From 8d9596d99a2f305228e67a69fa4c10090ce11447 Mon Sep 17 00:00:00 2001 From: Kevin Joiner Date: Mon, 27 Feb 2023 11:50:29 -0500 Subject: [PATCH] Make Charts --- .../rancher-webhook-2.0.2+up0.3.2-rc19.tgz | Bin 0 -> 1801 bytes .../2.0.2+up0.3.2-rc19/Chart.yaml | 18 ++++++ .../2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml | 4 ++ .../charts/capi/templates/service.yaml | 13 ++++ .../2.0.2+up0.3.2-rc19/templates/_helpers.tpl | 22 +++++++ .../templates/deployment.yaml | 59 ++++++++++++++++++ .../2.0.2+up0.3.2-rc19/templates/rbac.yaml | 12 ++++ .../2.0.2+up0.3.2-rc19/templates/service.yaml | 13 ++++ .../templates/serviceaccount.yaml | 4 ++ .../2.0.2+up0.3.2-rc19/templates/webhook.yaml | 9 +++ .../2.0.2+up0.3.2-rc19/values.yaml | 22 +++++++ 11 files changed, 176 insertions(+) create mode 100644 assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc19.tgz create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/Chart.yaml create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/templates/service.yaml create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/_helpers.tpl create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/deployment.yaml create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/rbac.yaml create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/service.yaml create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/serviceaccount.yaml create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/webhook.yaml create mode 100644 charts/rancher-webhook/2.0.2+up0.3.2-rc19/values.yaml diff --git a/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc19.tgz b/assets/rancher-webhook/rancher-webhook-2.0.2+up0.3.2-rc19.tgz new file mode 100644 index 0000000000000000000000000000000000000000..f52491f4dc2ad980986ca2b09ce7e9c26b102c0f GIT binary patch literal 1801 zcmV+k2ln_MiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI>{Z{xTT&$B+oz>8uZTFH{_wR1vSAeT#v11^D)9JVNmV!=>j zn+-*(B;{@D^LH=w*OV;VyO+SZMKv#RsNrxV^7rG+kctSpLgjwO$CZ>%!|N4M#(O3) zzj!tAeczu>Ci!3A_uGGiU=&;glksd8e3(sU(+fYCjHa^-@L$h`!;)%4)P?`zvDz>9 zjR+A!8e*6fI&=UiF@(#dM~N{UJtl_~m0=5pQ3&N)=~P>>C_)j!z^D`lohnc1Bf4u; znn@AD`#=8)0xy_)zU#vuA@D}|&-a~O1&L87gklIqqpP2_!MIad>JT^+>3=$(Ca7X& zv|DTa;WHDF{H!~*D|j^A9(l9U>ydYP*lC3viAFbbzW#U>&>WJmkCoB&$RSBm|Lc2W zZ{#W(eCI@%pomaVhB|aypi)H4EU%)N>1@cq6+Xd2D!4EF1oNDrcDjA9zsAV(z0vQ}#Pay97j!RQC2js+ z6P}`e-3{Ob|NAq4(&qmU<8jab=MWZ?C5A1^C>O=Bje7t?mLaSyxC7)C<|*fM$r*hP z;m5_DG;@U-g>jrEmyd*(dyC=uSO5im|9}gUa&wPMrcKFJ04u4@9h%QlJ%z9!T%+S; zyq5JW`L1q{Y20Yeb|1%i2S##K#kQ8Snpq)~Zvhb|Tt3Grj0X>huremm;V|Eylt6sOe|eoGnyG58p4EeiHO|YXv2K8SSkc27Sgf&2;m?9bcBrX z0Xb45RS27{ zHi!b&RkYIy=ek>>m@o?%{7w%Czsdk|jrBi+oj)j|z2A=gMy=KDaq@^<7Y0a@>_;}0 zrM96wQgk!)T3{~?x$uM;ci9nW#$)+b8kT*t23#zVnh*we@}c09JW`fPW-sG|!Og!@ z!Uu=n$8tlLEK>N;@&@NO_dnfyy1ttKc+`NsW{=ppy}mtaCZ_Q*D|c77HxKix>zlTbzbF~o>mFdi zkVp5pXttK^b7EFuja{#<+0?p4t^x0}St{{r(Axqe9 z-`68{lU2hXJ98QA8EmP5{rwWDjNV@tc{*WzpL#*fr7|IWH<^t0`eYOBp6GZvo6YK{ zUqo&dz1_-Gba`sC96+3D6>~T=aWZ_m)HSPVRBKej>`#^gQB+1Zd}%-^SEG1EX=bvM zC%e(Sm)`7bc4a=h6~6a$H&2##Z@t(47UgjKrydD?ojTB|{BJVe%m0FLU;jUg*zsRJ z<0LgJsn~z>J=1%-%oB<_D7@yWHmL3;$M2blm{@*6aHu55a?>CQ`>T>^a%3F&La)jG!LbMFMxIfNX?_UDi^E6Bsc#VLKOfRqLye{QBk6#kyP>!e!ecE z>t z`hjm#^Ri*z`dj}NrHy~OBFg9?B?)`AyMU+g@6Yz)|H*99*7|!mzF7Vj00960+|G&505kvqC?|cm literal 0 HcmV?d00001 diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/Chart.yaml new file mode 100644 index 000000000..c670ca4b5 --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/Chart.yaml @@ -0,0 +1,18 @@ +annotations: + catalog.cattle.io/certified: rancher + catalog.cattle.io/hidden: "true" + catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.26.0-0' + catalog.cattle.io/namespace: cattle-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux,windows + catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0' + catalog.cattle.io/release-name: rancher-webhook +apiVersion: v2 +appVersion: 0.3.2-rc19 +dependencies: +- condition: capi.enabled + name: capi + repository: "" +description: ValidatingAdmissionWebhook for Rancher types +name: rancher-webhook +version: 2.0.2+up0.3.2-rc19 diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml new file mode 100644 index 000000000..388210bef --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/Chart.yaml @@ -0,0 +1,4 @@ +apiVersion: v2 +appVersion: 0.0.0 +name: capi +version: 0.0.0 diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/templates/service.yaml new file mode 100644 index 000000000..08df65d62 --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/charts/capi/templates/service.yaml @@ -0,0 +1,13 @@ +kind: Service +apiVersion: v1 +metadata: + name: webhook-service + annotations: + need-a-cert.cattle.io/secret-name: rancher-webhook-tls +spec: + ports: + - name: https + port: 443 + targetPort: 8777 + selector: + app: rancher-webhook diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/_helpers.tpl b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/_helpers.tpl new file mode 100644 index 000000000..c37a65c6f --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/_helpers.tpl @@ -0,0 +1,22 @@ +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} + +{{- define "rancher-webhook.labels" -}} +app: rancher-webhook +{{- end }} + +{{- define "linux-node-tolerations" -}} +- key: "cattle.io/os" + value: "linux" + effect: "NoSchedule" + operator: "Equal" +{{- end -}} + +{{- define "linux-node-selector" -}} +kubernetes.io/os: linux +{{- end -}} \ No newline at end of file diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/deployment.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/deployment.yaml new file mode 100644 index 000000000..e4270c1ec --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/deployment.yaml @@ -0,0 +1,59 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: rancher-webhook +spec: + selector: + matchLabels: + app: rancher-webhook + template: + metadata: + labels: + app: rancher-webhook + spec: + {{- if .Values.capi.enabled }} + volumes: + - name: tls + secret: + secretName: rancher-webhook-tls + {{- end }} + {{- if .Values.global.hostNetwork }} + hostNetwork: true + {{- end }} + nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} + {{- if .Values.nodeSelector }} +{{ toYaml .Values.nodeSelector | indent 8 }} + {{- end }} + tolerations: {{ include "linux-node-tolerations" . | nindent 6 }} + {{- if .Values.tolerations }} +{{ toYaml .Values.tolerations | indent 6 }} + {{- end }} + containers: + - env: + - name: STAMP + value: "{{.Values.stamp}}" + - name: ENABLE_CAPI + value: "{{.Values.capi.enabled}}" + - name: ENABLE_MCM + value: "{{.Values.mcm.enabled}}" + - name: NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}' + name: rancher-webhook + imagePullPolicy: "{{ .Values.image.imagePullPolicy }}" + ports: + - name: https + containerPort: 9443 + - name: capi-https + containerPort: 8777 + {{- if .Values.capi.enabled }} + volumeMounts: + - name: tls + mountPath: /tmp/k8s-webhook-server/serving-certs + {{- end }} + serviceAccountName: rancher-webhook + {{- if .Values.priorityClassName }} + priorityClassName: "{{.Values.priorityClassName}}" + {{- end }} diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/rbac.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/rbac.yaml new file mode 100644 index 000000000..9afaae6c6 --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/rbac.yaml @@ -0,0 +1,12 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: rancher-webhook +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: cluster-admin +subjects: +- kind: ServiceAccount + name: rancher-webhook + namespace: {{.Release.Namespace}} diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/service.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/service.yaml new file mode 100644 index 000000000..74a8a9e5a --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/service.yaml @@ -0,0 +1,13 @@ +kind: Service +apiVersion: v1 +metadata: + name: rancher-webhook + namespace: cattle-system +spec: + ports: + - port: 443 + targetPort: 9443 + protocol: TCP + name: https + selector: + app: rancher-webhook diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/serviceaccount.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/serviceaccount.yaml new file mode 100644 index 000000000..f9251b418 --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/serviceaccount.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: rancher-webhook diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/webhook.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/webhook.yaml new file mode 100644 index 000000000..53a0687b6 --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/templates/webhook.yaml @@ -0,0 +1,9 @@ +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + name: rancher.cattle.io +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + name: rancher.cattle.io diff --git a/charts/rancher-webhook/2.0.2+up0.3.2-rc19/values.yaml b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/values.yaml new file mode 100644 index 000000000..6964c4961 --- /dev/null +++ b/charts/rancher-webhook/2.0.2+up0.3.2-rc19/values.yaml @@ -0,0 +1,22 @@ +image: + repository: rancher/rancher-webhook + tag: v0.3.2-rc19 + imagePullPolicy: IfNotPresent + +global: + cattle: + systemDefaultRegistry: "" + hostNetwork: false + +capi: + enabled: false + +mcm: + enabled: true + +# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info +tolerations: [] +nodeSelector: {} + +## PriorityClassName assigned to deployment. +priorityClassName: ""