Commit Graph

1279 Commits (1cfe8a91544f923c30ca8858b6d5fa99648e5c47)

Author SHA1 Message Date
vardhaman 1cfe8a9154 added security context values for gatekeeper crd chart
this is needed so that these jobs can be run in the namespace with restricted psa labels applied
2023-02-08 20:12:45 +05:30
vardhaman cd97ee298e added additional permission to cluster role used for gatekeeper jobs
the additional permissions are required for the jobs to add psa related labels to namespace
2023-02-03 20:51:38 +05:30
vardhaman 332dc80f61 bump cis-operator and cis benchmark chart version 2023-02-01 10:47:14 +05:30
vardhaman 1e8345e71d added tolerations variable for security scan job 2023-02-01 10:28:52 +05:30
Vardhaman Surana d9748b1cc8
Merge pull request #2298 from vardhaman22/istio-component-hpaspec-config
Istio components hpa and pdb config
2023-02-01 10:10:43 +05:30
Steven Crespo 12853a9e47
Merge pull request #2304 from weizhe0422/dev-2.7_LH-1.4.0
Add Longhorn 1.4.0 chart with dev-2.7
2023-01-31 13:15:31 -08:00
vardhaman 122b26c3ae added podDisruptionBudget and hpaspec configuration for istio components 2023-01-31 14:29:13 +05:30
Arvind Iyengar ca676fcf6f
[rancher-monitoring-crd] Use global.cattle.psp.enabled field 2023-01-30 09:32:51 -08:00
Arvind Iyengar faf139a0a6
[rancher-monitoring] Add global.cattle.psp.enabled docs to app-README.md 2023-01-30 09:32:51 -08:00
Arvind Iyengar 25831e5541
[rancher-monitoring] Include validate-psp-install.yaml 2023-01-30 09:32:51 -08:00
Arvind Iyengar 2185c35881
[rancher-monitoring] Update kube-version annotation to support 1.25 2023-01-30 09:32:51 -08:00
Arvind Iyengar 955ac68c66
[rancher-monitoring] Replace .Values.global.rbac.pspEnabled with .Values.global.cattle.psp.enabled and bump major version 2023-01-30 09:32:51 -08:00
Arvind Iyengar b465411a62
[rancher-windows-exporter] Include .Values.global.cattle.psp.enabled and bump major version 2023-01-30 09:32:50 -08:00
Arvind Iyengar 2ea3bbdcac
[rancher-pushprox] Add global.cattle.psp.enabled docs to README.md 2023-01-30 09:32:50 -08:00
Arvind Iyengar 29a3da4b0c
[rancher-pushprox] Include validate-install-crd.yaml 2023-01-30 09:32:50 -08:00
Arvind Iyengar ea503a320d
[rancher-pushprox] Include validate-psp-install.yaml 2023-01-30 09:32:50 -08:00
Arvind Iyengar 8913ad8f84
[rancher-pushprox] Update kube-version annotation to support 1.25 2023-01-30 09:32:50 -08:00
Arvind Iyengar 9c264011a5
[rancher-pushprox] Replace implicit capabilities check with .Values.global.cattle.psp.enabled and bump major version 2023-01-30 09:32:49 -08:00
Arvind Iyengar 71f20e3e17
[rancher-prometheus-adapter] Replace .Values.psp.create with .Values.global.cattle.psp.enabled and bump major version 2023-01-30 09:32:49 -08:00
Arvind Iyengar 54720ea2a5
[rancher-node-exporter] Replace .Values.rbac.pspEnabled with .Values.global.cattle.psp.enabled and bump major version 2023-01-30 09:32:49 -08:00
Arvind Iyengar d94a62c56d
[rancher-kube-state-metrics] Replace .Values.podSecurityPolicy.enabled with .Values.global.cattle.psp.enabled and bump major version 2023-01-30 09:32:49 -08:00
Arvind Iyengar 40325d35a4
[rancher-grafana] Replace .Values.rbac.pspEnabled with .Values.global.cattle.psp.enabled and bump major version 2023-01-30 09:32:49 -08:00
Chad Roberts e740719c13
bump rancher-webhook to v0.3.2-rc14 2023-01-30 09:57:01 -05:00
Mauren Berti ba1d755be1
Merge pull request #2371 from stormqueen1990/feat/new-psp-approach-gatekeeper
[rancher-gatekeeper] Update chart for new PSP approach
2023-01-30 09:07:16 -05:00
Ray Chang 8263c2ace9 make charts: release longhorn v1.4.0 into Rancher 2.7
Signed-off-by: Ray Chang <ray.chang@suse.com>
2023-01-30 14:28:32 +08:00
Ray Chang 6c848ade36 make prepare/patch: release longhorn v1.4.0 into Rancher 2.7
Signed-off-by: Ray Chang <ray.chang@suse.com>
2023-01-30 14:28:32 +08:00
Mauren Berti f50b5dc1f7
Add new PSP flag + add validation for capabilities.
* Remove previously added capabilities check.
* Add new validation file validate-psp-install.yaml with capabilities and switch check to verify PSPs are installable in the target cluster.
* Remove old PSP flags and replace them with the standardized global.cattle.psp.enabled.
* Add explanation of the changes for Kubernetes v1.25 to app-readme.md.
2023-01-27 19:38:30 -05:00
Mauren Berti 8e40538820
Merge pull request #2362 from stormqueen1990/feat/add-error-message-logging
[rancher-logging] Update chart for new PSP approach
2023-01-27 18:42:43 -05:00
Steven Crespo 5800008af4
Merge pull request #2373 from PennyScissors/devv27-update-ui-plug-op
Update ui-plugin-operator chart
2023-01-27 15:28:45 -08:00
Arvind Iyengar 548c9b434a
Merge pull request #2370 from aiyengar2/add_global_psp_fields_to_alerting
Add global.cattle.psp.enabled to rancher-alerting charts
2023-01-27 15:13:51 -08:00
Mauren Berti 30c71503d2
Add user-friendly error message + standardize PSP flag.
* Substitute global.rbac.psp.enabled and global.psp.enabled uses for global.cattle.psp.enabled.
* Remove previous usages of the capabilities check to determine if PSPs and PSP-related resources are applied.
* Add a new validation file (validate-psp-install.yaml) to make the capabilities check when PSP installation is requested and issue a user-friendly message if unable to install PSP.
* Update app-readme.md to include details of this change.
* Bump chart version to 102.0.0.
* Change default value for PSP installation from true to false.
2023-01-27 18:04:57 -05:00
Arvind Iyengar 398a62d648
[rancher-alerting-drivers] Add global.cattle.psp.enabled docs to app-readme.md 2023-01-27 15:00:49 -08:00
Arvind Iyengar 485b1a05af
[rancher-alerting-drivers] Add global.cattle.psp.enabled to questions.yml 2023-01-27 15:00:49 -08:00
Arvind Iyengar 5bfa7c3de3
[rancher-alerting-drivers] Include validate-psp-install.yaml 2023-01-27 15:00:48 -08:00
Arvind Iyengar fb81b0ba41
[rancher-alerting-drivers] Use global.cattle.psp.enabled field and bump major version 2023-01-27 15:00:48 -08:00
Arvind Iyengar c9a4aaefd3
[rancher-prom2teams] Use global.cattle.psp.enabled field and bump major version 2023-01-27 15:00:48 -08:00
Arvind Iyengar 14fc295077
[rancher-prom2teams] Move role+rolebinding for PSPs to psp.yaml 2023-01-27 15:00:48 -08:00
Arvind Iyengar d8c28a415e
[rancher-sachet] Use global.cattle.psp.enabled field and bump major version 2023-01-27 15:00:48 -08:00
Arvind Iyengar 71a483e3d2
[rancher-sachet] Move role+rolebinding for PSPs to psp.yaml 2023-01-27 15:00:47 -08:00
Eliyam Levy 2c3bb8ce0b update package and release yamls 2023-01-27 17:43:20 -05:00
Steven Crespo 45aa3826fa Update commit ref 2023-01-27 14:43:11 -08:00
Arvind Iyengar 464036d847
Merge pull request #2366 from geethub97/service-monitor-cluster-ids
Updating metricRelabelings to include cluster ids for all service monitors in Rancher Monitoring
2023-01-27 13:37:35 -08:00
Geet Samra 3419b2ffc4 rancher-monitoring: updating metricRelabelings to include cluster_id for service monitors 2023-01-27 13:10:20 -08:00
Chad Roberts 78e67d6786
Bump rancher-webhook to 0.3.2-rc13 2023-01-27 16:02:39 -05:00
Geet Samra 84237bbbcc rancher-pushprox: updating metricRelabelings to include cluster_id for service monitor 2023-01-27 12:25:26 -08:00
Mauren Berti 8e0334ecfc
Bump rancher-gatekeeper to version 102.0.0. 2023-01-27 14:25:12 -05:00
Geet Samra 2f61690cc7 rancher-grafana: updating metricRelabelings to include cluster_id for service monitors 2023-01-27 10:06:29 -08:00
Geet Samra 66464a1b3c rancher-node-exporter: updating metricRelabelings to include cluster_id for service monitors 2023-01-27 10:06:29 -08:00
Geet Samra 8868ff98e0 kube-state-metrics: updating metricRelabelings to include cluster_id for service monitors 2023-01-27 10:06:29 -08:00
Chad Roberts fcff5f1b43
bump rancher-webhook to 0.3.2-rc12 2023-01-27 11:56:49 -05:00