andata
/
rancher-charts
mirror of https://git.rancher.io/charts
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,426 Commits
50 Branches
2 Tags
432 MiB
Commit Graph

482 Commits (3c165b91cf095e1e59b0b2ea07a994fbc3a61899)

Author SHA1 Message Date
Dan Bason 0b01c2e595
Make Strip_Underscores fluentbit config optional 2021-07-01 11:58:17 +12:00
Steven Crespo 557d26eb9c Fix vsphere cpi 
- Add toggle to enable/disable rbac through chart values
- Add question to apply node selector label based on cluster type
- Update cloud controller manager labels/names to avoid conflict
 2021-06-30 11:57:11 -07:00
Arvind Iyengar d69ab2578e
Remove alertmanager pre-install job in favor of Helm annotations 2021-06-30 11:02:17 -07:00
Nick Gerace de94acb762
Merge pull request #1311 from nickgerace/dev-v2.6-windows 
Ensure Logging v2 nodeAgent fluentbit images are Windows-only
 2021-06-29 16:13:50 -04:00
Arvind Iyengar 87f5494093
Merge pull request #1314 from aiyengar2/change_rancher_agent 
Change CRD install image to rancher/shell and bump nginx
 2021-06-29 09:12:25 -07:00
Brenda Rearden d1ec28de81
Merge pull request #1309 from brendarearden/istio-1102 
Istio 1.10.2
 2021-06-29 08:20:35 -07:00
Donnie Adams d6392ca1d8
Merge pull request #1313 from thedadams/bump-eks-v1.1.1-rc5 
Bump eks-operator chart to 1.1.1-rc5
 2021-06-29 08:12:22 -07:00
Donnie Adams 2101991a34
Merge pull request #1312 from thedadams/bump-gke-v1.1.1-rc6 
Bump gke-operator chart to 1.1.1-rc6
 2021-06-29 08:12:11 -07:00
Michal Jura 95dd4d82b5
Merge pull request #1308 from mjura/dev-v2.6 
Bump aks-operator chart to 1.0.1-rc14
 2021-06-29 16:39:27 +02:00
Arvind Iyengar 4b88995876
Bump nginx image 2021-06-28 19:47:52 -07:00
Donnie Adams 67d3035dce Bump eks-operator chart to 1.1.1-rc5 2021-06-28 17:13:22 -07:00
Donnie Adams 6bef09778f Bump gke-operator chart to 1.1.1-rc6 2021-06-28 17:06:01 -07:00
Arvind Iyengar 75481c6cec
Use rancher/shell 2021-06-28 16:57:30 -07:00
Arvind Iyengar 47aa362f87
Merge pull request #1307 from aiyengar2/update_grafana 
Update Grafana to latest that uses Apache license
 2021-06-28 16:51:12 -07:00
Colleen Murphy 2e0aa1c582
Merge pull request #1306 from cmurphy/gke-private-cluster-fix 
Bump gke-operator to v1.1.1-rc5
 2021-06-28 16:39:46 -07:00
Nick Gerace 772114660e Ensure Logging v2 nodeAgent fluentbit images are Windows-only 2021-06-28 17:57:54 -04:00
Brenda Rearden 868a1e7011 Include istio 1.10.2 and patch changes for kiali 1.35.0 
Correct the kiali helpers patch to only include system default registry
 2021-06-28 14:26:40 -07:00
Colleen Murphy c8fd88d2d6 Bump gke-operator to v1.1.1-rc5 2021-06-28 09:43:22 -07:00
Michal Jura 0763f60c98
Bump aks-operator chart to 1.0.1-rc14 2021-06-28 16:16:26 +02:00
Arvind Iyengar 391d444a9c
Manually bump certain images 2021-06-25 17:41:09 -07:00
Arvind Iyengar 77baac0cca
Update rancher-grafana to new base bf7e1110a5ee9258190d0377fea319bb8e764e62 2021-06-25 17:21:37 -07:00
Arvind Iyengar b4787cfe7c
Rebase to bf7e1110a5ee9258190d0377fea319bb8e764e62 2021-06-25 17:21:37 -07:00
Jiaqi Luo 143c0fecb4 delete rio, rancher-operator, rancher-operator-crd and rancher-external-ip-webhook 2021-06-25 11:03:11 -07:00
Nick Gerace 564d336c35 Update Fleet charts to v0.3.6-rc3 2021-06-24 18:02:24 -04:00
Brenda Rearden 20ae86582a Support kiali 1.35 and istio 1.10.1 2021-06-22 13:25:12 -07:00
Brenda Rearden 941bb97f73 Remove unused packages 
Remove unused istio 1.8 package

Remove unused istio 1.9 packages
 2021-06-22 13:18:44 -07:00
Arvind Iyengar 89d8ad2713
Merge pull request #1274 from aiyengar2/rebase_monitoring 
Rebase Monitoring to 16.x.x
 2021-06-22 12:46:25 -07:00
Donnie Adams 8400ee4596
Merge pull request #1289 from thedadams/bump-aks-v1.0.1-rc12 
Bump aks-operator chart to 1.0.1-rc12
 2021-06-22 11:19:48 -07:00
Arvind Iyengar a93a040b70
Manual changes to Monitoring for rebase 2021-06-22 10:30:48 -07:00
Arvind Iyengar d49f60d38e
Update rancher-monitoring to new base ba91bdb2d79ca4419cf72078f5f4bfcc426d4599 2021-06-22 10:30:48 -07:00
Arvind Iyengar ef23466ebc
Rebase to ba91bdb2d79ca4419cf72078f5f4bfcc426d4599 2021-06-22 10:30:48 -07:00
Arvind Iyengar 00db29b544
Modify Windows dashboards for breaking changes 
(cherry picked from commit d7708cc963)
 2021-06-22 10:30:48 -07:00
Arvind Iyengar d8be38f8a1
Bump windows_exporter-package and account for breaking changes 
(cherry picked from commit c96ff52542)
 2021-06-22 10:30:47 -07:00
Arvind Iyengar 2acb1d6fcf
Update rancher-kube-state-metrics to new base 086f1f7f0870e110abf30aa6bfe7c141e83cc950 
(cherry picked from commit 95cd88b735)
 2021-06-22 10:30:47 -07:00
Arvind Iyengar 28f95b059f
Rebase to 086f1f7f0870e110abf30aa6bfe7c141e83cc950 
(cherry picked from commit 383fb984af)
 2021-06-22 10:30:47 -07:00
Arvind Iyengar c58aa6d7f4
Change kube-state-metrics commit and url 
(cherry picked from commit 3c5014784e)
 2021-06-22 10:30:47 -07:00
Arvind Iyengar 19a218b8af
Update rancher-prometheus-adapter to new base 50b719af447594abbae7beeb4d6458a19f8e9689 
(cherry picked from commit 93b8c72bcf)
 2021-06-22 10:30:47 -07:00
Arvind Iyengar baea983d2f
Rebase to 50b719af447594abbae7beeb4d6458a19f8e9689 
(cherry picked from commit 215afb6707)
 2021-06-22 10:30:47 -07:00
Arvind Iyengar 1916fb1654
Update rancher-node-exporter to new base a05f7b8888d6174827b815aa097d64b94f00af3e 
(cherry picked from commit dbc71f3dfc)
 2021-06-22 10:30:46 -07:00
Arvind Iyengar f8cdd3a3ef
Rebase to a05f7b8888d6174827b815aa097d64b94f00af3e 
(cherry picked from commit 6e32565f54)
 2021-06-22 10:30:46 -07:00
Arvind Iyengar b24e4ee460
Merge pull request #1278 from aiyengar2/check_monitoring 
Add dummy openAPIV3Schema on pre-install step
 2021-06-22 10:30:14 -07:00
Donnie Adams 7b20ac89ce Bump aks-operator chart to 1.0.1-rc12 2021-06-22 08:49:04 -07:00
Donnie Adams c5552eb0de
Merge pull request #1287 from thedadams/bump-eks-v1.1.1-rc4 
Bump eks-operator chart to 1.1.1-rc4
 2021-06-21 16:33:25 -07:00
Donnie Adams 2e23e41254
Merge pull request #1288 from thedadams/bump-gke-v1.1.1-rc4 
Bump gke-operator chart to 1.1.1-rc4
 2021-06-21 16:33:15 -07:00
Donnie Adams 9d2ab0d8f9 Bump gke-operator chart to 1.1.1-rc4 2021-06-21 13:57:14 -07:00
Donnie Adams bafe6cded9 Bump eks-operator chart to 1.1.1-rc4 2021-06-21 13:31:07 -07:00
Michal Jura d86330f7c5
Bump aks-operator chart to 1.0.1-rc11 2021-06-21 19:12:21 +02:00
Jiaqi Luo 022b4453a3
Merge pull request #1277 from jiaqiluo/fix-alerting-driver 2021-06-18 23:21:21 -07:00
Jiaqi Luo 0a8d93a080 user the image rancher/kubectl to avoid runAsRoot 2021-06-18 15:51:02 -07:00
Jiaqi Luo 66506a37a9 bump rancher-backup to 2.2.0-rc2 2021-06-18 15:14:45 -07:00
Jiaqi Luo 26d9c3d28c update versions on multiple charts 2021-06-18 12:05:33 -07:00
Jiaqi Luo 494564d483 bump rancher-backup to 2.2.0-rc1 2021-06-16 21:04:22 -07:00
Arvind Iyengar 3202417f2d
Add dummy openAPIV3Schema to initContainer and log patch 2021-06-16 18:13:27 -07:00
Darren Shepherd 2a023fdc38 Bump rancher-webhook to 0.2.0-alpha02 2021-06-16 12:35:24 -07:00
Jacob Payne 0e089425ab
Fix/issue 32301 (#1247) 
* cis 1.0.6 1.22 fixes

* make charts
 2021-06-15 15:04:10 -07:00
Daishan Peng ed3d4f771f
Merge pull request #1262 from StrongMonkey/fleet-v0.3.6-rc2 
Fleet v0.3.6 rc2
 2021-06-14 09:10:28 -07:00
Jiaqi Luo a9dfdea9b4 support installing rancher-alerting-drivers in hardened cluster 2021-06-11 15:51:42 -07:00
Jiaqi Luo d9f7aa887b add missing permission in the podSecurityPolicy for rancher-prom2teams 2021-06-11 15:49:40 -07:00
Jiaqi Luo de95419e0c add missing permission in the podSecurityPolicy for rancher-sachet 2021-06-11 15:48:42 -07:00
Daishan ea50d27198 Update fleet to v0.3.6-rc2 2021-06-11 14:42:33 -07:00
Jiaqi Luo aab21e8493
Merge pull request #1256 from jiaqiluo/update-charts-build-scrpts 2021-06-11 14:34:45 -07:00
Jiaqi Luo 09f8f4b5bf update all charts' version to 100.0.0 2021-06-11 13:43:20 -07:00
Manuel Buil e56e520221 Add sriov chart 
Signed-off-by: Manuel Buil <mbuil@suse.com>
 2021-06-11 17:36:57 +02:00
Jiaqi Luo a6980385e1 run make template to update templates 2021-06-09 16:58:43 -07:00
Nick Gerace 1c33d37907
Merge pull request #1261 from nickgerace/dev-v2.6-sprig-and-helm-are-not-fun 
Force convert non-string buffer values for Logging 3.10.0
 2021-06-09 18:28:42 -04:00
Daishan Peng 6da36d301f
Merge pull request #1257 from StrongMonkey/fleet-v0.3.6-rc1-2.6 
Fleet v0.3.6-rc1
 2021-06-09 15:05:09 -07:00
Daishan a9e2003ebb Make charts 2021-06-09 14:44:04 -07:00
Nick Gerace d9295e7c00 Force convert non-string buffer values for Logging 3.10.0 
Force convert non-string buffer values for Logging 3.10.0. Remove
packageVersion 0 version of the chart.
 2021-06-09 17:38:21 -04:00
Jiaqi Luo 4f1aa0319f
Merge pull request #1227 from jiaqiluo/pushprox-for-ingress-nginx-dev-v2.6 2021-06-09 12:22:24 -07:00
Nick Gerace c320d24d50 Fix logging 3.10.0 and remove bad chart 2021-06-09 12:48:00 -04:00
Jiaqi Luo 1157b4a153 add sub-charts for scraping ingress-nginx in rke and rke2 clusters 2021-06-08 19:06:50 -07:00
Jiaqi Luo 8bf9b82e91 Update rancher-pushprox to support overriding namespace and switching the workload type of the client between Deployment and DaemonSet by adding replicas and affinity in pod.spec 2021-06-08 18:35:00 -07:00
Daishan a8e8fb5957 Update fleet to v0.3.6-rc1 2021-06-08 17:23:51 -07:00
Nick Gerace d8d38e6082 Update logging to 3.10.0 and convert fluent-bit buffer fields to string 2021-06-08 17:49:10 -04:00
Jacob Payne f91fac2cf7
fix/issue 32993 (#1248) 
* use journald to consume k3s logs

* make charts
 2021-06-08 14:03:17 -07:00
Jacob Payne ba4492b7d4
Fix/issue 33092 (#1254) 
* removed rke2 containers logging and added some extra settings to the fluentbit configmap

* charts
 2021-06-08 13:54:27 -07:00
Arvind Iyengar a064b37d4e
Add kubelet and nodeExporter pushprox and bump image (#1245) 
* Bump PushProx chart version

* Expose serviceMonitor endpoints and client SA RBAC

* Bump PushProx image to v0.1.0-rancher2

* Support hardened kubelet+nodeExporter & update k3s

* Generate charts

* Disable kubelet serviceMonitor if k3sServer enabled

* make charts
 2021-06-04 15:33:21 -07:00
Donnie Adams e2e04c8f8e
Merge pull request #1244 from thedadams/bump-gke-v1.1.1-rc2 2021-06-04 14:59:06 -07:00
Donnie Adams c3219d0cbd Bump gke-operator chart to 1.1.1-rc2 2021-06-03 15:03:02 -07:00
Donnie Adams c44dfebdde Bump aks-operator chart to 1.0.1-rc7 2021-06-03 11:57:37 -07:00
Donnie Adams 06802f45b5 Bump eks-operator chart to 1.1.1-rc2 2021-06-02 15:28:04 -07:00
Arvind Iyengar 02ff0c9df8
Move establishing CRD logic to a helper template 2021-06-01 13:58:40 -07:00
Arvind Iyengar 5f3bbe4a36
Mimic Helm CRD install process by introducing wait 
As part of the Helm CRD installation process shown [here](43853ea772/pkg/action/install.go (L160-L162)), charts that both attempt to install CRDs and then install resources (e.g. `len(totalItems) > 0`) invalidate the cache and attempt to get the CRDs again to `Give time for the CRD to be recognized.` before continuing the Helm installation.

Because Monitoring V2 currently does not observe this invalidation and wait, flakey race conditions documented in issues like https://github.com/rancher/rancher/issues/32025 and https://github.com/rancher/rancher/issues/29171 can be caused. This commit introduces that invalidation process.
 2021-06-01 12:42:26 -07:00
Darren Shepherd b1dcdd1a87 Fix invalid tag in system-upgrade-controller 2021-05-28 18:48:05 -07:00
Colleen Murphy 556c9b1afa
Merge pull request #1213 from cmurphy/dev-v2.6-aks-operator 
Add aks-operator charts
 2021-05-28 11:23:41 -07:00
Colleen Murphy 2abda43f33 Add aks-operator package 2021-05-28 10:36:32 -07:00
Jiaqi Luo dac8de7d7e
Merge pull request #1214 from jiaqiluo/rancher-backup-105-rc1-dev-v2.6 
[dev-v2.6] cut rancher-backup and rancher-backup-crd 1.1.100+up1.1.1
 2021-05-26 09:23:33 -07:00
Donnie Adams 9f439d72ae
Merge pull request #1195 from thedadams/add-gke-operator 2021-05-26 09:06:11 -07:00
Donnie Adams b608a65c41 Add gke-operator 2021-05-26 08:43:08 -07:00
dbason 4e6c09f559
Add support for the kube audit log to v2 logging (#1223) 
* Add logging for kube-audit

* Generate charts for d274040a
 2021-05-25 17:23:13 -07:00
Jiaqi Luo ef298fe102
Merge pull request #1230 from jiaqiluo/update-monitoring-image-dev-v2.6 
[dev-v2.6]update the image rancher/mirrored-library-nginx
 2021-05-25 11:40:36 -07:00
Prachi Damle d016ae3c10
Merge pull request #1229 from prachidamle/cis_k8s_version_tag_26 
Updating cis-operator image tag to deliver fix for k8s upgrade issue
 2021-05-24 23:22:32 -07:00
Jiaqi Luo 5480033c84 update the image rancher/mirrored-library-nginx 2021-05-24 20:19:04 -07:00
Prachi Damle 7302e66ece Update CIS tag to include k8s version upgrade fix 
No need to update packageVersion

Generated assets
 2021-05-24 17:25:37 -07:00
Jiaqi Luo 84b66d8013 cut rancher-backup and rancher-backup-crd v1.1.1 2021-05-24 15:02:43 -07:00
Arvind Iyengar 75a96a7e94
Add validation on trying to deploy Grafana PVC 2021-05-24 11:35:04 -07:00
Arvind Iyengar 0bdbaf798d
Bump packageVersion 2021-05-24 11:28:48 -07:00
Arvind Iyengar 9c5c1c5ef3
Merge pull request #1224 from aiyengar2/fix_rke_2_etcd_default_2_6 
[2.6] Add NoExecute toleration to rke2Etcd and remove key
 2021-05-24 09:34:37 -07:00
Donnie Adams 8d7f56d799 Change eks-operator version to v1.1.1 2021-05-21 17:06:09 -07:00
Arvind Iyengar 6239716e10
Add NoExecute toleration to rke2Etcd and remove key 
(cherry picked from commit a181ea3011)
 2021-05-21 16:59:15 -07:00
Nick Gerace c9bf5990b0 Fix windows prefix path for logging 2021-05-19 20:17:39 -04:00
Arvind Iyengar e2c9a0746b
Fix monitoring Chart.yaml 
This is required due to the change released in v0.1.0 of the charts-build-scripts to switch the package used for YAML marshalling / unmarshalling.

Note: This does not need a packageVersion bump since it has already been bumped once for this release.
(cherry picked from commit 7ec1716f66)
 2021-05-17 15:39:49 -07:00
Arvind Iyengar 8845d9ae9f
Fix istio requirement.yaml 
This is required due to the change released in v0.1.0 of the charts-build-scripts to switch the package used for YAML marshalling / unmarshalling.

(cherry picked from commit 5392d84cf6)
 2021-05-17 15:39:40 -07:00
Arvind Iyengar ba726cdc6c
Fix alerting-drivers Chart.yaml 
This is required due to the change released in v0.1.0 of the charts-build-scripts to switch the package used for YAML marshalling / unmarshalling.

Note: This does not need a packageVersion bump since it has already been bumped once for this release.
(cherry picked from commit e5415e48de)
 2021-05-17 15:39:28 -07:00
Arvind Iyengar b350bb93e0
Remove rcVersions 2021-05-17 15:39:11 -07:00
Arvind Iyengar 1107be9199
Checkout current packages from dev-v2.6-source 
```bash
git fetch upstream
git checkout upstream/dev-v2.6-source -- packages; git reset HEAD; git checkout -- packages/README.md
```

This overwrites the previous changes based on stuff currently in dev-v2.6-source today.
 2021-05-17 15:34:49 -07:00
Arvind Iyengar 551327b14e
Checkout current packages from dev-v2.5-source 
```bash
git fetch upstream
git checkout upstream/dev-v2.5-source -- packages; git reset HEAD; git checkout -- packages/README.md
```
 2021-05-17 15:30:27 -07:00
Arvind Iyengar e0424d8ac0
Regenerate template based on v0.2.0 release 
```bash
make template
```
 2021-05-17 15:28:30 -07:00
Arvind Iyengar fd55955526
Remove packages/istio from the staging branch 
This commit removes packages/istio from the staging branch.

This has been a long-standing pending maintenance task and should not have any impact on the staging branch.

Signed-off-by: Arvind Iyengar <arvind.iyengar@rancher.com>
 2021-01-14 22:35:01 -08:00
actions 88defdad62 Generated changes 2020-09-28 22:35:02 +00:00
Daishan 2469c9213c Clean up folders 2020-09-22 16:26:19 -07:00
aiyengar2 f7cee8c5c7
Merge pull request #677 from aiyengar2/fix_magic_links 
Fix broken magic links for Grafana and Prometheus
 2020-09-22 14:56:33 -07:00
Darren Shepherd 161b04a5e6 fleet v0.3.0-beta3 2020-09-22 14:00:02 -07:00
Arvind Iyengar 92f0eca770 Add nginx proxy to Prometheus for magic links 
This commit adds an nginx proxy in front of Prometheus that intercepts the requests that are sent to the Prometheus pod. This change was necessary since the Prometheus pod encounters issues with Rancher proxy URLs that are formatted like:

```
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-prometheus:9090/proxy
```

Specifically, if using the root_url option, it doubles up this URL when making requests for resources, e.g.
```
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-prometheus:9090/proxy/<my-path>
=>
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-prometheus:9090/proxy/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-prometheus:9090/proxy/<my-path>
```

However, this does not resolve the issue in https://github.com/rancher/rancher/issues/29068.
 2020-09-22 11:20:57 -07:00
Arvind Iyengar d6c774aa42 Add nginx proxy to Grafana for magic links 
This commit adds an nginx proxy in front of Grafana that intercepts the requests that are sent to the Grafana pod. This change was necessary since the Grafana pod encounters issues with Rancher proxy URLs that are formatted like:

```
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy
```

Specifically, if using the root_url option, it doubles up this URL when making requests for resources, e.g.
```
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/<my-path>
=>
<server-url>/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/k8s/clusters/<cluster-id>/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/<my-path>
```
 2020-09-22 11:20:57 -07:00
rajashree 37a8648cf8 Change encryption config field name in restore crd 2020-09-22 10:26:48 -07:00
maggieliu 34fdd14bca
Merge pull request #674 from aiyengar2/fix_monitoring_chart_hardened 
Support monitoring in hardened RKE clusters
 2020-09-22 10:04:58 -07:00
maggieliu 6edb750ce9
Merge pull request #675 from aiyengar2/fix_pushprox_chart_hardened 
Support pushprox in hardened RKE clusters
 2020-09-22 10:04:44 -07:00
Prachi Damle 0f786657a2
Merge pull request #676 from prachidamle/airgap_fix 
Use global registry for security-scan and sonobuoy tool images to support airgapped setups
 2020-09-21 20:59:38 -07:00
Jacob Payne 91d1dedca1
allow tolerations to be passed to fluentbit containers (#673) 2020-09-21 16:47:48 -07:00
Prachi Damle 42f30bfad1 Use the system_default_registry for security-scan and sonobuoy images 
Deleting tgz assets
 2020-09-21 15:21:56 -07:00
Steven Crespo 32f1b41934
Merge pull request #670 from PennyScissors/update-gk-v3.1.1 
Update gatekeeper to version 3.1.1
 2020-09-21 15:01:46 -07:00
Steven Crespo 5757f8cc15 Update gatekeeper to v3.1.1 2020-09-21 12:26:43 -07:00
Arvind Iyengar e3d6033572 Support monitoring in hardened RKE clusters 
This commit adds support for deploying rancher-monitoring into hardened clusters.

It modifies some of the default securityContexts and does some misc. fixes such as:
- Removing default AppArmor PSP annotations from Grafana (related to https://github.com/helm/charts/issues/9090)
- Modifying rkeScheduler and rkeControllerManager to use localhost to scrape components since the endpoints aren't exposed in a hardened cluster

These changes have been verified on a hardened RKE cluster.
 2020-09-21 12:04:07 -07:00
Arvind Iyengar 7d1332356c Support pushprox in hardened RKE clusters 
This commit adds support for deploying rancher-pushprox into hardened clusters.

It introduces securityContexts and rearranges the RBAC in order to support a PodSecurityPolicy for the PushProx clients.

These changes have been verified on a hardened RKE cluster.
 2020-09-21 00:20:45 -07:00
Arvind Iyengar 4da2300a26 Move pushprox RBAC into separate file 2020-09-21 00:20:10 -07:00
Jacob Payne 60c84b3c3b
fixed eks and k3s logging in airgap (#671) 2020-09-20 15:00:04 -07:00
Arvind Iyengar b80fb3a8ff Use separate namespace only for dashboards 
This commit renames `grafana-dashboards` to `cattle-dashboards` and deprecates the `grafana-datasources` namespace in favor of the normal release namespace.

Related Issue: rancher/rancher#28887
 2020-09-19 19:23:35 -07:00
Arvind Iyengar 0fa3a06de0 Split RBAC for ConfigMaps and Secrets 
Related Issue: https://github.com/rancher/rancher/issues/29013
 2020-09-19 19:23:33 -07:00
Arvind Iyengar 2e1ed1b130 Relocate Rancher roles to overlay/ 2020-09-19 19:00:23 -07:00
Daishan 89cb2793e9 Bump fleet, rancher-operator, webhook 2020-09-18 23:01:59 -07:00
Arvind Iyengar 95cf887f5f Add annotations that were left out on rebase 
Dropped on accident in rebase https://github.com/rancher/charts/pull/641/files#diff-ed5b5b87cf149adc6a6408bf81993efdR681-R682
 2020-09-18 17:08:11 -07:00
Brenda Rearden 34676b359a
Merge pull request #667 from brendarearden/image-updates 
Set installer repo,tag in values.yaml
 2020-09-18 16:41:06 -07:00
aiyengar2 034952747f
Merge pull request #666 from aiyengar2/fix_kube_dns_namespace 
Create kube-dns service monitor in kube-system
 2020-09-18 16:34:48 -07:00
Brenda Rearden 9932422f51 Set installer repo,tag in values.yaml 2020-09-18 15:56:15 -07:00
Rajashree Mandaogane 820f105aa2
Merge pull request #663 from mrajashree/upd 
Update resourceset to include configmaps for clusterrepos
 2020-09-18 15:37:18 -07:00
Arvind Iyengar 700975ee95 Create kube-dns service monitor in kube-system 
This is required since, by default, we ignoreNamespaceSelectors.
 2020-09-18 15:35:21 -07:00
aiyengar2 afb3af8690
Merge pull request #662 from aiyengar2/use_new_busybox 
Replace rancher/busybox w/ rancher/library-busybox
 2020-09-18 15:29:56 -07:00
rajashree b3cc3a717c Update resourceset to include configmaps for clusterrepos 2020-09-18 15:26:55 -07:00
Brenda Rearden 14f0a39a4a
Merge pull request #659 from brendarearden/image-updates 
Image updates for Istio 1.7.1 and Kiali 1.23.0
 2020-09-18 10:57:10 -07:00
Prachi Damle 89746f9fe1
Merge pull request #664 from prachidamle/new_cis_fixes 
CIS chart fixes to update image tag, fixes for hardened cluster
 2020-09-18 10:47:13 -07:00
Prachi Damle 2dd35d89bb Delete tgz files from assets, parameter in the post-install hook for namespace should use the 
helm templating
 2020-09-18 10:36:16 -07:00
Brenda Rearden d397bb512c Update kiali to 1.23.0 2020-09-18 10:25:50 -07:00
Darren Shepherd ecd90e66af fleet-0.3.0-beta1 2020-09-18 07:33:18 -07:00
Prachi Damle af609af172 Fixes to clear error state on scan retry, fixes for CIS hardened cluster 2020-09-18 00:33:33 -07:00
Daishan Peng 4cd7a24bd8
Merge pull request #660 from StrongMonkey/add-rio-annotations 
Add istio dependency to rio chart
 2020-09-17 20:28:45 -07:00
Arvind Iyengar c263e58157 Replace rancher/busybox w/ rancher/library-busybox 
Related Issue: https://github.com/rancher/rancher/issues/28978
 2020-09-17 18:38:14 -07:00
Arvind Iyengar 178528b12c Rebase to new upstream at kube-prometheus-stack 
The old upstream at https://github.com/helm/charts/tree/master/stable/prometheus-operator has been deprecated in favor of the chart at https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack.

This commit modifies the rancher-monitoring patch in order to rebase to this new upstream, so it contains a ton of different changes to the patch file.

Related Issue: rancher/rancher#28822
 2020-09-17 17:10:42 -07:00
Daishan f29ed480a8 Add istio dependency to rio chart 2020-09-17 16:51:55 -07:00
Brenda Rearden 5c46fa62ec Update istio to 1.7.1 2020-09-17 00:47:14 -07:00
Darren Shepherd 915894a74a Update rancher-operator and fleet 2020-09-17 00:01:27 -07:00
rajashree 00d42a178c Expand default resourceset to include 2.5 CRDs 2020-09-16 12:14:19 -07:00
Jacob Payne 74ea61d262
rke1 to rke (#638) 2020-09-16 11:36:08 -07:00
Darren Shepherd 4fc422c4b3 Update rancher-operator 2020-09-15 23:05:11 -07:00
Darren Shepherd a0de135517 Update rancher-operator crd 2020-09-15 23:01:37 -07:00
Darren Shepherd 0239984da2 New rancher-operator and fleet 2020-09-15 22:44:15 -07:00
Darren Shepherd 16dfb1154b rancher-operator v0.1.0-alpha4 2020-09-14 22:00:59 -07:00
Arvind Iyengar d03ffe81df Create Alertmanager secret in pre-install hook 2020-09-14 16:22:16 -07:00
Prachi Damle 433d3a5ffa
Merge pull request #644 from prachidamle/new_cis_fixes 
New cis-operator state transition fixes
 2020-09-14 09:50:11 -07:00
Jacob Payne 2d2f818ad5
bumped image versions (#639) 2020-09-14 08:52:53 -07:00
Prachi Damle e0a5f24a68 Updating cis-operator image tag, correcting readme, updating CRD defn 2020-09-14 00:29:45 -07:00
Darren Shepherd 2d2bcdde50 Update fleet and rancher-operator 2020-09-12 16:14:45 -07:00
Jacob Payne 1908520a34
upgraded upstream chart version (#608) 
* upgraded upstream chart version
 2020-09-11 14:25:14 -07:00
Arvind Iyengar 4d5653b2ec Update docs, descriptions, and other minor fixes 
- [rancher-pushprox] add hidden annotation + update description
- [rancher-monitoring] update description + add monitoring app-README.md
- [rancher-monitoring|rancher-pushprox] Move systemDefaultRegistry to global.cattle
- [rancher-monitoring] Move exporter enabled logic to _helpers.tpl
 2020-09-10 17:23:47 -07:00
Darren Shepherd ec627b5fd2 rancher-webhook v0.1.0-alpha7 2020-09-10 17:22:43 -07:00
Darren Shepherd a1684f1d11 rancher-webhook v0.1.0-alpha6 2020-09-10 17:10:50 -07:00
Darren Shepherd caa9a4fc38 rancher-webhook v0.1.0-alpha4 2020-09-10 16:33:48 -07:00
Darren Shepherd ceda36dce4 Update fleet, rancher-operator, rancher-webhook 2020-09-10 15:18:31 -07:00
Rajashree Mandaogane ef9d7aeafb
Merge pull request #630 from mrajashree/quote 
Remove quotes around pvc storageClassName
 2020-09-10 15:06:24 -07:00
rajashree 4fbdb77861 Removes quotes around pvc storageClassName 
The field storageClassName uses "quote" template function. So the quotes around it
lead to errors. This commit removes the quotes
 2020-09-10 14:43:53 -07:00
Steven Crespo 81c286cb9f
Merge pull request #616 from PennyScissors/update-gatekeeper-v3.1.0 
Update opa gatekeeper to v3.1.0
 2020-09-10 14:17:31 -07:00
Steven Crespo fb8c308737 Update opa gatekeeper to v3.1.0 2020-09-10 13:12:51 -07:00
Brenda Rearden 1322150a57
Merge pull request #627 from brendarearden/istio-version-rollback 
Add annotation changes to version Istio 1.6.8
 2020-09-10 09:22:14 -07:00
Brenda Rearden 46204a9171 Add cattle system registry 2020-09-09 17:04:25 -07:00
Brenda Rearden 583b669a92 Add annotation changes to version Istio 1.6.8 2020-09-09 16:17:44 -07:00
aiyengar2 7d32212d2c
Merge pull request #595 from aiyengar2/change_crd_ownership 
Add generateCRDChart.assumeOwnershipOfCRDs flag
 2020-09-09 16:08:08 -07:00
prachidamle 2e8885abaa Generated changes 2020-09-09 22:50:15 +00:00
Prachi Damle b55e6ec019 Adding rancher-cis-benchmark-crds - CRD chart for CIS v2 
Adding rancher-cis-benchmark - Main chart for deploying cis-operator

Review comments and changes CRDs and adding the roles

Adding default ClusterScanProfiles in a Configmap

Updating kubernetes version to have major.minor.patch

Package the CRDs within the original chart and add package.yaml

chart changes for tolerations, crds, added
global.cattle.systemDefaultRegistry

Review changes to removed nodeSelector helper, combine all cis clusterroles in one file

CRD name change and adding keywords, moving package.yaml one folder upi
Renamed hardened benchmark
Move providesGVR to chart.yaml
 2020-09-09 15:45:25 -07:00
Arvind Iyengar 9fe6ed19c1 Use assumeOwnershipOfCRDs for rancher-monitoring 2020-09-09 15:25:13 -07:00
rajashree 4ad856c2cc Backup-restore-operator chart 2020-09-09 12:56:50 -07:00
Brenda Rearden da849a2dee Add providesGVR to patch file and remove from package.yaml 2020-09-09 12:52:34 -07:00
Caleb Bron f223cb6b6d Make monitoring gvr singular 2020-09-08 22:13:09 -07:00
Brenda Rearden aa13a90e13 Update provides/requires gvr, added keywords 2020-09-08 21:12:11 -07:00
Brenda Rearden e6d0c9c8bf Add hidden annotation to kiali-server chart 2020-09-08 15:43:08 -07:00
Brenda Rearden 9808ea00df Update to rancher image, remove extra end in helper 2020-09-08 15:43:08 -07:00
Arvind Iyengar 30aa33a5b1 Use Rancher mirror for jettech/kube-webhook-certgen 2020-09-08 13:41:17 -07:00
Jacob Payne 0e21736bed
use cattle system registry (#613) 2020-09-08 13:01:27 -07:00
Caleb Bron 92211af12a update how we manage dependency annotations 2020-09-04 20:46:44 -07:00
Arvind Iyengar 1b0deff7a9 Use Rancher images for monitoring subcharts 2020-09-04 12:07:58 -07:00
Arvind Iyengar bd24317ee8 Add private registry to monitoring subcharts 2020-09-04 12:07:58 -07:00
Arvind Iyengar 43efb64f82 Use fixed versions for subcharts of rancher-monitoring 2020-09-04 12:07:58 -07:00
Arvind Iyengar 3b6f47638d fix typos in alerting config 2020-09-03 15:15:36 -07:00
Caleb Bron 3bbde5f819 Remove nginx-ingress 
It was part of rke2 and all of those charts have moved elsewhere
 2020-09-03 10:50:24 -07:00
Jacob Payne ffa781597a
removed k3s syslog parser (#593) 2020-09-03 10:47:57 -07:00
Steven Crespo 4f583e6f46
Merge pull request #588 from PennyScissors/update-rancher-gatekeeper-readme 
Update default value of `auditInterval` in README
 2020-09-01 12:29:28 -07:00
Darren Shepherd 6cddc8911f Update to fleet v0.3.0-alpha6 2020-08-31 23:53:18 -07:00
Jacob Payne 96282022fa
added support for gathering rke1 container logs (#573) 2020-08-31 16:20:32 -07:00
Jacob Payne 4128861cb3
changed default operator image (#590) 2020-08-31 15:58:31 -07:00
aiyengar2 5825928eac
Merge pull request #599 from aiyengar2/update_default_alerting_template 
Update default Alerting template for defaults set in UI
 2020-08-31 14:47:14 -07:00
Jacob Payne e8486d3953
removed logging output and flow configs (#587) 2020-08-31 14:22:23 -07:00
Darren Shepherd d3a7562fda Fleet v0.3.0-alpha5 2020-08-30 21:45:42 -07:00
Arvind Iyengar 6bc9f8c45f Update default Alerting template 2020-08-28 20:14:58 -07:00
Arvind Iyengar 267b8afc95 Rearrange patch 
This commit is required due to patch flip-flops that will occur till https://github.com/rancher/rancher/issues/28627 is resolved.
 2020-08-28 16:31:41 -07:00
Jacob Payne 695110ff2b
Feature/logging/eks (#583) 
* added eks support
 2020-08-28 11:45:13 -07:00
Caleb Bron a8748de0f4
Merge pull request #544 from MonzElmasry/rke2-monitoring 
rke2-monitoring
 2020-08-26 19:21:32 -07:00
Arvind Iyengar 23fbc636ab switch copyCerts image to rancher/busybox 2020-08-26 16:34:57 -07:00
Brenda Rearden 95800e5bd0
Merge pull request #577 from brendarearden/kiali-fixes 
Update kiali image conventions, remove release.name from naming convention
 2020-08-26 16:12:36 -07:00
Brenda Rearden 5da19fc4a4 Remove release name, refactor image values, update web_root 2020-08-26 15:59:31 -07:00
Menna 7c63442e79 add rke2proxy toleration 2020-08-27 00:49:54 +02:00
Menna e5dfdc5c88 Adds support for monitoring the following k8s components in rke2 clusters: 
- `rke2-scheduler`
- `rke2-controller-manager`
- `rke2-proxy`
- `rke2-etcd`

All exporters are created from the cattle-pushprox chart. This commit
also modifies the relevant Grafana Dashboard ConfigMaps and
PrometheusRules to deploy if the PushProx exporters are enabled.

See changes to `overlay/CHANGELOG.md` for details on what has been added/modified.
 2020-08-26 22:16:37 +02:00
Arvind Iyengar e0d3e6519b Use Rancher images for rancher-monitoring 2020-08-25 19:37:34 -07:00
Arvind Iyengar aa30c498ea Add private registry support to rancher-monitoring 2020-08-25 19:37:34 -07:00
Arvind Iyengar d5a2f275f7 Add private registry support to rancher-pushprox 2020-08-25 19:37:34 -07:00
Steven Crespo 7f77955729 Update default value of `auditInterval` in README 2020-08-25 15:50:37 -07:00
Brenda Rearden cbe0c6021b Correcting version in chart.yaml 2020-08-25 14:39:23 -07:00
Brenda Rearden 49f0aaad9e Change image tags to 1.7.0, update pod image version, remove addons 2020-08-25 13:56:35 -07:00
Brenda Rearden 8445fe7bd6
Merge pull request #574 from brendarearden/istio-168 
Istio: Add default pod disruption budget
 2020-08-25 13:49:10 -07:00
aiyengar2 58374d5078
Merge pull request #534 from aiyengar2/alerting_v2 
Add Alerting V2
 2020-08-25 13:21:26 -07:00
Arvind Iyengar d085bc088f Add alerting support to rancher-monitoring 2020-08-25 12:06:39 -07:00
Brenda Rearden 5a211497c2 Add default podDisruptionBudget 2020-08-25 10:03:10 -07:00
Brenda Rearden 0786578203 Change image version to remove canary support 2020-08-25 10:00:50 -07:00
Brenda Rearden a267e30656 Change to rancher images 2020-08-25 09:59:54 -07:00
Brenda Rearden a486f692f7 Add default podDisruptionBudget 2020-08-24 17:06:25 -07:00
Jacob Payne f022fe5757 fixed missing rke2 config 2020-08-24 16:15:57 -07:00
Jacob Payne 729e3c53d4
fixed crd breakout (#578) 
* fixed crd breakout
 2020-08-24 15:17:10 -07:00
Jacob Payne fb19db55fb
Feature/logging/rke2 (#568) 
added rke2 logging support
 2020-08-24 14:04:27 -07:00
Brenda Rearden 4e719e4404 Change image version to remove canary support 2020-08-24 13:22:21 -07:00
Brenda Rearden af2f94b759
Merge pull request #569 from brendarearden/istio-167 
Remove canary and set version to 1.6.7 for upgrade testing
 2020-08-24 12:48:54 -07:00
Darren Shepherd 323e56fe20 Add Fleet 2020-08-21 18:52:51 -07:00
Jacob Payne 7e14b4ee14
fixed template issues with k3s (#567) 2020-08-21 09:28:01 -07:00
Brenda Rearden 6e4c1e8d25 Remove canary and set version to 1.6.7 for upgrade testing 2020-08-20 16:47:18 -07:00
Brenda Rearden bddd43f53f Change to rancher imags, delete old builds 2020-08-20 15:13:57 -07:00
Caleb Bron 0a381894df remove rke2 charts 2020-08-19 13:28:53 -07:00
Jacob Payne a63500248a
added k3s support (#560) 2020-08-19 12:43:00 -07:00
Steven Crespo 813457423b
Merge pull request #553 from PennyScissors/update-gatekeeper 
Update gatekeeper to v3.1.0-rc.1
 2020-08-18 15:20:34 -07:00
Daishan 4e991faf6a Update rio to v0.8.0-rc2, add experimental label 2020-08-18 13:35:00 -07:00
Arvind Iyengar d2bf307e59 Change default to all CRs in all namespaces 
This commit sets the following field to false:
`<serviceMonitor|podMonitor|rule>SelectorNilUsesHelmValues: true`

As a result, we look for all CRs with any labels in all namespaces rather than just
the ones tagged with `release: rancher-monitoring`.
 2020-08-18 10:35:27 -07:00
Arvind Iyengar f3aebdca14 Update grafana default deploymentStrategy 
If the Grafana deployment strategy is not Recreate, the deployment will
be stuck during an upgrade when PV is attached.
 2020-08-18 10:35:27 -07:00
Arvind Iyengar 215cf10a68 Add NoExecute + NoSchedule toleration to PushProx 
This commit adds NoExecute / NoSchedule tolerations by default to all of the
PushProx exporters since the default expectation when deploying these exporters
is that they are deployed on the expected nodes based on nodeSelector labels
regardless of any taints added to those nodes.

Users can always choose to override these settings if necessary.
 2020-08-18 10:35:27 -07:00
Arvind Iyengar de6fbbb129 Increase prometheus resource limits and requests 2020-08-18 10:35:23 -07:00
Arvind Iyengar 3d6b8c94c7 Move ClusterRoles and change values.yaml fields 
- Moves `monitoringRole` settings into `global.rbac` in values.yaml
- Moves user ClusterRoles into one file: `rancher-monitoring/clusterroles.yaml`
- Reformats user ClusterRoles format to look like upstream format
- Enables aggregateRolesForRBAC by default
- Updates README.md and CHANGELOG.md for relevant ClusterRole changes
 2020-08-18 10:02:30 -07:00
Arvind Iyengar 93f477b3e9 Use Rancher PushProx image 2020-08-18 10:02:30 -07:00
Arvind Iyengar 701098fd72 Update default namespace to cattle-monitoring-system 2020-08-18 10:02:28 -07:00
Arvind Iyengar 63647c6849 Update README to add rancher-monitoring changes 
Adds prometheus-adapter and rancher-pushprox to the README.md and also
adds fields for Rancher Monitoring config
 2020-08-18 09:58:43 -07:00
brendarearden ff8bcc0755 Change namespace back to istio-system 
Add force install flag
Increase istio version
 2020-08-17 17:30:08 -07:00
Jacob Payne b3e81b1db6
added image overrides (#554) 2020-08-17 16:53:55 -07:00
Steven Crespo 1aaa1948f6 Update gatekeeper to v3.1.0-rc.1 
- Updated package to reference latest release
- Removed previous chart's tgz to make changes in place
 2020-08-17 13:11:15 -07:00
Caleb Bron b76723768c add custom web_root to kiali 2020-08-17 11:57:03 -07:00
Jacob Payne 3ec3d344c7
added toggle for logging persistence (#540) 2020-08-14 13:17:33 -07:00
Jacob Payne 444367b353
Merge pull request #539 from paynejacob/logging-secrets 
use secrets for certs and passwords
 2020-08-14 10:20:47 -07:00