Commit Graph

545 Commits (75a1d1f6251e0d6dbf153a1afda5fa2f23373f2a)

Author SHA1 Message Date
Steven Crespo 5757f8cc15 Update gatekeeper to v3.1.1 2020-09-21 12:26:43 -07:00
Arvind Iyengar 0824c9466c remove tgz 2020-09-21 12:04:36 -07:00
Arvind Iyengar e3d6033572 Support monitoring in hardened RKE clusters
This commit adds support for deploying rancher-monitoring into hardened clusters.

It modifies some of the default securityContexts and does some misc. fixes such as:
- Removing default AppArmor PSP annotations from Grafana (related to https://github.com/helm/charts/issues/9090)
- Modifying rkeScheduler and rkeControllerManager to use localhost to scrape components since the endpoints aren't exposed in a hardened cluster

These changes have been verified on a hardened RKE cluster.
2020-09-21 12:04:07 -07:00
aiyengar2 66cf6d5927 Generated changes 2020-09-21 17:39:44 +00:00
aiyengar2 b94e65a535
Merge pull request #672 from aiyengar2/fix_crd_chart_hardened
Add securityContext to assumeOwnership CRD charts
2020-09-21 10:39:11 -07:00
Arvind Iyengar 205e38bb81 remove tgz 2020-09-21 00:20:47 -07:00
Arvind Iyengar 7d1332356c Support pushprox in hardened RKE clusters
This commit adds support for deploying rancher-pushprox into hardened clusters.

It introduces securityContexts and rearranges the RBAC in order to support a PodSecurityPolicy for the PushProx clients.

These changes have been verified on a hardened RKE cluster.
2020-09-21 00:20:45 -07:00
Arvind Iyengar 4da2300a26 Move pushprox RBAC into separate file 2020-09-21 00:20:10 -07:00
Arvind Iyengar 6da26e3c49 remove tgz 2020-09-20 16:40:32 -07:00
Arvind Iyengar d52f614415 Add securityContext to assumeOwnership CRD charts 2020-09-20 16:38:26 -07:00
paynejacob 4600d62603 Generated changes 2020-09-20 22:00:38 +00:00
Jacob Payne 60c84b3c3b
fixed eks and k3s logging in airgap (#671) 2020-09-20 15:00:04 -07:00
aiyengar2 7abe624645 Generated changes 2020-09-20 02:42:59 +00:00
aiyengar2 e2d51db8f8
Merge pull request #648 from aiyengar2/refactor_grafana_namespaces
Use separate namespace only for dashboards
2020-09-19 19:42:30 -07:00
Arvind Iyengar b5b32789d2 remove tgz 2020-09-19 19:23:35 -07:00
Arvind Iyengar b80fb3a8ff Use separate namespace only for dashboards
This commit renames `grafana-dashboards` to `cattle-dashboards` and deprecates the `grafana-datasources` namespace in favor of the normal release namespace.

Related Issue: rancher/rancher#28887
2020-09-19 19:23:35 -07:00
Arvind Iyengar 0fa3a06de0 Split RBAC for ConfigMaps and Secrets
Related Issue: https://github.com/rancher/rancher/issues/29013
2020-09-19 19:23:33 -07:00
Arvind Iyengar 2e1ed1b130 Relocate Rancher roles to overlay/ 2020-09-19 19:00:23 -07:00
ibuildthecloud f53ab23985 Generated changes 2020-09-19 06:04:16 +00:00
Darren Shepherd 0353d74289
Merge pull request #669 from StrongMonkey/update-fleet
Bump fleet, rancher-operator, webhook
2020-09-18 23:03:38 -07:00
Daishan 89cb2793e9 Bump fleet, rancher-operator, webhook 2020-09-18 23:01:59 -07:00
aiyengar2 6c1ea7bf39 Generated changes 2020-09-19 00:09:41 +00:00
aiyengar2 9b3eaac5f5
Merge pull request #668 from aiyengar2/fix_missing_annotation_on_secret
Add annotations that were left out on rebase
2020-09-18 17:09:13 -07:00
Arvind Iyengar c375218e54 remove tgz 2020-09-18 17:08:22 -07:00
Arvind Iyengar 95cf887f5f Add annotations that were left out on rebase
Dropped on accident in rebase https://github.com/rancher/charts/pull/641/files#diff-ed5b5b87cf149adc6a6408bf81993efdR681-R682
2020-09-18 17:08:11 -07:00
brendarearden bd35128e6f Generated changes 2020-09-18 23:41:37 +00:00
Brenda Rearden 34676b359a
Merge pull request #667 from brendarearden/image-updates
Set installer repo,tag in values.yaml
2020-09-18 16:41:06 -07:00
aiyengar2 234373f159 Generated changes 2020-09-18 23:35:21 +00:00
aiyengar2 034952747f
Merge pull request #666 from aiyengar2/fix_kube_dns_namespace
Create kube-dns service monitor in kube-system
2020-09-18 16:34:48 -07:00
Brenda Rearden 9932422f51 Set installer repo,tag in values.yaml 2020-09-18 15:56:15 -07:00
mrajashree a56790115a Generated changes 2020-09-18 22:37:45 +00:00
Rajashree Mandaogane 820f105aa2
Merge pull request #663 from mrajashree/upd
Update resourceset to include configmaps for clusterrepos
2020-09-18 15:37:18 -07:00
Arvind Iyengar aee71a40b6 remove tgz 2020-09-18 15:35:34 -07:00
Arvind Iyengar 700975ee95 Create kube-dns service monitor in kube-system
This is required since, by default, we ignoreNamespaceSelectors.
2020-09-18 15:35:21 -07:00
aiyengar2 49948dbc4a Generated changes 2020-09-18 22:30:35 +00:00
aiyengar2 552821091d
Merge pull request #661 from aiyengar2/allow_missing_trailing_slash
Allow trailing slashes in dependency repos
2020-09-18 15:30:06 -07:00
aiyengar2 afb3af8690
Merge pull request #662 from aiyengar2/use_new_busybox
Replace rancher/busybox w/ rancher/library-busybox
2020-09-18 15:29:56 -07:00
rajashree b3cc3a717c Update resourceset to include configmaps for clusterrepos 2020-09-18 15:26:55 -07:00
brendarearden 9266e6155c Generated changes 2020-09-18 17:57:41 +00:00
Brenda Rearden 14f0a39a4a
Merge pull request #659 from brendarearden/image-updates
Image updates for Istio 1.7.1 and Kiali 1.23.0
2020-09-18 10:57:10 -07:00
prachidamle 239ff7d716 Generated changes 2020-09-18 17:47:47 +00:00
Prachi Damle 89746f9fe1
Merge pull request #664 from prachidamle/new_cis_fixes
CIS chart fixes to update image tag, fixes for hardened cluster
2020-09-18 10:47:13 -07:00
Prachi Damle 2dd35d89bb Delete tgz files from assets, parameter in the post-install hook for namespace should use the
helm templating
2020-09-18 10:36:16 -07:00
Brenda Rearden d397bb512c Update kiali to 1.23.0 2020-09-18 10:25:50 -07:00
ibuildthecloud aeb091ec74 Generated changes 2020-09-18 14:43:32 +00:00
Darren Shepherd cacff3e61d
Merge pull request #665 from ibuildthecloud/dev-v2.5
fleet-0.3.0-beta1
2020-09-18 07:42:58 -07:00
Darren Shepherd ecd90e66af fleet-0.3.0-beta1 2020-09-18 07:33:18 -07:00
Prachi Damle af609af172 Fixes to clear error state on scan retry, fixes for CIS hardened cluster 2020-09-18 00:33:33 -07:00
StrongMonkey 46277d5684 Generated changes 2020-09-18 03:29:16 +00:00
Daishan Peng 4cd7a24bd8
Merge pull request #660 from StrongMonkey/add-rio-annotations
Add istio dependency to rio chart
2020-09-17 20:28:45 -07:00