diff --git a/assets/rancher-istio/rancher-istio-100.0.2+up1.10.4.tgz b/assets/rancher-istio/rancher-istio-100.0.2+up1.10.4.tgz new file mode 100644 index 000000000..2f011c6a0 Binary files /dev/null and b/assets/rancher-istio/rancher-istio-100.0.2+up1.10.4.tgz differ diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/Chart.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/Chart.yaml new file mode 100644 index 000000000..89f5e231e --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/Chart.yaml @@ -0,0 +1,23 @@ +annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=100.0.0+up1.35.0 + catalog.cattle.io/certified: rancher + catalog.cattle.io/display-name: Istio + catalog.cattle.io/namespace: istio-system + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1 + catalog.cattle.io/rancher-version: '>= 2.6.0-0' + catalog.cattle.io/release-name: rancher-istio + catalog.cattle.io/requests-cpu: 710m + catalog.cattle.io/requests-memory: 2314Mi + catalog.cattle.io/type: cluster-tool + catalog.cattle.io/ui-component: istio +apiVersion: v1 +appVersion: 1.10.4 +description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/ + for details. +icon: https://charts.rancher.io/assets/logos/istio.svg +keywords: +- networking +- infrastructure +name: rancher-istio +version: 100.0.2+up1.10.4 diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/README.md b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/README.md new file mode 100644 index 000000000..c93a4a7c8 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/README.md @@ -0,0 +1,80 @@ +# Rancher-Istio Chart + +Our [Istio](https://istio.io/) installer wraps the istioctl binary commands in a handy helm chart, including an overlay file option to allow complex customization. + +See the app-readme for known issues and deprecations. + +## Installation Requirements + +#### Chart Dependencies +- rancher-kiali-server-crd chart +- rancher-monitoring chart or other Prometheus installation + +#### Install +To install the rancher-istio chart with helm, use the following command: +``` +helm install rancher-istio --create-namespace -n istio-system +``` + +#### Uninstall +To ensure rancher-istio uninstalls correctly, you must uninstall rancher-istio prior to uninstalling chart dependencies (see chart dependencies for list of dependencies). This is because all definitions need to be available in order to properly build the rancher-istio objects for removal. + +**If you remove dependent CRD charts prior to removing rancher-istio, you may encounter the following error:** +`Error: uninstallation completed with 1 error(s): unable to build kubernetes objects for delete: unable to recognize "": no matches for kind "MonitoringDashboard" in version "monitoring.kiali.io/v1alpha1"` + +## Addons +The addons that are included with rancher-istio are: + +- Kiali +- Jaeger + +Each addon has additional customization and dependencies required for them to work as expected. Use the values.yaml to customize or to enable/disable each addon. +### Kiali Addon + +Kiali allows you to view and manage your istio-based service mesh through an easy to use dashboard. + +#### Kiali Dependencies +##### rancher-monitoring chart or other Prometheus installation + +This dependecy installs the required CRDs for installing Kiali. Since Kiali is bundled in with Istio in this chart, if you do not have these dependencies installed, your Istio installation will fail. If you do not plan on using Kiali, set `kiali.enabled=false` when installing Istio for a succesful installation. + +#### Prometheus Configuration for Kiali +> **Note:** The following configuration options assume you have installed the dependecies for Kiali. Please ensure you have Promtheus in your cluster before proceeding. + +The Rancher Monitoring app sets `prometheus.prometheusSpec.ignoreNamespaceSelectors=false` which means all namespaces will be scraped by Prometheus by default. This ensures you can view traffic, metrics and graphs for resources deployed in other namespaces. + +To limit scraping to specific namespaces, set `prometheus.prometheusSpec.ignoreNamespaceSelectors=true` and add one of the following configurations to ensure you can continue to view traffic, metrics and graphs for your deployed resources. + +1. Add a Service Monitor or Pod Monitor in the namespace with the targets you want to scrape. +1. Add an additionalScrapeConfig to your rancher-monitoring instance to scrape all targets in all namespaces. + +#### Kiali External Services + +The external services that can be configured in Kiali are: Prometheus, Grafana and Tracing. + +##### Prometheus +The `kiali.external_services.prometheus` url is set in the values.yaml: +``` +http://{{ .Values.nameOverride }}-prometheus.{{ .Values.namespaceOverride }}.svc:{{ prometheus.service.port }} +``` +The url depends on the default values for `nameOverride`, `namespaceOverride`, and `prometheus.service.port` being set in your rancher-monitoring or other monitoring instance. + +##### Grafana +The `kiali.external_services.grafana` url is set in the values.yaml: +``` +http://{{ .Values.nameOverride }}-grafana.{{ .Values.namespaceOverride }}.svc:{{ grafana.service.port }} +``` +The url depends on the default values for `nameOverride`, `namespaceOverride`, and `grafana.service.port` being set in your rancher-monitoring or other monitoring instance. + +##### Tracing +The `kiali.external_services.tracing` url and `.Values.tracing.contextPath` is set in the rancher-istio values.yaml: +``` +http://tracing.{{ .Values.namespaceOverride }}.svc:{{ .Values.service.externalPort }}/{{ .Values.tracing.contextPath }} +``` +The url depends on the default values for `namespaceOverride`, and `.Values.service.externalPort` being set in your rancher-tracing or other tracing instance. + +## Jaeger Addon + +Jaeger allows you to trace and monitor distributed microservices. + +> **Note:** This addon is using the all-in-one Jaeger installation which is not qualified for production. Use the [Jaeger Tracing](https://www.jaegertracing.io/docs/1.21/getting-started/) documentation to determine which installation you will need for your production needs. diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/app-readme.md b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/app-readme.md new file mode 100644 index 000000000..49b823253 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/app-readme.md @@ -0,0 +1,35 @@ +# Rancher Istio + +Our [Istio](https://istio.io/) installer wraps the istioctl binary commands in a handy helm chart, including an overlay file option to allow complex customization. It also includes: +* **[Kiali](https://kiali.io/)**: Used for graphing traffic flow throughout the mesh +* **[Jaeger](https://www.jaegertracing.io/)**: A quick start, all-in-one installation used for tracing distributed system. This is not production qualified, please refer to jaeger documentation to determine which installation you may need instead. + +For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/istio/v2.5/). +## Known Issues + +#### Airgapped Environments +If you are using this chart in an airgapped environment, you will not be able to upgrade. This is because the `istioctl` upgrade command reaches out to an external repo and it is not configurable. We are tracking the fix for this issue [here](https://github.com/rancher/rancher/issues/33402) + +## Deprecations + +#### v1alpha1 security policies +As of 1.6, Istio removed support for `v1alpha1` security policies resource and replaced the API with `v1beta1` authorization policies. https://istio.io/latest/docs/reference/config/security/authorization-policy/ + +If you are currently running rancher-istio <= 1.7.x, you need to migrate any existing `v1alpha1` security policies to `v1beta1` authorization policies prior to upgrading to the next minor version. + +> **Note:** If you attempt to upgrade prior to migrating your policy resources, you might see errors similar to: +``` +Error: found 6 CRD of unsupported v1alpha1 security policy +``` +``` + Error: found 1 unsupported v1alpha1 security policy + ``` + ``` + Control Plane - policy pod - istio-policy - version: x.x.x does not match the target version x.x.x + ``` + Continue with the migration steps below before retrying the upgrade process. + +##### Migrating Resources: +Migration steps can be found in this [istio blog post](https://istio.io/latest/blog/2021/migrate-alpha-policy/ "istio blog post"). + +You can also use these [quick steps](https://github.com/rancher/rancher/issues/34699#issuecomment-921995917 "quick steps") to determine if you need to follow the more extensive migration steps. diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/Chart.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/Chart.yaml new file mode 100644 index 000000000..2393605a8 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/Chart.yaml @@ -0,0 +1,31 @@ +annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=match + catalog.cattle.io/hidden: "true" + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1 + catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1 + catalog.rancher.io/namespace: cattle-istio-system + catalog.rancher.io/release-name: rancher-kiali-server +apiVersion: v2 +appVersion: v1.35.0 +description: Kiali is an open source project for service mesh observability, refer + to https://www.kiali.io for details. This is installed as sub-chart with customized + values in Rancher's Istio. +home: https://github.com/kiali/kiali +icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png +keywords: +- istio +- kiali +- networking +- infrastructure +maintainers: +- email: kiali-users@googlegroups.com + name: Kiali + url: https://kiali.io +name: kiali +sources: +- https://github.com/kiali/kiali +- https://github.com/kiali/kiali-ui +- https://github.com/kiali/kiali-operator +- https://github.com/kiali/helm-charts +version: 1.35.0 diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/NOTES.txt b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/NOTES.txt new file mode 100644 index 000000000..751019401 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/NOTES.txt @@ -0,0 +1,5 @@ +Welcome to Kiali! For more details on Kiali, see: https://kiali.io + +The Kiali Server [{{ .Chart.AppVersion }}] has been installed in namespace [{{ .Release.Namespace }}]. It will be ready soon. + +(Helm: Chart=[{{ .Chart.Name }}], Release=[{{ .Release.Name }}], Version=[{{ .Chart.Version }}]) diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/_helpers.tpl b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/_helpers.tpl new file mode 100644 index 000000000..5480bdbb8 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/_helpers.tpl @@ -0,0 +1,193 @@ +{{/* vim: set filetype=mustache: */}} + +{{/* +Create a default fully qualified instance name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +To simulate the way the operator works, use deployment.instance_name rather than the old fullnameOverride. +For backwards compatibility, if fullnameOverride is not kiali but deployment.instance_name is kiali, +use fullnameOverride, otherwise use deployment.instance_name. +*/}} +{{- define "kiali-server.fullname" -}} +{{- if (and (eq .Values.deployment.instance_name "kiali") (ne .Values.fullnameOverride "kiali")) }} + {{- .Values.fullnameOverride | trunc 63 }} +{{- else }} + {{- .Values.deployment.instance_name | trunc 63 }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "kiali-server.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Identifies the log_level with the old verbose_mode and the new log_level considered. +*/}} +{{- define "kiali-server.logLevel" -}} +{{- if .Values.deployment.verbose_mode -}} +{{- .Values.deployment.verbose_mode -}} +{{- else -}} +{{- .Values.deployment.logger.log_level -}} +{{- end -}} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "kiali-server.labels" -}} +helm.sh/chart: {{ include "kiali-server.chart" . }} +app: kiali +{{ include "kiali-server.selectorLabels" . }} +version: {{ .Values.deployment.version_label | default .Chart.AppVersion | quote }} +app.kubernetes.io/version: {{ .Values.deployment.version_label | default .Chart.AppVersion | quote }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +app.kubernetes.io/part-of: "kiali" +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "kiali-server.selectorLabels" -}} +{{- $releaseName := .Release.Name -}} +{{- $fullName := include "kiali-server.fullname" . -}} +{{- $deployment := (lookup "apps/v1" "Deployment" .Release.Namespace $fullName) -}} +app.kubernetes.io/name: kiali +{{- if (and .Release.IsUpgrade $deployment)}} +app.kubernetes.io/instance: {{ (get (($deployment).metadata.labels) "app.kubernetes.io/instance") | default $fullName }} +{{- else }} +app.kubernetes.io/instance: {{ $fullName }} +{{- end }} +{{- end }} + +{{/* +Used to determine if a custom dashboard (defined in .Template.Name) should be deployed. +*/}} +{{- define "kiali-server.isDashboardEnabled" -}} +{{- if .Values.external_services.custom_dashboards.enabled }} + {{- $includere := "" }} + {{- range $_, $s := .Values.deployment.custom_dashboards.includes }} + {{- if $s }} + {{- if $includere }} + {{- $includere = printf "%s|^%s$" $includere ($s | replace "*" ".*" | replace "?" ".") }} + {{- else }} + {{- $includere = printf "^%s$" ($s | replace "*" ".*" | replace "?" ".") }} + {{- end }} + {{- end }} + {{- end }} + {{- $excludere := "" }} + {{- range $_, $s := .Values.deployment.custom_dashboards.excludes }} + {{- if $s }} + {{- if $excludere }} + {{- $excludere = printf "%s|^%s$" $excludere ($s | replace "*" ".*" | replace "?" ".") }} + {{- else }} + {{- $excludere = printf "^%s$" ($s | replace "*" ".*" | replace "?" ".") }} + {{- end }} + {{- end }} + {{- end }} + {{- if (and (mustRegexMatch (default "no-matches" $includere) (base .Template.Name)) (not (mustRegexMatch (default "no-matches" $excludere) (base .Template.Name)))) }} + {{- print "enabled" }} + {{- else }} + {{- print "" }} + {{- end }} +{{- else }} + {{- print "" }} +{{- end }} +{{- end }} + +{{/* +Determine the default login token signing key. +*/}} +{{- define "kiali-server.login_token.signing_key" -}} +{{- if .Values.login_token.signing_key }} + {{- .Values.login_token.signing_key }} +{{- else }} + {{- randAlphaNum 16 }} +{{- end }} +{{- end }} + +{{/* +Determine the default web root. +*/}} +{{- define "kiali-server.server.web_root" -}} +{{- if .Values.server.web_root }} + {{- .Values.server.web_root | trimSuffix "/" }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/" }} + {{- else }} + {{- "/kiali" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the default identity cert file. There is no default if on k8s; only on OpenShift. +*/}} +{{- define "kiali-server.identity.cert_file" -}} +{{- if hasKey .Values.identity "cert_file" }} + {{- .Values.identity.cert_file }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/kiali-cert/tls.crt" }} + {{- else }} + {{- "" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the default identity private key file. There is no default if on k8s; only on OpenShift. +*/}} +{{- define "kiali-server.identity.private_key_file" -}} +{{- if hasKey .Values.identity "private_key_file" }} + {{- .Values.identity.private_key_file }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/kiali-cert/tls.key" }} + {{- else }} + {{- "" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the istio namespace - default is where Kiali is installed. +*/}} +{{- define "kiali-server.istio_namespace" -}} +{{- if .Values.istio_namespace }} + {{- .Values.istio_namespace }} +{{- else }} + {{- .Release.Namespace }} +{{- end }} +{{- end }} + +{{/* +Determine the auth strategy to use - default is "token" on Kubernetes and "openshift" on OpenShift. +*/}} +{{- define "kiali-server.auth.strategy" -}} +{{- if .Values.auth.strategy }} + {{- if (and (eq .Values.auth.strategy "openshift") (not .Values.kiali_route_url)) }} + {{- fail "You did not define what the Kiali Route URL will be (--set kiali_route_url=...). Without this set, the openshift auth strategy will not work. Either set that or use a different auth strategy via the --set auth.strategy=... option." }} + {{- end }} + {{- .Values.auth.strategy }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- if not .Values.kiali_route_url }} + {{- fail "You did not define what the Kiali Route URL will be (--set kiali_route_url=...). Without this set, the openshift auth strategy will not work. Either set that or explicitly indicate another auth strategy you want via the --set auth.strategy=... option." }} + {{- end }} + {{- "openshift" }} + {{- else }} + {{- "token" }} + {{- end }} +{{- end }} +{{- end }} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/cabundle.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/cabundle.yaml new file mode 100644 index 000000000..7462b95a7 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/cabundle.yaml @@ -0,0 +1,13 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "kiali-server.fullname" . }}-cabundle + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + service.beta.openshift.io/inject-cabundle: "true" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/configmap.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/configmap.yaml new file mode 100644 index 000000000..f4bfa09a1 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/configmap.yaml @@ -0,0 +1,25 @@ +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +data: + config.yaml: | + {{- /* Most of .Values is simply the ConfigMap - strip out the keys that are not part of the ConfigMap */}} + {{- $cm := omit .Values "nameOverride" "fullnameOverride" "kiali_route_url" }} + {{- /* The helm chart defines namespace for us, but pass it to the ConfigMap in case the server needs it */}} + {{- $_ := set $cm.deployment "namespace" .Release.Namespace }} + {{- /* Some values of the ConfigMap are generated, but might not be identical, from .Values */}} + {{- $_ := set $cm "istio_namespace" (include "kiali-server.istio_namespace" .) }} + {{- $_ := set $cm.auth "strategy" (include "kiali-server.auth.strategy" .) }} + {{- $_ := set $cm.auth.openshift "client_id_prefix" (include "kiali-server.fullname" .) }} + {{- $_ := set $cm.deployment "instance_name" (include "kiali-server.fullname" .) }} + {{- $_ := set $cm.identity "cert_file" (include "kiali-server.identity.cert_file" .) }} + {{- $_ := set $cm.identity "private_key_file" (include "kiali-server.identity.private_key_file" .) }} + {{- $_ := set $cm.login_token "signing_key" (include "kiali-server.login_token.signing_key" .) }} + {{- $_ := set $cm.server "web_root" (include "kiali-server.server.web_root" .) }} + {{- toYaml $cm | nindent 4 }} +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/envoy.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/envoy.yaml new file mode 100644 index 000000000..e642a3385 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/envoy.yaml @@ -0,0 +1,56 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: envoy + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Envoy Metrics + discoverOn: "envoy_server_uptime" + items: + - chart: + name: "Pods uptime" + spans: 4 + metricName: "envoy_server_uptime" + dataType: "raw" + - chart: + name: "Allocated memory" + unit: "bytes" + spans: 4 + metricName: "envoy_server_memory_allocated" + dataType: "raw" + min: 0 + - chart: + name: "Heap size" + unit: "bytes" + spans: 4 + metricName: "envoy_server_memory_heap_size" + dataType: "raw" + min: 0 + - chart: + name: "Upstream active connections" + spans: 6 + metricName: "envoy_cluster_upstream_cx_active" + dataType: "raw" + - chart: + name: "Upstream total requests" + spans: 6 + metricName: "envoy_cluster_upstream_rq_total" + unit: "rps" + dataType: "rate" + - chart: + name: "Downstream active connections" + spans: 6 + metricName: "envoy_listener_downstream_cx_active" + dataType: "raw" + - chart: + name: "Downstream HTTP requests" + spans: 6 + metricName: "envoy_listener_http_downstream_rq" + unit: "rps" + dataType: "rate" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/go.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/go.yaml new file mode 100644 index 000000000..fdead4c60 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/go.yaml @@ -0,0 +1,67 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: go + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Go Metrics + runtime: Go + discoverOn: "go_info" + items: + - chart: + name: "CPU ratio" + spans: 6 + metricName: "process_cpu_seconds_total" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "RSS Memory" + unit: "bytes" + spans: 6 + metricName: "process_resident_memory_bytes" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Goroutines" + spans: 6 + metricName: "go_goroutines" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Heap allocation rate" + unit: "bytes/s" + spans: 6 + metricName: "go_memstats_alloc_bytes_total" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "GC rate" + spans: 6 + metricName: "go_gc_duration_seconds_count" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Next GC" + unit: "bytes" + spans: 6 + metricName: "go_memstats_next_gc_bytes" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/kiali.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/kiali.yaml new file mode 100644 index 000000000..5ecac7ff8 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/kiali.yaml @@ -0,0 +1,44 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: kiali + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Kiali Internal Metrics + items: + - chart: + name: "API processing duration" + unit: "seconds" + spans: 6 + metricName: "kiali_api_processing_duration_seconds" + dataType: "histogram" + aggregations: + - label: "route" + displayName: "Route" + - chart: + name: "Functions processing duration" + unit: "seconds" + spans: 6 + metricName: "kiali_go_function_processing_duration_seconds" + dataType: "histogram" + aggregations: + - label: "function" + displayName: "Function" + - label: "package" + displayName: "Package" + - chart: + name: "Failures" + spans: 12 + metricName: "kiali_go_function_failures_total" + dataType: "raw" + aggregations: + - label: "function" + displayName: "Function" + - label: "package" + displayName: "Package" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml new file mode 100644 index 000000000..50fce7056 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml @@ -0,0 +1,43 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: micrometer-1.0.6-jvm-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Pool Metrics + discoverOn: "jvm_buffer_total_capacity_bytes" + items: + - chart: + name: "Pool buffer memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" + - chart: + name: "Pool buffer capacity" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_total_capacity_bytes" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" + - chart: + name: "Pool buffer count" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_count" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml new file mode 100644 index 000000000..84810095c --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml @@ -0,0 +1,65 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: micrometer-1.0.6-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Metrics + discoverOn: "jvm_threads_live" + items: + - chart: + name: "Total live threads" + spans: 4 + metricName: "jvm_threads_live" + dataType: "raw" + - chart: + name: "Daemon threads" + spans: 4 + metricName: "jvm_threads_daemon" + dataType: "raw" + - chart: + name: "Loaded classes" + spans: 4 + metricName: "jvm_classes_loaded" + dataType: "raw" + + - chart: + name: "Memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory commited" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_committed_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory max" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_max_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml new file mode 100644 index 000000000..a28c4026c --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml @@ -0,0 +1,68 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: micrometer-1.1-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Metrics + discoverOn: "jvm_threads_live_threads" + items: + - chart: + name: "Memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory commited" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_committed_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory max" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_max_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + + - chart: + name: "Total live threads" + spans: 4 + metricName: "jvm_threads_live_threads" + dataType: "raw" + - chart: + name: "Daemon threads" + spans: 4 + metricName: "jvm_threads_daemon_threads" + dataType: "raw" + - chart: + name: "Threads states" + spans: 4 + metricName: "jvm_threads_states_threads" + dataType: "raw" + aggregations: + - label: "state" + displayName: "State" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/microprofile-1.1.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/microprofile-1.1.yaml new file mode 100644 index 000000000..00e2415da --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/microprofile-1.1.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: microprofile-1.1 + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: MicroProfile Metrics + runtime: MicroProfile + discoverOn: "base:thread_count" + items: + - chart: + name: "Current loaded classes" + spans: 6 + metricName: "base:classloader_current_loaded_class_count" + dataType: "raw" + - chart: + name: "Unloaded classes" + spans: 6 + metricName: "base:classloader_total_unloaded_class_count" + dataType: "raw" + - chart: + name: "Thread count" + spans: 4 + metricName: "base:thread_count" + dataType: "raw" + - chart: + name: "Thread max count" + spans: 4 + metricName: "base:thread_max_count" + dataType: "raw" + - chart: + name: "Thread daemon count" + spans: 4 + metricName: "base:thread_daemon_count" + dataType: "raw" + - chart: + name: "Committed heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_committed_heap_bytes" + dataType: "raw" + - chart: + name: "Max heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_max_heap_bytes" + dataType: "raw" + - chart: + name: "Used heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_used_heap_bytes" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/microprofile-x.y.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/microprofile-x.y.yaml new file mode 100644 index 000000000..585175330 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/microprofile-x.y.yaml @@ -0,0 +1,38 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: microprofile-x.y + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: MicroProfile Metrics + runtime: MicroProfile + discoverOn: "base:gc_complete_scavenger_count" + items: + - chart: + name: "Young GC time" + unit: "seconds" + spans: 3 + metricName: "base:gc_young_generation_scavenger_time_seconds" + dataType: "raw" + - chart: + name: "Young GC count" + spans: 3 + metricName: "base:gc_young_generation_scavenger_count" + dataType: "raw" + - chart: + name: "Total GC time" + unit: "seconds" + spans: 3 + metricName: "base:gc_complete_scavenger_time_seconds" + dataType: "raw" + - chart: + name: "Total GC count" + spans: 3 + metricName: "base:gc_complete_scavenger_count" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/nodejs.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/nodejs.yaml new file mode 100644 index 000000000..7676a7c3c --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/nodejs.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: nodejs + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Node.js + title: Node.js Metrics + discoverOn: "nodejs_active_handles_total" + items: + - chart: + name: "Active handles" + spans: 4 + metricName: "nodejs_active_handles_total" + dataType: "raw" + - chart: + name: "Active requests" + spans: 4 + metricName: "nodejs_active_requests_total" + dataType: "raw" + - chart: + name: "Event loop lag" + unit: "seconds" + spans: 4 + metricName: "nodejs_eventloop_lag_seconds" + dataType: "raw" + - chart: + name: "Total heap size" + unit: "bytes" + spans: 12 + metricName: "nodejs_heap_space_size_total_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" + - chart: + name: "Used heap size" + unit: "bytes" + spans: 6 + metricName: "nodejs_heap_space_size_used_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" + - chart: + name: "Available heap size" + unit: "bytes" + spans: 6 + metricName: "nodejs_heap_space_size_available_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/quarkus.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/quarkus.yaml new file mode 100644 index 000000000..a4f303751 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/quarkus.yaml @@ -0,0 +1,33 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: quarkus + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Quarkus Metrics + runtime: Quarkus + items: + - chart: + name: "Thread count" + spans: 4 + metricName: "vendor:thread_count" + dataType: "raw" + - chart: + name: "Used heap" + unit: "bytes" + spans: 4 + metricName: "vendor:memory_heap_usage_bytes" + dataType: "raw" + - chart: + name: "Used non-heap" + unit: "bytes" + spans: 4 + metricName: "vendor:memory_non_heap_usage_bytes" + dataType: "raw" + - include: "microprofile-x.y" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml new file mode 100644 index 000000000..3aa7d66e3 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: springboot-jvm-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: JVM Pool Metrics + items: + - include: "micrometer-1.0.6-jvm-pool" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-jvm.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-jvm.yaml new file mode 100644 index 000000000..22ea15533 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-jvm.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: springboot-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: JVM Metrics + items: + - include: "micrometer-1.0.6-jvm" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-tomcat.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-tomcat.yaml new file mode 100644 index 000000000..7020ddccb --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/springboot-tomcat.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: springboot-tomcat + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: Tomcat Metrics + items: + - include: "tomcat" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/thorntail.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/thorntail.yaml new file mode 100644 index 000000000..0e94c50ef --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/thorntail.yaml @@ -0,0 +1,22 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: thorntail + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Thorntail + title: Thorntail Metrics + discoverOn: "vendor:loaded_modules" + items: + - include: "microprofile-1.1" + - chart: + name: "Loaded modules" + spans: 6 + metricName: "vendor:loaded_modules" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/tomcat.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/tomcat.yaml new file mode 100644 index 000000000..29467e9f6 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/tomcat.yaml @@ -0,0 +1,67 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: tomcat + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Tomcat + title: Tomcat Metrics + discoverOn: "tomcat_sessions_created_total" + items: + - chart: + name: "Sessions created" + spans: 4 + metricName: "tomcat_sessions_created_total" + dataType: "raw" + - chart: + name: "Active sessions" + spans: 4 + metricName: "tomcat_sessions_active_current" + dataType: "raw" + - chart: + name: "Sessions rejected" + spans: 4 + metricName: "tomcat_sessions_rejected_total" + dataType: "raw" + + - chart: + name: "Bytes sent" + unit: "bitrate" + spans: 6 + metricName: "tomcat_global_sent_bytes_total" + dataType: "rate" + aggregations: + - label: "name" + displayName: "Name" + - chart: + name: "Bytes received" + unit: "bitrate" + spans: 6 + metricName: "tomcat_global_received_bytes_total" + dataType: "rate" + aggregations: + - label: "name" + displayName: "Name" + + - chart: + name: "Global errors" + spans: 6 + metricName: "tomcat_global_error_total" + dataType: "raw" + aggregations: + - label: "name" + displayName: "Name" + - chart: + name: "Servlet errors" + spans: 6 + metricName: "tomcat_servlet_error_total" + dataType: "raw" + aggregations: + - label: "name" + displayName: "Name" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-client.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-client.yaml new file mode 100644 index 000000000..9409adf63 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-client.yaml @@ -0,0 +1,60 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: vertx-client + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Client Metrics + discoverOn: "vertx_http_client_connections" + items: + - chart: + name: "Client response time" + unit: "seconds" + spans: 6 + metricName: "vertx_http_client_responseTime_seconds" + dataType: "histogram" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Client request count rate" + unit: "ops" + spans: 6 + metricName: "vertx_http_client_requestCount_total" + dataType: "rate" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Client active connections" + spans: 6 + metricName: "vertx_http_client_connections" + dataType: "raw" + - chart: + name: "Client active websockets" + spans: 6 + metricName: "vertx_http_client_wsConnections" + dataType: "raw" + - chart: + name: "Client bytes sent" + unit: "bytes" + spans: 6 + metricName: "vertx_http_client_bytesSent" + dataType: "histogram" + - chart: + name: "Client bytes received" + unit: "bytes" + spans: 6 + metricName: "vertx_http_client_bytesReceived" + dataType: "histogram" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-eventbus.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-eventbus.yaml new file mode 100644 index 000000000..384e7b107 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-eventbus.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: vertx-eventbus + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Eventbus Metrics + discoverOn: "vertx_eventbus_handlers" + items: + - chart: + name: "Event bus handlers" + spans: 6 + metricName: "vertx_eventbus_handlers" + dataType: "raw" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus pending messages" + spans: 6 + metricName: "vertx_eventbus_pending" + dataType: "raw" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus processing time" + unit: "seconds" + spans: 6 + metricName: "vertx_eventbus_processingTime_seconds" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus bytes read" + unit: "bytes" + spans: 6 + metricName: "vertx_eventbus_bytesRead" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus bytes written" + unit: "bytes" + spans: 6 + metricName: "vertx_eventbus_bytesWritten" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-jvm.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-jvm.yaml new file mode 100644 index 000000000..8439ce6e4 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-jvm.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: vertx-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: JVM Metrics + items: + - include: "micrometer-1.1-jvm" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-pool.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-pool.yaml new file mode 100644 index 000000000..8334d47a8 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-pool.yaml @@ -0,0 +1,68 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: vertx-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Pools Metrics + discoverOn: "vertx_pool_ratio" + items: + - chart: + name: "Usage duration" + unit: "seconds" + spans: 6 + metricName: "vertx_pool_usage_seconds" + dataType: "histogram" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Usage ratio" + spans: 6 + metricName: "vertx_pool_ratio" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Queue size" + spans: 6 + metricName: "vertx_pool_queue_size" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Time in queue" + unit: "seconds" + spans: 6 + metricName: "vertx_pool_queue_delay_seconds" + dataType: "histogram" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Resources used" + spans: 6 + metricName: "vertx_pool_inUse" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-server.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-server.yaml new file mode 100644 index 000000000..b88b270a8 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/dashboards/vertx-server.yaml @@ -0,0 +1,62 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: monitoring.kiali.io/v1alpha1 +kind: MonitoringDashboard +metadata: + name: vertx-server + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Server Metrics + discoverOn: "vertx_http_server_connections" + items: + - chart: + name: "Server response time" + unit: "seconds" + spans: 6 + metricName: "vertx_http_server_responseTime_seconds" + dataType: "histogram" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Server request count rate" + unit: "ops" + spans: 6 + metricName: "vertx_http_server_requestCount_total" + dataType: "rate" + aggregations: + - label: "code" + displayName: "Error code" + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Server active connections" + spans: 6 + metricName: "vertx_http_server_connections" + dataType: "raw" + - chart: + name: "Server active websockets" + spans: 6 + metricName: "vertx_http_server_wsConnections" + dataType: "raw" + - chart: + name: "Server bytes sent" + unit: "bytes" + spans: 6 + metricName: "vertx_http_server_bytesSent" + dataType: "histogram" + - chart: + name: "Server bytes received" + unit: "bytes" + spans: 6 + metricName: "vertx_http_server_bytesReceived" + dataType: "histogram" +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/deployment.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/deployment.yaml new file mode 100644 index 000000000..b5737ccc6 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/deployment.yaml @@ -0,0 +1,179 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + replicas: {{ .Values.deployment.replicas }} + selector: + matchLabels: + {{- include "kiali-server.selectorLabels" . | nindent 6 }} + strategy: + rollingUpdate: + maxSurge: 1 + maxUnavailable: 1 + type: RollingUpdate + template: + metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 8 }} + {{- if .Values.deployment.pod_labels }} + {{- toYaml .Values.deployment.pod_labels | nindent 8 }} + {{- end }} + annotations: + {{- if .Values.server.metrics_enabled }} + prometheus.io/scrape: "true" + prometheus.io/port: {{ .Values.server.metrics_port | quote }} + {{- else }} + prometheus.io/scrape: "false" + prometheus.io/port: "" + {{- end }} + kiali.io/runtimes: go,kiali + {{- if .Values.deployment.pod_annotations }} + {{- toYaml .Values.deployment.pod_annotations | nindent 8 }} + {{- end }} + spec: + serviceAccountName: {{ include "kiali-server.fullname" . }} + {{- if .Values.deployment.priority_class_name }} + priorityClassName: {{ .Values.deployment.priority_class_name | quote }} + {{- end }} + {{- if .Values.deployment.image_pull_secrets }} + imagePullSecrets: + {{- range .Values.deployment.image_pull_secrets }} + - name: {{ . }} + {{- end }} + {{- end }} + containers: + - image: "{{ template "system_default_registry" . }}{{ .Values.deployment.repository }}:{{ .Values.deployment.tag }}" + imagePullPolicy: {{ .Values.deployment.image_pull_policy | default "Always" }} + name: {{ include "kiali-server.fullname" . }} + command: + - "/opt/kiali/kiali" + - "-config" + - "/kiali-configuration/config.yaml" + securityContext: + allowPrivilegeEscalation: false + privileged: false + readOnlyRootFilesystem: true + runAsNonRoot: true + ports: + - name: api-port + containerPort: {{ .Values.server.port | default 20001 }} + {{- if .Values.server.metrics_enabled }} + - name: http-metrics + containerPort: {{ .Values.server.metrics_port | default 9090 }} + {{- end }} + readinessProbe: + httpGet: + path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz + port: api-port + {{- if (include "kiali-server.identity.cert_file" .) }} + scheme: HTTPS + {{- else }} + scheme: HTTP + {{- end }} + initialDelaySeconds: 5 + periodSeconds: 30 + livenessProbe: + httpGet: + path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz + port: api-port + {{- if (include "kiali-server.identity.cert_file" .) }} + scheme: HTTPS + {{- else }} + scheme: HTTP + {{- end }} + initialDelaySeconds: 5 + periodSeconds: 30 + env: + - name: ACTIVE_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: LOG_LEVEL + value: "{{ include "kiali-server.logLevel" . }}" + - name: LOG_FORMAT + value: "{{ .Values.deployment.logger.log_format }}" + - name: LOG_TIME_FIELD_FORMAT + value: "{{ .Values.deployment.logger.time_field_format }}" + - name: LOG_SAMPLER_RATE + value: "{{ .Values.deployment.logger.sampler_rate }}" + volumeMounts: + {{- if .Values.web_root_override }} + - name: kiali-console + subPath: env.js + mountPath: /opt/kiali/console/env.js + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-configuration + mountPath: "/kiali-configuration" + - name: {{ include "kiali-server.fullname" . }}-cert + mountPath: "/kiali-cert" + - name: {{ include "kiali-server.fullname" . }}-secret + mountPath: "/kiali-secret" + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + - name: {{ include "kiali-server.fullname" . }}-cabundle + mountPath: "/kiali-cabundle" + {{- end }} + {{- if .Values.deployment.resources }} + resources: + {{- toYaml .Values.deployment.resources | nindent 10 }} + {{- end }} + volumes: + {{- if .Values.web_root_override }} + - name: kiali-console + configMap: + name: kiali-console + items: + - key: env.js + path: env.js + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-configuration + configMap: + name: {{ include "kiali-server.fullname" . }} + - name: {{ include "kiali-server.fullname" . }}-cert + secret: + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + secretName: {{ include "kiali-server.fullname" . }}-cert-secret + {{- else }} + secretName: istio.{{ include "kiali-server.fullname" . }}-service-account + {{- end }} + {{- if not (include "kiali-server.identity.cert_file" .) }} + optional: true + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-secret + secret: + secretName: {{ .Values.deployment.secret_name }} + optional: true + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + - name: {{ include "kiali-server.fullname" . }}-cabundle + configMap: + name: {{ include "kiali-server.fullname" . }}-cabundle + {{- end }} + {{- if or (.Values.deployment.affinity.node) (or (.Values.deployment.affinity.pod) (.Values.deployment.affinity.pod_anti)) }} + affinity: + {{- if .Values.deployment.affinity.node }} + nodeAffinity: + {{- toYaml .Values.deployment.affinity.node | nindent 10 }} + {{- end }} + {{- if .Values.deployment.affinity.pod }} + podAffinity: + {{- toYaml .Values.deployment.affinity.pod | nindent 10 }} + {{- end }} + {{- if .Values.deployment.affinity.pod_anti }} + podAntiAffinity: + {{- toYaml .Values.deployment.affinity.pod_anti | nindent 10 }} + {{- end }} + {{- end }} + {{- if .Values.deployment.tolerations }} + tolerations: + {{- toYaml .Values.deployment.tolerations | nindent 8 }} + {{- end }} + {{- if .Values.deployment.node_selector }} + nodeSelector: + {{- toYaml .Values.deployment.node_selector | nindent 8 }} + {{- end }} +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/hpa.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/hpa.yaml new file mode 100644 index 000000000..934c4c1e9 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/hpa.yaml @@ -0,0 +1,17 @@ +{{- if .Values.deployment.hpa.spec }} +--- +apiVersion: {{ .Values.deployment.hpa.api_version }} +kind: HorizontalPodAutoscaler +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ include "kiali-server.fullname" . }} + {{- toYaml .Values.deployment.hpa.spec | nindent 2 }} +... +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/ingress.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/ingress.yaml new file mode 100644 index 000000000..1268101d6 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/ingress.yaml @@ -0,0 +1,43 @@ +{{- if not (.Capabilities.APIVersions.Has "route.openshift.io/v1") }} +{{- if .Values.deployment.ingress_enabled }} +--- +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + {{- if hasKey .Values.deployment.override_ingress_yaml.metadata "annotations" }} + {{- toYaml .Values.deployment.override_ingress_yaml.metadata.annotations | nindent 4 }} + {{- else }} + # For ingress-nginx versions older than 0.20.0 use secure-backends. + # (see: https://github.com/kubernetes/ingress-nginx/issues/3416#issuecomment-438247948) + # For ingress-nginx versions 0.20.0 and later use backend-protocol. + {{- if (include "kiali-server.identity.cert_file" .) }} + nginx.ingress.kubernetes.io/secure-backends: "true" + nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" + {{- else }} + nginx.ingress.kubernetes.io/secure-backends: "false" + nginx.ingress.kubernetes.io/backend-protocol: "HTTP" + {{- end }} + {{- end }} +spec: + {{- if hasKey .Values.deployment.override_ingress_yaml "spec" }} + {{- toYaml .Values.deployment.override_ingress_yaml.spec | nindent 2 }} + {{- else }} + rules: + - http: + paths: + - path: {{ include "kiali-server.server.web_root" . }} + backend: + serviceName: {{ include "kiali-server.fullname" . }} + servicePort: {{ .Values.server.port }} + {{- if not (empty .Values.server.web_fqdn) }} + host: {{ .Values.server.web_fqdn }} + {{- end }} + {{- end }} +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/oauth.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/oauth.yaml new file mode 100644 index 000000000..a178bb85e --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/oauth.yaml @@ -0,0 +1,17 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +{{- if .Values.kiali_route_url }} +--- +apiVersion: oauth.openshift.io/v1 +kind: OAuthClient +metadata: + name: {{ include "kiali-server.fullname" . }}-{{ .Release.Namespace }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +redirectURIs: +- {{ .Values.kiali_route_url }} +grantMethod: auto +allowAnyScope: true +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/psp.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/psp.yaml new file mode 100644 index 000000000..f891892cc --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/psp.yaml @@ -0,0 +1,67 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "kiali-server.fullname" . }}-psp +subjects: + - kind: ServiceAccount + name: kiali +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +rules: +- apiGroups: + - policy + resourceNames: + - {{ include "kiali-server.fullname" . }}-psp + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - configMap + - emptyDir + - projected + - secret + - downwardAPI + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role-controlplane.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role-controlplane.yaml new file mode 100644 index 000000000..a22c76756 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role-controlplane.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "kiali-server.fullname" . }}-controlplane + namespace: {{ include "kiali-server.istio_namespace" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - secrets + verbs: + - list +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role-viewer.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role-viewer.yaml new file mode 100644 index 000000000..c1a766750 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role-viewer.yaml @@ -0,0 +1,96 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "kiali-server.fullname" . }}-viewer + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - configmaps + - endpoints + - pods/log + - pods/proxy + verbs: + - get + - list + - watch +- apiGroups: [""] + resources: + - namespaces + - pods + - replicationcontrollers + - services + verbs: + - get + - list + - watch +- apiGroups: [""] + resources: + - pods/portforward + verbs: + - create + - post +- apiGroups: ["extensions", "apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: + - get + - list + - watch +- apiGroups: + - networking.istio.io + - security.istio.io + resources: ["*"] + verbs: + - get + - list + - watch +- apiGroups: ["apps.openshift.io"] + resources: + - deploymentconfigs + verbs: + - get + - list + - watch +- apiGroups: ["project.openshift.io"] + resources: + - projects + verbs: + - get +- apiGroups: ["route.openshift.io"] + resources: + - routes + verbs: + - get +- apiGroups: ["monitoring.kiali.io"] + resources: + - monitoringdashboards + verbs: + - get + - list +- apiGroups: ["iter8.tools"] + resources: + - experiments + verbs: + - get + - list + - watch +- apiGroups: ["authentication.k8s.io"] + resources: + - tokenreviews + verbs: + - create +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role.yaml new file mode 100644 index 000000000..b764570c8 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/role.yaml @@ -0,0 +1,106 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - configmaps + - endpoints + - pods/log + - pods/proxy + verbs: + - get + - list + - watch +- apiGroups: [""] + resources: + - namespaces + - pods + - replicationcontrollers + - services + verbs: + - get + - list + - watch + - patch +- apiGroups: [""] + resources: + - pods/portforward + verbs: + - create + - post +- apiGroups: ["extensions", "apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch + - patch +- apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: + - get + - list + - watch + - patch +- apiGroups: + - networking.istio.io + - security.istio.io + resources: ["*"] + verbs: + - get + - list + - watch + - create + - delete + - patch +- apiGroups: ["apps.openshift.io"] + resources: + - deploymentconfigs + verbs: + - get + - list + - watch + - patch +- apiGroups: ["project.openshift.io"] + resources: + - projects + verbs: + - get +- apiGroups: ["route.openshift.io"] + resources: + - routes + verbs: + - get +- apiGroups: ["monitoring.kiali.io"] + resources: + - monitoringdashboards + verbs: + - get + - list +- apiGroups: ["iter8.tools"] + resources: + - experiments + verbs: + - get + - list + - watch + - create + - delete + - patch +- apiGroups: ["authentication.k8s.io"] + resources: + - tokenreviews + verbs: + - create +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/rolebinding-controlplane.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/rolebinding-controlplane.yaml new file mode 100644 index 000000000..5a0015836 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/rolebinding-controlplane.yaml @@ -0,0 +1,17 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }}-controlplane + namespace: {{ include "kiali-server.istio_namespace" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "kiali-server.fullname" . }}-controlplane +subjects: +- kind: ServiceAccount + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/rolebinding.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/rolebinding.yaml new file mode 100644 index 000000000..1eaabd65f --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/rolebinding.yaml @@ -0,0 +1,20 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + {{- if .Values.deployment.view_only_mode }} + name: {{ include "kiali-server.fullname" . }}-viewer + {{- else }} + name: {{ include "kiali-server.fullname" . }} + {{- end }} +subjects: +- kind: ServiceAccount + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/route.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/route.yaml new file mode 100644 index 000000000..27940dc96 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/route.yaml @@ -0,0 +1,30 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +{{- if .Values.deployment.ingress_enabled }} +# As of OpenShift 4.5, need to use --disable-openapi-validation when installing via Helm +--- +apiVersion: route.openshift.io/v1 +kind: Route +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + {{- if hasKey .Values.deployment.override_ingress_yaml.metadata "annotations" }}} + annotations: + {{- toYaml .Values.deployment.override_ingress_yaml.metadata.annotations | nindent 4 }} + {{- end }} +spec: + {{- if hasKey .Values.deployment.override_ingress_yaml "spec" }} + {{- toYaml .Values.deployment.override_ingress_yaml.spec | nindent 2 }} + {{- else }} + tls: + termination: reencrypt + insecureEdgeTerminationPolicy: Redirect + to: + kind: Service + targetPort: {{ .Values.server.port }} + name: {{ include "kiali-server.fullname" . }} + {{- end }} +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/service.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/service.yaml new file mode 100644 index 000000000..e7618d68f --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/service.yaml @@ -0,0 +1,45 @@ +--- +apiVersion: v1 +kind: Service +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + service.beta.openshift.io/serving-cert-secret-name: {{ include "kiali-server.fullname" . }}-cert-secret + {{- end }} + {{- if and (not (empty .Values.server.web_fqdn)) (not (empty .Values.server.web_schema)) }} + {{- if empty .Values.server.web_port }} + kiali.io/external-url: {{ .Values.server.web_schema }}://{{ .Values.server.web_fqdn }}{{ default "" .Values.server.web_root }} + {{- else }} + kiali.io/external-url: {{ .Values.server.web_schema }}://{{ .Values.server.web_fqdn }}:{{ .Values.server.web_port }}{{(default "" .Values.server.web_root) }} + {{- end }} + {{- end }} + {{- if .Values.deployment.service_annotations }} + {{- toYaml .Values.deployment.service_annotations | nindent 4 }} + {{- end }} +spec: + {{- if .Values.deployment.service_type }} + type: {{ .Values.deployment.service_type }} + {{- end }} + ports: + {{- if (include "kiali-server.identity.cert_file" .) }} + - name: tcp + {{- else }} + - name: http + {{- end }} + protocol: TCP + port: {{ .Values.server.port }} + {{- if .Values.server.metrics_enabled }} + - name: http-metrics + protocol: TCP + port: {{ .Values.server.metrics_port }} + {{- end }} + selector: + {{- include "kiali-server.selectorLabels" . | nindent 4 }} + {{- if .Values.deployment.additional_service_yaml }} + {{- toYaml .Values.deployment.additional_service_yaml | nindent 2 }} + {{- end }} +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/serviceaccount.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/serviceaccount.yaml new file mode 100644 index 000000000..9151b6f6a --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/serviceaccount.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +... diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/validate-install-crd.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/validate-install-crd.yaml new file mode 100644 index 000000000..b42eeb266 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/validate-install-crd.yaml @@ -0,0 +1,14 @@ +#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} +# {{- $found := dict -}} +# {{- set $found "monitoring.kiali.io/v1alpha1/MonitoringDashboard" false -}} +# {{- range .Capabilities.APIVersions -}} +# {{- if hasKey $found (toString .) -}} +# {{- set $found (toString .) true -}} +# {{- end -}} +# {{- end -}} +# {{- range $_, $exists := $found -}} +# {{- if (eq $exists false) -}} +# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} +# {{- end -}} +# {{- end -}} +#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/web-root-configmap.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/web-root-configmap.yaml new file mode 100644 index 000000000..970d4e4f5 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/templates/web-root-configmap.yaml @@ -0,0 +1,12 @@ +{{- if .Values.web_root_override }} +apiVersion: v1 +kind: ConfigMap +metadata: + name: kiali-console + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +data: + env.js: | + window.WEB_ROOT='/k8s/clusters/{{ .Values.global.cattle.clusterId }}/api/v1/namespaces/{{ .Release.Namespace }}/services/http:kiali:20001/proxy/kiali'; +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/values.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/values.yaml new file mode 100644 index 000000000..8db88b0d9 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/kiali/values.yaml @@ -0,0 +1,98 @@ +# 'fullnameOverride' is deprecated. Use 'deployment.instance_name' instead. +# This is only supported for backward compatibility and will be removed in a future version. +# If 'fullnameOverride' is not "kiali" and 'deployment.instance_name' is "kiali", +# then 'deployment.instance_name' will take the value of 'fullnameOverride' value. +# Otherwise, 'fullnameOverride' is ignored and 'deployment.instance_name' is used. +fullnameOverride: "kiali" + +# This is required for "openshift" auth strategy. +# You have to know ahead of time what your Route URL will be because +# right now the helm chart can't figure this out at runtime (it would +# need to wait for the Kiali Route to be deployed and for OpenShift +# to start it up). If someone knows how to update this helm chart to +# do this, a PR would be welcome. +kiali_route_url: "" + +# rancher specific override that allows proxy access to kiali url +web_root_override: true + +# +# Settings that mimic the Kiali CR which are placed in the ConfigMap. +# Note that only those values used by the Helm Chart will be here. +# + +istio_namespace: "" # default is where Kiali is installed + +auth: + openid: {} + openshift: {} + strategy: "" + +deployment: + # This only limits what Kiali will attempt to see, but Kiali Service Account has permissions to see everything. + # For more control over what the Kial Service Account can see, use the Kiali Operator + accessible_namespaces: + - "**" + additional_service_yaml: {} + affinity: + node: {} + pod: {} + pod_anti: {} + custom_dashboards: + excludes: [''] + includes: ['*'] + hpa: + api_version: "autoscaling/v2beta2" + spec: {} + repository: rancher/mirrored-kiali-kiali + image_pull_policy: "Always" + image_pull_secrets: [] + tag: v1.35.0 + ingress_enabled: true + instance_name: "kiali" + logger: + log_format: "text" + log_level: "info" + time_field_format: "2006-01-02T15:04:05Z07:00" + sampler_rate: "1" + node_selector: {} + override_ingress_yaml: + metadata: {} + pod_annotations: {} + pod_labels: {} + priority_class_name: "" + replicas: 1 + resources: {} + secret_name: "kiali" + service_annotations: {} + service_type: "" + tolerations: [] + version_label: v1.35.0 + view_only_mode: false + +external_services: + custom_dashboards: + enabled: true + +identity: {} + #cert_file: + #private_key_file: + +login_token: + signing_key: "" + +server: + port: 20001 + metrics_enabled: true + metrics_port: 9090 + web_root: "" + +# Common settings used among istio subcharts. +global: + # Specify rancher clusterId of external tracing config + # https://github.com/istio/istio.io/issues/4146#issuecomment-493543032 + cattle: + systemDefaultRegistry: "" + clusterId: + rbac: + pspEnabled: false diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/.helmignore b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/.helmignore new file mode 100644 index 000000000..0e8a0eb36 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/Chart.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/Chart.yaml new file mode 100644 index 000000000..6e368616d --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/Chart.yaml @@ -0,0 +1,12 @@ +annotations: + catalog.cattle.io/hidden: "true" + catalog.cattle.io/os: linux + catalog.rancher.io/certified: rancher + catalog.rancher.io/namespace: istio-system + catalog.rancher.io/release-name: rancher-tracing +apiVersion: v1 +appVersion: 1.20.0 +description: A quick start Jaeger Tracing installation using the all-in-one demo. + This is not production qualified. Refer to https://www.jaegertracing.io/ for details. +name: tracing +version: 1.20.1 diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/README.md b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/README.md new file mode 100644 index 000000000..25534c628 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/README.md @@ -0,0 +1,5 @@ +# Jaeger + +A Rancher chart based on the Jaeger all-in-one quick installation option. This chart will allow you to trace and monitor distributed microservices. + +> **Note:** The basic all-in-one Jaeger installation which is not qualified for production. Use the [Jaeger Tracing](https://www.jaegertracing.io) documentation to determine which installation you will need for your production needs. diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/_affinity.tpl b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/_affinity.tpl new file mode 100644 index 000000000..bf6a9aee5 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/_affinity.tpl @@ -0,0 +1,92 @@ +{{/* affinity - https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ */}} +{{- define "nodeAffinity" }} + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + {{- include "nodeAffinityRequiredDuringScheduling" . }} + preferredDuringSchedulingIgnoredDuringExecution: + {{- include "nodeAffinityPreferredDuringScheduling" . }} +{{- end }} + +{{- define "nodeAffinityRequiredDuringScheduling" }} + nodeSelectorTerms: + - matchExpressions: + - key: beta.kubernetes.io/arch + operator: In + values: + {{- range $key, $val := .Values.global.arch }} + {{- if gt ($val | int) 0 }} + - {{ $key | quote }} + {{- end }} + {{- end }} + {{- $nodeSelector := default .Values.global.defaultNodeSelector .Values.nodeSelector -}} + {{- range $key, $val := $nodeSelector }} + - key: {{ $key }} + operator: In + values: + - {{ $val | quote }} + {{- end }} +{{- end }} + +{{- define "nodeAffinityPreferredDuringScheduling" }} + {{- range $key, $val := .Values.global.arch }} + {{- if gt ($val | int) 0 }} + - weight: {{ $val | int }} + preference: + matchExpressions: + - key: beta.kubernetes.io/arch + operator: In + values: + - {{ $key | quote }} + {{- end }} + {{- end }} +{{- end }} + +{{- define "podAntiAffinity" }} +{{- if or .Values.podAntiAffinityLabelSelector .Values.podAntiAffinityTermLabelSelector}} + podAntiAffinity: + {{- if .Values.podAntiAffinityLabelSelector }} + requiredDuringSchedulingIgnoredDuringExecution: + {{- include "podAntiAffinityRequiredDuringScheduling" . }} + {{- end }} + {{- if or .Values.podAntiAffinityTermLabelSelector}} + preferredDuringSchedulingIgnoredDuringExecution: + {{- include "podAntiAffinityPreferredDuringScheduling" . }} + {{- end }} +{{- end }} +{{- end }} + +{{- define "podAntiAffinityRequiredDuringScheduling" }} + {{- range $index, $item := .Values.podAntiAffinityLabelSelector }} + - labelSelector: + matchExpressions: + - key: {{ $item.key }} + operator: {{ $item.operator }} + {{- if $item.values }} + values: + {{- $vals := split "," $item.values }} + {{- range $i, $v := $vals }} + - {{ $v | quote }} + {{- end }} + {{- end }} + topologyKey: {{ $item.topologyKey }} + {{- end }} +{{- end }} + +{{- define "podAntiAffinityPreferredDuringScheduling" }} + {{- range $index, $item := .Values.podAntiAffinityTermLabelSelector }} + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: {{ $item.key }} + operator: {{ $item.operator }} + {{- if $item.values }} + values: + {{- $vals := split "," $item.values }} + {{- range $i, $v := $vals }} + - {{ $v | quote }} + {{- end }} + {{- end }} + topologyKey: {{ $item.topologyKey }} + weight: 100 + {{- end }} +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/_helpers.tpl b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/_helpers.tpl new file mode 100644 index 000000000..56cfa7335 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/_helpers.tpl @@ -0,0 +1,32 @@ +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} + +{{/* +Expand the name of the chart. +*/}} +{{- define "tracing.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "tracing.fullname" -}} +{{- if .Values.fullnameOverride -}} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- $name := default .Chart.Name .Values.nameOverride -}} +{{- if contains $name .Release.Name -}} +{{- .Release.Name | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} +{{- end -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/deployment.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/deployment.yaml new file mode 100644 index 000000000..25bb67fd3 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/deployment.yaml @@ -0,0 +1,86 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + selector: + matchLabels: + app: {{ .Values.provider }} + template: + metadata: + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} + annotations: + sidecar.istio.io/inject: "false" + prometheus.io/scrape: "true" + prometheus.io/port: "14269" +{{- if .Values.jaeger.podAnnotations }} +{{ toYaml .Values.jaeger.podAnnotations | indent 8 }} +{{- end }} + spec: + containers: + - name: jaeger + image: "{{ template "system_default_registry" . }}{{ .Values.jaeger.repository }}:{{ .Values.jaeger.tag }}" + imagePullPolicy: {{ .Values.global.imagePullPolicy }} + env: + {{- if eq .Values.jaeger.spanStorageType "badger" }} + - name: BADGER_EPHEMERAL + value: "false" + - name: SPAN_STORAGE_TYPE + value: "badger" + - name: BADGER_DIRECTORY_VALUE + value: "/badger/data" + - name: BADGER_DIRECTORY_KEY + value: "/badger/key" + {{- end }} + - name: COLLECTOR_ZIPKIN_HTTP_PORT + value: "9411" + - name: MEMORY_MAX_TRACES + value: "{{ .Values.jaeger.memory.max_traces }}" + - name: QUERY_BASE_PATH + value: {{ if .Values.contextPath }} {{ .Values.contextPath }} {{ else }} /{{ .Values.provider }} {{ end }} + livenessProbe: + httpGet: + path: / + port: 14269 + readinessProbe: + httpGet: + path: / + port: 14269 +{{- if eq .Values.jaeger.spanStorageType "badger" }} + volumeMounts: + - name: data + mountPath: /badger +{{- end }} + resources: +{{- if .Values.jaeger.resources }} +{{ toYaml .Values.jaeger.resources | indent 12 }} +{{- else }} +{{ toYaml .Values.global.defaultResources | indent 12 }} +{{- end }} + affinity: + {{- include "nodeAffinity" . | indent 6 }} + {{- include "podAntiAffinity" . | indent 6 }} + {{- if .Values.global.rbac.pspEnabled }} + securityContext: + runAsNonRoot: true + runAsUser: 1000 + serviceAccountName: {{ include "tracing.fullname" . }} + {{- end }} +{{- if eq .Values.jaeger.spanStorageType "badger" }} + volumes: + - name: data +{{- if .Values.jaeger.persistentVolumeClaim.enabled }} + persistentVolumeClaim: + claimName: istio-jaeger-pvc +{{- else }} + emptyDir: {} +{{- end }} +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/psp.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/psp.yaml new file mode 100644 index 000000000..44b230492 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/psp.yaml @@ -0,0 +1,86 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "tracing.fullname" . }} +subjects: + - kind: ServiceAccount + name: {{ include "tracing.fullname" . }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +rules: +- apiGroups: + - policy + resourceNames: + - {{ include "tracing.fullname" . }} + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - emptyDir + - secret + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/pvc.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/pvc.yaml new file mode 100644 index 000000000..9b4c55e4f --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/pvc.yaml @@ -0,0 +1,16 @@ +{{- if .Values.jaeger.persistentVolumeClaim.enabled }} +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: istio-jaeger-pvc + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} +spec: + storageClassName: {{ .Values.jaeger.storageClassName }} + accessModes: + - {{ .Values.jaeger.accessMode }} + resources: + requests: + storage: {{.Values.jaeger.persistentVolumeClaim.storage }} +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/service.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/service.yaml new file mode 100644 index 000000000..4210a9b5f --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/templates/service.yaml @@ -0,0 +1,63 @@ +apiVersion: v1 +kind: Service +metadata: + name: tracing + namespace: {{ .Release.Namespace }} + annotations: + {{- range $key, $val := .Values.service.annotations }} + {{ $key }}: {{ $val | quote }} + {{- end }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + type: {{ .Values.service.type }} + ports: + - name: {{ .Values.service.name }} + port: {{ .Values.service.externalPort }} + protocol: TCP + targetPort: 16686 + selector: + app: {{ .Values.provider }} +--- +# Jaeger implements the Zipkin API. To support swapping out the tracing backend, we use a Service named Zipkin. +apiVersion: v1 +kind: Service +metadata: + name: zipkin + namespace: {{ .Release.Namespace }} + labels: + name: zipkin + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + ports: + - name: {{ .Values.service.name }} + port: {{ .Values.zipkin.queryPort }} + targetPort: {{ .Values.zipkin.queryPort }} + selector: + app: {{ .Values.provider }} +--- +apiVersion: v1 +kind: Service +metadata: + name: jaeger-collector + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + type: ClusterIP + ports: + - name: jaeger-collector-http + port: 14268 + targetPort: 14268 + protocol: TCP + - name: jaeger-collector-grpc + port: 14250 + targetPort: 14250 + protocol: TCP + selector: + app: {{ .Values.provider }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/values.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/values.yaml new file mode 100644 index 000000000..18ff81c3c --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/charts/tracing/values.yaml @@ -0,0 +1,44 @@ +provider: jaeger +contextPath: "" +nodeSelector: {} +podAntiAffinityLabelSelector: [] +podAntiAffinityTermLabelSelector: [] +nameOverride: "" +fullnameOverride: "" + +global: + cattle: + systemDefaultRegistry: "" + defaultResources: {} + imagePullPolicy: IfNotPresent + imagePullSecrets: [] + arch: + amd64: 2 + s390x: 2 + ppc64le: 2 + defaultNodeSelector: {} + rbac: + pspEnabled: false + +jaeger: + repository: rancher/mirrored-jaegertracing-all-in-one + tag: 1.20.0 + # spanStorageType value can be "memory" and "badger" for all-in-one image + spanStorageType: badger + resources: + requests: + cpu: 10m + persistentVolumeClaim: + enabled: false + storage: 5Gi + storageClassName: "" + accessMode: ReadWriteMany + memory: + max_traces: 50000 +zipkin: + queryPort: 9411 +service: + annotations: {} + name: http-query + type: ClusterIP + externalPort: 16686 diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/configs/istio-base.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/configs/istio-base.yaml new file mode 100644 index 000000000..c5fa6f5f0 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/configs/istio-base.yaml @@ -0,0 +1,82 @@ +apiVersion: install.istio.io/v1alpha1 +kind: IstioOperator +spec: + components: + base: + enabled: {{ .Values.base.enabled }} + cni: + enabled: {{ .Values.cni.enabled }} + egressGateways: + - enabled: {{ .Values.egressGateways.enabled }} + name: istio-egressgateway + ingressGateways: + - enabled: {{ .Values.ingressGateways.enabled }} + name: istio-ingressgateway + k8s: + service: + ports: + - name: status-port + port: 15021 + targetPort: 15021 + - name: http2 + port: 80 + targetPort: 8080 + nodePort: 31380 + - name: https + port: 443 + targetPort: 8443 + nodePort: 31390 + - name: tcp + port: 31400 + targetPort: 31400 + nodePort: 31400 + - name: tls + port: 15443 + targetPort: 15443 + istiodRemote: + enabled: {{ .Values.istiodRemote.enabled }} + pilot: + enabled: {{ .Values.pilot.enabled }} + hub: {{ .Values.systemDefaultRegistry | default "docker.io" }} + profile: default + tag: {{ .Values.tag }} + revision: {{ .Values.revision }} + meshConfig: + defaultConfig: + proxyMetadata: + {{- if .Values.dns.enabled }} + ISTIO_META_DNS_CAPTURE: "true" + {{- end }} + values: + gateways: + istio-egressgateway: + name: istio-egressgateway + type: {{ .Values.egressGateways.type }} + istio-ingressgateway: + name: istio-ingressgateway + type: {{ .Values.ingressGateways.type }} + global: + istioNamespace: {{ template "istio.namespace" . }} + proxy: + image: {{ template "system_default_registry" . }}{{ .Values.global.proxy.repository }}:{{ .Values.global.proxy.tag }} + proxy_init: + image: {{ template "system_default_registry" . }}{{ .Values.global.proxy_init.repository }}:{{ .Values.global.proxy_init.tag }} + {{- if .Values.global.defaultPodDisruptionBudget.enabled }} + defaultPodDisruptionBudget: + enabled: {{ .Values.global.defaultPodDisruptionBudget.enabled }} + {{- end }} + {{- if .Values.pilot.enabled }} + pilot: + image: {{ template "system_default_registry" . }}{{ .Values.pilot.repository }}:{{ .Values.pilot.tag }} + {{- end }} + telemetry: + enabled: {{ .Values.telemetry.enabled }} + v2: + enabled: {{ .Values.telemetry.v2.enabled }} + {{- if .Values.cni.enabled }} + cni: + image: {{ template "system_default_registry" . }}{{ .Values.cni.repository }}:{{ .Values.cni.tag }} + excludeNamespaces: + {{- toYaml .Values.cni.excludeNamespaces | nindent 8 }} + logLevel: {{ .Values.cni.logLevel }} + {{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/requirements.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/requirements.yaml new file mode 100644 index 000000000..943a08326 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/requirements.yaml @@ -0,0 +1,7 @@ +dependencies: +- condition: kiali.enabled + name: kiali + repository: file://./charts/kiali +- condition: tracing.enabled + name: tracing + repository: file://./charts/tracing diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/samples/overlay-example.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/samples/overlay-example.yaml new file mode 100644 index 000000000..5cf3cf3b0 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/samples/overlay-example.yaml @@ -0,0 +1,37 @@ +apiVersion: install.istio.io/v1alpha1 +kind: IstioOperator +spec: + components: + ingressGateways: + - enabled: true + name: ilb-gateway + namespace: user-ingressgateway-ns + k8s: + resources: + requests: + cpu: 200m + service: + ports: + - name: tcp-citadel-grpc-tls + port: 8060 + targetPort: 8060 + - name: tcp-dns + port: 5353 + serviceAnnotations: + cloud.google.com/load-balancer-type: internal + - enabled: true + name: other-gateway + namespace: cattle-istio-system + k8s: + resources: + requests: + cpu: 200m + service: + ports: + - name: tcp-citadel-grpc-tls + port: 8060 + targetPort: 8060 + - name: tcp-dns + port: 5353 + serviceAnnotations: + cloud.google.com/load-balancer-type: internal diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/_helpers.tpl b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/_helpers.tpl new file mode 100644 index 000000000..3f7af953a --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/_helpers.tpl @@ -0,0 +1,12 @@ +{{/* Ensure namespace is set the same everywhere */}} +{{- define "istio.namespace" -}} + {{- .Release.Namespace | default "istio-system" -}} +{{- end -}} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/admin-role.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/admin-role.yaml new file mode 100644 index 000000000..ad1313c4f --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/admin-role.yaml @@ -0,0 +1,43 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-admin: "true" + name: istio-admin + namespace: {{ template "istio.namespace" . }} +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: + - '*' + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: + - '*' diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/base-config-map.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/base-config-map.yaml new file mode 100644 index 000000000..5323917bc --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/base-config-map.yaml @@ -0,0 +1,7 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: istio-installer-base + namespace: {{ template "istio.namespace" . }} +data: +{{ tpl (.Files.Glob "configs/*").AsConfig . | indent 2 }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/clusterrole.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/clusterrole.yaml new file mode 100644 index 000000000..8eeb78758 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/clusterrole.yaml @@ -0,0 +1,126 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: istio-installer +rules: +# istio groups +- apiGroups: + - authentication.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - config.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - install.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - networking.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - rbac.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - security.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - telemetry.istio.io + resources: + - '*' + verbs: + - '*' +# k8s groups +- apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - validatingwebhookconfigurations + verbs: + - '*' +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions.apiextensions.k8s.io + - customresourcedefinitions + verbs: + - '*' +- apiGroups: + - apps + - extensions + resources: + - daemonsets + - deployments + - deployments/finalizers + - ingresses + - replicasets + - statefulsets + verbs: + - '*' +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - '*' +- apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + verbs: + - get + - create +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - '*' +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - roles + - rolebindings + verbs: + - '*' +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - namespaces + - pods + - pods/exec + - persistentvolumeclaims + - secrets + - services + - serviceaccounts + verbs: + - '*' +- apiGroups: + - policy + resourceNames: + - istio-installer + resources: + - podsecuritypolicies + verbs: + - use diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/clusterrolebinding.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/clusterrolebinding.yaml new file mode 100644 index 000000000..9d74a0434 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/clusterrolebinding.yaml @@ -0,0 +1,12 @@ +kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: istio-installer +subjects: +- kind: ServiceAccount + name: istio-installer + namespace: {{ template "istio.namespace" . }} +roleRef: + kind: ClusterRole + name: istio-installer + apiGroup: rbac.authorization.k8s.io diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/edit-role.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/edit-role.yaml new file mode 100644 index 000000000..d1059d58d --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/edit-role.yaml @@ -0,0 +1,43 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-edit: "true" + namespace: {{ template "istio.namespace" . }} + name: istio-edit +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: + - '*' + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: + - '*' diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-cni-psp.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-cni-psp.yaml new file mode 100644 index 000000000..5b94c8503 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-cni-psp.yaml @@ -0,0 +1,51 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +spec: + allowPrivilegeEscalation: true + fsGroup: + rule: RunAsAny + hostNetwork: true + runAsUser: + rule: RunAsAny + seLinux: + rule: RunAsAny + supplementalGroups: + rule: RunAsAny + volumes: + - secret + - configMap + - emptyDir + - hostPath +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: psp-istio-cni +subjects: + - kind: ServiceAccount + name: istio-cni +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +rules: +- apiGroups: + - policy + resourceNames: + - psp-istio-cni + resources: + - podsecuritypolicies + verbs: + - use +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-install-job.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-install-job.yaml new file mode 100644 index 000000000..625da0832 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-install-job.yaml @@ -0,0 +1,58 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: istioctl-installer + namespace: {{ template "istio.namespace" . }} + annotations: + "helm.sh/hook": post-install,post-upgrade + "helm.sh/hook-weight": "-5" + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +spec: + backoffLimit: 1 + template: + spec: + {{- if .Values.installer.releaseMirror.enabled }} + hostAliases: + - ip: "127.0.0.1" + hostnames: + - "github.com" + {{- end }} + containers: + - name: istioctl-installer + image: {{ template "system_default_registry" . }}{{ .Values.installer.repository }}:{{ .Values.installer.tag }} + env: + - name: RELEASE_NAME + value: {{ .Release.Name }} + - name: ISTIO_NAMESPACE + value: {{ template "istio.namespace" . }} + - name: FORCE_INSTALL + value: {{ .Values.forceInstall | default "false" | quote }} + - name: RELEASE_MIRROR_ENABLED + value: {{ .Values.installer.releaseMirror.enabled | quote }} + - name: SECONDS_SLEEP + value: {{ .Values.installer.debug.secondsSleep | quote}} + command: ["/bin/sh","-c"] + args: ["/usr/local/app/scripts/run.sh"] + volumeMounts: + - name: config-volume + mountPath: /app/istio-base.yaml + subPath: istio-base.yaml + {{- if .Values.overlayFile }} + - name: overlay-volume + mountPath: /app/overlay-config.yaml + subPath: overlay-config.yaml + {{- end }} + volumes: + - name: config-volume + configMap: + name: istio-installer-base + {{- if .Values.overlayFile }} + - name: overlay-volume + configMap: + name: istio-installer-overlay + {{- end }} + serviceAccountName: istio-installer + securityContext: + runAsUser: 101 + runAsGroup: 101 + restartPolicy: Never diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-install-psp.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-install-psp.yaml new file mode 100644 index 000000000..f0b5ee565 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-install-psp.yaml @@ -0,0 +1,30 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: istio-installer + namespace: {{ template "istio.namespace" . }} +spec: + privileged: false + hostNetwork: false + hostIPC: false + hostPID: false + runAsUser: + rule: 'MustRunAsNonRoot' + seLinux: + rule: 'RunAsAny' + supplementalGroups: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + fsGroup: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + readOnlyRootFilesystem: false + volumes: + - 'configMap' + - 'secret' +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-psp.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-psp.yaml new file mode 100644 index 000000000..b3758b74f --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-psp.yaml @@ -0,0 +1,81 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: istio-psp +subjects: + - kind: ServiceAccount + name: istio-egressgateway-service-account + - kind: ServiceAccount + name: istio-ingressgateway-service-account + - kind: ServiceAccount + name: istio-mixer-service-account + - kind: ServiceAccount + name: istio-operator-authproxy + - kind: ServiceAccount + name: istiod-service-account + - kind: ServiceAccount + name: istio-sidecar-injector-service-account + - kind: ServiceAccount + name: istiocoredns-service-account + - kind: ServiceAccount + name: default +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +rules: +- apiGroups: + - policy + resourceNames: + - istio-psp + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - configMap + - emptyDir + - projected + - secret + - downwardAPI + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-uninstall-job.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-uninstall-job.yaml new file mode 100644 index 000000000..a7f156325 --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/istio-uninstall-job.yaml @@ -0,0 +1,45 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: istioctl-uninstaller + namespace: {{ template "istio.namespace" . }} + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-weight": "-5" + "helm.sh/hook-delete-policy": hook-succeeded +spec: + template: + spec: + containers: + - name: istioctl-uninstaller + image: {{ template "system_default_registry" . }}{{ .Values.installer.repository }}:{{ .Values.installer.tag }} + env: + - name: RELEASE_NAME + value: {{ .Release.Name }} + - name: ISTIO_NAMESPACE + value: {{ template "istio.namespace" . }} + command: ["/bin/sh","-c"] + args: ["/usr/local/app/scripts/uninstall_istio_system.sh"] + volumeMounts: + - name: config-volume + mountPath: /app/istio-base.yaml + subPath: istio-base.yaml + {{- if .Values.overlayFile }} + - name: overlay-volume + mountPath: /app/overlay-config.yaml + subPath: overlay-config.yaml + {{ end }} + volumes: + - name: config-volume + configMap: + name: istio-installer-base + {{- if .Values.overlayFile }} + - name: overlay-volume + configMap: + name: istio-installer-overlay + {{ end }} + serviceAccountName: istio-installer + securityContext: + runAsUser: 101 + runAsGroup: 101 + restartPolicy: OnFailure diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/overlay-config-map.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/overlay-config-map.yaml new file mode 100644 index 000000000..287d26b2c --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/overlay-config-map.yaml @@ -0,0 +1,9 @@ +{{- if .Values.overlayFile }} +apiVersion: v1 +kind: ConfigMap +metadata: + name: istio-installer-overlay + namespace: {{ template "istio.namespace" . }} +data: + overlay-config.yaml: {{ toYaml .Values.overlayFile | indent 2 }} +{{- end }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/service-monitors.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/service-monitors.yaml new file mode 100644 index 000000000..c3d60c4fc --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/service-monitors.yaml @@ -0,0 +1,51 @@ +{{- if .Values.kiali.enabled }} +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: envoy-stats-monitor + namespace: {{ template "istio.namespace" . }} + labels: + monitoring: istio-proxies +spec: + selector: + matchExpressions: + - {key: istio-prometheus-ignore, operator: DoesNotExist} + namespaceSelector: + any: true + jobLabel: envoy-stats + endpoints: + - path: /stats/prometheus + targetPort: 15090 + interval: 15s + relabelings: + - sourceLabels: [__meta_kubernetes_pod_container_port_name] + action: keep + regex: '.*-envoy-prom' + - action: labeldrop + regex: "__meta_kubernetes_pod_label_(.+)" + - sourceLabels: [__meta_kubernetes_namespace] + action: replace + targetLabel: namespace + - sourceLabels: [__meta_kubernetes_pod_name] + action: replace + targetLabel: pod_name +--- +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: istio-component-monitor + namespace: {{ template "istio.namespace" . }} + labels: + monitoring: istio-components +spec: + jobLabel: istio + targetLabels: [app] + selector: + matchExpressions: + - {key: istio, operator: In, values: [pilot]} + namespaceSelector: + any: true + endpoints: + - port: http-monitoring + interval: 15s +{{- end -}} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/serviceaccount.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/serviceaccount.yaml new file mode 100644 index 000000000..82b6cbb7e --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/serviceaccount.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: istio-installer + namespace: {{ template "istio.namespace" . }} diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/view-role.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/view-role.yaml new file mode 100644 index 000000000..5947d3eba --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/templates/view-role.yaml @@ -0,0 +1,41 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-view: "true" + namespace: {{ template "istio.namespace" . }} + name: istio-view +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: ["get", "watch", "list"] + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: ["get", "watch", "list"] diff --git a/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/values.yaml b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/values.yaml new file mode 100644 index 000000000..43e7da8db --- /dev/null +++ b/charts/rancher-istio/rancher-istio/100.0.2+up1.10.4/values.yaml @@ -0,0 +1,88 @@ +overlayFile: "" +tag: 1.10.4 +##Setting forceInstall: true will remove the check for istio version < 1.6.x and will not analyze your install cluster prior to install +forceInstall: false + +installer: + repository: rancher/istio-installer + tag: 1.10.4-rancher5 + ##releaseMirror are configurations for istio upgrades. + ##Setting releaseMirror.enabled: true will cause istio to use bundled in images from rancher/istio-installer to perfom an upgrade - this is ideal + ##for airgap setups. Setting releaseMirror.enabled to false means istio will call externally to github to fetch the required assets. + releaseMirror: + enabled: false + ##Set the secondsSleep to run a sleep command `sleep s` to allow time to exec into istio-installer pod for debugging + debug: + secondsSleep: 0 + +##Native support for dns added in 1.8 +dns: + enabled: false + +base: + enabled: true + +cni: + enabled: false + repository: rancher/mirrored-istio-install-cni + tag: 1.10.4 + logLevel: info + excludeNamespaces: + - istio-system + - kube-system + +egressGateways: + enabled: false + type: NodePort + +ingressGateways: + enabled: true + type: NodePort + +istiodRemote: + enabled: false + +pilot: + enabled: true + repository: rancher/mirrored-istio-pilot + tag: 1.10.4 + +telemetry: + enabled: true + v2: + enabled: true + +global: + cattle: + systemDefaultRegistry: "" + proxy: + repository: rancher/mirrored-istio-proxyv2 + tag: 1.10.4 + proxy_init: + repository: rancher/mirrored-istio-proxyv2 + tag: 1.10.4 + defaultPodDisruptionBudget: + enabled: true + rbac: + pspEnabled: true + +# Kiali subchart from rancher-kiali-server +kiali: + enabled: true + auth: + strategy: anonymous + deployment: + ingress_enabled: false + external_services: + prometheus: + custom_metrics_url: "http://rancher-monitoring-prometheus.cattle-monitoring-system.svc:9090" + url: "http://rancher-monitoring-prometheus.cattle-monitoring-system.svc:9090" + tracing: + in_cluster_url: "http://tracing.istio-system.svc:16686/jaeger" + grafana: + in_cluster_url: "http://rancher-monitoring-grafana.cattle-monitoring-system.svc:80" + url: "http://rancher-monitoring-grafana.cattle-monitoring-system.svc:80" + +tracing: + enabled: false + contextPath: "/jaeger" diff --git a/index.yaml b/index.yaml index 9fe97f4aa..e8e027707 100644 --- a/index.yaml +++ b/index.yaml @@ -12,13 +12,13 @@ entries: catalog.cattle.io/release-name: fleet apiVersion: v2 appVersion: 0.3.7 - created: "2021-10-08T15:04:30.316709-07:00" + created: "2021-10-18T13:41:39.718827-07:00" dependencies: - condition: gitops.enabled name: gitjob repository: file://./charts/gitjob description: Fleet Manager - GitOps at Scale - digest: ce396dafcedad05a55e8b4b408f738b0c7cd0b9473d00b89d32b269c4f775210 + digest: fdef3fd15c2dd26e8c7b6ebad8012f13bff6ba9f3441d7f64fbc4eddbe82e58b icon: https://charts.rancher.io/assets/logos/fleet.svg name: fleet urls: @@ -35,7 +35,7 @@ entries: catalog.cattle.io/release-name: fleet apiVersion: v2 appVersion: 0.3.6 - created: "2021-09-30T14:07:17.903422323-04:00" + created: "2021-10-18T13:41:39.689862-07:00" dependencies: - condition: gitops.enabled name: gitjob @@ -58,7 +58,7 @@ entries: catalog.cattle.io/release-name: fleet apiVersion: v2 appVersion: 0.3.5 - created: "2021-09-30T14:07:17.902795436-04:00" + created: "2021-10-18T13:41:39.664252-07:00" description: Fleet Manager - GitOps at Scale digest: b2d52dd2c2815be26d1eabedd0ca230e7709073bfc7a9b15018f1aa4d29d814e icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -77,7 +77,7 @@ entries: catalog.cattle.io/release-name: fleet apiVersion: v2 appVersion: 0.3.4 - created: "2021-09-30T14:07:17.90208994-04:00" + created: "2021-10-18T13:41:39.640838-07:00" description: Fleet Manager - GitOps at Scale digest: 3dc07290740992da2a36c0d0cf2ef3592bcb1e2c5482a37a49336794795944f0 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -96,7 +96,7 @@ entries: catalog.cattle.io/release-name: fleet apiVersion: v2 appVersion: 0.3.3 - created: "2021-09-30T14:07:17.901514668-04:00" + created: "2021-10-18T13:41:39.616704-07:00" description: Fleet Manager - GitOps at Scale digest: f33de3f1deb1cdfe0ff8af7cde8919bbe3e594b30e423735caddfcf3117d3224 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -115,7 +115,7 @@ entries: catalog.cattle.io/release-name: fleet apiVersion: v2 appVersion: 0.3.2 - created: "2021-09-30T14:07:17.901007893-04:00" + created: "2021-10-18T13:41:39.586381-07:00" description: Fleet Manager - GitOps at Scale digest: 7604d7eb2a6ef5b119b0ee102ea528e63db77caff3441bd47c116964ac530887 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -134,7 +134,7 @@ entries: catalog.cattle.io/release-name: fleet apiVersion: v2 appVersion: 0.3.1 - created: "2021-09-30T14:07:17.900521865-04:00" + created: "2021-10-18T13:41:39.556033-07:00" description: Fleet Manager - GitOps at Scale digest: 2b05e7779f54c0bd853594b798662be27043d401ee4df1ef2393d25ae4ebbdb8 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -153,7 +153,7 @@ entries: catalog.cattle.io/release-name: fleet apiVersion: v2 appVersion: 0.3.0 - created: "2021-09-30T14:07:17.900029689-04:00" + created: "2021-10-18T13:41:39.522338-07:00" description: Fleet Manager - GitOps at Scale digest: 80ebb76232c4d9c17199901ccce179c86d78202872266fdec29c417c78ee1a9d icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -170,7 +170,7 @@ entries: catalog.cattle.io/release-name: fleet-agent apiVersion: v2 appVersion: 0.3.7 - created: "2021-10-08T15:04:30.321638-07:00" + created: "2021-10-18T13:41:39.905719-07:00" description: Fleet Manager Agent - GitOps at Scale digest: 7987910c8dd050d84e7a5bc20bc323652e85be1026507f507f626389712e4077 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -186,7 +186,7 @@ entries: catalog.cattle.io/release-name: fleet-agent apiVersion: v2 appVersion: 0.3.6 - created: "2021-09-30T14:07:17.906259606-04:00" + created: "2021-10-18T13:41:39.88033-07:00" description: Fleet Manager Agent - GitOps at Scale digest: 547e6663ef2b3bebff4f09e4bae7cc702838ba0513740cd8d4db8693cd587f94 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -202,7 +202,7 @@ entries: catalog.cattle.io/release-name: fleet-agent apiVersion: v2 appVersion: 0.3.5 - created: "2021-09-30T14:07:17.905835883-04:00" + created: "2021-10-18T13:41:39.858601-07:00" description: Fleet Manager Agent - GitOps at Scale digest: 7d41b4ee8f0103d2200cd9347aa08a94df5598a5be047b3e283787b86724a5e6 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -218,7 +218,7 @@ entries: catalog.cattle.io/release-name: fleet-agent apiVersion: v2 appVersion: 0.3.4 - created: "2021-09-30T14:07:17.905369774-04:00" + created: "2021-10-18T13:41:39.837195-07:00" description: Fleet Manager Agent - GitOps at Scale digest: 59fb278112c907eaf12dd963ded1aa6ae03be09bb795d2129fd35b6888fbd31c icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -234,7 +234,7 @@ entries: catalog.cattle.io/release-name: fleet-agent apiVersion: v2 appVersion: 0.3.3 - created: "2021-09-30T14:07:17.904977299-04:00" + created: "2021-10-18T13:41:39.816585-07:00" description: Fleet Manager Agent - GitOps at Scale digest: f92cbe28d99ae754a590e3de5a3226109704c7a69376e1b824b5eb01e3997df3 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -250,7 +250,7 @@ entries: catalog.cattle.io/release-name: fleet-agent apiVersion: v2 appVersion: 0.3.2 - created: "2021-09-30T14:07:17.904609271-04:00" + created: "2021-10-18T13:41:39.792216-07:00" description: Fleet Manager Agent - GitOps at Scale digest: 2be8d753ca9d2ddc9f0c152a81021b146838223796a497841850486bc26f6457 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -266,7 +266,7 @@ entries: catalog.cattle.io/release-name: fleet-agent apiVersion: v2 appVersion: 0.3.1 - created: "2021-09-30T14:07:17.904229751-04:00" + created: "2021-10-18T13:41:39.771743-07:00" description: Fleet Manager Agent - GitOps at Scale digest: 1913e45bcda723490e3c1c1613f99a328b6414c472f9f7c490c087d7697563f1 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -282,7 +282,7 @@ entries: catalog.cattle.io/release-name: fleet-agent apiVersion: v2 appVersion: 0.3.0 - created: "2021-09-30T14:07:17.903859783-04:00" + created: "2021-10-18T13:41:39.745979-07:00" description: Fleet Manager Agent - GitOps at Scale digest: 8b517f7d18f2aa1e34e5ac475684752dc8ff46f050cfd2b2d91fd343cab8cf50 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -299,7 +299,7 @@ entries: catalog.cattle.io/release-name: fleet-crd apiVersion: v2 appVersion: 0.3.7 - created: "2021-10-08T15:04:30.332365-07:00" + created: "2021-10-18T13:41:40.0469-07:00" description: Fleet Manager CustomResourceDefinitions digest: fd052765600dae535ce53e13567dd528c5b143f948afc89a78f3483f051775c5 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -315,7 +315,7 @@ entries: catalog.cattle.io/release-name: fleet-crd apiVersion: v2 appVersion: 0.3.6 - created: "2021-09-30T14:07:17.912849738-04:00" + created: "2021-10-18T13:41:40.02951-07:00" description: Fleet Manager CustomResourceDefinitions digest: 560aac95a80d2fb343ed79590752672f627c3984d4be54e75b94b781f4da45db icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -331,7 +331,7 @@ entries: catalog.cattle.io/release-name: fleet-crd apiVersion: v2 appVersion: 0.3.5 - created: "2021-09-30T14:07:17.911789965-04:00" + created: "2021-10-18T13:41:40.012191-07:00" description: Fleet Manager CustomResourceDefinitions digest: cab5177c5c69ef4d35a3b9efd60ce9d07d6313c30aa76bc0062f26087b44a828 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -347,7 +347,7 @@ entries: catalog.cattle.io/release-name: fleet-crd apiVersion: v2 appVersion: 0.3.4 - created: "2021-09-30T14:07:17.910694631-04:00" + created: "2021-10-18T13:41:39.995546-07:00" description: Fleet Manager CustomResourceDefinitions digest: 36c8f232f6d3f2698d0e43d7a95359555f0e8852cfb2c41d901eb09f807d291f icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -363,7 +363,7 @@ entries: catalog.cattle.io/release-name: fleet-crd apiVersion: v2 appVersion: 0.3.3 - created: "2021-09-30T14:07:17.909976136-04:00" + created: "2021-10-18T13:41:39.979023-07:00" description: Fleet Manager CustomResourceDefinitions digest: 35bbfc8e2276379965d8671b752530b4b3603cacab9106dad64f37839b2f1342 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -379,7 +379,7 @@ entries: catalog.cattle.io/release-name: fleet-crd apiVersion: v2 appVersion: 0.3.2 - created: "2021-09-30T14:07:17.909302816-04:00" + created: "2021-10-18T13:41:39.962108-07:00" description: Fleet Manager CustomResourceDefinitions digest: 025f0b2ee6f8b709c19ed2676faecba9579c9a14d526d9e16573eb8b98d5bc52 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -394,7 +394,7 @@ entries: catalog.cattle.io/release-name: fleet-crd apiVersion: v2 appVersion: 0.3.1 - created: "2021-09-30T14:07:17.908641329-04:00" + created: "2021-10-18T13:41:39.945883-07:00" description: Fleet Manager CustomResourceDefinitions digest: f47abbbcd5b2ca28dcb8303e01a5562da698ec78423c0dc4aa249e6f6b3b7eb4 icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -409,7 +409,7 @@ entries: catalog.cattle.io/release-name: fleet-crd apiVersion: v2 appVersion: 0.3.0 - created: "2021-09-30T14:07:17.907549299-04:00" + created: "2021-10-18T13:41:39.927045-07:00" description: Fleet Manager CustomResourceDefinitions digest: 08e3af78da30602b47b60ebfb8e509703dbedc5b312f6aa3a9e9b0275adca75a icon: https://charts.rancher.io/assets/logos/fleet.svg @@ -431,7 +431,7 @@ entries: catalog.cattle.io/ui-component: longhorn apiVersion: v1 appVersion: v1.2.2 - created: "2021-10-08T15:04:30.365794-07:00" + created: "2021-10-18T13:41:40.510666-07:00" description: Longhorn is a distributed block storage system for Kubernetes. digest: 6a17d0267b137f60af34afb5c768d64d5f7ea06167edf6f838dffeb0ebd9c581 home: https://github.com/longhorn/longhorn @@ -473,7 +473,7 @@ entries: catalog.cattle.io/ui-component: longhorn apiVersion: v1 appVersion: v1.1.2 - created: "2021-09-30T14:07:17.92046819-04:00" + created: "2021-10-18T13:41:40.360882-07:00" description: Longhorn is a distributed block storage system for Kubernetes. digest: 6a2ce555892a327c3ea0b22c0ceed32125b60fc482fef8efd59cf4c94c24322e home: https://github.com/longhorn/longhorn @@ -516,7 +516,7 @@ entries: catalog.cattle.io/ui-component: longhorn apiVersion: v1 appVersion: v1.1.1 - created: "2021-09-30T14:07:17.918680509-04:00" + created: "2021-10-18T13:41:40.307436-07:00" description: Longhorn is a distributed block storage system for Kubernetes. digest: 59485d7ff4e0fa36c29930ce3d1fb1996189d3fff841ce5cb3919b41d04066ff home: https://github.com/longhorn/longhorn @@ -558,7 +558,7 @@ entries: catalog.cattle.io/ui-component: longhorn apiVersion: v1 appVersion: v1.1.0 - created: "2021-09-30T14:07:17.91752133-04:00" + created: "2021-10-18T13:41:40.2578-07:00" description: Longhorn is a distributed block storage system for Kubernetes. digest: 6f552a95ecfdad686750d8446ed4322a8d5d87a4ec394542e8d9fc85386c8e69 home: https://github.com/longhorn/longhorn @@ -600,7 +600,7 @@ entries: catalog.cattle.io/ui-component: longhorn apiVersion: v1 appVersion: v1.1.0 - created: "2021-09-30T14:07:17.915955056-04:00" + created: "2021-10-18T13:41:40.206484-07:00" description: Longhorn is a distributed block storage system for Kubernetes. digest: 6dd88e8250e3776569b46a534269ecefa1804a3d85e5bf244b81987f5e70a8be home: https://github.com/longhorn/longhorn @@ -642,7 +642,7 @@ entries: catalog.cattle.io/ui-component: longhorn apiVersion: v1 appVersion: v1.0.2 - created: "2021-09-30T14:07:17.914893611-04:00" + created: "2021-10-18T13:41:40.153346-07:00" description: Longhorn is a distributed block storage system for Kubernetes. digest: 327b75f1d0a5bdfcbe9eadc9e8a2ff0c5c68f7b40d15f70b4c556cd2f0fc132f home: https://github.com/longhorn/longhorn @@ -682,7 +682,7 @@ entries: catalog.cattle.io/ui-component: longhorn apiVersion: v1 appVersion: v1.0.2 - created: "2021-09-30T14:07:17.914002916-04:00" + created: "2021-10-18T13:41:40.102088-07:00" description: Longhorn is a distributed block storage system for Kubernetes. digest: fe67a68e6ddb15c8746bd630dd12a47885aad49d44305eb84e170d8900e1fc58 home: https://github.com/longhorn/longhorn @@ -718,7 +718,7 @@ entries: catalog.cattle.io/namespace: longhorn-system catalog.cattle.io/release-name: longhorn-crd apiVersion: v1 - created: "2021-10-08T15:04:30.366357-07:00" + created: "2021-10-18T13:41:40.520024-07:00" description: Installs the CRDs for longhorn. digest: f8c89bdf20e883d664affebb6d0d8e8b647c7b93e747e68971ba99f2e8fe897e name: longhorn-crd @@ -746,7 +746,7 @@ entries: catalog.cattle.io/namespace: longhorn-system catalog.cattle.io/release-name: longhorn-crd apiVersion: v1 - created: "2021-09-30T14:07:17.921733951-04:00" + created: "2021-10-18T13:41:40.395375-07:00" description: Installs the CRDs for longhorn. digest: eec1b37ef0f12930cac4b8dc812e0c08af32ec5af8afb37114f3932e333bb5b6 name: longhorn-crd @@ -760,7 +760,7 @@ entries: catalog.cattle.io/namespace: longhorn-system catalog.cattle.io/release-name: longhorn-crd apiVersion: v1 - created: "2021-09-30T14:07:17.921489847-04:00" + created: "2021-10-18T13:41:40.388146-07:00" description: Installs the CRDs for longhorn. digest: 305196027ef02e1f01519b99302321fbb48dd5faca8084751758c5954f83f488 name: longhorn-crd @@ -774,7 +774,7 @@ entries: catalog.cattle.io/namespace: longhorn-system catalog.cattle.io/release-name: longhorn-crd apiVersion: v1 - created: "2021-09-30T14:07:17.921267408-04:00" + created: "2021-10-18T13:41:40.380447-07:00" description: Installs the CRDs for longhorn. digest: 5d5f3a3493810aa0dfd263757819e00a8a483c5410c5ff4ff61f5d5fee3561b9 name: longhorn-crd @@ -788,7 +788,7 @@ entries: catalog.cattle.io/namespace: longhorn-system catalog.cattle.io/release-name: longhorn-crd apiVersion: v1 - created: "2021-09-30T14:07:17.921026762-04:00" + created: "2021-10-18T13:41:40.373335-07:00" description: Installs the CRDs for longhorn. digest: 4da0eeeef78a45c8b0111bb66cfca1734088bcd9bb15b8bfd6712b0ab6320ca1 name: longhorn-crd @@ -802,7 +802,7 @@ entries: catalog.cattle.io/namespace: longhorn-system catalog.cattle.io/release-name: longhorn-crd apiVersion: v1 - created: "2021-09-30T14:07:17.920775953-04:00" + created: "2021-10-18T13:41:40.367501-07:00" description: Installs the CRDs for longhorn. digest: c3fc8df8818d884c9df73999999834cebe41ce6567f60222792c2593ad853d31 name: longhorn-crd @@ -823,7 +823,7 @@ entries: catalog.cattle.io/scope: management apiVersion: v2 appVersion: 1.0.2 - created: "2021-10-08T15:04:30.367724-07:00" + created: "2021-10-18T13:41:40.542799-07:00" description: A Helm chart for provisioning AKS clusters digest: 756963b5366daa89106db55c19e21069361cfd4f166260b8bebae8508464ac5a home: https://github.com/rancher/aks-operator @@ -845,7 +845,7 @@ entries: catalog.cattle.io/scope: management apiVersion: v2 appVersion: 1.0.1 - created: "2021-09-30T14:07:17.922290374-04:00" + created: "2021-10-18T13:41:40.531078-07:00" description: A Helm chart for provisioning AKS clusters digest: f37ff6a67aed0e87ea879d86d4ce318580f693ce2d8d69060425ca99760bb177 home: https://github.com/rancher/aks-operator @@ -864,7 +864,7 @@ entries: catalog.cattle.io/release-name: rancher-aks-operator-crd apiVersion: v2 appVersion: 1.0.2 - created: "2021-10-08T15:04:30.368452-07:00" + created: "2021-10-18T13:41:40.559667-07:00" description: AKS Operator CustomResourceDefinitions digest: 0361a5d82f025056d5b76691fbe158a3f73499b40e3179ef2a75361d9f455f30 name: rancher-aks-operator-crd @@ -879,7 +879,7 @@ entries: catalog.cattle.io/release-name: rancher-aks-operator-crd apiVersion: v2 appVersion: 1.0.1 - created: "2021-09-30T14:07:17.922529625-04:00" + created: "2021-10-18T13:41:40.549754-07:00" description: AKS Operator CustomResourceDefinitions digest: f3286e4909fb5fa22e88dda79712831aa9d2c5df780d31df0e5c7ef3553984ee name: rancher-aks-operator-crd @@ -895,7 +895,7 @@ entries: catalog.cattle.io/type: cluster-tool apiVersion: v2 appVersion: 1.16.0 - created: "2021-09-30T14:07:17.924423497-04:00" + created: "2021-10-18T13:41:40.686604-07:00" dependencies: - condition: prom2teams.enabled name: prom2teams @@ -923,7 +923,7 @@ entries: catalog.cattle.io/release-name: rancher-alerting-drivers apiVersion: v2 appVersion: 1.16.0 - created: "2021-09-30T14:07:17.923469857-04:00" + created: "2021-10-18T13:41:40.621843-07:00" dependencies: - condition: prom2teams.enabled name: prom2teams @@ -957,7 +957,7 @@ entries: catalog.cattle.io/ui-component: rancher-backup apiVersion: v2 appVersion: 2.0.1 - created: "2021-10-08T15:04:30.379118-07:00" + created: "2021-10-18T13:41:40.903625-07:00" description: Provides ability to back up and restore the Rancher application running on any Kubernetes cluster digest: a4bde8a1e5098ef43a6e4754b7ff066f32389fa5ad9e5df4fbe679caac483e63 @@ -983,7 +983,7 @@ entries: catalog.cattle.io/ui-component: rancher-backup apiVersion: v2 appVersion: 2.0.0 - created: "2021-09-30T14:07:17.927313549-04:00" + created: "2021-10-18T13:41:40.868139-07:00" description: Provides ability to back up and restore the Rancher application running on any Kubernetes cluster digest: 2961dc9acc26aaab8109f022e03f08f451fca03ebce92c206176c20455dae7e7 @@ -1008,7 +1008,7 @@ entries: catalog.cattle.io/ui-component: rancher-backup apiVersion: v2 appVersion: 1.0.4 - created: "2021-09-30T14:07:17.92684908-04:00" + created: "2021-10-18T13:41:40.834104-07:00" description: Provides ability to back up and restore the Rancher application running on any Kubernetes cluster digest: 2aea8c5bbcd18f68975e129383661c307edafed2f6d399da31fd6b2142065ff1 @@ -1033,7 +1033,7 @@ entries: catalog.cattle.io/ui-component: rancher-backup apiVersion: v1 appVersion: v1.0.3 - created: "2021-09-30T14:07:17.92634988-04:00" + created: "2021-10-18T13:41:40.804644-07:00" description: Provides ability to back up and restore the Rancher application running on any Kubernetes cluster digest: eba830b48b495863c3477f391fbfc9043877c5809d565f6a316964dc31f88066 @@ -1058,7 +1058,7 @@ entries: catalog.cattle.io/ui-component: rancher-backup apiVersion: v1 appVersion: v1.0.3 - created: "2021-09-30T14:07:17.925878796-04:00" + created: "2021-10-18T13:41:40.775604-07:00" description: Provides ability to back up and restore the Rancher application running on any Kubernetes cluster digest: 92fc70f5c051d9808bf614624bdf1a0164202a1b14a1996cf26720188ce0826e @@ -1083,7 +1083,7 @@ entries: catalog.cattle.io/ui-component: rancher-backup apiVersion: v1 appVersion: v1.0.2 - created: "2021-09-30T14:07:17.925399773-04:00" + created: "2021-10-18T13:41:40.74541-07:00" description: Provides ability to back up and restore the Rancher application running on any Kubernetes cluster digest: cc9946d5f3f06d9d78c0dec481641015d3e71d86e0e1bff246eeba110e37d9f4 @@ -1107,7 +1107,7 @@ entries: catalog.cattle.io/ui-component: rancher-backup apiVersion: v1 appVersion: v1.0.2 - created: "2021-09-30T14:07:17.9249059-04:00" + created: "2021-10-18T13:41:40.717047-07:00" description: Provides ability to back up and restore the Rancher application running on any Kubernetes cluster digest: b155f48daab42a9a36c7a7e1710da31c160756e7e391d92dffafc976d89114f8 @@ -1127,7 +1127,7 @@ entries: catalog.cattle.io/release-name: rancher-backup-crd apiVersion: v2 appVersion: 2.0.1 - created: "2021-10-08T15:04:30.38197-07:00" + created: "2021-10-18T13:41:40.975-07:00" description: Installs the CRDs for rancher-backup. digest: 8eb03a61506b7feb4cd6a8322551868b32422fceea5aba923f2e057cb925810b name: rancher-backup-crd @@ -1142,7 +1142,7 @@ entries: catalog.cattle.io/release-name: rancher-backup-crd apiVersion: v2 appVersion: 2.0.0 - created: "2021-09-30T14:07:17.928858957-04:00" + created: "2021-10-18T13:41:40.964895-07:00" description: Installs the CRDs for rancher-backup. digest: 15a2769a275b4b22d160044f60b10c39e7922f59fb2ff627c67208a045133cbc name: rancher-backup-crd @@ -1157,7 +1157,7 @@ entries: catalog.cattle.io/release-name: rancher-backup-crd apiVersion: v2 appVersion: 1.0.4 - created: "2021-09-30T14:07:17.928595969-04:00" + created: "2021-10-18T13:41:40.955231-07:00" description: Installs the CRDs for rancher-backup. digest: 26f7baa1bf1934cf7cfae2720eac74ea1c338dc56aab35a221c688cea6a7ead0 name: rancher-backup-crd @@ -1172,7 +1172,7 @@ entries: catalog.cattle.io/rancher-version: < 2.6.1-0 catalog.cattle.io/release-name: rancher-backup-crd apiVersion: v1 - created: "2021-09-30T14:07:17.928347621-04:00" + created: "2021-10-18T13:41:40.945123-07:00" description: Installs the CRDs for rancher-backup. digest: 52c7d5853d97a3720060cd89c21b560c05780df46b8ae075377fedebbe2fd229 name: rancher-backup-crd @@ -1187,7 +1187,7 @@ entries: catalog.cattle.io/rancher-version: < 2.6.1-0 catalog.cattle.io/release-name: rancher-backup-crd apiVersion: v1 - created: "2021-09-30T14:07:17.928091087-04:00" + created: "2021-10-18T13:41:40.935933-07:00" description: Installs the CRDs for rancher-backup. digest: d01a45589bc99ef39000e4e1731921be7ef864bd30b255c5230ca89bbbf05fc8 name: rancher-backup-crd @@ -1202,7 +1202,7 @@ entries: catalog.cattle.io/rancher-version: < 2.6.1-0 catalog.cattle.io/release-name: rancher-backup-crd apiVersion: v1 - created: "2021-09-30T14:07:17.927828199-04:00" + created: "2021-10-18T13:41:40.926136-07:00" description: Installs the CRDs for rancher-backup. digest: 1a25dccee9394a65915677330d359e89bf56c9bd6c959191755c943eee51b3df name: rancher-backup-crd @@ -1217,7 +1217,7 @@ entries: catalog.cattle.io/rancher-version: < 2.6.1-0 catalog.cattle.io/release-name: rancher-backup-crd apiVersion: v1 - created: "2021-09-30T14:07:17.927581664-04:00" + created: "2021-10-18T13:41:40.917205-07:00" description: Installs the CRDs for rancher-backup. digest: 68280009fd6465318c19808dc093de64f492decf1313348fac5e4fd408faef9b name: rancher-backup-crd @@ -1239,7 +1239,7 @@ entries: catalog.cattle.io/ui-component: rancher-cis-benchmark apiVersion: v1 appVersion: v1.0.6 - created: "2021-10-08T15:04:30.389899-07:00" + created: "2021-10-18T13:41:41.449277-07:00" description: The cis-operator enables running CIS benchmark security scans on a kubernetes cluster digest: 4168cc0bbd8836fd793f547607a7c3b7dcff91653ad6e167795befe1c44187f9 @@ -1263,7 +1263,7 @@ entries: catalog.cattle.io/ui-component: rancher-cis-benchmark apiVersion: v1 appVersion: v1.0.5 - created: "2021-09-30T14:07:17.932249184-04:00" + created: "2021-10-18T13:41:41.399204-07:00" description: The cis-operator enables running CIS benchmark security scans on a kubernetes cluster digest: 612bfa6acfec3d97d7f8919309f7f0ba24508736f66edd7837ca0f502c321b77 @@ -1286,7 +1286,7 @@ entries: catalog.cattle.io/ui-component: rancher-cis-benchmark apiVersion: v1 appVersion: v1.0.4 - created: "2021-09-30T14:07:17.931819754-04:00" + created: "2021-10-18T13:41:41.3119-07:00" description: The cis-operator enables running CIS benchmark security scans on a kubernetes cluster digest: 2425c71f5f5b5958483b7ed1fdba0925840e0a9cd87965000664663c8d9812dd @@ -1309,7 +1309,7 @@ entries: catalog.cattle.io/ui-component: rancher-cis-benchmark apiVersion: v1 appVersion: v1.0.3 - created: "2021-09-30T14:07:17.931232072-04:00" + created: "2021-10-18T13:41:41.226519-07:00" description: The cis-operator enables running CIS benchmark security scans on a kubernetes cluster digest: f0bd86f0f0bdbf5f309ab8837a34445d25e0a0c32c054b3fbd2e7e74a9089760 @@ -1332,7 +1332,7 @@ entries: catalog.cattle.io/ui-component: rancher-cis-benchmark apiVersion: v1 appVersion: v1.0.3 - created: "2021-09-30T14:07:17.930716551-04:00" + created: "2021-10-18T13:41:41.138037-07:00" description: The cis-operator enables running CIS benchmark security scans on a kubernetes cluster digest: 02c597d8a06b8b36e12bb4881e1de82f0204a2806565cd007a7f6b8d8a872d28 @@ -1355,7 +1355,7 @@ entries: catalog.cattle.io/ui-component: rancher-cis-benchmark apiVersion: v1 appVersion: v1.0.2 - created: "2021-09-30T14:07:17.930190143-04:00" + created: "2021-10-18T13:41:41.042257-07:00" description: The cis-operator enables running CIS benchmark security scans on a kubernetes cluster digest: 91a4efc7f01aa8a1f26e32a3bb8a092fcbc63a7a9c6413a40e7c333dcbb74d10 @@ -1377,7 +1377,7 @@ entries: catalog.cattle.io/ui-component: rancher-cis-benchmark apiVersion: v1 appVersion: v1.0.1 - created: "2021-09-30T14:07:17.929727625-04:00" + created: "2021-10-18T13:41:41.011396-07:00" description: The cis-operator enables running CIS benchmark security scans on a kubernetes cluster digest: a18925b456386610da24f29f7a8f34b76b61f2db5d94cd7b398bb51be7a472df @@ -1395,7 +1395,7 @@ entries: catalog.cattle.io/namespace: cis-operator-system catalog.cattle.io/release-name: rancher-cis-benchmark-crd apiVersion: v1 - created: "2021-10-08T15:04:30.392225-07:00" + created: "2021-10-18T13:41:41.533032-07:00" description: Installs the CRDs for rancher-cis-benchmark. digest: a07236a3f8c025600416189c5cc60a309be12c00b39b9d3b1f58af8c0b4b36ac name: rancher-cis-benchmark-crd @@ -1409,7 +1409,7 @@ entries: catalog.cattle.io/namespace: cis-operator-system catalog.cattle.io/release-name: rancher-cis-benchmark-crd apiVersion: v1 - created: "2021-09-30T14:07:17.933740341-04:00" + created: "2021-10-18T13:41:41.519246-07:00" description: Installs the CRDs for rancher-cis-benchmark. digest: 33df5c14654fae5364b074129cae71fdcdb5eaa47aabae3c195906f3d9a37aa5 name: rancher-cis-benchmark-crd @@ -1423,7 +1423,7 @@ entries: catalog.cattle.io/namespace: cis-operator-system catalog.cattle.io/release-name: rancher-cis-benchmark-crd apiVersion: v1 - created: "2021-09-30T14:07:17.933479759-04:00" + created: "2021-10-18T13:41:41.505042-07:00" description: Installs the CRDs for rancher-cis-benchmark. digest: df1bf2270629356a5ad545053da7f18b1782a5441ed98c66d6030c41a3d421d0 name: rancher-cis-benchmark-crd @@ -1437,7 +1437,7 @@ entries: catalog.cattle.io/namespace: cis-operator-system catalog.cattle.io/release-name: rancher-cis-benchmark-crd apiVersion: v1 - created: "2021-09-30T14:07:17.933245721-04:00" + created: "2021-10-18T13:41:41.492744-07:00" description: Installs the CRDs for rancher-cis-benchmark. digest: cabb44716892582bee08bd13c48caa3863c9f53218f2ffa1f1bc123ae7234d5a name: rancher-cis-benchmark-crd @@ -1451,7 +1451,7 @@ entries: catalog.cattle.io/namespace: cis-operator-system catalog.cattle.io/release-name: rancher-cis-benchmark-crd apiVersion: v1 - created: "2021-09-30T14:07:17.933014133-04:00" + created: "2021-10-18T13:41:41.482247-07:00" description: Installs the CRDs for rancher-cis-benchmark. digest: 20d71a2ae15f77913229f809c4acf5924f988a0cfc09061306d65c45899618ce name: rancher-cis-benchmark-crd @@ -1465,7 +1465,7 @@ entries: catalog.cattle.io/namespace: cis-operator-system catalog.cattle.io/release-name: rancher-cis-benchmark-crd apiVersion: v1 - created: "2021-09-30T14:07:17.932780061-04:00" + created: "2021-10-18T13:41:41.471914-07:00" description: Installs the CRDs for rancher-cis-benchmark. digest: b12e7bc934602f88087b34540446a2cdc8af5cb30ede6d4d3a48dc29ded1daaa name: rancher-cis-benchmark-crd @@ -1479,7 +1479,7 @@ entries: catalog.cattle.io/namespace: cis-operator-system catalog.cattle.io/release-name: rancher-cis-benchmark-crd apiVersion: v1 - created: "2021-09-30T14:07:17.93251495-04:00" + created: "2021-10-18T13:41:41.460621-07:00" description: Installs the CRDs for rancher-cis-benchmark. digest: 2be8b1e2aa24e83d8b20439d0b0343851fbd32495306d38d5d20c62d95b0a8b5 name: rancher-cis-benchmark-crd @@ -1500,7 +1500,7 @@ entries: catalog.cattle.io/scope: management apiVersion: v2 appVersion: 1.1.1 - created: "2021-09-30T14:07:17.934053696-04:00" + created: "2021-10-18T13:41:41.548634-07:00" description: A Helm chart for provisioning EKS clusters digest: 2a2bf847905a4ff67086e78c7e5009a4f1d113e354a23ccde453611f04712d68 home: https://github.com/rancher/eks-operator @@ -1519,7 +1519,7 @@ entries: catalog.cattle.io/release-name: rancher-eks-operator-crd apiVersion: v2 appVersion: 1.1.1 - created: "2021-09-30T14:07:17.934317637-04:00" + created: "2021-10-18T13:41:41.557335-07:00" description: EKS Operator CustomResourceDefinitions digest: c5de8e1b4058f0329e78e495ebac023a8130ed4e11e9028338368831cbb6b67a name: rancher-eks-operator-crd @@ -1536,7 +1536,7 @@ entries: catalog.cattle.io/ui-component: rancher-external-ip-webhook apiVersion: v1 appVersion: v1.0.0 - created: "2021-09-30T14:07:17.937127837-04:00" + created: "2021-10-18T13:41:41.781687-07:00" description: 'Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554 ' digest: 7183b83b6dee2a781cd862b95b6b0b1898bc2616cb68d2ff65e13646965a1a97 home: https://github.com/rancher/externalip-webhook @@ -1564,7 +1564,7 @@ entries: catalog.cattle.io/ui-component: rancher-external-ip-webhook apiVersion: v1 appVersion: v0.1.6 - created: "2021-09-30T14:07:17.936321611-04:00" + created: "2021-10-18T13:41:41.729563-07:00" description: 'Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554 ' digest: fd85e0a713273e9ef44514fd121037c358fed3d03d35bf1e5cd6d7e0f79dc964 home: https://github.com/rancher/externalip-webhook @@ -1592,7 +1592,7 @@ entries: catalog.cattle.io/ui-component: rancher-external-ip-webhook apiVersion: v1 appVersion: v0.1.6 - created: "2021-09-30T14:07:17.93565969-04:00" + created: "2021-10-18T13:41:41.680201-07:00" description: 'Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554 ' digest: 4b35561c85c41372f096c5bba85ba2d50171b47158648d645317f1732eb32d35 home: https://github.com/rancher/externalip-webhook @@ -1620,7 +1620,7 @@ entries: catalog.cattle.io/ui-component: rancher-external-ip-webhook apiVersion: v1 appVersion: v0.1.4 - created: "2021-09-30T14:07:17.934985252-04:00" + created: "2021-10-18T13:41:41.622612-07:00" description: 'Deploy the external-ip-webhook to mitigate k8s CVE-2020-8554 ' digest: e44114c31dcedbe8432b287204b07345617cfdce503bfc6525925319a19107e2 home: https://github.com/rancher/externalip-webhook @@ -1651,7 +1651,7 @@ entries: catalog.cattle.io/ui-component: gatekeeper apiVersion: v2 appVersion: v3.6.0 - created: "2021-10-08T15:04:30.401462-07:00" + created: "2021-10-18T13:41:41.911578-07:00" description: Modifies Open Policy Agent's upstream gatekeeper chart that provides policy-based control for cloud native environments digest: 5e869a471a4e29cc17e91d17f6dd2b78edfb37d4f683f9a3bbc8b65d13a35a80 @@ -1679,7 +1679,7 @@ entries: catalog.cattle.io/ui-component: gatekeeper apiVersion: v2 appVersion: v3.5.1 - created: "2021-09-30T14:07:17.938296133-04:00" + created: "2021-10-18T13:41:41.84478-07:00" description: Modifies Open Policy Agent's upstream gatekeeper chart that provides policy-based control for cloud native environments digest: a2b6149004bd85d1d1d0755f9161265d0a392420d804e04349a773653bbaab86 @@ -1706,7 +1706,7 @@ entries: catalog.cattle.io/ui-component: gatekeeper apiVersion: v1 appVersion: v3.3.0 - created: "2021-09-30T14:07:17.941579611-04:00" + created: "2021-10-18T13:41:42.206598-07:00" description: Modifies Open Policy Agent's upstream gatekeeper chart that provides policy-based control for cloud native environments digest: 9a44d486245ea45243372ac07e56e180ecf31b51c415a6f090ab34ae2b878869 @@ -1733,7 +1733,7 @@ entries: catalog.cattle.io/ui-component: gatekeeper apiVersion: v1 appVersion: v3.3.0 - created: "2021-09-30T14:07:17.940873721-04:00" + created: "2021-10-18T13:41:42.151635-07:00" description: Modifies Open Policy Agent's upstream gatekeeper chart that provides policy-based control for cloud native environments digest: ba24497df58da6ee771f4d5d4a8f25e94eb86d3b8aa48854bfb4b86ff904f736 @@ -1761,7 +1761,7 @@ entries: catalog.cattle.io/ui-component: gatekeeper apiVersion: v1 appVersion: v3.2.1 - created: "2021-09-30T14:07:17.940156789-04:00" + created: "2021-10-18T13:41:42.094439-07:00" description: Modifies Open Policy Agent's upstream gatekeeper chart that provides policy-based control for cloud native environments digest: 703878390aa6c6c70e3c07805312c70e51ef0e657621f870dfab5a69c46d6adc @@ -1788,7 +1788,7 @@ entries: catalog.cattle.io/release-name: rancher-gatekeeper apiVersion: v1 appVersion: v3.1.1 - created: "2021-09-30T14:07:17.939471401-04:00" + created: "2021-10-18T13:41:42.04222-07:00" description: Modifies Open Policy Agent's upstream gatekeeper chart that provides policy-based control for cloud native environments digest: 20f9b2f7d562f0ef13024ad178ebfe4535d1584502d3f90543a4f7d694ab92b1 @@ -1814,7 +1814,7 @@ entries: catalog.cattle.io/release-name: rancher-gatekeeper apiVersion: v1 appVersion: v3.1.1 - created: "2021-09-30T14:07:17.938870419-04:00" + created: "2021-10-18T13:41:41.955616-07:00" description: Modifies Open Policy Agent's upstream gatekeeper chart that provides policy-based control for cloud native environments digest: 074c34d0c2f46236a34e96a7d3c00bdfdad36de1d0e3b6e1a874f69e0b286b49 @@ -1836,7 +1836,7 @@ entries: catalog.cattle.io/namespace: cattle-gatekeeper-system catalog.cattle.io/release-name: rancher-gatekeeper-crd apiVersion: v1 - created: "2021-10-08T15:04:30.409908-07:00" + created: "2021-10-18T13:41:42.272243-07:00" description: Installs the CRDs for rancher-gatekeeper. digest: 2473133618927588bb5cf2f7829aad41e17dc0743b954025c898683853476ce7 name: rancher-gatekeeper-crd @@ -1850,7 +1850,7 @@ entries: catalog.cattle.io/namespace: cattle-gatekeeper-system catalog.cattle.io/release-name: rancher-gatekeeper-crd apiVersion: v1 - created: "2021-09-30T14:07:17.942002343-04:00" + created: "2021-10-18T13:41:42.239116-07:00" description: Installs the CRDs for rancher-gatekeeper. digest: ec199aafd94d27c19e78c858ff990fe057a31a0240c062b99334e97fbdf7fb46 name: rancher-gatekeeper-crd @@ -1864,7 +1864,7 @@ entries: catalog.cattle.io/namespace: cattle-gatekeeper-system catalog.cattle.io/release-name: rancher-gatekeeper-crd apiVersion: v1 - created: "2021-09-30T14:07:17.943577256-04:00" + created: "2021-10-18T13:41:42.365448-07:00" description: Installs the CRDs for rancher-gatekeeper. digest: d82c0a0eae6ef19cd815fa0f78730403fac042c886c4564af1a0935d9be54d08 name: rancher-gatekeeper-crd @@ -1878,7 +1878,7 @@ entries: catalog.cattle.io/namespace: cattle-gatekeeper-system catalog.cattle.io/release-name: rancher-gatekeeper-crd apiVersion: v1 - created: "2021-09-30T14:07:17.943230088-04:00" + created: "2021-10-18T13:41:42.341888-07:00" description: Installs the CRDs for rancher-gatekeeper. digest: 48a03a80fadacabc507fec107dbed749d94fafbef0d26e4eb37e92c974a7c56b name: rancher-gatekeeper-crd @@ -1893,7 +1893,7 @@ entries: catalog.cattle.io/namespace: cattle-gatekeeper-system catalog.cattle.io/release-name: rancher-gatekeeper-crd apiVersion: v1 - created: "2021-09-30T14:07:17.94289054-04:00" + created: "2021-10-18T13:41:42.320053-07:00" description: Installs the CRDs for rancher-gatekeeper. digest: 34f449b69d1b50ff1743ae3b1e81553aec3f0a70c8ac7572c60071a8271b53e2 name: rancher-gatekeeper-crd @@ -1908,7 +1908,7 @@ entries: catalog.cattle.io/namespace: cattle-gatekeeper-system catalog.cattle.io/release-name: rancher-gatekeeper-crd apiVersion: v1 - created: "2021-09-30T14:07:17.942562256-04:00" + created: "2021-10-18T13:41:42.299348-07:00" description: Installs the CRDs for rancher-gatekeeper. digest: e3da4139207bfa07850db780574a028b5e32c66c1ee57b706fb13fdec5311514 name: rancher-gatekeeper-crd @@ -1923,7 +1923,7 @@ entries: catalog.cattle.io/namespace: cattle-gatekeeper-system catalog.cattle.io/release-name: rancher-gatekeeper-crd apiVersion: v1 - created: "2021-09-30T14:07:17.942277746-04:00" + created: "2021-10-18T13:41:42.284396-07:00" description: Installs the CRDs for rancher-gatekeeper. digest: 89d80de1bea71d134b19e6092ae123c08173c172a5201d54b4baa6afedea3855 name: rancher-gatekeeper-crd @@ -1944,7 +1944,7 @@ entries: catalog.cattle.io/scope: management apiVersion: v2 appVersion: 1.1.1 - created: "2021-09-30T14:07:17.943886547-04:00" + created: "2021-10-18T13:41:42.380466-07:00" description: A Helm chart for provisioning GKE clusters digest: 647914b2fe504d4a06d7de71ff432125d25cd8708ac9d856399097aaaaccffe4 home: https://github.com/rancher/gke-operator @@ -1963,7 +1963,7 @@ entries: catalog.cattle.io/release-name: rancher-gke-operator-crd apiVersion: v2 appVersion: 1.1.1 - created: "2021-09-30T14:07:17.94413327-04:00" + created: "2021-10-18T13:41:42.388255-07:00" description: GKE Operator CustomResourceDefinitions digest: 2c7fa7ace2acea04dcf5f35e74a206c30a0592a07313b5e2456f5f753e2ebdb0 name: rancher-gke-operator-crd @@ -1979,7 +1979,7 @@ entries: catalog.rancher.io/release-name: rancher-grafana apiVersion: v2 appVersion: 7.5.8 - created: "2021-09-30T14:07:17.945943054-04:00" + created: "2021-10-18T13:41:42.488097-07:00" description: The leading tool for querying and visualizing time series and metrics. digest: c7e3f13f88da598678e6634a1987271a6fea214d26c266286d40476b2fda7ce8 home: https://grafana.net @@ -2011,7 +2011,7 @@ entries: catalog.rancher.io/release-name: rancher-grafana apiVersion: v2 appVersion: 7.4.5 - created: "2021-09-30T14:07:17.948108667-04:00" + created: "2021-10-18T13:41:42.578071-07:00" description: The leading tool for querying and visualizing time series and metrics. digest: 938a0dc18011b95a3db0c94cb37a8db868a22fb41436242724d81391404426d2 home: https://grafana.net @@ -2051,7 +2051,41 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.10.4 - created: "2021-10-08T15:04:30.435754-07:00" + created: "2021-10-18T13:41:43.52648-07:00" + dependencies: + - condition: kiali.enabled + name: kiali + repository: file://./charts/kiali + - condition: tracing.enabled + name: tracing + repository: file://./charts/tracing + description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/ + for details. + digest: 4aeccef58eb63e95f206a192e534222c3c617f249dbd4877da9c7ac5a39591b3 + icon: https://charts.rancher.io/assets/logos/istio.svg + keywords: + - networking + - infrastructure + name: rancher-istio + urls: + - assets/rancher-istio/rancher-istio-100.0.2+up1.10.4.tgz + version: 100.0.2+up1.10.4 + - annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=100.0.0+up1.35.0 + catalog.cattle.io/certified: rancher + catalog.cattle.io/display-name: Istio + catalog.cattle.io/namespace: istio-system + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1 + catalog.cattle.io/rancher-version: '>= 2.6.0-0' + catalog.cattle.io/release-name: rancher-istio + catalog.cattle.io/requests-cpu: 710m + catalog.cattle.io/requests-memory: 2314Mi + catalog.cattle.io/type: cluster-tool + catalog.cattle.io/ui-component: istio + apiVersion: v1 + appVersion: 1.10.4 + created: "2021-10-18T13:41:43.388291-07:00" dependencies: - condition: kiali.enabled name: kiali @@ -2084,7 +2118,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.10.4 - created: "2021-09-30T14:07:17.956802105-04:00" + created: "2021-10-18T13:41:43.241767-07:00" dependencies: - condition: kiali.enabled name: kiali @@ -2117,7 +2151,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.9.6 - created: "2021-09-30T14:07:17.967040486-04:00" + created: "2021-10-18T13:41:44.260262-07:00" dependencies: - condition: kiali.enabled name: kiali @@ -2150,7 +2184,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.9.5 - created: "2021-09-30T14:07:17.964864918-04:00" + created: "2021-10-18T13:41:44.100376-07:00" dependencies: - condition: kiali.enabled name: kiali @@ -2183,7 +2217,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.9.3 - created: "2021-09-30T14:07:17.963189369-04:00" + created: "2021-10-18T13:41:43.943808-07:00" dependencies: - condition: kiali.enabled name: kiali @@ -2216,7 +2250,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.8.6 - created: "2021-09-30T14:07:17.961483223-04:00" + created: "2021-10-18T13:41:43.818299-07:00" dependencies: - condition: kiali.enabled name: kiali @@ -2249,7 +2283,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.8.5 - created: "2021-09-30T14:07:17.959521153-04:00" + created: "2021-10-18T13:41:43.673994-07:00" dependencies: - condition: kiali.enabled name: kiali @@ -2282,7 +2316,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.8.3 - created: "2021-09-30T14:07:17.954212467-04:00" + created: "2021-10-18T13:41:43.082983-07:00" dependencies: - condition: kiali.enabled name: kiali @@ -2313,7 +2347,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.7.3 - created: "2021-09-30T14:07:17.952501155-04:00" + created: "2021-10-18T13:41:42.931898-07:00" dependencies: - alias: kiali condition: kiali.enabled @@ -2348,7 +2382,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.7.3 - created: "2021-09-30T14:07:17.950825321-04:00" + created: "2021-10-18T13:41:42.791785-07:00" dependencies: - alias: kiali condition: kiali.enabled @@ -2378,7 +2412,7 @@ entries: catalog.cattle.io/ui-component: istio apiVersion: v1 appVersion: 1.7.1 - created: "2021-09-30T14:07:17.949495848-04:00" + created: "2021-10-18T13:41:42.683422-07:00" dependencies: - alias: kiali condition: kiali.enabled @@ -2407,7 +2441,7 @@ entries: catalog.rancher.io/release-name: rancher-kiali-server apiVersion: v2 appVersion: v1.35.0 - created: "2021-09-30T14:07:17.973807561-04:00" + created: "2021-10-18T13:41:44.72835-07:00" description: Kiali is an open source project for service mesh observability, refer to https://www.kiali.io for details. This is installed as sub-chart with customized values in Rancher's Istio. @@ -2442,7 +2476,7 @@ entries: catalog.rancher.io/release-name: rancher-kiali-server apiVersion: v2 appVersion: v1.32.0 - created: "2021-09-30T14:07:17.972450561-04:00" + created: "2021-10-18T13:41:44.651486-07:00" description: Kiali is an open source project for service mesh observability, refer to https://www.kiali.io for details. This is installed as sub-chart with customized values in Rancher's Istio. @@ -2477,7 +2511,7 @@ entries: catalog.rancher.io/release-name: rancher-kiali-server apiVersion: v2 appVersion: v1.29.0 - created: "2021-09-30T14:07:17.971162378-04:00" + created: "2021-10-18T13:41:44.56306-07:00" description: Kiali is an open source project for service mesh observability, refer to https://www.kiali.io for details. This is installed as sub-chart with customized values in Rancher's Istio. @@ -2512,7 +2546,7 @@ entries: catalog.rancher.io/release-name: rancher-kiali-server apiVersion: v2 appVersion: v1.24.0 - created: "2021-09-30T14:07:17.969904815-04:00" + created: "2021-10-18T13:41:44.487502-07:00" description: Kiali is an open source project for service mesh observability, refer to https://www.kiali.io for details. This is installed as sub-chart with customized values in Rancher's Istio. @@ -2547,7 +2581,7 @@ entries: catalog.rancher.io/release-name: rancher-kiali-server apiVersion: v2 appVersion: v1.24.0 - created: "2021-09-30T14:07:17.968748983-04:00" + created: "2021-10-18T13:41:44.408615-07:00" description: Kiali is an open source project for service mesh observability, refer to https://www.kiali.io for details. This is installed as sub-chart with customized values in Rancher's Istio. @@ -2582,7 +2616,7 @@ entries: catalog.rancher.io/release-name: rancher-kiali-server apiVersion: v2 appVersion: v1.23.0 - created: "2021-09-30T14:07:17.967910099-04:00" + created: "2021-10-18T13:41:44.333599-07:00" description: Kiali is an open source project for service mesh observability, refer to https://www.kiali.io for details. This is installed as sub-chart with customized values in Rancher's Istio. @@ -2611,7 +2645,7 @@ entries: - annotations: catalog.cattle.io/hidden: "true" apiVersion: v2 - created: "2021-09-30T14:07:17.975460015-04:00" + created: "2021-10-18T13:41:44.77142-07:00" description: Installs the CRDs for rancher-kiali-server. digest: 04339f84a5ddac166de594dc621534a95360b967cf225933ce686f9c8cb7fb15 name: rancher-kiali-server-crd @@ -2622,7 +2656,7 @@ entries: - annotations: catalog.cattle.io/hidden: "true" apiVersion: v2 - created: "2021-09-30T14:07:17.975166634-04:00" + created: "2021-10-18T13:41:44.76496-07:00" description: Installs the CRDs for rancher-kiali-server. digest: 20b301ef9430f4d4d3dd75474e96f3ba75bd5adf0f88371970d7c77530f74874 name: rancher-kiali-server-crd @@ -2633,7 +2667,7 @@ entries: - annotations: catalog.cattle.io/hidden: "true" apiVersion: v2 - created: "2021-09-30T14:07:17.974874304-04:00" + created: "2021-10-18T13:41:44.757845-07:00" description: Installs the CRDs for rancher-kiali-server. digest: 4ddd8248707294cb91fdd1c2fd9994417bf265b7f649312e82a4f1a86b60e9b6 name: rancher-kiali-server-crd @@ -2644,7 +2678,7 @@ entries: - annotations: catalog.cattle.io/hidden: "true" apiVersion: v2 - created: "2021-09-30T14:07:17.974586586-04:00" + created: "2021-10-18T13:41:44.749772-07:00" description: Installs the CRDs for rancher-kiali-server. digest: c8635521da746674695c7833a5509ee92c615adabd47e511e1dd7c2617a4bf7b name: rancher-kiali-server-crd @@ -2655,7 +2689,7 @@ entries: - annotations: catalog.cattle.io/hidden: "true" apiVersion: v2 - created: "2021-09-30T14:07:17.974330778-04:00" + created: "2021-10-18T13:41:44.742306-07:00" description: Installs the CRDs for rancher-kiali-server. digest: bd55c5af7c26744e91922c6a9463c10e52ba65ddf0cf148107461f2983a71223 name: rancher-kiali-server-crd @@ -2666,7 +2700,7 @@ entries: - annotations: catalog.cattle.io/hidden: "true" apiVersion: v2 - created: "2021-09-30T14:07:17.974069253-04:00" + created: "2021-10-18T13:41:44.734872-07:00" description: Installs the CRDs for rancher-kiali-server. digest: 5d5ebb3498ac0b64cf1a73d743b0f3f45fd40c0a9ee3b26d94ae60176e523574 name: rancher-kiali-server-crd @@ -2683,7 +2717,7 @@ entries: catalog.rancher.io/release-name: rancher-kube-state-metrics apiVersion: v2 appVersion: 2.0.0 - created: "2021-09-30T14:07:17.97666013-04:00" + created: "2021-10-18T13:41:44.814045-07:00" description: Install kube-state-metrics to generate and expose cluster-level metrics digest: c7a76ad182ca687673327e5ebef5558c9243f876f3241ade6161cd9aa739c0cc home: https://github.com/kubernetes/kube-state-metrics/ @@ -2712,7 +2746,7 @@ entries: catalog.rancher.io/release-name: rancher-kube-state-metrics apiVersion: v1 appVersion: 1.9.8 - created: "2021-09-30T14:07:17.977794725-04:00" + created: "2021-10-18T13:41:44.853165-07:00" description: Install kube-state-metrics to generate and expose cluster-level metrics digest: bf852a0682030a0386010427fceb71204d1aedf48c7c4af85dd5e9198fbbcfb0 home: https://github.com/kubernetes/kube-state-metrics/ @@ -2744,7 +2778,7 @@ entries: catalog.cattle.io/ui-component: logging apiVersion: v1 appVersion: 3.12.0 - created: "2021-09-30T14:07:17.979425172-04:00" + created: "2021-10-18T13:41:44.911631-07:00" description: Collects and filter logs using highly configurable CRDs. Powered by Banzai Cloud Logging Operator. digest: 725703ad277825cf79620504a097bbd3cd529e4c33f4fdaa1834409f08b7b297 @@ -2768,7 +2802,7 @@ entries: catalog.cattle.io/ui-component: logging apiVersion: v1 appVersion: 3.9.4 - created: "2021-09-30T14:07:17.983544185-04:00" + created: "2021-10-18T13:41:45.288039-07:00" description: Collects and filter logs using highly configurable CRDs. Powered by Banzai Cloud Logging Operator. digest: 565b721d95829592d0919944e45f0b38f9abe3e640457e447e3241c8eb25c614 @@ -2793,7 +2827,7 @@ entries: catalog.cattle.io/ui-component: logging apiVersion: v1 appVersion: 3.9.0 - created: "2021-09-30T14:07:17.98259936-04:00" + created: "2021-10-18T13:41:45.22181-07:00" description: Collects and filter logs using highly configurable CRDs. Powered by Banzai Cloud Logging Operator. digest: 557423888e9d279e1748e09ee6e639ef739bf767757cfa496eea706a12e4f006 @@ -2818,7 +2852,7 @@ entries: catalog.cattle.io/ui-component: logging apiVersion: v1 appVersion: 3.8.2 - created: "2021-09-30T14:07:17.981773083-04:00" + created: "2021-10-18T13:41:45.076682-07:00" description: Collects and filter logs using highly configurable CRDs. Powered by Banzai Cloud Logging Operator. digest: 9a530816512757cca175695707f5e5a2349c06bf076d1a50e4aa80f7e40c35d9 @@ -2843,7 +2877,7 @@ entries: catalog.cattle.io/ui-component: logging apiVersion: v1 appVersion: 3.6.0 - created: "2021-09-30T14:07:17.9809651-04:00" + created: "2021-10-18T13:41:45.023076-07:00" description: Collects and filter logs using highly configurable CRDs. Powered by Banzai Cloud Logging Operator. digest: 47f857372c32fdbd0299631af812fb1fa8fa868375410f24a84fb91b86a977ec @@ -2867,7 +2901,7 @@ entries: catalog.cattle.io/ui-component: logging apiVersion: v1 appVersion: 3.6.0 - created: "2021-09-30T14:07:17.980192998-04:00" + created: "2021-10-18T13:41:44.966119-07:00" description: Collects and filter logs using highly configurable CRDs. Powered by Banzai Cloud Logging Operator. digest: 9e213a66882cc8986d466ba95aa95388aa7ca87fe3a88ba9d894e30625d515ea @@ -2887,7 +2921,7 @@ entries: catalog.cattle.io/namespace: cattle-logging-system catalog.cattle.io/release-name: rancher-logging-crd apiVersion: v1 - created: "2021-09-30T14:07:17.987241483-04:00" + created: "2021-10-18T13:41:45.320809-07:00" description: Installs the CRDs for rancher-logging. digest: 8543212393b921630119d9f0bbaedd046c713e81c18d125c0f9a0b54083b3281 name: rancher-logging-crd @@ -2901,7 +2935,7 @@ entries: catalog.cattle.io/namespace: cattle-logging-system catalog.cattle.io/release-name: rancher-logging-crd apiVersion: v1 - created: "2021-09-30T14:07:17.993507968-04:00" + created: "2021-10-18T13:41:45.458411-07:00" description: Installs the CRDs for rancher-logging. digest: 64103cfbf9e0a3f4a590e194022aeeda582cc96a5c3450eac839c0c3d448b059 name: rancher-logging-crd @@ -2915,7 +2949,7 @@ entries: catalog.cattle.io/namespace: cattle-logging-system catalog.cattle.io/release-name: rancher-logging-crd apiVersion: v1 - created: "2021-09-30T14:07:17.991749963-04:00" + created: "2021-10-18T13:41:45.435725-07:00" description: Installs the CRDs for rancher-logging. digest: 2ab6fc36daf86c405b536970d9ed4dcb68f84ac93df7ac3811dd123ba82448bd name: rancher-logging-crd @@ -2929,7 +2963,7 @@ entries: catalog.cattle.io/namespace: cattle-logging-system catalog.cattle.io/release-name: rancher-logging-crd apiVersion: v1 - created: "2021-09-30T14:07:17.990653894-04:00" + created: "2021-10-18T13:41:45.407542-07:00" description: Installs the CRDs for rancher-logging. digest: 351b69ac821716e05b4648f6fe175bfc8b25fee5dc8b7088cc3b77a7d8596b76 name: rancher-logging-crd @@ -2943,7 +2977,7 @@ entries: catalog.cattle.io/namespace: cattle-logging-system catalog.cattle.io/release-name: rancher-logging-crd apiVersion: v1 - created: "2021-09-30T14:07:17.989595721-04:00" + created: "2021-10-18T13:41:45.381842-07:00" description: Installs the CRDs for rancher-logging. digest: 582846a78f045a48088f355599a0abd62c98ce62698ef7fe59ed2180f2016441 name: rancher-logging-crd @@ -2957,7 +2991,7 @@ entries: catalog.cattle.io/namespace: cattle-logging-system catalog.cattle.io/release-name: rancher-logging-crd apiVersion: v1 - created: "2021-09-30T14:07:17.988250207-04:00" + created: "2021-10-18T13:41:45.350614-07:00" description: Installs the CRDs for rancher-logging. digest: 1c24d7465ba9a4ae3613ffad12cea6d6a60df66a9fbf4d0f2674c4efec2616f2 name: rancher-logging-crd @@ -2985,7 +3019,7 @@ entries: catalog.cattle.io/ui-component: monitoring apiVersion: v2 appVersion: 0.48.0 - created: "2021-09-30T14:07:18.013634255-04:00" + created: "2021-10-18T13:41:46.410947-07:00" dependencies: - condition: grafana.enabled name: grafana @@ -3105,7 +3139,7 @@ entries: catalog.cattle.io/ui-component: monitoring apiVersion: v2 appVersion: 0.46.0 - created: "2021-09-30T14:07:18.032113531-04:00" + created: "2021-10-18T13:41:47.302307-07:00" dependencies: - condition: grafana.enabled name: grafana @@ -3214,7 +3248,7 @@ entries: catalog.cattle.io/ui-component: monitoring apiVersion: v1 appVersion: 0.38.1 - created: "2021-09-30T14:07:18.093174812-04:00" + created: "2021-10-18T13:41:50.04568-07:00" dependencies: - condition: grafana.enabled name: grafana @@ -3316,7 +3350,7 @@ entries: catalog.cattle.io/ui-component: monitoring apiVersion: v1 appVersion: 0.38.1 - created: "2021-09-30T14:07:18.073948521-04:00" + created: "2021-10-18T13:41:49.203887-07:00" dependencies: - condition: kubeStateMetrics.enabled name: kube-state-metrics @@ -3446,7 +3480,7 @@ entries: catalog.cattle.io/ui-component: monitoring apiVersion: v1 appVersion: 0.38.1 - created: "2021-09-30T14:07:18.058102201-04:00" + created: "2021-10-18T13:41:48.566685-07:00" dependencies: - condition: kubeStateMetrics.enabled name: kube-state-metrics @@ -3575,7 +3609,7 @@ entries: catalog.cattle.io/ui-component: monitoring apiVersion: v1 appVersion: 0.38.1 - created: "2021-09-30T14:07:18.045693388-04:00" + created: "2021-10-18T13:41:47.924891-07:00" dependencies: - condition: kubeStateMetrics.enabled name: kube-state-metrics @@ -3704,7 +3738,7 @@ entries: catalog.cattle.io/namespace: cattle-monitoring-system catalog.cattle.io/release-name: rancher-monitoring-crd apiVersion: v1 - created: "2021-09-30T14:07:18.09654425-04:00" + created: "2021-10-18T13:41:50.102881-07:00" description: Installs the CRDs for rancher-monitoring. digest: 8df09722ba0baf7a39f809432918fd46643667d4fcf22f025697a1b77c7f5014 name: rancher-monitoring-crd @@ -3718,7 +3752,7 @@ entries: catalog.cattle.io/namespace: cattle-monitoring-system catalog.cattle.io/release-name: rancher-monitoring-crd apiVersion: v1 - created: "2021-09-30T14:07:18.099866155-04:00" + created: "2021-10-18T13:41:50.170108-07:00" description: Installs the CRDs for rancher-monitoring. digest: 6f4fc35013ee3d368502857afb8c466f2e1762c656c9502a154f6354a360361b name: rancher-monitoring-crd @@ -3732,7 +3766,7 @@ entries: catalog.cattle.io/namespace: cattle-monitoring-system catalog.cattle.io/release-name: rancher-monitoring-crd apiVersion: v1 - created: "2021-09-30T14:07:18.114467489-04:00" + created: "2021-10-18T13:41:50.334721-07:00" description: Installs the CRDs for rancher-monitoring. digest: 63a81f944774e646f6549c545f7c6b56635218bc135b9421eab224c6139dcbf7 name: rancher-monitoring-crd @@ -3746,7 +3780,7 @@ entries: catalog.cattle.io/namespace: cattle-monitoring-system catalog.cattle.io/release-name: rancher-monitoring-crd apiVersion: v1 - created: "2021-09-30T14:07:18.110881539-04:00" + created: "2021-10-18T13:41:50.297805-07:00" description: Installs the CRDs for rancher-monitoring. digest: 60945c2274b7c169ad84240e7facc9aa8d3a0a4e649c3dcd6e6b21f336a257d8 name: rancher-monitoring-crd @@ -3760,7 +3794,7 @@ entries: catalog.cattle.io/namespace: cattle-monitoring-system catalog.cattle.io/release-name: rancher-monitoring-crd apiVersion: v1 - created: "2021-09-30T14:07:18.107239908-04:00" + created: "2021-10-18T13:41:50.25078-07:00" description: Installs the CRDs for rancher-monitoring. digest: 09532cc000ee5a78dbda15c879ad1af9f9c2f8bc08db4067a6756df1a0206de3 name: rancher-monitoring-crd @@ -3774,7 +3808,7 @@ entries: catalog.cattle.io/namespace: cattle-monitoring-system catalog.cattle.io/release-name: rancher-monitoring-crd apiVersion: v1 - created: "2021-09-30T14:07:18.104045828-04:00" + created: "2021-10-18T13:41:50.208176-07:00" description: Installs the CRDs for rancher-monitoring. digest: 101721abb2876816b54234568272d0372c274ed3e4851a9c94077f61fefb8a49 name: rancher-monitoring-crd @@ -3791,7 +3825,7 @@ entries: catalog.rancher.io/release-name: rancher-node-exporter apiVersion: v1 appVersion: 1.1.2 - created: "2021-09-30T14:07:18.115900029-04:00" + created: "2021-10-18T13:41:50.393212-07:00" description: A Helm chart for prometheus node-exporter digest: 940f60a7e56c13351c9f6088bde9230a03e579d0791e41f911a724b002580fbb home: https://github.com/prometheus/node_exporter/ @@ -3818,7 +3852,7 @@ entries: catalog.rancher.io/release-name: rancher-node-exporter apiVersion: v1 appVersion: 1.1.2 - created: "2021-09-30T14:07:18.115199764-04:00" + created: "2021-10-18T13:41:50.361431-07:00" description: A Helm chart for prometheus node-exporter digest: 423bbfe53c9137e1f9937601a3e573ed22e2aae2c7a19162781518ffc041ff35 home: https://github.com/prometheus/node_exporter/ @@ -3845,7 +3879,7 @@ entries: catalog.cattle.io/release-name: rancher-prom2teams apiVersion: v1 appVersion: 3.2.2 - created: "2021-09-30T14:07:18.116870199-04:00" + created: "2021-10-18T13:41:50.461521-07:00" description: A Helm chart for Prom2Teams based on the upstream https://github.com/idealista/prom2teams digest: a278a9673dbe8dbb5ed21b3b6e2159f79c8fae1ba9e34e4e5e642e9a55a9bb95 name: rancher-prom2teams @@ -3859,7 +3893,7 @@ entries: catalog.cattle.io/release-name: rancher-prom2teams apiVersion: v1 appVersion: 3.2.1 - created: "2021-09-30T14:07:18.11639603-04:00" + created: "2021-10-18T13:41:50.429888-07:00" description: A Helm chart for Prom2Teams based on the upstream https://github.com/idealista/prom2teams digest: 2c83714457d157bc77c0f74ab01c1db84b63c5a811a99225b626f297455e0e3b name: rancher-prom2teams @@ -3875,7 +3909,7 @@ entries: catalog.rancher.io/release-name: rancher-prometheus-adapter apiVersion: v1 appVersion: v0.8.4 - created: "2021-09-30T14:07:18.117792064-04:00" + created: "2021-10-18T13:41:50.510447-07:00" description: A Helm chart for k8s prometheus adapter digest: 45e2aad6b9edfa24e88f97038616a898b2b9693b2acb9087772d0377f009f9a4 home: https://github.com/DirectXMan12/k8s-prometheus-adapter @@ -3905,7 +3939,7 @@ entries: catalog.rancher.io/release-name: rancher-prometheus-adapter apiVersion: v1 appVersion: v0.8.3 - created: "2021-09-30T14:07:18.118694769-04:00" + created: "2021-10-18T13:41:50.559636-07:00" description: A Helm chart for k8s prometheus adapter digest: f1da6d7eac3c183afdc127810f8463d6d7bb597dce2ad6046e30d66c8b9423e6 home: https://github.com/DirectXMan12/k8s-prometheus-adapter @@ -3936,7 +3970,7 @@ entries: catalog.rancher.io/release-name: rancher-pushprox apiVersion: v1 appVersion: 0.1.0 - created: "2021-09-30T14:07:18.122133416-04:00" + created: "2021-10-18T13:41:50.692613-07:00" description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx clients. digest: d2396d0961ee525846f485efa79b6182139567141a67b378bd775c4f86f2e7e8 @@ -3953,7 +3987,7 @@ entries: catalog.rancher.io/release-name: rancher-pushprox apiVersion: v1 appVersion: 0.1.0 - created: "2021-09-30T14:07:18.121582649-04:00" + created: "2021-10-18T13:41:50.66436-07:00" description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx clients. digest: f1f1e0d4d24a20b4b995a8ecc360ff0db310d4af92ec7fcdf87e4b9d5f977dd4 @@ -3969,7 +4003,7 @@ entries: catalog.rancher.io/release-name: rancher-pushprox apiVersion: v1 appVersion: 0.1.0 - created: "2021-09-30T14:07:18.121026052-04:00" + created: "2021-10-18T13:41:50.640959-07:00" description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx clients. digest: cb9552eb4ee8899ef1af5583c8080c27227dd3b10d919748f2caf79cb8197198 @@ -3985,7 +4019,7 @@ entries: catalog.rancher.io/release-name: rancher-pushprox apiVersion: v1 appVersion: 0.1.0 - created: "2021-09-30T14:07:18.120496596-04:00" + created: "2021-10-18T13:41:50.61802-07:00" description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx clients. digest: a4b3506a74ea6cc4e8c6610cb92451d3072f4f7bac7b503e2dea9423697eaf68 @@ -4002,7 +4036,7 @@ entries: catalog.rancher.io/release-name: rancher-pushprox apiVersion: v1 appVersion: 0.1.0 - created: "2021-09-30T14:07:18.119941938-04:00" + created: "2021-10-18T13:41:50.598195-07:00" description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx clients. digest: 4b53e4de2aede1f3d63c815ca36bd61f31d38c59769d9982b14aca3bbf575724 @@ -4019,7 +4053,7 @@ entries: catalog.rancher.io/release-name: rancher-pushprox apiVersion: v1 appVersion: 0.1.0 - created: "2021-09-30T14:07:18.119352495-04:00" + created: "2021-10-18T13:41:50.579995-07:00" description: Sets up a deployment of the PushProx proxy and a DaemonSet of PushProx clients. digest: 73b11a51246c216a7587628fee346541d6b5e82246e11d586b4926254f7999fa @@ -4036,7 +4070,7 @@ entries: catalog.cattle.io/release-name: rancher-sachet apiVersion: v2 appVersion: 0.2.3 - created: "2021-09-30T14:07:18.123039455-04:00" + created: "2021-10-18T13:41:50.730457-07:00" description: A Helm chart for Sachet based on the upstream https://github.com/messagebird/sachet digest: face4a2ab50a6b7abcc88cf84fcf27efd9a257f19cc6869cf506c4c341a8c790 name: rancher-sachet @@ -4051,7 +4085,7 @@ entries: catalog.cattle.io/release-name: rancher-sachet apiVersion: v2 appVersion: 0.2.3 - created: "2021-09-30T14:07:18.122576387-04:00" + created: "2021-10-18T13:41:50.711233-07:00" description: A Helm chart for Sachet based on the upstream https://github.com/messagebird/sachet digest: 0c438e1f63546d35f8e48fbafdc5ef2bbe0fa8d59383f7a36b4f601c99677029 name: rancher-sachet @@ -4068,7 +4102,7 @@ entries: catalog.rancher.io/release-name: rancher-tracing apiVersion: v1 appVersion: 1.20.0 - created: "2021-09-30T14:07:18.126061344-04:00" + created: "2021-10-18T13:41:50.89735-07:00" description: A quick start Jaeger Tracing installation using the all-in-one demo. This is not production qualified. Refer to https://www.jaegertracing.io/ for details. @@ -4085,7 +4119,7 @@ entries: catalog.rancher.io/release-name: rancher-tracing apiVersion: v1 appVersion: 1.20.0 - created: "2021-09-30T14:07:18.125606777-04:00" + created: "2021-10-18T13:41:50.875891-07:00" description: A quick start Jaeger Tracing installation using the all-in-one demo. This is not production qualified. Refer to https://www.jaegertracing.io/ for details. @@ -4102,7 +4136,7 @@ entries: catalog.rancher.io/release-name: rancher-tracing apiVersion: v1 appVersion: 1.20.0 - created: "2021-09-30T14:07:18.125126449-04:00" + created: "2021-10-18T13:41:50.8512-07:00" description: A quick start Jaeger Tracing installation using the all-in-one demo. This is not production qualified. Refer to https://www.jaegertracing.io/ for details. @@ -4119,7 +4153,7 @@ entries: catalog.rancher.io/release-name: rancher-tracing apiVersion: v1 appVersion: 1.20.0 - created: "2021-09-30T14:07:18.124684659-04:00" + created: "2021-10-18T13:41:50.822311-07:00" description: A quick start Jaeger Tracing installation using the all-in-one demo. This is not production qualified. Refer to https://www.jaegertracing.io/ for details. @@ -4137,7 +4171,7 @@ entries: catalog.cattle.io/release-name: vsphere-cpi apiVersion: v1 appVersion: 1.0.0 - created: "2021-09-30T14:07:18.126915021-04:00" + created: "2021-10-18T13:41:50.931837-07:00" description: vSphere Cloud Provider Interface (CPI) digest: 2da8c41576eec369cd5b61f6b0d240f09bb719e0e21e4f63ac976293c8bc130a icon: https://charts.rancher.io/assets/logos/vsphere-cpi.svg @@ -4161,7 +4195,7 @@ entries: catalog.cattle.io/release-name: vsphere-cpi apiVersion: v1 appVersion: 1.0.0 - created: "2021-09-30T14:07:18.126500633-04:00" + created: "2021-10-18T13:41:50.912321-07:00" description: vSphere Cloud Provider Interface (CPI) digest: 05298fce7dbfe5176fe509e1cde6ea8ab136c3c77af61b12f297880332f88840 icon: https://charts.rancher.io/assets/logos/vsphere-cpi.svg @@ -4185,7 +4219,7 @@ entries: catalog.cattle.io/release-name: vsphere-csi apiVersion: v1 appVersion: 2.2.0 - created: "2021-09-30T14:07:18.127547932-04:00" + created: "2021-10-18T13:41:50.957001-07:00" description: vSphere Cloud Storage Interface (CSI) digest: a20bc110bca55c0059658daa7e5d5981ce2fcbbdcd2c957f0941170fa43c0afa icon: https://charts.rancher.io/assets/logos/vsphere-csi.svg @@ -4209,7 +4243,7 @@ entries: catalog.cattle.io/release-name: vsphere-csi apiVersion: v1 appVersion: 2.1.0 - created: "2021-09-30T14:07:18.128130786-04:00" + created: "2021-10-18T13:41:50.978801-07:00" description: vSphere Cloud Storage Interface (CSI) digest: fbef8bf05ec18534a4108fa2de055eb212be24d8114a946de9b5c937eb0b1248 icon: https://charts.rancher.io/assets/logos/vsphere-csi.svg @@ -4233,7 +4267,7 @@ entries: catalog.cattle.io/release-name: rancher-webhook apiVersion: v2 appVersion: 0.2.1 - created: "2021-10-08T15:04:30.621692-07:00" + created: "2021-10-18T13:41:51.257707-07:00" dependencies: - condition: capi.enabled name: capi @@ -4252,7 +4286,7 @@ entries: catalog.cattle.io/release-name: rancher-webhook apiVersion: v2 appVersion: 0.2.0 - created: "2021-09-30T14:07:18.130959593-04:00" + created: "2021-10-18T13:41:51.236201-07:00" dependencies: - condition: capi.enabled name: capi @@ -4271,7 +4305,7 @@ entries: catalog.cattle.io/release-name: rancher-webhook apiVersion: v2 appVersion: 0.1.1 - created: "2021-09-30T14:07:18.130499284-04:00" + created: "2021-10-18T13:41:51.216841-07:00" description: ValidatingAdmissionWebhook for Rancher types digest: a0ee1c4f1338c8c24f3c5129bb41a67a43bffb13bf28c138266cf58dd28f2ce4 name: rancher-webhook @@ -4286,7 +4320,7 @@ entries: catalog.cattle.io/release-name: rancher-webhook apiVersion: v2 appVersion: 0.1.0 - created: "2021-09-30T14:07:18.130209741-04:00" + created: "2021-10-18T13:41:51.205677-07:00" description: ValidatingAdmissionWebhook for Rancher types digest: 3c20cc0a6b0fdc9672d7fa84be46f74b208a00664397d1abcfd8acd9ae10ff0e name: rancher-webhook @@ -4301,7 +4335,7 @@ entries: catalog.cattle.io/release-name: rancher-webhook apiVersion: v2 appVersion: 0.1.0-beta9 - created: "2021-09-30T14:07:18.129916577-04:00" + created: "2021-10-18T13:41:51.193519-07:00" description: ValidatingAdmissionWebhook for Rancher types digest: 0d9ac76eff2b6e937e3e15970cd0192acff99a31aa1afa14941029088dc32f76 name: rancher-webhook @@ -4316,7 +4350,7 @@ entries: catalog.cattle.io/release-name: rancher-webhook apiVersion: v2 appVersion: 0.1.0-beta9 - created: "2021-09-30T14:07:18.129511691-04:00" + created: "2021-10-18T13:41:51.178904-07:00" description: ValidatingAdmissionWebhook for Rancher types digest: 8881f7cf8b50e3b48a967ce8af477c96f986d42d3c1f4bbb8c0bfc09202d23f4 name: rancher-webhook @@ -4331,7 +4365,7 @@ entries: catalog.cattle.io/release-name: rancher-webhook apiVersion: v2 appVersion: 0.1.0-beta7 - created: "2021-09-30T14:07:18.128737779-04:00" + created: "2021-10-18T13:41:51.164468-07:00" description: ValidatingAdmissionWebhook for Rancher types digest: e185c6765de0bb0694d6d12e16c2dcce7f4c785125e614cf6c0020e5982d5f0e name: rancher-webhook @@ -4346,7 +4380,7 @@ entries: catalog.cattle.io/release-name: rancher-webhook apiVersion: v2 appVersion: 0.1.0-beta5 - created: "2021-09-30T14:07:18.128458238-04:00" + created: "2021-10-18T13:41:51.074574-07:00" description: ValidatingAdmissionWebhook for Rancher types digest: 574407c23b5827bd1d4d4f20609a5dc9d4558d6d29ef179093288a4a730ab8c2 name: rancher-webhook @@ -4362,7 +4396,7 @@ entries: catalog.rancher.io/release-name: rancher-windows-exporter apiVersion: v1 appVersion: 0.0.2 - created: "2021-09-30T14:07:18.132016078-04:00" + created: "2021-10-18T13:41:51.394292-07:00" description: Sets up monitoring metrics from Windows nodes via Prometheus windows-exporter digest: e8343b74c657a9ac4ea3d363e51bfd8e2551dd746e5992209f7a91724f972c78 maintainers: @@ -4381,7 +4415,7 @@ entries: catalog.rancher.io/release-name: rancher-windows-exporter apiVersion: v1 appVersion: 0.0.4 - created: "2021-09-30T14:07:18.13152779-04:00" + created: "2021-10-18T13:41:51.325137-07:00" description: Sets up monitoring metrics from Windows nodes via Prometheus windows-exporter digest: 329af930026bd58a3ffeeb202f362a2936031f14cc2a137593952d131db53afe maintainers: @@ -4400,7 +4434,7 @@ entries: catalog.cattle.io/release-name: rancher-wins-upgrader apiVersion: v2 appVersion: 0.1.1 - created: "2021-09-30T14:07:18.132999721-04:00" + created: "2021-10-18T13:41:51.494161-07:00" description: Manages upgrading the wins server version and configuration across all of your Windows nodes digest: 5de123eda92b3a5823a8b3e6c304de112a02fc42e8531ccc1b64c0e9f4721e13 @@ -4419,7 +4453,7 @@ entries: catalog.cattle.io/release-name: rancher-wins-upgrader apiVersion: v2 appVersion: 0.1.1 - created: "2021-09-30T14:07:18.132520391-04:00" + created: "2021-10-18T13:41:51.454467-07:00" description: Manages upgrading the wins server version and configuration across all of your Windows nodes digest: 5f1a089d856a0f6a6ad17b0f6e2be19ddc42c1fbcc4f5f8576395e87368eba9d @@ -4442,7 +4476,7 @@ entries: catalog.cattle.io/requires-gvr: networking.istio.io.virtualservice/v1beta1 apiVersion: v1 appVersion: 0.8.0 - created: "2021-09-30T14:07:18.133854676-04:00" + created: "2021-10-18T13:41:51.538491-07:00" description: The application deployment engine for Kubernetes digest: 8baa5c330cc152b3d3d87f918ed3ff96b927efad412f4b97bd7db90445e28602 home: https://rio.io @@ -4462,7 +4496,7 @@ entries: catalog.cattle.io/requires-gvr: networking.istio.io.virtualservice/v1beta1 apiVersion: v1 appVersion: 0.8.0 - created: "2021-09-30T14:07:18.133428988-04:00" + created: "2021-10-18T13:41:51.51452-07:00" description: The application deployment engine for Kubernetes digest: d58ca3b147627fec6d5f4b99fae680f97edaed98967f1fc1914a537dede0d897 home: https://rio.io @@ -4481,7 +4515,7 @@ entries: catalog.cattle.io/release-name: sriov apiVersion: v2 appVersion: 1.0.0 - created: "2021-09-30T14:07:18.12386196-04:00" + created: "2021-10-18T13:41:50.77855-07:00" description: SR-IOV network operator configures and manages SR-IOV networks in the kubernetes cluster digest: fbb5f88710506b872767657b8b29aef0b84019d8d7e57b66eaea1563cae5a4a4 @@ -4509,7 +4543,7 @@ entries: catalog.cattle.io/namespace: cattle-sriov-system catalog.cattle.io/release-name: sriov-crd apiVersion: v2 - created: "2021-09-30T14:07:18.124226973-04:00" + created: "2021-10-18T13:41:50.7943-07:00" description: Installs the CRDs for rke2-sriov. digest: db8031e9088de70c02778bedae7149b0678439a931ef987b0b4f57ca52415589 name: sriov-crd @@ -4526,7 +4560,7 @@ entries: catalog.cattle.io/release-name: system-upgrade-controller apiVersion: v1 appVersion: v0.7.5 - created: "2021-09-30T14:07:18.134198707-04:00" + created: "2021-10-18T13:41:51.552637-07:00" description: General purpose controller to make system level updates to nodes digest: ecc9bf23666bd63dedd95b22c3a5c806ad084800f05a765fba133f8de4e4814f home: https://github.com/rancher/system-charts/charts/system-upgrade-controller @@ -4536,4 +4570,4 @@ entries: urls: - assets/system-upgrade-controller/system-upgrade-controller-100.0.0+up0.3.0.tgz version: 100.0.0+up0.3.0 -generated: "2021-09-30T14:07:17.89939889-04:00" +generated: "2021-10-18T13:41:39.486655-07:00"