Commit Graph

352 Commits (6b385a97b90d48dfc8fc081f36a8345025edfdb9)

Author SHA1 Message Date
Darren Shepherd b96368994d
(dev-v2.6-archive) Fleet v0.3.0-alpha5
(partially cherry picked from commit d3a7562fda)
2022-01-06 11:32:48 -08:00
Arvind Iyengar 25f1d860c0
(dev-v2.6-archive) Update default Alerting template
(partially cherry picked from commit 6bc9f8c45f)
2022-01-06 11:32:48 -08:00
Arvind Iyengar 5d7ce13351
(dev-v2.6-archive) Rearrange patch
This commit is required due to patch flip-flops that will occur till https://github.com/rancher/rancher/issues/28627 is resolved.

(partially cherry picked from commit 267b8afc95)
2022-01-06 11:32:47 -08:00
Jacob Payne c36cd669ce
(dev-v2.6-archive) Feature/logging/eks (#583)
* added eks support

(partially cherry picked from commit 695110ff2b)
2022-01-06 11:32:47 -08:00
Caleb Bron 54dcb1a2ef
(dev-v2.6-archive) Merge pull request #544 from MonzElmasry/rke2-monitoring
rke2-monitoring

(partially cherry picked from commit a8748de0f4)
2022-01-06 11:32:46 -08:00
Arvind Iyengar 8e591ce2af
(dev-v2.6-archive) switch copyCerts image to rancher/busybox
(partially cherry picked from commit 23fbc636ab)
2022-01-06 11:32:46 -08:00
Brenda Rearden 5fc81128ca
(dev-v2.6-archive) Merge pull request #577 from brendarearden/kiali-fixes
Update kiali image conventions, remove release.name from naming convention

(partially cherry picked from commit 95800e5bd0)
2022-01-06 11:32:45 -08:00
Brenda Rearden 036a7bef97
(dev-v2.6-archive) Remove release name, refactor image values, update web_root
(partially cherry picked from commit 5da19fc4a4)
2022-01-06 11:32:45 -08:00
Menna 2f3f12fa4c
(dev-v2.6-archive) add rke2proxy toleration
(partially cherry picked from commit 7c63442e79)
2022-01-06 11:32:44 -08:00
Menna f28495743d
(dev-v2.6-archive) Adds support for monitoring the following k8s components in rke2 clusters:
- `rke2-scheduler`
- `rke2-controller-manager`
- `rke2-proxy`
- `rke2-etcd`

All exporters are created from the cattle-pushprox chart. This commit
also modifies the relevant Grafana Dashboard ConfigMaps and
PrometheusRules to deploy if the PushProx exporters are enabled.

See changes to `overlay/CHANGELOG.md` for details on what has been added/modified.

(partially cherry picked from commit e5dfdc5c88)
2022-01-06 11:32:44 -08:00
Arvind Iyengar 200aba0f0e
(dev-v2.6-archive) Use Rancher images for rancher-monitoring
(partially cherry picked from commit e0d3e6519b)
2022-01-06 11:32:43 -08:00
Arvind Iyengar 261ea5234f
(dev-v2.6-archive) Add private registry support to rancher-monitoring
(partially cherry picked from commit aa30c498ea)
2022-01-06 11:32:42 -08:00
Arvind Iyengar fed0d9cf3b
(dev-v2.6-archive) Add private registry support to rancher-pushprox
(partially cherry picked from commit d5a2f275f7)
2022-01-06 11:32:42 -08:00
Steven Crespo 33cfbfc673
(dev-v2.6-archive) Update default value of `auditInterval` in README
(partially cherry picked from commit 7f77955729)
2022-01-06 11:32:41 -08:00
Brenda Rearden 268166def1
(dev-v2.6-archive) Correcting version in chart.yaml
(partially cherry picked from commit cbe0c6021b)
2022-01-06 11:32:41 -08:00
Brenda Rearden 3990a653f2
(dev-v2.6-archive) Change image tags to 1.7.0, update pod image version, remove addons
(partially cherry picked from commit 49f0aaad9e)
2022-01-06 11:32:40 -08:00
Brenda Rearden e8f7e0842d
(dev-v2.6-archive) Merge pull request #574 from brendarearden/istio-168
Istio: Add default pod disruption budget

(partially cherry picked from commit 8445fe7bd6)
2022-01-06 11:32:40 -08:00
aiyengar2 314abc60c0
(dev-v2.6-archive) Merge pull request #534 from aiyengar2/alerting_v2
Add Alerting V2

(partially cherry picked from commit 58374d5078)
2022-01-06 11:32:40 -08:00
Arvind Iyengar c5b386d2e8
(dev-v2.6-archive) Add alerting support to rancher-monitoring
(partially cherry picked from commit d085bc088f)
2022-01-06 11:32:39 -08:00
Brenda Rearden 68da928570
(dev-v2.6-archive) Add default podDisruptionBudget
(partially cherry picked from commit 5a211497c2)
2022-01-06 11:32:39 -08:00
Brenda Rearden 3972b3e913
(dev-v2.6-archive) Change image version to remove canary support
(partially cherry picked from commit 0786578203)
2022-01-06 11:32:38 -08:00
Brenda Rearden 89c0769f87
(dev-v2.6-archive) Change to rancher images
(partially cherry picked from commit a267e30656)
2022-01-06 11:32:38 -08:00
Brenda Rearden 79e8630531
(dev-v2.6-archive) Add default podDisruptionBudget
(partially cherry picked from commit a486f692f7)
2022-01-06 11:32:37 -08:00
Jacob Payne b5283d8838
(dev-v2.6-archive) fixed missing rke2 config
(partially cherry picked from commit f022fe5757)
2022-01-06 11:32:37 -08:00
Jacob Payne 8e72e0da12
(dev-v2.6-archive) fixed crd breakout (#578)
* fixed crd breakout

(partially cherry picked from commit 729e3c53d4)
2022-01-06 11:32:36 -08:00
Jacob Payne 7958a2e9eb
(dev-v2.6-archive) Feature/logging/rke2 (#568)
added rke2 logging support

(partially cherry picked from commit fb19db55fb)
2022-01-06 11:32:36 -08:00
Brenda Rearden cdb296b1d1
(dev-v2.6-archive) Change image version to remove canary support
(partially cherry picked from commit 4e719e4404)
2022-01-06 11:32:35 -08:00
Brenda Rearden 3b9e525e2d
(dev-v2.6-archive) Merge pull request #569 from brendarearden/istio-167
Remove canary and set version to 1.6.7 for upgrade testing

(partially cherry picked from commit af2f94b759)
2022-01-06 11:32:35 -08:00
Darren Shepherd 9e5c0abc62
(dev-v2.6-archive) Add Fleet
(partially cherry picked from commit 323e56fe20)
2022-01-06 11:32:34 -08:00
Jacob Payne d91f49e076
(dev-v2.6-archive) fixed template issues with k3s (#567)
(partially cherry picked from commit 7e14b4ee14)
2022-01-06 11:32:34 -08:00
Brenda Rearden 1799bcb3bf
(dev-v2.6-archive) Remove canary and set version to 1.6.7 for upgrade testing
(partially cherry picked from commit 6e4c1e8d25)
2022-01-06 11:32:33 -08:00
Brenda Rearden dd7e18120c
(dev-v2.6-archive) Change to rancher imags, delete old builds
(partially cherry picked from commit bddd43f53f)
2022-01-06 11:32:33 -08:00
Caleb Bron b5eaa9042c
(dev-v2.6-archive) remove rke2 charts
(partially cherry picked from commit 0a381894df)
2022-01-06 11:32:32 -08:00
Jacob Payne 7bfb20e89a
(dev-v2.6-archive) added k3s support (#560)
(partially cherry picked from commit a63500248a)
2022-01-06 11:32:32 -08:00
Steven Crespo 65557904bf
(dev-v2.6-archive) Merge pull request #553 from PennyScissors/update-gatekeeper
Update gatekeeper to v3.1.0-rc.1

(partially cherry picked from commit 813457423b)
2022-01-06 11:32:31 -08:00
Daishan 7dc502a321
(dev-v2.6-archive) Update rio to v0.8.0-rc2, add experimental label
(partially cherry picked from commit 4e991faf6a)
2022-01-06 11:32:31 -08:00
Arvind Iyengar 77be6b1378
(dev-v2.6-archive) Change default to all CRs in all namespaces
This commit sets the following field to false:
`<serviceMonitor|podMonitor|rule>SelectorNilUsesHelmValues: true`

As a result, we look for all CRs with any labels in all namespaces rather than just
the ones tagged with `release: rancher-monitoring`.

(partially cherry picked from commit d2bf307e59)
2022-01-06 11:32:30 -08:00
Arvind Iyengar 1167f62350
(dev-v2.6-archive) Update grafana default deploymentStrategy
If the Grafana deployment strategy is not Recreate, the deployment will
be stuck during an upgrade when PV is attached.

(partially cherry picked from commit f3aebdca14)
2022-01-06 11:32:30 -08:00
Arvind Iyengar 99cb52dac7
(dev-v2.6-archive) Add NoExecute + NoSchedule toleration to PushProx
This commit adds NoExecute / NoSchedule tolerations by default to all of the
PushProx exporters since the default expectation when deploying these exporters
is that they are deployed on the expected nodes based on nodeSelector labels
regardless of any taints added to those nodes.

Users can always choose to override these settings if necessary.

(partially cherry picked from commit 215cf10a68)
2022-01-06 11:32:29 -08:00
Arvind Iyengar bf8675697f
(dev-v2.6-archive) Increase prometheus resource limits and requests
(partially cherry picked from commit de6fbbb129)
2022-01-06 11:32:29 -08:00
Arvind Iyengar 54f6d00110
(dev-v2.6-archive) Move ClusterRoles and change values.yaml fields
- Moves `monitoringRole` settings into `global.rbac` in values.yaml
- Moves user ClusterRoles into one file: `rancher-monitoring/clusterroles.yaml`
- Reformats user ClusterRoles format to look like upstream format
- Enables aggregateRolesForRBAC by default
- Updates README.md and CHANGELOG.md for relevant ClusterRole changes

(partially cherry picked from commit 3d6b8c94c7)
2022-01-06 11:32:28 -08:00
Arvind Iyengar b643adedc0
(dev-v2.6-archive) Use Rancher PushProx image
(partially cherry picked from commit 93f477b3e9)
2022-01-06 11:32:28 -08:00
Arvind Iyengar 74439b3f23
(dev-v2.6-archive) Update default namespace to cattle-monitoring-system
(partially cherry picked from commit 701098fd72)
2022-01-06 11:32:27 -08:00
Arvind Iyengar 67f6d928ab
(dev-v2.6-archive) Update README to add rancher-monitoring changes
Adds prometheus-adapter and rancher-pushprox to the README.md and also
adds fields for Rancher Monitoring config

(partially cherry picked from commit 63647c6849)
2022-01-06 11:32:27 -08:00
brendarearden bb03a724e0
(dev-v2.6-archive) Change namespace back to istio-system
Add force install flag
Increase istio version

(partially cherry picked from commit ff8bcc0755)
2022-01-06 11:32:26 -08:00
Jacob Payne f5880772d6
(dev-v2.6-archive) added image overrides (#554)
(partially cherry picked from commit b3e81b1db6)
2022-01-06 11:32:26 -08:00
Steven Crespo f6e48e44ae
(dev-v2.6-archive) Update gatekeeper to v3.1.0-rc.1
- Updated package to reference latest release
- Removed previous chart's tgz to make changes in place

(partially cherry picked from commit 1aaa1948f6)
2022-01-06 11:32:25 -08:00
Caleb Bron d6dbe16191
(dev-v2.6-archive) add custom web_root to kiali
(partially cherry picked from commit b76723768c)
2022-01-06 11:32:25 -08:00
Jacob Payne 400c0e7cad
(dev-v2.6-archive) added toggle for logging persistence (#540)
(partially cherry picked from commit 3ec3d344c7)
2022-01-06 11:32:24 -08:00
Jacob Payne 65ed401a0b
(dev-v2.6-archive) Merge pull request #539 from paynejacob/logging-secrets
use secrets for certs and passwords

(partially cherry picked from commit 444367b353)
2022-01-06 11:32:24 -08:00
Caleb Bron f58e10c4aa
(dev-v2.6-archive) Remove helm vendored dependencies from charts
(partially cherry picked from commit cb3b2acebd)
2022-01-06 11:32:23 -08:00
cbron 82a5370088
(dev-v2.6-archive) Generated changes
(partially cherry picked from commit 7e532ef2fe)
2022-01-06 11:32:22 -08:00
Caleb Bron f69fe062c6
(dev-v2.6-archive) Merge pull request #532 from cbron/kiali-server
rancher-kiali-server

(partially cherry picked from commit 9329c3c38d)
2022-01-06 11:32:22 -08:00
Jacob Payne f9245f662f
(dev-v2.6-archive) use secrets for certs and passwords
(partially cherry picked from commit 4f4e7dce5d)
2022-01-06 11:32:21 -08:00
Jacob Payne 2f50ffa5c4
(dev-v2.6-archive) Merge pull request #536 from paynejacob/fix/issue-28256
fixed logging cluster roles

(partially cherry picked from commit 413a846647)
2022-01-06 11:32:21 -08:00
Jacob Payne e05f634466
(dev-v2.6-archive) Merge pull request #535 from paynejacob/feature/rke
added rke support

(partially cherry picked from commit 924a9fd125)
2022-01-06 11:32:20 -08:00
Jacob Payne 56bc2e6fc0
(dev-v2.6-archive) Merge pull request #537 from paynejacob/feature/logging-crd-breakout
added crd annotations for logging

(partially cherry picked from commit 8dc1928d82)
2022-01-06 11:32:20 -08:00
Jacob Payne 41b77cb8e0
(dev-v2.6-archive) added rke support
(partially cherry picked from commit 569e213fe8)
2022-01-06 11:32:19 -08:00
Jacob Payne 78ffaa8df3
(dev-v2.6-archive) added crd annotations for logging
(partially cherry picked from commit ac8099a8e3)
2022-01-06 11:32:19 -08:00
Steven Crespo 43572f2c70
(dev-v2.6-archive) Merge pull request #527 from PennyScissors/update-gatekeeper-chart-rebase
Update gatekeeper chart

(partially cherry picked from commit fbbcefc976)
2022-01-06 11:32:19 -08:00
Jacob Payne 2bdbe9d888
(dev-v2.6-archive) fixed logging cluster roles
(partially cherry picked from commit 6e70b85a5b)
2022-01-06 11:32:18 -08:00
Caleb Bron 326e93fe55
(dev-v2.6-archive) rancher-kiali-server init
(partially cherry picked from commit ef8a72e077)
2022-01-06 11:32:18 -08:00
Darren Shepherd 75a1d1f625
(dev-v2.6-archive) Remove ECM feature chart
(partially cherry picked from commit 6554efb687)
2022-01-06 11:32:17 -08:00
Steven Crespo 88a5e1654f
(dev-v2.6-archive) Add webhook service and update changelog
(partially cherry picked from commit c6370509d8)
2022-01-06 11:32:17 -08:00
Steven Crespo 6485c882dd
(dev-v2.6-archive) Move add-on files to overlay
Move add-on files allowedrepos.yaml, job-constraints-crd.yaml and
requiredlabels.yaml to overlay

(partially cherry picked from commit 865476ee75)
2022-01-06 11:32:16 -08:00
Jacob Payne 45057ae28f
(dev-v2.6-archive) Merge pull request #522 from paynejacob/feature/logging-providers
added kafka, splunk, syslog output support

(partially cherry picked from commit 33fa5f70ca)
2022-01-06 11:32:16 -08:00
Steven Crespo 812cabad8a
(dev-v2.6-archive) Enable generate CRD chart
(partially cherry picked from commit df740fecc8)
2022-01-06 11:32:15 -08:00
Steven Crespo 34f2f45468
(dev-v2.6-archive) Update for Helm 3 compatibility
- Move crds to crds directory
- Remove crd-install hooks and templates from crds

(partially cherry picked from commit 19b1be917d)
2022-01-06 11:32:15 -08:00
Steven Crespo b50f96056d
(dev-v2.6-archive) Remove index and update istio-kubectl
- Remove index as we package and host our charts
- Update rancher/istio-kubectl image tag to 1.5.8

(partially cherry picked from commit d2578e40da)
2022-01-06 11:32:15 -08:00
Steven Crespo 071fc996e0
(dev-v2.6-archive) Update namespace annotation
- Update namespace annotation to `cattle-gatekeeper-system`
- Remove `gatekeeper-system` from templates as Rancher handles
namespaces for chart installation.

(partially cherry picked from commit 6e147640be)
2022-01-06 11:32:14 -08:00
Jacob Payne 16b52cb135
(dev-v2.6-archive) added kafka, splunk, syslog output support
(partially cherry picked from commit 75d396906a)
2022-01-06 11:32:14 -08:00
Brenda Rearden 834dfcbf0d
(dev-v2.6-archive) Merge pull request #529 from brendarearden/istio-versioning
Update version to 1.6.7

(partially cherry picked from commit df9f93262b)
2022-01-06 11:32:13 -08:00
Steven Crespo 1d5874faa4
(dev-v2.6-archive) Update opa gatekeeper chart to v3.1.0-beta.11
The previous patch didn't apply cleanly since the latest version had
significant changes made including structural. Instead I started with
an empty patch file and made changes manually. This patch includes the
same changes done in our previous patch, but on the latest version of
the chart.

(partially cherry picked from commit 3d8b451d4a)
2022-01-06 11:32:13 -08:00
Arvind Iyengar 014be77b77
(dev-v2.6-archive) Remove CRD code from upstream
Removes the code that supports the Helm 2 hack for crd/ (`prometheus-operator/cleanup-crds.yaml` and
`prometheus-operator/crds.yaml`) and removes crd-install hooks from crds.

Also updates the README.md and CHANGELOG.md accordingly.

(partially cherry picked from commit 921f735cbc)
2022-01-06 11:32:12 -08:00
Brenda Rearden db4a2dd1e3
(dev-v2.6-archive) Update version to 1.6.7
(partially cherry picked from commit b0a79ea343)
2022-01-06 11:32:12 -08:00
aiyengar2 662552e078
(dev-v2.6-archive) Merge pull request #517 from aiyengar2/add_split_crd_flag
Add generateCRDChart flag

(partially cherry picked from commit c72f44d1cc)
2022-01-06 11:32:12 -08:00
Arvind Iyengar bdb8f7d3bf
(dev-v2.6-archive) Enable splitting CRDs to separate package
This commit adds script changes to automatically allow packages to split
the CRD components located in a crd/ directory into a separate package.

It also automatically adds in a validation yaml helper to the main package
to prevent a user from installing the base package without installing the crd
install package first.

Any package can enable the creation of a separate crd package by just adding
`splitCRDsIntoSeparatePackage: true` into the package.yaml, as shown in the
rancher-monitoring chart.

(partially cherry picked from commit fcc8528186)
2022-01-06 11:32:11 -08:00
Jacob Payne bd4b445e42
(dev-v2.6-archive) fixed logging namespace and ui component name
(partially cherry picked from commit bca787abea)
2022-01-06 11:32:11 -08:00
Vincent Fiduccia 8129f4196f
(dev-v2.6-archive) Update README.md
(partially cherry picked from commit d239bf188a)
2022-01-06 11:32:10 -08:00
Caleb Bron f893fe12c3
(dev-v2.6-archive) moving dev-charts to charts and fixing logo path
(partially cherry picked from commit a224a87038)
2022-01-06 11:32:10 -08:00
Caleb Bron 35c812165a
(dev-v2.6-archive) copy charts from dev-charts
(partially cherry picked from commit f7dd80a3c1)
2022-01-06 11:32:09 -08:00
Denise Schannon 3c2a851726
(dev-v2.6-archive) Initial commit
(partially cherry picked from commit 44e16849c3)
2022-01-06 11:32:09 -08:00
Arvind Iyengar 0b5f0f8c2e
Remove packages/istio from the main branch
This commit removes packages/istio from the main branch.

This has been a long-standing pending maintenance task and should not have any impact on the main branch.

Signed-off-by: Arvind Iyengar <arvind.iyengar@rancher.com>
2021-01-14 22:23:04 -08:00
actions f5fcf301c1 Generated changes 2020-10-02 00:51:10 +00:00
Caleb Bron 2087de28b5 clean up main 2020-09-30 16:45:24 -07:00
rajashree 37a8648cf8 Change encryption config field name in restore crd 2020-09-22 10:26:48 -07:00
maggieliu 34fdd14bca
Merge pull request #674 from aiyengar2/fix_monitoring_chart_hardened
Support monitoring in hardened RKE clusters
2020-09-22 10:04:58 -07:00
maggieliu 6edb750ce9
Merge pull request #675 from aiyengar2/fix_pushprox_chart_hardened
Support pushprox in hardened RKE clusters
2020-09-22 10:04:44 -07:00
Prachi Damle 0f786657a2
Merge pull request #676 from prachidamle/airgap_fix
Use global registry for security-scan and sonobuoy tool images to support airgapped setups
2020-09-21 20:59:38 -07:00
Jacob Payne 91d1dedca1
allow tolerations to be passed to fluentbit containers (#673) 2020-09-21 16:47:48 -07:00
Prachi Damle 42f30bfad1 Use the system_default_registry for security-scan and sonobuoy images
Deleting tgz assets
2020-09-21 15:21:56 -07:00
Steven Crespo 32f1b41934
Merge pull request #670 from PennyScissors/update-gk-v3.1.1
Update gatekeeper to version 3.1.1
2020-09-21 15:01:46 -07:00
Steven Crespo 5757f8cc15 Update gatekeeper to v3.1.1 2020-09-21 12:26:43 -07:00
Arvind Iyengar e3d6033572 Support monitoring in hardened RKE clusters
This commit adds support for deploying rancher-monitoring into hardened clusters.

It modifies some of the default securityContexts and does some misc. fixes such as:
- Removing default AppArmor PSP annotations from Grafana (related to https://github.com/helm/charts/issues/9090)
- Modifying rkeScheduler and rkeControllerManager to use localhost to scrape components since the endpoints aren't exposed in a hardened cluster

These changes have been verified on a hardened RKE cluster.
2020-09-21 12:04:07 -07:00
Arvind Iyengar 7d1332356c Support pushprox in hardened RKE clusters
This commit adds support for deploying rancher-pushprox into hardened clusters.

It introduces securityContexts and rearranges the RBAC in order to support a PodSecurityPolicy for the PushProx clients.

These changes have been verified on a hardened RKE cluster.
2020-09-21 00:20:45 -07:00
Arvind Iyengar 4da2300a26 Move pushprox RBAC into separate file 2020-09-21 00:20:10 -07:00
Jacob Payne 60c84b3c3b
fixed eks and k3s logging in airgap (#671) 2020-09-20 15:00:04 -07:00
Arvind Iyengar b80fb3a8ff Use separate namespace only for dashboards
This commit renames `grafana-dashboards` to `cattle-dashboards` and deprecates the `grafana-datasources` namespace in favor of the normal release namespace.

Related Issue: rancher/rancher#28887
2020-09-19 19:23:35 -07:00
Arvind Iyengar 0fa3a06de0 Split RBAC for ConfigMaps and Secrets
Related Issue: https://github.com/rancher/rancher/issues/29013
2020-09-19 19:23:33 -07:00
Arvind Iyengar 2e1ed1b130 Relocate Rancher roles to overlay/ 2020-09-19 19:00:23 -07:00
Daishan 89cb2793e9 Bump fleet, rancher-operator, webhook 2020-09-18 23:01:59 -07:00
Arvind Iyengar 95cf887f5f Add annotations that were left out on rebase
Dropped on accident in rebase https://github.com/rancher/charts/pull/641/files#diff-ed5b5b87cf149adc6a6408bf81993efdR681-R682
2020-09-18 17:08:11 -07:00
Brenda Rearden 34676b359a
Merge pull request #667 from brendarearden/image-updates
Set installer repo,tag in values.yaml
2020-09-18 16:41:06 -07:00
aiyengar2 034952747f
Merge pull request #666 from aiyengar2/fix_kube_dns_namespace
Create kube-dns service monitor in kube-system
2020-09-18 16:34:48 -07:00
Brenda Rearden 9932422f51 Set installer repo,tag in values.yaml 2020-09-18 15:56:15 -07:00
Rajashree Mandaogane 820f105aa2
Merge pull request #663 from mrajashree/upd
Update resourceset to include configmaps for clusterrepos
2020-09-18 15:37:18 -07:00
Arvind Iyengar 700975ee95 Create kube-dns service monitor in kube-system
This is required since, by default, we ignoreNamespaceSelectors.
2020-09-18 15:35:21 -07:00
aiyengar2 afb3af8690
Merge pull request #662 from aiyengar2/use_new_busybox
Replace rancher/busybox w/ rancher/library-busybox
2020-09-18 15:29:56 -07:00
rajashree b3cc3a717c Update resourceset to include configmaps for clusterrepos 2020-09-18 15:26:55 -07:00
Brenda Rearden 14f0a39a4a
Merge pull request #659 from brendarearden/image-updates
Image updates for Istio 1.7.1 and Kiali 1.23.0
2020-09-18 10:57:10 -07:00
Prachi Damle 89746f9fe1
Merge pull request #664 from prachidamle/new_cis_fixes
CIS chart fixes to update image tag, fixes for hardened cluster
2020-09-18 10:47:13 -07:00
Prachi Damle 2dd35d89bb Delete tgz files from assets, parameter in the post-install hook for namespace should use the
helm templating
2020-09-18 10:36:16 -07:00
Brenda Rearden d397bb512c Update kiali to 1.23.0 2020-09-18 10:25:50 -07:00
Darren Shepherd ecd90e66af fleet-0.3.0-beta1 2020-09-18 07:33:18 -07:00
Prachi Damle af609af172 Fixes to clear error state on scan retry, fixes for CIS hardened cluster 2020-09-18 00:33:33 -07:00
Daishan Peng 4cd7a24bd8
Merge pull request #660 from StrongMonkey/add-rio-annotations
Add istio dependency to rio chart
2020-09-17 20:28:45 -07:00
Arvind Iyengar c263e58157 Replace rancher/busybox w/ rancher/library-busybox
Related Issue: https://github.com/rancher/rancher/issues/28978
2020-09-17 18:38:14 -07:00
Arvind Iyengar 178528b12c Rebase to new upstream at kube-prometheus-stack
The old upstream at https://github.com/helm/charts/tree/master/stable/prometheus-operator has been deprecated in favor of the chart at https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack.

This commit modifies the rancher-monitoring patch in order to rebase to this new upstream, so it contains a ton of different changes to the patch file.

Related Issue: rancher/rancher#28822
2020-09-17 17:10:42 -07:00
Daishan f29ed480a8 Add istio dependency to rio chart 2020-09-17 16:51:55 -07:00
Brenda Rearden 5c46fa62ec Update istio to 1.7.1 2020-09-17 00:47:14 -07:00
Darren Shepherd 915894a74a Update rancher-operator and fleet 2020-09-17 00:01:27 -07:00
rajashree 00d42a178c Expand default resourceset to include 2.5 CRDs 2020-09-16 12:14:19 -07:00
Jacob Payne 74ea61d262
rke1 to rke (#638) 2020-09-16 11:36:08 -07:00
Darren Shepherd 4fc422c4b3 Update rancher-operator 2020-09-15 23:05:11 -07:00
Darren Shepherd a0de135517 Update rancher-operator crd 2020-09-15 23:01:37 -07:00
Darren Shepherd 0239984da2 New rancher-operator and fleet 2020-09-15 22:44:15 -07:00
Darren Shepherd 16dfb1154b rancher-operator v0.1.0-alpha4 2020-09-14 22:00:59 -07:00
Arvind Iyengar d03ffe81df Create Alertmanager secret in pre-install hook 2020-09-14 16:22:16 -07:00
Prachi Damle 433d3a5ffa
Merge pull request #644 from prachidamle/new_cis_fixes
New cis-operator state transition fixes
2020-09-14 09:50:11 -07:00
Jacob Payne 2d2f818ad5
bumped image versions (#639) 2020-09-14 08:52:53 -07:00
Prachi Damle e0a5f24a68 Updating cis-operator image tag, correcting readme, updating CRD defn 2020-09-14 00:29:45 -07:00
Darren Shepherd 2d2bcdde50 Update fleet and rancher-operator 2020-09-12 16:14:45 -07:00
Jacob Payne 1908520a34
upgraded upstream chart version (#608)
* upgraded upstream chart version
2020-09-11 14:25:14 -07:00
Arvind Iyengar 4d5653b2ec Update docs, descriptions, and other minor fixes
- [rancher-pushprox] add hidden annotation + update description
- [rancher-monitoring] update description + add monitoring app-README.md
- [rancher-monitoring|rancher-pushprox] Move systemDefaultRegistry to global.cattle
- [rancher-monitoring] Move exporter enabled logic to _helpers.tpl
2020-09-10 17:23:47 -07:00
Darren Shepherd ec627b5fd2 rancher-webhook v0.1.0-alpha7 2020-09-10 17:22:43 -07:00
Darren Shepherd a1684f1d11 rancher-webhook v0.1.0-alpha6 2020-09-10 17:10:50 -07:00
Darren Shepherd caa9a4fc38 rancher-webhook v0.1.0-alpha4 2020-09-10 16:33:48 -07:00
Darren Shepherd ceda36dce4 Update fleet, rancher-operator, rancher-webhook 2020-09-10 15:18:31 -07:00
Rajashree Mandaogane ef9d7aeafb
Merge pull request #630 from mrajashree/quote
Remove quotes around pvc storageClassName
2020-09-10 15:06:24 -07:00
rajashree 4fbdb77861 Removes quotes around pvc storageClassName
The field storageClassName uses "quote" template function. So the quotes around it
lead to errors. This commit removes the quotes
2020-09-10 14:43:53 -07:00
Steven Crespo 81c286cb9f
Merge pull request #616 from PennyScissors/update-gatekeeper-v3.1.0
Update opa gatekeeper to v3.1.0
2020-09-10 14:17:31 -07:00
Steven Crespo fb8c308737 Update opa gatekeeper to v3.1.0 2020-09-10 13:12:51 -07:00
Brenda Rearden 1322150a57
Merge pull request #627 from brendarearden/istio-version-rollback
Add annotation changes to version Istio 1.6.8
2020-09-10 09:22:14 -07:00
Brenda Rearden 46204a9171 Add cattle system registry 2020-09-09 17:04:25 -07:00
Brenda Rearden 583b669a92 Add annotation changes to version Istio 1.6.8 2020-09-09 16:17:44 -07:00
aiyengar2 7d32212d2c
Merge pull request #595 from aiyengar2/change_crd_ownership
Add generateCRDChart.assumeOwnershipOfCRDs flag
2020-09-09 16:08:08 -07:00
prachidamle 2e8885abaa Generated changes 2020-09-09 22:50:15 +00:00
Prachi Damle b55e6ec019 Adding rancher-cis-benchmark-crds - CRD chart for CIS v2
Adding rancher-cis-benchmark - Main chart for deploying cis-operator

Review comments and changes CRDs and adding the roles

Adding default ClusterScanProfiles in a Configmap

Updating kubernetes version to have major.minor.patch

Package the CRDs within the original chart and add package.yaml

chart changes for tolerations, crds, added
global.cattle.systemDefaultRegistry

Review changes to removed nodeSelector helper, combine all cis clusterroles in one file

CRD name change and adding keywords, moving package.yaml one folder upi
Renamed hardened benchmark
Move providesGVR to chart.yaml
2020-09-09 15:45:25 -07:00
Arvind Iyengar 9fe6ed19c1 Use assumeOwnershipOfCRDs for rancher-monitoring 2020-09-09 15:25:13 -07:00
rajashree 4ad856c2cc Backup-restore-operator chart 2020-09-09 12:56:50 -07:00