
+ topologyKey: kubernetes.io/hostname
+ weight: 100
+ tolerations: []
+ nodeSelector: { kubernetes.io/os: linux }
+ resources:
+ limits:
+ cpu: 1000m
+ memory: 512Mi
+ requests:
+ cpu: 100m
+ memory: 256Mi
+audit:
+ priorityClassName: system-cluster-critical
+ affinity: {}
+ tolerations: []
+ nodeSelector: { kubernetes.io/os: linux }
+ resources:
+ limits:
+ cpu: 1000m
+ memory: 512Mi
+ requests:
+ cpu: 100m
+ memory: 256Mi
+global:
+ cattle:
+ systemDefaultRegistry: ""
+ kubectl:
+ repository: rancher/kubectl
+ tag: v1.20.2
diff --git a/released/charts/rancher-grafana/rancher-grafana/6.6.401/.helmignore b/released/charts/rancher-grafana/rancher-grafana/6.6.401/.helmignore
new file mode 100755
index 000000000..8cade1318
--- /dev/null
+++ b/released/charts/rancher-grafana/rancher-grafana/6.6.401/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.vscode
+.project
+.idea/
+*.tmproj
+OWNERS
diff --git a/released/charts/rancher-grafana/rancher-grafana/6.6.401/Chart.yaml b/released/charts/rancher-grafana/rancher-grafana/6.6.401/Chart.yaml
new file mode 100755
index 000000000..83ff41050
--- /dev/null
+++ b/released/charts/rancher-grafana/rancher-grafana/6.6.401/Chart.yaml
@@ -0,0 +1,28 @@
+annotations:
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/os: linux
+ catalog.rancher.io/certified: rancher
+ catalog.rancher.io/namespace: cattle-monitoring-system
+ catalog.rancher.io/release-name: rancher-grafana
+apiVersion: v2
+appVersion: 7.4.5
+description: The leading tool for querying and visualizing time series and metrics.
+home: https://grafana.net
+icon: https://raw.githubusercontent.com/grafana/grafana/master/public/img/logo_transparent_400x.png
+kubeVersion: ^1.8.0-0
+maintainers:
+- email: zanhsieh@gmail.com
+ name: zanhsieh
+- email: rluckie@cisco.com
+ name: rtluckie
+- email: maor.friedman@redhat.com
+ name: maorfr
+- email: miroslav.hadzhiev@gmail.com
+ name: Xtigyro
+- email: mail@torstenwalter.de
+ name: torstenwalter
+name: rancher-grafana
+sources:
+- https://github.com/grafana/grafana
+type: application
+version: 6.6.401
diff --git a/released/charts/rancher-grafana/rancher-grafana/6.6.401/README.md b/released/charts/rancher-grafana/rancher-grafana/6.6.401/README.md
new file mode 100755
index 000000000..957f019ec
--- /dev/null
+++ b/released/charts/rancher-grafana/rancher-grafana/6.6.401/README.md
@@ -0,0 +1,514 @@
+# Grafana Helm Chart
+
+* Installs the web dashboarding system [Grafana](http://grafana.org/)
+
+## Get Repo Info
+
+```console
+helm repo add grafana https://grafana.github.io/helm-charts
+helm repo update
+```
+
+_See [helm repo](https://helm.sh/docs/helm/helm_repo/) for command documentation._
+
+## Installing the Chart
+
+To install the chart with the release name `my-release`:
+
+```console
+helm install my-release grafana/grafana
+```
+
+## Uninstalling the Chart
+
+To uninstall/delete the my-release deployment:
+
+```console
+helm delete my-release
+```
+
+The command removes all the Kubernetes components associated with the chart and deletes the release.
+
+## Upgrading an existing Release to a new major version
+
+A major chart version change (like v1.2.3 -> v2.0.0) indicates that there is an
+incompatible breaking change needing manual actions.
+
+### To 4.0.0 (And 3.12.1)
+
+This version requires Helm >= 2.12.0.
+
+### To 5.0.0
+
+You have to add --force to your helm upgrade command as the labels of the chart have changed.
+
+### To 6.0.0
+
+This version requires Helm >= 3.1.0.
+
+## Configuration
+
+| Parameter | Description | Default |
+|-------------------------------------------|-----------------------------------------------|---------------------------------------------------------|
+| `replicas` | Number of nodes | `1` |
+| `podDisruptionBudget.minAvailable` | Pod disruption minimum available | `nil` |
+| `podDisruptionBudget.maxUnavailable` | Pod disruption maximum unavailable | `nil` |
+| `deploymentStrategy` | Deployment strategy | `{ "type": "RollingUpdate" }` |
+| `livenessProbe` | Liveness Probe settings | `{ "httpGet": { "path": "/api/health", "port": 3000 } "initialDelaySeconds": 60, "timeoutSeconds": 30, "failureThreshold": 10 }` |
+| `readinessProbe` | Readiness Probe settings | `{ "httpGet": { "path": "/api/health", "port": 3000 } }`|
+| `securityContext` | Deployment securityContext | `{"runAsUser": 472, "runAsGroup": 472, "fsGroup": 472}` |
+| `priorityClassName` | Name of Priority Class to assign pods | `nil` |
+| `image.repository` | Image repository | `grafana/grafana` |
+| `image.tag` | Image tag (`Must be >= 5.0.0`) | `7.4.5` |
+| `image.sha` | Image sha (optional) | `2b56f6106ddc376bb46d974230d530754bf65a640dfbc5245191d72d3b49efc6` |
+| `image.pullPolicy` | Image pull policy | `IfNotPresent` |
+| `image.pullSecrets` | Image pull secrets | `{}` |
+| `service.type` | Kubernetes service type | `ClusterIP` |
+| `service.port` | Kubernetes port where service is exposed | `80` |
+| `service.portName` | Name of the port on the service | `service` |
+| `service.targetPort` | Internal service is port | `3000` |
+| `service.nodePort` | Kubernetes service nodePort | `nil` |
+| `service.annotations` | Service annotations | `{}` |
+| `service.labels` | Custom labels | `{}` |
+| `service.clusterIP` | internal cluster service IP | `nil` |
+| `service.loadBalancerIP` | IP address to assign to load balancer (if supported) | `nil` |
+| `service.loadBalancerSourceRanges` | list of IP CIDRs allowed access to lb (if supported) | `[]` |
+| `service.externalIPs` | service external IP addresses | `[]` |
+| `extraExposePorts` | Additional service ports for sidecar containers| `[]` |
+| `hostAliases` | adds rules to the pod's /etc/hosts | `[]` |
+| `ingress.enabled` | Enables Ingress | `false` |
+| `ingress.annotations` | Ingress annotations (values are templated) | `{}` |
+| `ingress.labels` | Custom labels | `{}` |
+| `ingress.path` | Ingress accepted path | `/` |
+| `ingress.pathType` | Ingress type of path | `Prefix` |
+| `ingress.hosts` | Ingress accepted hostnames | `["chart-example.local"]` |
+| `ingress.extraPaths` | Ingress extra paths to prepend to every host configuration. Useful when configuring [custom actions with AWS ALB Ingress Controller](https://kubernetes-sigs.github.io/aws-alb-ingress-controller/guide/ingress/annotation/#actions). | `[]` |
+| `ingress.tls` | Ingress TLS configuration | `[]` |
+| `resources` | CPU/Memory resource requests/limits | `{}` |
+| `nodeSelector` | Node labels for pod assignment | `{}` |
+| `tolerations` | Toleration labels for pod assignment | `[]` |
+| `affinity` | Affinity settings for pod assignment | `{}` |
+| `extraInitContainers` | Init containers to add to the grafana pod | `{}` |
+| `extraContainers` | Sidecar containers to add to the grafana pod | `{}` |
+| `extraContainerVolumes` | Volumes that can be mounted in sidecar containers | `[]` |
+| `extraLabels` | Custom labels for all manifests | `{}` |
+| `schedulerName` | Name of the k8s scheduler (other than default) | `nil` |
+| `persistence.enabled` | Use persistent volume to store data | `false` |
+| `persistence.type` | Type of persistence (`pvc` or `statefulset`) | `pvc` |
+| `persistence.size` | Size of persistent volume claim | `10Gi` |
+| `persistence.existingClaim` | Use an existing PVC to persist data | `nil` |
+| `persistence.storageClassName` | Type of persistent volume claim | `nil` |
+| `persistence.accessModes` | Persistence access modes | `[ReadWriteOnce]` |
+| `persistence.annotations` | PersistentVolumeClaim annotations | `{}` |
+| `persistence.finalizers` | PersistentVolumeClaim finalizers | `[ "kubernetes.io/pvc-protection" ]` |
+| `persistence.subPath` | Mount a sub dir of the persistent volume | `nil` |
+| `persistence.inMemory.enabled` | If persistence is not enabled, whether to mount the local storage in-memory to improve performance | `false` |
+| `persistence.inMemory.sizeLimit` | SizeLimit for the in-memory local storage | `nil` |
+| `initChownData.enabled` | If false, don't reset data ownership at startup | true |
+| `initChownData.image.repository` | init-chown-data container image repository | `busybox` |
+| `initChownData.image.tag` | init-chown-data container image tag | `1.31.1` |
+| `initChownData.image.sha` | init-chown-data container image sha (optional)| `""` |
+| `initChownData.image.pullPolicy` | init-chown-data container image pull policy | `IfNotPresent` |
+| `initChownData.resources` | init-chown-data pod resource requests & limits | `{}` |
+| `schedulerName` | Alternate scheduler name | `nil` |
+| `env` | Extra environment variables passed to pods | `{}` |
+| `envValueFrom` | Environment variables from alternate sources. See the API docs on [EnvVarSource](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.17/#envvarsource-v1-core) for format details. | `{}` |
+| `envFromSecret` | Name of a Kubernetes secret (must be manually created in the same namespace) containing values to be added to the environment. Can be templated | `""` |
+| `envRenderSecret` | Sensible environment variables passed to pods and stored as secret | `{}` |
+| `extraSecretMounts` | Additional grafana server secret mounts | `[]` |
+| `extraVolumeMounts` | Additional grafana server volume mounts | `[]` |
+| `extraConfigmapMounts` | Additional grafana server configMap volume mounts | `[]` |
+| `extraEmptyDirMounts` | Additional grafana server emptyDir volume mounts | `[]` |
+| `plugins` | Plugins to be loaded along with Grafana | `[]` |
+| `datasources` | Configure grafana datasources (passed through tpl) | `{}` |
+| `notifiers` | Configure grafana notifiers | `{}` |
+| `dashboardProviders` | Configure grafana dashboard providers | `{}` |
+| `dashboards` | Dashboards to import | `{}` |
+| `dashboardsConfigMaps` | ConfigMaps reference that contains dashboards | `{}` |
+| `grafana.ini` | Grafana's primary configuration | `{}` |
+| `ldap.enabled` | Enable LDAP authentication | `false` |
+| `ldap.existingSecret` | The name of an existing secret containing the `ldap.toml` file, this must have the key `ldap-toml`. | `""` |
+| `ldap.config` | Grafana's LDAP configuration | `""` |
+| `annotations` | Deployment annotations | `{}` |
+| `labels` | Deployment labels | `{}` |
+| `podAnnotations` | Pod annotations | `{}` |
+| `podLabels` | Pod labels | `{}` |
+| `podPortName` | Name of the grafana port on the pod | `grafana` |
+| `sidecar.image.repository` | Sidecar image repository | `quay.io/kiwigrid/k8s-sidecar` |
+| `sidecar.image.tag` | Sidecar image tag | `1.10.7` |
+| `sidecar.image.sha` | Sidecar image sha (optional) | `""` |
+| `sidecar.imagePullPolicy` | Sidecar image pull policy | `IfNotPresent` |
+| `sidecar.resources` | Sidecar resources | `{}` |
+| `sidecar.enableUniqueFilenames` | Sets the kiwigrid/k8s-sidecar UNIQUE_FILENAMES environment variable | `false` |
+| `sidecar.dashboards.enabled` | Enables the cluster wide search for dashboards and adds/updates/deletes them in grafana | `false` |
+| `sidecar.dashboards.SCProvider` | Enables creation of sidecar provider | `true` |
+| `sidecar.dashboards.provider.name` | Unique name of the grafana provider | `sidecarProvider` |
+| `sidecar.dashboards.provider.orgid` | Id of the organisation, to which the dashboards should be added | `1` |
+| `sidecar.dashboards.provider.folder` | Logical folder in which grafana groups dashboards | `""` |
+| `sidecar.dashboards.provider.disableDelete` | Activate to avoid the deletion of imported dashboards | `false` |
+| `sidecar.dashboards.provider.allowUiUpdates` | Allow updating provisioned dashboards from the UI | `false` |
+| `sidecar.dashboards.provider.type` | Provider type | `file` |
+| `sidecar.dashboards.provider.foldersFromFilesStructure` | Allow Grafana to replicate dashboard structure from filesystem. | `false` |
+| `sidecar.dashboards.watchMethod` | Method to use to detect ConfigMap changes. With WATCH the sidecar will do a WATCH requests, with SLEEP it will list all ConfigMaps, then sleep for 60 seconds. | `WATCH` |
+| `sidecar.skipTlsVerify` | Set to true to skip tls verification for kube api calls | `nil` |
+| `sidecar.dashboards.label` | Label that config maps with dashboards should have to be added | `grafana_dashboard` |
+| `sidecar.dashboards.labelValue` | Label value that config maps with dashboards should have to be added | `nil` |
+| `sidecar.dashboards.folder` | Folder in the pod that should hold the collected dashboards (unless `sidecar.dashboards.defaultFolderName` is set). This path will be mounted. | `/tmp/dashboards` |
+| `sidecar.dashboards.folderAnnotation` | The annotation the sidecar will look for in configmaps to override the destination folder for files | `nil` |
+| `sidecar.dashboards.defaultFolderName` | The default folder name, it will create a subfolder under the `sidecar.dashboards.folder` and put dashboards in there instead | `nil` |
+| `sidecar.dashboards.searchNamespace` | If specified, the sidecar will search for dashboard config-maps inside this namespace. Otherwise the namespace in which the sidecar is running will be used. It's also possible to specify ALL to search in all namespaces | `nil` |
+| `sidecar.datasources.enabled` | Enables the cluster wide search for datasources and adds/updates/deletes them in grafana |`false` |
+| `sidecar.datasources.label` | Label that config maps with datasources should have to be added | `grafana_datasource` |
+| `sidecar.datasources.labelValue` | Label value that config maps with datasources should have to be added | `nil` |
+| `sidecar.datasources.searchNamespace` | If specified, the sidecar will search for datasources config-maps inside this namespace. Otherwise the namespace in which the sidecar is running will be used. It's also possible to specify ALL to search in all namespaces | `nil` |
+| `sidecar.notifiers.enabled` | Enables the cluster wide search for notifiers and adds/updates/deletes them in grafana | `false` |
+| `sidecar.notifiers.label` | Label that config maps with notifiers should have to be added | `grafana_notifier` |
+| `sidecar.notifiers.searchNamespace` | If specified, the sidecar will search for notifiers config-maps (or secrets) inside this namespace. Otherwise the namespace in which the sidecar is running will be used. It's also possible to specify ALL to search in all namespaces | `nil` |
+| `smtp.existingSecret` | The name of an existing secret containing the SMTP credentials. | `""` |
+| `smtp.userKey` | The key in the existing SMTP secret containing the username. | `"user"` |
+| `smtp.passwordKey` | The key in the existing SMTP secret containing the password. | `"password"` |
+| `admin.existingSecret` | The name of an existing secret containing the admin credentials. | `""` |
+| `admin.userKey` | The key in the existing admin secret containing the username. | `"admin-user"` |
+| `admin.passwordKey` | The key in the existing admin secret containing the password. | `"admin-password"` |
+| `serviceAccount.annotations` | ServiceAccount annotations | |
+| `serviceAccount.create` | Create service account | `true` |
+| `serviceAccount.name` | Service account name to use, when empty will be set to created account if `serviceAccount.create` is set else to `default` | `` |
+| `serviceAccount.nameTest` | Service account name to use for test, when empty will be set to created account if `serviceAccount.create` is set else to `default` | `nil` |
+| `rbac.create` | Create and use RBAC resources | `true` |
+| `rbac.namespaced` | Creates Role and Rolebinding instead of the default ClusterRole and ClusteRoleBindings for the grafana instance | `false` |
+| `rbac.useExistingRole` | Set to a rolename to use existing role - skipping role creating - but still doing serviceaccount and rolebinding to the rolename set here. | `nil` |
+| `rbac.pspEnabled` | Create PodSecurityPolicy (with `rbac.create`, grant roles permissions as well) | `true` |
+| `rbac.pspUseAppArmor` | Enforce AppArmor in created PodSecurityPolicy (requires `rbac.pspEnabled`) | `true` |
+| `rbac.extraRoleRules` | Additional rules to add to the Role | [] |
+| `rbac.extraClusterRoleRules` | Additional rules to add to the ClusterRole | [] |
+| `command` | Define command to be executed by grafana container at startup | `nil` |
+| `testFramework.enabled` | Whether to create test-related resources | `true` |
+| `testFramework.image` | `test-framework` image repository. | `bats/bats` |
+| `testFramework.tag` | `test-framework` image tag. | `v1.1.0` |
+| `testFramework.imagePullPolicy` | `test-framework` image pull policy. | `IfNotPresent` |
+| `testFramework.securityContext` | `test-framework` securityContext | `{}` |
+| `downloadDashboards.env` | Environment variables to be passed to the `download-dashboards` container | `{}` |
+| `downloadDashboards.envFromSecret` | Name of a Kubernetes secret (must be manually created in the same namespace) containing values to be added to the environment. Can be templated | `""` |
+| `downloadDashboards.resources` | Resources of `download-dashboards` container | `{}` |
+| `downloadDashboardsImage.repository` | Curl docker image repo | `curlimages/curl` |
+| `downloadDashboardsImage.tag` | Curl docker image tag | `7.73.0` |
+| `downloadDashboardsImage.sha` | Curl docker image sha (optional) | `""` |
+| `downloadDashboardsImage.pullPolicy` | Curl docker image pull policy | `IfNotPresent` |
+| `namespaceOverride` | Override the deployment namespace | `""` (`Release.Namespace`) |
+| `serviceMonitor.enabled` | Use servicemonitor from prometheus operator | `false` |
+| `serviceMonitor.namespace` | Namespace this servicemonitor is installed in | |
+| `serviceMonitor.interval` | How frequently Prometheus should scrape | `1m` |
+| `serviceMonitor.path` | Path to scrape | `/metrics` |
+| `serviceMonitor.scheme` | Scheme to use for metrics scraping | `http` |
+| `serviceMonitor.tlsConfig` | TLS configuration block for the endpoint | `{}` |
+| `serviceMonitor.labels` | Labels for the servicemonitor passed to Prometheus Operator | `{}` |
+| `serviceMonitor.scrapeTimeout` | Timeout after which the scrape is ended | `30s` |
+| `serviceMonitor.relabelings` | MetricRelabelConfigs to apply to samples before ingestion. | `[]` |
+| `revisionHistoryLimit` | Number of old ReplicaSets to retain | `10` |
+| `imageRenderer.enabled` | Enable the image-renderer deployment & service | `false` |
+| `imageRenderer.image.repository` | image-renderer Image repository | `grafana/grafana-image-renderer` |
+| `imageRenderer.image.tag` | image-renderer Image tag | `latest` |
+| `imageRenderer.image.sha` | image-renderer Image sha (optional) | `""` |
+| `imageRenderer.image.pullPolicy` | image-renderer ImagePullPolicy | `Always` |
+| `imageRenderer.env` | extra env-vars for image-renderer | `{}` |
+| `imageRenderer.serviceAccountName` | image-renderer deployment serviceAccountName | `""` |
+| `imageRenderer.securityContext` | image-renderer deployment securityContext | `{}` |
+| `imageRenderer.hostAliases` | image-renderer deployment Host Aliases | `[]` |
+| `imageRenderer.priorityClassName` | image-renderer deployment priority class | `''` |
+| `imageRenderer.service.portName` | image-renderer service port name | `'http'` |
+| `imageRenderer.service.port` | image-renderer service port used by both service and deployment | `8081` |
+| `imageRenderer.grafanaSubPath` | Grafana sub path to use for image renderer callback url | `''` |
+| `imageRenderer.podPortName` | name of the image-renderer port on the pod | `http` |
+| `imageRenderer.revisionHistoryLimit` | number of image-renderer replica sets to keep | `10` |
+| `imageRenderer.networkPolicy.limitIngress` | Enable a NetworkPolicy to limit inbound traffic from only the created grafana pods | `true` |
+| `imageRenderer.networkPolicy.limitEgress` | Enable a NetworkPolicy to limit outbound traffic to only the created grafana pods | `false` |
+| `imageRenderer.resources` | Set resource limits for image-renderer pdos | `{}` |
+
+### Example ingress with path
+
+With grafana 6.3 and above
+```yaml
+grafana.ini:
+ server:
+ domain: monitoring.example.com
+ root_url: "%(protocol)s://%(domain)s/grafana"
+ serve_from_sub_path: true
+ingress:
+ enabled: true
+ hosts:
+ - "monitoring.example.com"
+ path: "/grafana"
+```
+
+### Example of extraVolumeMounts
+
+```yaml
+- extraVolumeMounts:
+ - name: plugins
+ mountPath: /var/lib/grafana/plugins
+ subPath: configs/grafana/plugins
+ existingClaim: existing-grafana-claim
+ readOnly: false
+```
+
+## Import dashboards
+
+There are a few methods to import dashboards to Grafana. Below are some examples and explanations as to how to use each method:
+
+```yaml
+dashboards:
+ default:
+ some-dashboard:
+ json: |
+ {
+ "annotations":
+
+ ...
+ # Complete json file here
+ ...
+
+ "title": "Some Dashboard",
+ "uid": "abcd1234",
+ "version": 1
+ }
+ custom-dashboard:
+ # This is a path to a file inside the dashboards directory inside the chart directory
+ file: dashboards/custom-dashboard.json
+ prometheus-stats:
+ # Ref: https://grafana.com/dashboards/2
+ gnetId: 2
+ revision: 2
+ datasource: Prometheus
+ local-dashboard:
+ url: https://raw.githubusercontent.com/user/repository/master/dashboards/dashboard.json
+```
+
+## BASE64 dashboards
+
+Dashboards could be stored on a server that does not return JSON directly and instead of it returns a Base64 encoded file (e.g. Gerrit)
+A new parameter has been added to the url use case so if you specify a b64content value equals to true after the url entry a Base64 decoding is applied before save the file to disk.
+If this entry is not set or is equals to false not decoding is applied to the file before saving it to disk.
+
+### Gerrit use case
+
+Gerrit API for download files has the following schema: where {project-name} and
+{file-id} usually has '/' in their values and so they MUST be replaced by %2F so if project-name is user/repo, branch-id is master and file-id is equals to dir1/dir2/dashboard
+the url value is
+
+## Sidecar for dashboards
+
+If the parameter `sidecar.dashboards.enabled` is set, a sidecar container is deployed in the grafana
+pod. This container watches all configmaps (or secrets) in the cluster and filters out the ones with
+a label as defined in `sidecar.dashboards.label`. The files defined in those configmaps are written
+to a folder and accessed by grafana. Changes to the configmaps are monitored and the imported
+dashboards are deleted/updated.
+
+A recommendation is to use one configmap per dashboard, as a reduction of multiple dashboards inside
+one configmap is currently not properly mirrored in grafana.
+
+Example dashboard config:
+
+```yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: sample-grafana-dashboard
+ labels:
+ grafana_dashboard: "1"
+data:
+ k8s-dashboard.json: |-
+ [...]
+```
+
+## Sidecar for datasources
+
+If the parameter `sidecar.datasources.enabled` is set, an init container is deployed in the grafana
+pod. This container lists all secrets (or configmaps, though not recommended) in the cluster and
+filters out the ones with a label as defined in `sidecar.datasources.label`. The files defined in
+those secrets are written to a folder and accessed by grafana on startup. Using these yaml files,
+the data sources in grafana can be imported.
+
+Secrets are recommended over configmaps for this usecase because datasources usually contain private
+data like usernames and passwords. Secrets are the more appropriate cluster resource to manage those.
+
+Example values to add a datasource adapted from [Grafana](http://docs.grafana.org/administration/provisioning/#example-datasource-config-file):
+
+```yaml
+datasources:
+ datasources.yaml:
+ apiVersion: 1
+ datasources:
+ # name of the datasource. Required
+ - name: Graphite
+ # datasource type. Required
+ type: graphite
+ # access mode. proxy or direct (Server or Browser in the UI). Required
+ access: proxy
+ # org id. will default to orgId 1 if not specified
+ orgId: 1
+ # url
+ url: http://localhost:8080
+ # database password, if used
+ password:
+ # database user, if used
+ user:
+ # database name, if used
+ database:
+ # enable/disable basic auth
+ basicAuth:
+ # basic auth username
+ basicAuthUser:
+ # basic auth password
+ basicAuthPassword:
+ # enable/disable with credentials headers
+ withCredentials:
+ # mark as default datasource. Max one per org
+ isDefault:
+ #