diff --git a/assets/aws-event-sources/aws-event-sources-0.1.901.tgz b/assets/aws-event-sources/aws-event-sources-0.1.901.tgz deleted file mode 100644 index 0447d19c6..000000000 Binary files a/assets/aws-event-sources/aws-event-sources-0.1.901.tgz and /dev/null differ diff --git a/assets/dynatrace/dynatrace-oneagent-operator-0.10.201.tgz b/assets/dynatrace/dynatrace-oneagent-operator-0.10.201.tgz deleted file mode 100644 index 8aaca99fb..000000000 Binary files a/assets/dynatrace/dynatrace-oneagent-operator-0.10.201.tgz and /dev/null differ diff --git a/assets/dynatrace/dynatrace-oneagent-operator-0.8.000.tgz b/assets/dynatrace/dynatrace-oneagent-operator-0.8.000.tgz deleted file mode 100644 index 0eb02600f..000000000 Binary files a/assets/dynatrace/dynatrace-oneagent-operator-0.8.000.tgz and /dev/null differ diff --git a/assets/dynatrace/dynatrace-oneagent-operator-0.8.1.tgz b/assets/dynatrace/dynatrace-oneagent-operator-0.8.1.tgz deleted file mode 100644 index 8da21c684..000000000 Binary files a/assets/dynatrace/dynatrace-oneagent-operator-0.8.1.tgz and /dev/null differ diff --git a/assets/hpe/hpe-flexvolume-driver-3.1.000.tgz b/assets/hpe/hpe-flexvolume-driver-3.1.000.tgz deleted file mode 100644 index 691337b46..000000000 Binary files a/assets/hpe/hpe-flexvolume-driver-3.1.000.tgz and /dev/null differ diff --git a/assets/hpe/hpe-flexvolume-driver-3.1.1.tgz b/assets/hpe/hpe-flexvolume-driver-3.1.1.tgz deleted file mode 100644 index 04ab071f0..000000000 Binary files a/assets/hpe/hpe-flexvolume-driver-3.1.1.tgz and /dev/null differ diff --git a/assets/softiron/ceph-csi-rbd-1.3.1.tgz b/assets/softiron/ceph-csi-rbd-1.3.1.tgz deleted file mode 100644 index 019559f98..000000000 Binary files a/assets/softiron/ceph-csi-rbd-1.3.1.tgz and /dev/null differ diff --git a/charts/aws-event-sources/aws-event-sources/Chart.yaml b/charts/aws-event-sources/aws-event-sources/Chart.yaml deleted file mode 100644 index e79ad9052..000000000 --- a/charts/aws-event-sources/aws-event-sources/Chart.yaml +++ /dev/null @@ -1,27 +0,0 @@ -annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/display-name: Sources for Amazon Web Services - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: aws-event-sources -apiVersion: v2 -appVersion: 1.7.0 -description: AWS Event Sources controller for Kubernetes -home: https://github.com/triggermesh/aws-event-sources -icon: https://global-uploads.webflow.com/5f683649f57c927210b6707e/5f683649f57c9261bab67097_logo.svg -keywords: -- knative-eventing -- sources -- aws -- triggermesh -- serverless -kubeVersion: '>=1.18.0' -maintainers: -- email: sameer@triggermesh.com - name: sameersbn -- email: antoine@triggermesh.com - name: antoineco -name: aws-event-sources -sources: -- https://github.com/triggermesh/aws-event-sources -type: application -version: 0.1.901 diff --git a/charts/aws-event-sources/aws-event-sources/README.md b/charts/aws-event-sources/aws-event-sources/README.md deleted file mode 100644 index cec82deb0..000000000 --- a/charts/aws-event-sources/aws-event-sources/README.md +++ /dev/null @@ -1,113 +0,0 @@ -# aws-event-sources - -Installs TriggerMesh AWS event sources controller. The following event sources are currently supported by the controller - -- Amazon CodeCommit (`kind: AWSCodeCommitSource`) -- Amazon Cognito Identity (`kind: AWSCognitoIdentitySource`) -- Amazon Cognito UserPool (`kind: AWSCognitoUserPoolSource`) -- Amazon DynamoDB (`kind: AWSDynamoDBSource`) -- Amazon Kinesis (`kind: AWSKinesisSource`) -- Amazon Simple Notification Service (`kind: AWSSNSSource`) -- Amazon Simple Queue Service (`kind: AWSSQSSource`) - -Refer to [aws-event-sources/config/samples](https://github.com/triggermesh/aws-event-sources/tree/master/config/samples) for examples that make use of the controller. - -## TL;DR; - -```console -$ helm repo add triggermesh https://storage.googleapis.com/triggermesh-charts -$ helm install triggermesh/aws-event-sources -``` - -To report bugs and for feedback and support please [create a new issue](https://github.com/triggermesh/aws-event-sources/issues/new). - -## Introduction - -This chart installs the [aws-event-sources](https://github.com/triggermesh/aws-event-sources) controller on a Kubernetes cluster. - -## Prerequisites - - Kubernetes 1.16+ with Beta APIs - - Helm 3.0+ - - Knative v0.14+ - -## Installing the Chart - -Add the TriggerMesh chart repository to Helm: - -```console -$ helm repo add triggermesh https://storage.googleapis.com/triggermesh-charts -``` - -To install the chart with the release name `my-release`: - -```console -$ helm install --name my-release triggermesh/aws-event-sources -``` - -The command deploys the aws-event-sources controller in the default configuration. Refer to the [configuration](#configuration) section for the complete list of parameters that can be specified to customize the deployment of the controller. - -## Uninstalling the Chart - -To uninstall/delete the `my-release` deployment: - -```console -$ helm delete my-release -``` - -The Kubernetes resources associated with chart will be removed and the Helm release will be deleted. - -However note that the `CustomResourceDefinition` resources created by the chart will not be removed by the delete command and therefore need to be removed manually. - -```console -$ kubectl delete crd awscodecommitsources.sources.triggermesh.io -$ kubectl delete crd awscognitoidentitysources.sources.triggermesh.io -$ kubectl delete crd awscognitouserpoolsources.sources.triggermesh.io -$ kubectl delete crd awsdynamodbsources.sources.triggermesh.io -$ kubectl delete crd awsiotsources.sources.triggermesh.io -$ kubectl delete crd awskinesissources.sources.triggermesh.io -$ kubectl delete crd awssnssources.sources.triggermesh.io -$ kubectl delete crd awssqssources.sources.triggermesh.io -``` - -## Configuration - -| Parameter | Description | Default | -|---------------------------------------------|-----------------------------------------------------|--------------------------------------------| -| `nameOverride` | Override the name for controller resources | `""` | -| `fullnameOverride` | Override the fullname for controller resources | `""` | -| `rbac.create` | Create RBAC resources | `true` | -| `serviceAccount.create` | Create service account for the controller | `true` | -| `serviceAccount.annotations` | Annotations to add to controller service account | `{}` | -| `serviceAccount.name` | Override the name for the service account | `nil` | -| `imagePullSecrets` | Specify image pull secrets | `[]` | -| `image.registry` | Image registry name | `gcr.io` | -| `image.repository` | Image repository name | `triggermesh/aws-event-sources-controller` | -| `image.tag` | Image tag | `{TAG_NAME}` | -| `image.pullPolicy` | Image pull policy | `IfNotPresent` | -| `adapter.awscloudwatch.repository` | AWS adapter Cloudwatch image name | `triggermesh/awscloudwatchsource` | -| `adapter.awscloudwatch.tag` | AWS adapter Cloudwatch image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awscloudwatchlogs.repository` | AWS adapter Cloudwatch Logs image name | `triggermesh/awscloudwatchlogssource` | -| `adapter.awscloudwatchlogs.tag` | AWS adapter Cloudwatch Logs image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awscodecommit.repository` | AWS adapter CodeCommit image name | `triggermesh/awscodecommitsource` | -| `adapter.awscodecommit.tag` | AWS adapter CodeCommit image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awscognitoidentity.repository` | AWS adapter Cognito Identity image name | `triggermesh/awscognitoidentitysource` | -| `adapter.awscognitoidentity.tag` | AWS adapter Cognito Identity image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awscognitouserpool.repository` | AWS adapter Cognito Userpool image name | `triggermesh/awscognitouserpoolsource` | -| `adapter.awscognitouserpool.tag` | AWS adapter Cognito Userpool image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awsdynamodb.repository` | AWS adapter DynamoDB image name | `triggermesh/awsdynamodbsource` | -| `adapter.awsdynamodb.tag` | AWS adapter DynamoDB image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awskinesis.repository` | AWS adapter Kinesis image name | `triggermesh/awskinesissource` | -| `adapter.awskinesis.tag` | AWS adapter Kinesis image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awsperformanceinsights.repository` | AWS adapter Performance Insights image name | `triggermesh/awsperformanceinsightssource` | -| `adapter.awsperformanceinsights.tag` | AWS adapter Performance Insights image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awssns.repository` | AWS adapter SNS image name | `triggermesh/awssnssource` | -| `adapter.awssns.tag` | AWS adapter SNS image tag | `_defaults to value of `.image.tag`_` | -| `adapter.awssqs.repository` | AWS adapter SQS image name | `triggermesh/awssqssource` | -| `adapter.awssqs.tag` | AWS adapter SQS image tag | `_defaults to value of `.image.tag`_` | -| `podAnnotations` | Annotations to add to the controller pod | `{}`` | -| `podSecurityContext` | Security context for controller pods | `{}` | -| `securityContext` | Security context for controller containers | `{}` | -| `resources` | Resource requests/limits for the controller | `{requests: {cpu: 20m, memory: 20Mi}}` | -| `nodeSelector` | Controller node selector | `{}` | -| `tolerations` | Tolerations for use with node taints | `[]` | -| `affinity` | Assign custom affinity rules to the controller pods | `{}` | diff --git a/charts/aws-event-sources/aws-event-sources/app-readme.md b/charts/aws-event-sources/aws-event-sources/app-readme.md deleted file mode 100644 index 2ae25fffe..000000000 --- a/charts/aws-event-sources/aws-event-sources/app-readme.md +++ /dev/null @@ -1,5 +0,0 @@ -# TriggerMesh AWS Event Sources - -[aws-event-sources](https://github.com/triggermesh/aws-event-sources) is a Kubernetes controller that implements Knative event sources for AWS services. - -You may be using some Cloud services on AWS but still interested to run workloads within Kubernetes. To trigger those workloads when events happen in your AWS service you need to have an event source that can consume AWS events and send them to your workload. diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awscloudwatch.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awscloudwatch.yaml deleted file mode 100644 index ce82100b6..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awscloudwatch.yaml +++ /dev/null @@ -1,219 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awscloudwatchsources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.cloudwatch.metrics.message" }, - { "type": "com.amazon.cloudwatch.metrics.metric" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSCloudWatchSource - plural: awscloudwatchsources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - region: - type: string - pollingInterval: - type: string - metricQueries: - type: array - items: - type: object - properties: - name: - type: string - pattern: ^[a-z]\w{0,254}$ - expression: - type: string - metric: - type: object - properties: - period: - type: integer - stat: - type: string - unit: - type: string - metric: - type: object - properties: - metricName: - type: string - namespace: - type: string - dimensions: - type: array - items: - type: object - properties: - name: - type: string - value: - type: string - oneOf: - - required: ['expression'] - - required: ['metric'] - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - region - - metricQueries - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awscloudwatchlogs.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awscloudwatchlogs.yaml deleted file mode 100644 index 16ae9b2c2..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awscloudwatchlogs.yaml +++ /dev/null @@ -1,180 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awscloudwatchlogssources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.logs.log" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSCloudWatchLogsSource - plural: awscloudwatchlogssources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:logs:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:.+$' - pollingInterval: - type: string - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awscodecommit.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awscodecommit.yaml deleted file mode 100644 index bd3c13399..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awscodecommit.yaml +++ /dev/null @@ -1,188 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awscodecommitsources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.codecommit.push" }, - { "type": "com.amazon.codecommit.pull_request" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSCodeCommitSource - plural: awscodecommitsources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:codecommit:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:.+$' - branch: - type: string - eventTypes: - type: array - items: - type: string - enum: [push, pull_request] - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - branch - - eventTypes - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awscognitoidentity.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awscognitoidentity.yaml deleted file mode 100644 index 9adf079af..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awscognitoidentity.yaml +++ /dev/null @@ -1,178 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awscognitoidentitysources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.cognito-identity.sync_trigger" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSCognitoIdentitySource - plural: awscognitoidentitysources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:cognito-identity:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:identitypool\/.+$' - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awscognitouserpool.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awscognitouserpool.yaml deleted file mode 100644 index e42e0f636..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awscognitouserpool.yaml +++ /dev/null @@ -1,178 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awscognitouserpoolsources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.cognitouserpool.sync_trigger" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSCognitoUserPoolSource - plural: awscognitouserpoolsources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:cognito-idp:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:userpool\/.+$' - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awsdynamodb.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awsdynamodb.yaml deleted file mode 100644 index 0a1e71070..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awsdynamodb.yaml +++ /dev/null @@ -1,180 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awsdynamodbsources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.dynamodb.insert" }, - { "type": "com.amazon.dynamodb.modify" }, - { "type": "com.amazon.dynamodb.remove" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSDynamoDBSource - plural: awsdynamodbsources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:dynamodb:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:table\/.+$' - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awsiot.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awsiot.yaml deleted file mode 100644 index ec2ff09e3..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awsiot.yaml +++ /dev/null @@ -1,157 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awsiotsources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.iot.greetings" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSIoTSource - plural: awsiotsources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - endpoint: - type: string - format: hostname - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:iot:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:topic\/.+$' - rootCA: - type: string - rootCAPath: - type: string - certificate: - type: string - certificatePath: - type: string - privateKey: - type: string - privateKeyPath: - type: string - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - endpoint - - arn - - rootCA - - certificate - - privateKey - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awskinesis.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awskinesis.yaml deleted file mode 100644 index f4197a2fc..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awskinesis.yaml +++ /dev/null @@ -1,178 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awskinesissources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.kinesis.stream_record" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSKinesisSource - plural: awskinesissources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:kinesis:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:stream\/.+$' - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awsperformanceinsights.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awsperformanceinsights.yaml deleted file mode 100644 index 2bfff0c01..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awsperformanceinsights.yaml +++ /dev/null @@ -1,187 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awsperformanceinsightssources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.rds.pi.metric" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSPerformanceInsightsSource - plural: awsperformanceinsightssources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: ^arn:aws(-cn|-us-gov)?:rds:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:.+$ - pollingInterval: - type: string - metricQueries: - type: array - items: - type: string - minLength: 1 - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - sink - - pollingInterval - - metricQueries - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awss3.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awss3.yaml deleted file mode 100644 index 6be0026ac..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awss3.yaml +++ /dev/null @@ -1,219 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awss3sources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.s3.objectcreated" }, - { "type": "com.amazon.s3.objectremoved" }, - { "type": "com.amazon.s3.objectrestore" }, - { "type": "com.amazon.s3.reducedredundancylostobject" }, - { "type": "com.amazon.s3.replication" }, - { "type": "com.amazon.s3.testevent" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSS3Source - plural: awss3sources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - # Bucket naming rules - # https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html - pattern: ^arn:aws(-cn|-us-gov)?:s3:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:[0-9a-z][0-9a-z.-]{2,62}$ - eventTypes: - type: array - items: - type: string - # Accepted values - # https://docs.aws.amazon.com/AmazonS3/latest/API/API_QueueConfiguration.html - # https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-how-to-event-types-and-destinations.html - enum: - - s3:ObjectCreated:* - - s3:ObjectCreated:Put - - s3:ObjectCreated:Post - - s3:ObjectCreated:Copy - - s3:ObjectCreated:CompleteMultipartUpload - - s3:ObjectRemoved:* - - s3:ObjectRemoved:Delete - - s3:ObjectRemoved:DeleteMarkerCreated - - s3:ObjectRestore:* - - s3:ObjectRestore:Post - - s3:ObjectRestore:Completed - - s3:ReducedRedundancyLostObject - - s3:Replication:* - - s3:Replication:OperationFailedReplication - - s3:Replication:OperationNotTracked - - s3:Replication:OperationMissedThreshold - - s3:Replication:OperationReplicatedAfterThreshold - queueARN: - type: string - pattern: ^arn:aws(-cn|-us-gov)?:sqs:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:.+$ - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: [value] - - required: [valueFromSecret] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: [value] - - required: [valueFromSecret] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: [ref] - - required: [uri] - required: - - arn - - eventTypes - - sink - status: - type: object - properties: - queueARN: - type: string - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Queue - type: string - jsonPath: .status.queueARN - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awssns.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awssns.yaml deleted file mode 100644 index 43504b3b8..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awssns.yaml +++ /dev/null @@ -1,207 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awssnssources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.sns.notification" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSSNSSource - plural: awssnssources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:sns:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:.+$' - subscriptionAttributes: - type: object - properties: - DeliveryPolicy: - type: string - format: json - nullable: true - FilterPolicy: - type: string - format: json - nullable: true - RawMessageDelivery: - type: string - format: json - nullable: true - RedrivePolicy: - type: string - format: json - nullable: true - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - sink - status: - type: object - properties: - subscriptionARN: - type: string - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - address: - type: object - properties: - url: - type: string - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: URL - type: string - jsonPath: .status.address.url - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/crds/crd-awssqs.yaml b/charts/aws-event-sources/aws-event-sources/crds/crd-awssqs.yaml deleted file mode 100644 index 09da72248..000000000 --- a/charts/aws-event-sources/aws-event-sources/crds/crd-awssqs.yaml +++ /dev/null @@ -1,178 +0,0 @@ -# Copyright 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: awssqssources.sources.triggermesh.io - labels: - eventing.knative.dev/source: 'true' - duck.knative.dev/source: 'true' - knative.dev/crd-install: 'true' - annotations: - registry.knative.dev/eventTypes: | - [ - { "type": "com.amazon.sqs.message" } - ] -spec: - group: sources.triggermesh.io - scope: Namespaced - names: - kind: AWSSQSSource - plural: awssqssources - categories: - - all - - knative - - eventing - - sources - versions: - - name: v1alpha1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - type: object - properties: - spec: - type: object - properties: - arn: - type: string - pattern: '^arn:aws(-cn|-us-gov)?:sqs:[a-z]{2}(-gov)?-[a-z]+-\d:\d{12}:.+$' - credentials: - type: object - properties: - accessKeyID: - type: object - properties: - value: - type: string - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - secretAccessKey: - type: object - properties: - value: - type: string - format: password - valueFromSecret: - type: object - properties: - name: - type: string - key: - type: string - required: - - name - - key - oneOf: - - required: ['value'] - - required: ['valueFromSecret'] - sink: - type: object - properties: - ref: - type: object - properties: - apiVersion: - type: string - kind: - type: string - namespace: - type: string - name: - type: string - required: - - apiVersion - - kind - - name - uri: - type: string - format: uri - oneOf: - - required: ['ref'] - - required: ['uri'] - required: - - arn - - sink - status: - type: object - properties: - sinkUri: - type: string - format: uri - ceAttributes: - type: array - items: - type: object - properties: - type: - type: string - source: - type: string - required: - - type - - source - observedGeneration: - type: integer - format: int64 - conditions: - type: array - items: - type: object - properties: - type: - type: string - status: - type: string - enum: ['True', 'False', Unknown] - severity: - type: string - enum: [Error, Warning, Info] - reason: - type: string - message: - type: string - lastTransitionTime: - type: string - format: date-time - required: - - type - - status - additionalPrinterColumns: - - name: Ready - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].status - - name: Reason - type: string - jsonPath: .status.conditions[?(@.type=='Ready')].reason - - name: Sink - type: string - jsonPath: .status.sinkUri - - name: Age - type: date - jsonPath: .metadata.creationTimestamp diff --git a/charts/aws-event-sources/aws-event-sources/questions.yml b/charts/aws-event-sources/aws-event-sources/questions.yml deleted file mode 100644 index f07c28f00..000000000 --- a/charts/aws-event-sources/aws-event-sources/questions.yml +++ /dev/null @@ -1,24 +0,0 @@ -questions: -- variable: defaultImage - default: true - description: "Use default Docker images" - label: Use Default Images - type: boolean - show_subquestion_if: false - group: "Container Images" - subquestions: - - variable: image.registry - default: "gcr.io" - description: "Docker image registry" - type: string - label: Image Registry - - variable: image.repository - default: "triggermesh/aws-event-sources-controller" - description: "Docker image repository" - type: string - label: Image Repository - - variable: image.tag - default: "v1.7.0" - description: "Docker image tag" - type: string - label: Image Tag diff --git a/charts/aws-event-sources/aws-event-sources/templates/NOTES.txt b/charts/aws-event-sources/aws-event-sources/templates/NOTES.txt deleted file mode 100644 index cde2826c2..000000000 --- a/charts/aws-event-sources/aws-event-sources/templates/NOTES.txt +++ /dev/null @@ -1,9 +0,0 @@ -TriggerMesh AWS event sources controller for Knative has been installed. - -To view the controller logs: - - kubectl logs -f deploy/{{ include "aws-event-sources.fullname" . }}-controller --namespace {{ .Release.Namespace }} - -Refer to https://github.com/triggermesh/aws-event-sources/tree/master/config/samples for examples that make use of the controller. - -For support and feedback contact us as https://github.com/triggermesh/aws-event-sources/issues/new. diff --git a/charts/aws-event-sources/aws-event-sources/templates/_helpers.tpl b/charts/aws-event-sources/aws-event-sources/templates/_helpers.tpl deleted file mode 100644 index c3b42a6a5..000000000 --- a/charts/aws-event-sources/aws-event-sources/templates/_helpers.tpl +++ /dev/null @@ -1,63 +0,0 @@ -{{/* vim: set filetype=mustache: */}} -{{/* -Expand the name of the chart. -*/}} -{{- define "aws-event-sources.name" -}} -{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} -{{- end }} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "aws-event-sources.fullname" -}} -{{- if .Values.fullnameOverride }} -{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} -{{- else }} -{{- $name := default .Chart.Name .Values.nameOverride }} -{{- if contains $name .Release.Name }} -{{- .Release.Name | trunc 63 | trimSuffix "-" }} -{{- else }} -{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} -{{- end }} -{{- end }} -{{- end }} - -{{/* -Create chart name and version as used by the chart label. -*/}} -{{- define "aws-event-sources.chart" -}} -{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} -{{- end }} - -{{/* -Common labels -*/}} -{{- define "aws-event-sources.labels" -}} -helm.sh/chart: {{ include "aws-event-sources.chart" . }} -{{ include "aws-event-sources.selectorLabels" . }} -{{- if .Chart.AppVersion }} -app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} -{{- end }} -app.kubernetes.io/managed-by: {{ .Release.Service }} -{{- end }} - -{{/* -Selector labels -*/}} -{{- define "aws-event-sources.selectorLabels" -}} -app.kubernetes.io/name: {{ include "aws-event-sources.name" . }} -app.kubernetes.io/instance: {{ .Release.Name }} -{{- end }} - -{{/* -Create the name of the service account to use -*/}} -{{- define "aws-event-sources.serviceAccountName" -}} -{{- if .Values.serviceAccount.create }} -{{- default (include "aws-event-sources.fullname" .) .Values.serviceAccount.name }} -{{- else }} -{{- default "default" .Values.serviceAccount.name }} -{{- end }} -{{- end }} diff --git a/charts/aws-event-sources/aws-event-sources/templates/clusterrolebinding.yaml b/charts/aws-event-sources/aws-event-sources/templates/clusterrolebinding.yaml deleted file mode 100644 index 593ef80a8..000000000 --- a/charts/aws-event-sources/aws-event-sources/templates/clusterrolebinding.yaml +++ /dev/null @@ -1,213 +0,0 @@ -# Copyright (c) 2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- if .Values.serviceAccount.create }} -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app {{ template "aws-event-sources.fullname" . }}-controller - labels: - {{- include "aws-event-sources.labels" . | nindent 4 }} -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app - ---- - -# Permissions not required by controllers directly, but granted to -# receive-adapters via RoleBindings. -# -# Without them, the following error is thrown: -# "attempting to grant RBAC permissions not currently held" -# - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awscloudwatchlogssource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awscloudwatchsource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awscodecommitsource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awscognitoidentitysource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awscognitouserpoolsource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awsdynamodbsource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awsiotsource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awskinesissource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awsperformanceinsightssource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awss3source-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awssnssource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: &app awssqssource-adapter -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: *app - ---- - -# Resolve sink URIs -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: {{ template "aws-event-sources.fullname" . }}-controller-addressable-resolver - labels: - {{- include "aws-event-sources.labels" . | nindent 4 }} -subjects: -- kind: ServiceAccount - name: {{ template "aws-event-sources.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: addressable-resolver -{{- end }} diff --git a/charts/aws-event-sources/aws-event-sources/templates/clusterroles.yaml b/charts/aws-event-sources/aws-event-sources/templates/clusterroles.yaml deleted file mode 100644 index 55fea878d..000000000 --- a/charts/aws-event-sources/aws-event-sources/templates/clusterroles.yaml +++ /dev/null @@ -1,378 +0,0 @@ -# Copyright (c) 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- if .Values.rbac.create }} -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: {{ template "aws-event-sources.fullname" . }}-controller - labels: - {{- include "aws-event-sources.labels" . | nindent 4 }} -rules: - -# Record Kubernetes events -- apiGroups: - - '' - resources: - - events - verbs: - - create - - patch - - update - -# Manage receive-adapters -- apiGroups: - - apps - resources: - - deployments - verbs: &all - - get - - list - - watch - - create - - update - - delete - - patch -- apiGroups: - - serving.knative.dev - resources: - - services - verbs: *all - -# Read Source resources and update their statuses -- apiGroups: - - sources.triggermesh.io - resources: - - awscloudwatchlogssources - - awscloudwatchsources - - awscodecommitsources - - awscognitoidentitysources - - awscognitouserpoolsources - - awsdynamodbsources - - awsiotsources - - awskinesissources - - awsperformanceinsightssources - - awss3sources - - awssnssources - - awssqssources - verbs: - - list - - watch - - get -- apiGroups: - - sources.triggermesh.io - resources: - - awscloudwatchlogssources/status - - awscloudwatchsources/status - - awscodecommitsources/status - - awscognitoidentitysources/status - - awscognitouserpoolsources/status - - awsdynamodbsources/status - - awsiotsources/status - - awskinesissources/status - - awsperformanceinsightssources/status - - awss3sources/status - - awssnssources/status - - awssqssources/status - verbs: - - update - -# Ensure compatibility with the OwnerReferencesPermissionEnforcement Admission Controller -# https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#ownerreferencespermissionenforcement -- apiGroups: - - sources.triggermesh.io - resources: - - awscloudwatchlogssources/finalizers - - awscloudwatchsources/finalizers - - awscodecommitsources/finalizers - - awscognitoidentitysources/finalizers - - awscognitouserpoolsources/finalizers - - awsdynamodbsources/finalizers - - awsiotsources/finalizers - - awskinesissources/finalizers - - awsperformanceinsightssources/finalizers - - awss3sources/finalizers - - awssnssources/finalizers - - awssqssources/finalizers - verbs: - - update - -# Set finalizers -- apiGroups: - - sources.triggermesh.io - resources: - - awss3sources - - awssnssources - verbs: - - patch - -# Manage resource-specific ServiceAccounts and RoleBindings -- apiGroups: - - '' - resources: - - serviceaccounts - verbs: - - list - - watch - - create -- apiGroups: - - '' - resources: - - serviceaccounts - resourceNames: &rbac-objects - - awscloudwatchlogssource-adapter - - awscloudwatchsource-adapter - - awscodecommitsource-adapter - - awscognitoidentitysource-adapter - - awscognitouserpoolsource-adapter - - awsdynamodbsource-adapter - - awsiotsource-adapter - - awskinesissource-adapter - - awsperformanceinsightssource-adapter - - awss3source-adapter - - awssnssource-adapter - - awssqssource-adapter - verbs: - - update -- apiGroups: - - rbac.authorization.k8s.io - resources: - - rolebindings - verbs: - - list - - watch - - create -- apiGroups: - - rbac.authorization.k8s.io - resources: - - rolebindings - resourceNames: *rbac-objects - verbs: - - update - -# Read credentials -- apiGroups: - - '' - resources: - - secrets - verbs: - - get - -# Read controller configurations -- apiGroups: - - '' - resources: - - configmaps - verbs: - - list - - watch -- apiGroups: - - '' - resources: - - configmaps - resourceNames: - - config-logging - - config-observability - - config-leader-election - verbs: - - get - -# Acquire leases for leader election -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - create - - update - -# Determine the exact reason why Deployments fail -- apiGroups: - - '' - resources: - - pods - verbs: - - list - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awscloudwatchlogssource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awscloudwatchsource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awscodecommitsource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awscognitoidentitysource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awscognitouserpoolsource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awsdynamodbsource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awsiotsource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awskinesissource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awsperformanceinsightssource-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awss3source-adapter -rules: [] - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awssnssource-adapter -rules: - -# Record Kubernetes events -- apiGroups: - - '' - resources: - - events - verbs: - - create - - patch - - update - -# Read Source resources and update their statuses -- apiGroups: - - sources.triggermesh.io - resources: - - awssnssources - verbs: - - list - - watch -- apiGroups: - - sources.triggermesh.io - resources: - - awssnssources/status - verbs: - - patch - -# Read credentials -- apiGroups: - - '' - resources: - - secrets - verbs: - - get - -# Acquire leases for leader election -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - create - - update - ---- - -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: awssqssource-adapter -rules: [] - ---- - -# The role is needed for the aggregated role source-observer in knative-eventing to provide readonly access to "Sources". -# see https://github.com/knative/eventing/blob/release-0.14/docs/spec/sources.md#source-rbac -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: {{ template "aws-event-sources.fullname" . }}-observer - labels: - duck.knative.dev/source: 'true' - {{- include "aws-event-sources.labels" . | nindent 4 }} -rules: -- apiGroups: - - sources.triggermesh.io - resources: - - awscloudwatchlogssources - - awscloudwatchsources - - awscodecommitsources - - awscognitoidentitysources - - awscognitouserpoolsources - - awsdynamodbsources - - awsiotsources - - awskinesissources - - awsperformanceinsightssources - - awssnssources - - awssqssources - verbs: - - get - - list - - watch -{{- end }} diff --git a/charts/aws-event-sources/aws-event-sources/templates/deployment.yaml b/charts/aws-event-sources/aws-event-sources/templates/deployment.yaml deleted file mode 100644 index 41ef1ddd2..000000000 --- a/charts/aws-event-sources/aws-event-sources/templates/deployment.yaml +++ /dev/null @@ -1,109 +0,0 @@ -# Copyright (c) 2020 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -apiVersion: apps/v1 -kind: Deployment -metadata: - name: {{ include "aws-event-sources.fullname" . }}-controller - labels: - {{- include "aws-event-sources.labels" . | nindent 4 }} - -spec: - replicas: 1 - selector: - matchLabels: - {{- include "aws-event-sources.selectorLabels" . | nindent 6}} - template: - metadata: - labels: - {{- include "aws-event-sources.labels" . | nindent 8 }} - {{- with .Values.podAnnotations }} - annotations: - {{- toYaml . | nindent 8 }} - {{- end }} - - spec: - {{- with .Values.imagePullSecrets }} - imagePullSecrets: - {{- toYaml . | nindent 8 }} - {{- end }} - serviceAccountName: {{ template "aws-event-sources.serviceAccountName" . }} - securityContext: - {{- toYaml .Values.podSecurityContext | nindent 8 }} - - containers: - - name: controller - terminationMessagePolicy: FallbackToLogsOnError - image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}" - imagePullPolicy: {{ .Values.image.pullPolicy}} - - resources: - {{- toYaml .Values.resources | nindent 12 }} - - env: - - name: SYSTEM_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - # Logging/observability configuration - - name: CONFIG_LOGGING_NAME - value: config-logging - - name: CONFIG_OBSERVABILITY_NAME - value: config-observability - - name: METRICS_DOMAIN - value: triggermesh.io/sources - # Source adapters - - name: AWSCLOUDWATCHSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awscloudwatch.repository }}:{{ default .Values.image.tag .Values.adapters.awscloudwatch.tag }}" - - name: AWSCLOUDWATCHLOGSSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awscloudwatchlogs.repository }}:{{ default .Values.image.tag .Values.adapters.awscloudwatchlogs.tag }}" - - name: AWSCODECOMMITSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awscodecommit.repository }}:{{ default .Values.image.tag .Values.adapters.awscodecommit.tag }}" - - name: AWSCOGNITOIDENTITYSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awscognitoidentity.repository }}:{{ default .Values.image.tag .Values.adapters.awscognitoidentity.tag }}" - - name: AWSCOGNITOUSERPOOLSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awscognitouserpool.repository }}:{{ default .Values.image.tag .Values.adapters.awscognitouserpool.tag }}" - - name: AWSDYNAMODBSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awsdynamodb.repository }}:{{ default .Values.image.tag .Values.adapters.awsdynamodb.tag }}" - - name: AWSKINESISSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awskinesis.repository }}:{{ default .Values.image.tag .Values.adapters.awskinesis.tag }}" - - name: AWSPERFORMANCEINSIGHTSSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awsperformanceinsights.repository }}:{{ default .Values.image.tag .Values.adapters.awsperformanceinsights.tag }}" - - name: AWSSNSSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awssns.repository }}:{{ default .Values.image.tag .Values.adapters.awssns.tag }}" - - name: AWSSQSSOURCE_IMAGE - value: "{{ .Values.image.registry }}/{{ .Values.adapters.awssqs.repository }}:{{ default .Values.image.tag .Values.adapters.awssqs.tag }}" - securityContext: - allowPrivilegeEscalation: false - {{- with .Values.securityContext }} - {{- toYaml . | nindent 12 }} - {{- end }} - ports: - - name: metrics - containerPort: 9090 - - name: profiling - containerPort: 8008 - - {{- with .Values.nodeSelector }} - nodeSelector: - {{- toYaml . | nindent 8 }} - {{- end }} - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} - {{- with .Values.tolerations }} - tolerations: - {{- toYaml . | nindent 8 }} - {{- end }} diff --git a/charts/aws-event-sources/aws-event-sources/templates/serviceaccount.yaml b/charts/aws-event-sources/aws-event-sources/templates/serviceaccount.yaml deleted file mode 100644 index e61b0f896..000000000 --- a/charts/aws-event-sources/aws-event-sources/templates/serviceaccount.yaml +++ /dev/null @@ -1,26 +0,0 @@ -# Copyright (c) 2020-2021 TriggerMesh Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- if .Values.serviceAccount.create }} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ template "aws-event-sources.serviceAccountName" . }} - labels: - {{- include "aws-event-sources.labels" . | nindent 4 }} - {{- with .Values.serviceAccount.annotations }} - annotations: - {{- toYaml . | nindent 4 }} - {{- end }} -{{- end }} diff --git a/charts/aws-event-sources/aws-event-sources/values.yaml b/charts/aws-event-sources/aws-event-sources/values.yaml deleted file mode 100644 index 63aa57f8a..000000000 --- a/charts/aws-event-sources/aws-event-sources/values.yaml +++ /dev/null @@ -1,68 +0,0 @@ -nameOverride: "" - -fullnameOverride: "" - -rbac: - create: true - -serviceAccount: - create: true - annotations: {} - name: "" - -imagePullSecrets: [] - -image: - registry: gcr.io - repository: triggermesh/aws-event-sources-controller - tag: v1.7.0 - pullPolicy: IfNotPresent - -adapters: - awscloudwatch: - repository: triggermesh/awscloudwatchsource - tag: "" - awscloudwatchlogs: - repository: triggermesh/awscloudwatchlogssource - tag: "" - awscodecommit: - repository: triggermesh/awscodecommitsource - tag: "" - awscognitoidentity: - repository: triggermesh/awscognitoidentitysource - tag: "" - awscognitouserpool: - repository: triggermesh/awscognitouserpoolsource - tag: "" - awsdynamodb: - repository: triggermesh/awsdynamodbsource - tag: "" - awskinesis: - repository: triggermesh/awskinesissource - tag: "" - awsperformanceinsights: - repository: triggermesh/awsperformanceinsightssource - tag: "" - awssns: - repository: triggermesh/awssnssource - tag: "" - awssqs: - repository: triggermesh/awssqssource - tag: "" - -podAnnotations: {} - -podSecurityContext: {} - -securityContext: {} - -resources: - requests: - cpu: 20m - memory: 20Mi - -nodeSelector: {} - -tolerations: [] - -affinity: {} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/Chart.yaml b/charts/dynatrace/dynatrace-oneagent-operator/Chart.yaml deleted file mode 100644 index 58451d911..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/Chart.yaml +++ /dev/null @@ -1,21 +0,0 @@ -annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/display-name: Dynatrace Oneagent Operator - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: dynatrace-oneagent-operator -apiVersion: v2 -appVersion: 0.10.2 -description: The Dynatrace OneAgent Operator Helm chart for Kubernetes and Openshift -home: https://www.dynatrace.com/ -icon: https://assets.dynatrace.com/global/resources/Signet_Logo_RGB_CP_512x512px.png -kubeVersion: '>= 1.19' -maintainers: -- email: marco.mader@dynatrace.com - name: DTMad -- email: michael.mayr@dynatrace.com - name: mmayr-at -name: dynatrace-oneagent-operator -sources: -- https://github.com/Dynatrace/helm-charts -type: application -version: 0.10.201 diff --git a/charts/dynatrace/dynatrace-oneagent-operator/README.md b/charts/dynatrace/dynatrace-oneagent-operator/README.md deleted file mode 100644 index 6b5c22389..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/README.md +++ /dev/null @@ -1,121 +0,0 @@ -# Welcome - -Dynatrace automatically discovers, baselines, and intelligently monitors Kubernetes clusters and workloads. Learn more about Dynatrace at [our website](https://www.dynatrace.com/platform/). - -# Dynatrace OneAgent Operator Helm Chart - -The Dynatrace OneAgent Operator Helm Chart which supports the rollout and lifecycle of [Dynatrace OneAgent](https://www.dynatrace.com/support/help/get-started/introduction/what-is-oneagent/) in Kubernetes and OpenShift clusters. - -This Helm Chart requires Helm 3. - -### Platforms -Depending on the version of the Dynatrace OneAgent Operator, it supports the following platforms: - -| Dynatrace OneAgent Operator Helm Chart version | Kubernetes | OpenShift Container Platform | -| ---------------------------------------------- | ---------- | ---------------------------- | -| v0.10.2 | 1.18+ | 3.11.188+, 4.5+ | -| v0.9.5 | 1.15+ | 3.11.188+, 4.3+ | -| v0.8.2 | 1.14+ | 3.11.188+, 4.1+ | -| v0.7.1 | 1.14+ | 3.11.188+, 4.1+ | -| v0.6.0 | 1.11+ | 3.11+ | -| v0.5.4 | 1.11+ | 3.11+ | - - -## Quick Start - -The Dynatrace OneAgent Operator acts on its separate namespace `dynatrace`. -It holds the operator deployment and all dependent objects like permissions, custom resources and -corresponding DaemonSets. -To install the Dynatrace OneAgent Operator via Helm run the following command: - -### Adding Dynatrace OneAgent Helm repository -``` -$ helm repo add dynatrace https://raw.githubusercontent.com/Dynatrace/helm-charts/master/repos/stable -``` - -### Prepare tokens - -Generate an API and a PaaS token in your Dynatrace environment. - -https://www.dynatrace.com/support/help/reference/dynatrace-concepts/why-do-i-need-an-environment-id/#create-user-generated-access-tokens - -### Chart installation - -To install the Dynatrace OneAgent Operator first create the dynatrace namespace, apply the latest CRD from [the latest release](https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest) and replace the APIUrl, the API token and the PaaS token in command and execute it - -#### Kubernetes -``` -$ kubectl create namespace dynatrace -$ kubectl apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagents.yaml -$ kubectl apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagentapms.yaml -$ helm install dynatrace-oneagent-operator dynatrace/dynatrace-oneagent-operator -n dynatrace --set platform="kubernetes",oneagent.apiUrl="https://ENVIRONMENTID.live.dynatrace.com/api",secret.apiToken="DYNATRACE_API_TOKEN",secret.paasToken="PLATFORM_AS_A_SERVICE_TOKEN" -``` - -#### OpenShift -``` -$ oc adm new-project --node-selector="" dynatrace -$ oc apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagents.yaml -$ oc apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagentapms.yaml -$ helm install dynatrace-oneagent-operator dynatrace/dynatrace-oneagent-operator -n dynatrace --set platform="openshift",oneagent.apiUrl="https://ENVIRONMENTID.live.dynatrace.com/api",secret.apiToken="DYNATRACE_API_TOKEN",secret.paasToken="PLATFORM_AS_A_SERVICE_TOKEN" -``` - -##### OpenShift 3.11 -``` -$ oc adm new-project --node-selector="" dynatrace -$ oc apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagents-v1beta1.yaml -$ oc apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagentapms-v1beta1.yaml -$ helm install dynatrace-oneagent-operator dynatrace/dynatrace-oneagent-operator -n dynatrace --set platform="openshift-3-11",oneagent.apiUrl="https://ENVIRONMENTID.live.dynatrace.com/api",secret.apiToken="DYNATRACE_API_TOKEN",secret.paasToken="PLATFORM_AS_A_SERVICE_TOKEN" -``` - -This will automatically install the Dynatrace OneAgent Operator and create OneAgents for every of your nodes. - -## Update procedure - -To update simply update your helm repositories and check the latest version - -``` -$ helm repo update -``` - -You can then check for the latest version by searching your Helm repositories for the Dynatrace OneAgent Operator - -``` -$ helm search repo dynatrace-oneagent-operator -``` - -To update to the latest version apply the latest version of the CRD attached to [the latest release](https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest) and run this command. -Do not forget to add the `reuse-values` flag to keep your configuration - -##### Kubernetes -``` -$ kubectl apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagents.yaml -$ kubectl apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagentapms.yaml -$ helm upgrade dynatrace-oneagent-operator dynatrace/dynatrace-oneagent-operator -n dynatrace --reuse-values -``` - -##### OpenShift -``` -$ oc apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagents.yaml -$ oc apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagentapms.yaml -$ helm upgrade dynatrace-oneagent-operator dynatrace/dynatrace-oneagent-operator -n dynatrace --reuse-values -``` - -##### OpenShift 3.11 -``` -$ oc apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagents-v1beta1.yaml -$ oc apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagentapms-v1beta1.yaml -$ helm upgrade dynatrace-oneagent-operator dynatrace/dynatrace-oneagent-operator -n dynatrace --reuse-values -``` - - -## Uninstall dynatrace-oneagent-operator -Remove OneAgent custom resources and clean-up all remaining OneAgent Operator specific objects: - - -```sh -$ helm uninstall dynatrace-oneagent-operator -n dynatrace -``` - -## License - -Dynatrace OneAgent Operator Helm Chart is under Apache 2.0 license. See [LICENSE](../LICENSE) for details. diff --git a/charts/dynatrace/dynatrace-oneagent-operator/app-readme.md b/charts/dynatrace/dynatrace-oneagent-operator/app-readme.md deleted file mode 100644 index fedab7e92..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/app-readme.md +++ /dev/null @@ -1,19 +0,0 @@ -# Dynatrace OneAgent Operator - -This is the home of the Dynatrace OneAgent Operator's Helm Chart which supports the rollout and lifecycle of [Dynatrace OneAgent](https://www.dynatrace.com/support/help/get-started/introduction/what-is-oneagent/) in Kubernetes and OpenShift clusters. - -Rolling out Dynatrace OneAgent via DaemonSet on a cluster is straightforward. -Maintaining its lifecycle places a burden on the operational team. - -Dynatrace OneAgent Operator closes this gap by automating the repetitive steps involved in keeping Dynatrace OneAgent at its latest desired version. - -## Additional Instructions - -Please make sure the CRD is applied before using this chart! - -``` -kubectl apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagents.yaml -kubectl apply -f https://github.com/Dynatrace/dynatrace-oneagent-operator/releases/latest/download/dynatrace.com_oneagentapms.yaml -``` - -To apply the CRD for Openshift or Openshift 3.11 follow the instructions in the [Github Repository](https://github.com/Dynatrace/helm-charts/tree/master/dynatrace-oneagent-operator/chart/default#chart-installation). \ No newline at end of file diff --git a/charts/dynatrace/dynatrace-oneagent-operator/logo.png b/charts/dynatrace/dynatrace-oneagent-operator/logo.png deleted file mode 100644 index 6714eb8a5..000000000 Binary files a/charts/dynatrace/dynatrace-oneagent-operator/logo.png and /dev/null differ diff --git a/charts/dynatrace/dynatrace-oneagent-operator/overview.svg b/charts/dynatrace/dynatrace-oneagent-operator/overview.svg deleted file mode 100644 index 5e1092df4..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/overview.svg +++ /dev/null @@ -1,2 +0,0 @@ - -
OneAgent Pods
[Not supported by viewer]
trigger
rollout
[Not supported by viewer]
query
version
query<br>version
trigger
update
[Not supported by viewer]
OneAgent
CustomResource
[Not supported by viewer]
DaemonSet
DaemonSet
watch
changes
watch<br>changesDynatraceOneAgentOperatorDynatrace Cluster \ No newline at end of file diff --git a/charts/dynatrace/dynatrace-oneagent-operator/questions.yml b/charts/dynatrace/dynatrace-oneagent-operator/questions.yml deleted file mode 100644 index a213994a2..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/questions.yml +++ /dev/null @@ -1,267 +0,0 @@ -categories: - - APM - - Monitoring -questions: - - - variable: crdApplied - label: "CRD manually applied" - description: "Please make sure you have applied the latest CRD by following the instructions in the description above." - default: "" - required: true - type: enum - options: - - "yes" - group: "Prerequisites" - - #################### Agent Configuration (REQUIRED) #################### - - variable: mode - label: "Monitoring mode" - description: "Either fullstack for full monitoring or apm for application only monitoring" - default: "fullstack" - type: enum - group: "Agent Configuration (REQUIRED)" - show_if: "crdApplied=yes" - options: - - "fullstack" - - "apm" - - - variable: oneagent.apiUrl - label: "Dynatrace API URL" - description: "Dynatrace API URL including `/api` path at the end" - default: "https://ENVIRONMENTID.live.dynatrace.com/api" - type: string - required: true - group: "Agent Configuration (REQUIRED)" - show_if: "crdApplied=yes" - - - variable: secret.apiToken - label: "Dynatrace API token" - description: "Your Dynatrace API token - You can generate this token in your Dynatrace environment" - default: "" - type: string - required: false - group: "Agent Configuration (REQUIRED)" - show_if: "crdApplied=yes" - - - variable: secret.paasToken - label: "Dynatrace PaaS token" - description: "Your Dynatrace Platform as a Service token - You can generate this token in your Dynatrace environment" - default: "" - type: string - required: true - group: "Agent Configuration (REQUIRED)" - show_if: "crdApplied=yes" - - #################### Use custom limits settings ################### - - - variable: use_custom_limits_settings - label: "Use custom limits settings" - description: "Use custom resource limits for the Dynatrace OneAgent" - default: false - type: boolean - group: "Use custom limits settings" - show_if: "crdApplied=yes" - show_subquestion_if: true - subquestions: - - variable: oneagent.resources.requests.cpu - label: "CPU resource request" - description: "Defines the minimum requested CPU by the OneAgent" - type: string - show_if: "crdApplied=yes" - group: "Use custom limits settings" - - - variable: oneagent.resources.requests.memory - label: "Memory resource request" - description: "Defines the minimum requested memory by the OneAgent" - type: string - show_if: "crdApplied=yes" - group: "Use custom limits settings" - - - variable: oneagent.resources.limits.cpu - label: "CPU resource limits" - description: "Defines the maximum provided CPU for the OneAgent" - type: string - show_if: "crdApplied=yes" - group: "Use custom limits settings" - - - variable: oneagent.resources.limits.memory - label: "Memory resource limits" - description: "Defines the maximum provided memory for the OneAgent" - type: string - show_if: "crdApplied=yes" - group: "Use custom limits settings" - - #################### Advanced Agent Configuration (OPTIONAL) #################### - - variable: show_advanced_config - label: "Show advanced configuration" - description: "Show advanced configuration options for the Dynatrace OneAgent Operator" - default: false - type: boolean - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes" - show_subquestion_if: true - subquestions: - - - variable: operator.image - label: "Custom Operator image location" - description: "The location from where to grab the Dynatrace OneAgent operator image - default is quay.io/dynatrace/dynatrace-oneagent-operator" - default: "" - type: string - show_if: "crdApplied=yes" - group: "Advanced Agent Configuration (OPTIONAL)" - - - variable: oneagent.name - label: "OneAgent CustomResource name" - default: "oneagent" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.disableAgentUpdate - label: "Disable automatic OneAgent updates" - description: "Disables automatic restarts of oneagent pods in case a new version is available" - default: false - type: boolean - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.dnsPolicy - label: "Set custom DNS Policy" - description: "DNS Policy for OneAgent pods. Empty for default (ClusterFirst), more at https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy" - default: "" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.enableIstio - label: "Enable istio" - description: "When enabled, and if Istio is installed on the Kubernetes environment, then the Operator will create the corresponding VirtualService and ServiceEntries objects to allow access to the Dynatrace cluster from the agent." - default: false - type: boolean - show_if: "crdApplied=yes" - group: "Advanced Agent Configuration (OPTIONAL)" - - - variable: oneagent.image - label: "Custom OneAgent image location" - description: "The location from where to grab the Dynatrace OneAgent image - default for Kubernetes is docker.io/dynatrace/oneagent" - default: "" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.skipCertCheck - label: "Skip certificate check" - description: "Disable certificate validation checks for installer download and API communication" - default: false - type: boolean - show_if: "crdApplied=yes" - group: "Advanced Agent Configuration (OPTIONAL)" - - - variable: oneagent.priorityClassName - label: "Assign priority class to OneAgent pods" - description: "Priority class to assign to OneAgent pods, more at https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/" - default: "" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.proxy - label: "Define a proxy" - description: "Configures a proxy for the Agent, AgentDownload and the Operator. Provide the proxy here" - default: "" - type: string - show_if: "crdApplied=yes" - group: "Advanced Agent Configuration (OPTIONAL)" - - - variable: oneagent.trustedCAs - label: "Add custom CA certificates" - description: "Adds the provided CA certificates to the Operator and the OneAgent. Provide your custom certificates here. If this is not set the default embedded certificates on the images will be used" - default: "" - type: multiline - show_if: "crdApplied=yes" - group: "Advanced Agent Configuration (OPTIONAL)" - - - variable: oneagent.waitReadySeconds - label: "Wait seconds until ready" - description: "Define the time to wait until OneAgent pod is ready after update - defaults to 300s" - default: "" - type: int - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.args - label: "Arguments to OneAgent installer" - description: "Defines additional arguments which get passed to the OneAgent installer - Please edit as Yaml for the best experience. The expected format is YAML and not a string" - default: "" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.env - label: "Environment variables for OneAgent" - description: "Defines additional environment variables which get passed to the OneAgent - Please edit as Yaml for the best experience" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.nodeSelector - label: "Node selector to control the selection of nodes" - description: "Defines a NodeSelector to customize to which nodes the OneAgent will be rolled out - Please edit as Yaml for the best experience" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.labels - label: "Custom labels for the OneAgent pods" - description: "Defines labels for OneAgent pods to structure workloads as desired - Please edit as Yaml for the best experience" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.tolerations - label: "Custom tolerations for the OneAgent" - description: "Defines custom tolerations to the OneAgent - Please edit as Yaml for the best experience - see https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/" - default: "" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.networkZone - label: "Network zone" - description: "Configures a network zone for your OneAgents" - default: "" - type: string - show_if: "crdApplied=yes" - group: "Advanced Agent Configuration (OPTIONAL)" - - - variable: oneagent.useUnprivilegedMode - label: "Early Adopter: run unprivileged" - description: "Early Adopter: support full-stack OneAgent running on unprivileged mode" - default: true - type: boolean - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" - - - variable: oneagent.useImmutableImage - label: "Use immutable OneAgent image" - description: "If set the immutable OneAgent image will be used" - default: false - type: boolean - show_if: "crdApplied=yes" - group: "Advanced Agent Configuration (OPTIONAL)" - - - variable: oneagent.agentVersion - label: "Agent version for immutable image" - description: "Defines the agent version used when immutable image is used - defaults to latest" - default: "" - type: string - show_if: "crdApplied=yes" - group: "Advanced Agent Configuration (OPTIONAL)" - - - variable: oneagent.customPullSecret - label: "Custom PullSecret for the immutable image" - description: "Defines a custom pull secret for the immutable image in case you have your own registry" - default: "" - type: string - group: "Advanced Agent Configuration (OPTIONAL)" - show_if: "crdApplied=yes && mode=fullstack" diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrole-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrole-operator.yaml deleted file mode 100644 index 77160d655..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrole-operator.yaml +++ /dev/null @@ -1,47 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: dynatrace-oneagent-operator - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -rules: - - apiGroups: - - "" # "" indicates the core API group - resources: - - nodes - - namespaces - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - secrets - verbs: - - create - - apiGroups: - - "" - resources: - - secrets - resourceNames: - - dynatrace-oneagent-config - - dynatrace-oneagent-pull-secret - verbs: - - get - - update - - delete diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrole-webhook.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrole-webhook.yaml deleted file mode 100644 index e50a4b3a9..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrole-webhook.yaml +++ /dev/null @@ -1,46 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: dynatrace-oneagent-webhook - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} -rules: - - apiGroups: - - "" - resources: - - namespaces - verbs: - - get - - list - - watch - - apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - verbs: - - list - - create - - watch - - apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - resourceNames: - - dynatrace-oneagent-webhook - verbs: - - get - - update diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrolebinding-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrolebinding-operator.yaml deleted file mode 100644 index a9089c07d..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrolebinding-operator.yaml +++ /dev/null @@ -1,28 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: dynatrace-oneagent-operator - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -subjects: - - kind: ServiceAccount - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} -roleRef: - kind: ClusterRole - name: dynatrace-oneagent-operator - apiGroup: rbac.authorization.k8s.io diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrolebinding-webhook.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrolebinding-webhook.yaml deleted file mode 100644 index 5e95b2f87..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/clusterrolebinding-webhook.yaml +++ /dev/null @@ -1,28 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: dynatrace-oneagent-webhook - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} -subjects: - - kind: ServiceAccount - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} -roleRef: - kind: ClusterRole - name: dynatrace-oneagent-webhook - apiGroup: rbac.authorization.k8s.io diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/configmap.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/configmap.yaml deleted file mode 100644 index 60e20f087..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/configmap.yaml +++ /dev/null @@ -1,26 +0,0 @@ -# Copyright 2020 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if .Values.oneagent.trustedCAs }} -apiVersion: v1 -kind: ConfigMap -metadata: - name: {{ .Values.oneagent.name }} - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -data: - certs: | -{{ .Values.oneagent.trustedCAs | indent 4 }} -{{- end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/customresource-oneagent.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/customresource-oneagent.yaml deleted file mode 100644 index 93202015a..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/customresource-oneagent.yaml +++ /dev/null @@ -1,136 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if and (eq .Values.mode "fullstack") (ne .Values.oneagent.apiUrl "") }} -apiVersion: dynatrace.com/v1alpha1 -kind: OneAgent -metadata: - name: {{ .Values.oneagent.name }} - namespace: {{ .Release.Namespace }} - annotations: - {{- if ne .Values.platform "google"}} - "helm.sh/hook": post-install - {{ end }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -spec: - apiUrl: {{ .Values.oneagent.apiUrl }} - tokens: {{ .Values.oneagent.name }} - image: {{ include "dynatrace-oneagent.image" . | quote }} - - {{- if ne (printf "%T" .Values.oneagent.args) "string" }} - args: {{- toYaml .Values.oneagent.args | nindent 4 }} - {{- end }} - - {{- if .Values.oneagent.env }} - env: {{- toYaml .Values.oneagent.env | nindent 4 }} - {{- end }} - - {{- if .Values.oneagent.labels }} - labels: {{- toYaml .Values.oneagent.labels | nindent 4 }} - {{- end }} - - {{- if .Values.oneagent.nodeSelector }} - nodeSelector: {{- toYaml .Values.oneagent.nodeSelector | nindent 4 }} - {{- end }} - - {{- if .Values.oneagent.proxy }} - proxy: - valueFrom: {{ .Values.oneagent.name }} - {{- end }} - - {{- if ne (printf "%T" .Values.oneagent.tolerations) "string" }} - tolerations: {{- toYaml .Values.oneagent.tolerations | nindent 4 }} - {{- else }} - tolerations: - - effect: NoSchedule - key: node-role.kubernetes.io/master - operator: Exists - {{- end }} - - {{- if .Values.oneagent.resources }} - resources: - {{- if or (.Values.oneagent.resources.requests.cpu) (.Values.oneagent.resources.requests.memory) }} - requests: - {{- if .Values.oneagent.resources.requests.cpu }} - cpu: {{ .Values.oneagent.resources.requests.cpu }} - {{- end }} - {{ if .Values.oneagent.resources.requests.memory }} - memory: {{ .Values.oneagent.resources.requests.memory }} - {{- end }} - {{- end }} - {{- if or (.Values.oneagent.resources.limits.cpu) (.Values.oneagent.resources.limits.memory) }} - limits: - {{- if .Values.oneagent.resources.limits.cpu }} - cpu: {{ .Values.oneagent.resources.limits.cpu }} - {{- end }} - {{- if .Values.oneagent.resources.limits.memory }} - memory: {{ .Values.oneagent.resources.limits.memory }} - {{- end }} - {{- end }} - {{- end }} - - {{- if .Values.oneagent.dnsPolicy }} - dnsPolicy: {{ .Values.oneagent.dnsPolicy }} - {{- end }} - - {{- if .Values.oneagent.enableIstio }} - enableIstio: {{ .Values.oneagent.enableIstio }} - {{- end }} - - {{- if .Values.oneagent.disableAgentUpdate }} - disableAgentUpdate: {{ .Values.oneagent.disableAgentUpdate }} - {{- end }} - - {{- if .Values.oneagent.skipCertCheck }} - skipCertCheck: {{ .Values.oneagent.skipCertCheck }} - {{- end }} - - {{- if .Values.oneagent.waitReadySeconds }} - waitReadySeconds: {{ .Values.oneagent.waitReadySeconds }} - {{- end }} - - {{- if .Values.oneagent.priorityClassName }} - priorityClassName: {{ .Values.oneagent.priorityClassName }} - {{- end }} - - {{- if .Values.oneagent.serviceAccountName }} - serviceAccountName: {{ .Values.oneagent.serviceAccountName }} - {{- end }} - - {{- if .Values.oneagent.trustedCAs }} - trustedCAs: {{ .Values.oneagent.name }} - {{- end }} - - {{- if .Values.oneagent.networkZone }} - networkZone: {{ .Values.oneagent.networkZone }} - {{- end }} - - {{- if .Values.oneagent.useUnprivilegedMode }} - useUnprivilegedMode: {{ .Values.oneagent.useUnprivilegedMode }} - {{- end }} - - {{- if .Values.oneagent.useImmutableImage }} - useImmutableImage: {{ .Values.oneagent.useImmutableImage }} - {{- end }} - - {{- if .Values.oneagent.agentVersion }} - agentVersion: {{ .Values.oneagent.agentVersion }} - {{- end }} - - {{- if .Values.oneagent.customPullSecret }} - customPullSecret: {{ .Values.oneagent.customPullSecret }} - {{- end }} -{{ end }} \ No newline at end of file diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/customresource-oneagentapm.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/customresource-oneagentapm.yaml deleted file mode 100644 index 986463259..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/customresource-oneagentapm.yaml +++ /dev/null @@ -1,88 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if and (eq .Values.mode "apm") (ne .Values.oneagent.apiUrl "") }} -apiVersion: dynatrace.com/v1alpha1 -kind: OneAgentAPM -metadata: - name: {{ include "oneagentapm.name" . }} - namespace: {{ .Release.Namespace }} - annotations: - {{- if ne .Values.platform "google"}} - "helm.sh/hook": post-install - {{ end }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -spec: - apiUrl: {{ .Values.oneagent.apiUrl }} - tokens: {{ .Values.oneagent.name }} - - {{- if .Values.oneagent.skipCertCheck }} - skipCertCheck: {{ .Values.oneagent.skipCertCheck }} - {{- end }} - - {{- if .Values.oneagent.enableIstio }} - enableIstio: {{ .Values.oneagent.enableIstio }} - {{- end }} - - {{- if .Values.oneagent.proxy }} - proxy: - valueFrom: {{ .Values.oneagent.name }} - {{- end }} - - {{- if .Values.oneagent.trustedCAs }} - trustedCAs: {{ .Values.oneagent.name }} - {{- end }} - - {{- if .Values.oneagent.networkZone }} - networkZone: {{ .Values.oneagent.networkZone }} - {{- end }} - - {{- if .Values.oneagent.useImmutableImage }} - useImmutableImage: {{ .Values.oneagent.useImmutableImage }} - {{- end }} - - {{- if .Values.oneagent.agentVersion }} - agentVersion: {{ .Values.oneagent.agentVersion }} - {{- end }} - - {{- if .Values.oneagent.resources }} - resources: - {{- if or (.Values.oneagent.resources.requests.cpu) (.Values.oneagent.resources.requests.memory) }} - requests: - {{- if .Values.oneagent.resources.requests.cpu }} - cpu: {{ .Values.oneagent.resources.requests.cpu }} - {{- end }} - {{- if .Values.oneagent.resources.requests.memory }} - memory: {{ .Values.oneagent.resources.requests.memory }} - {{- end }} - {{- end }} - {{- if or (.Values.oneagent.resources.limits.cpu) (.Values.oneagent.resources.limits.memory) }} - limits: - {{- if .Values.oneagent.resources.limits.cpu }} - cpu: {{ .Values.oneagent.resources.limits.cpu }} - {{- end }} - {{- if .Values.oneagent.resources.limits.memory }} - memory: {{ .Values.oneagent.resources.limits.memory }} - {{- end }} - {{- end }} - {{- end }} - - {{- if .Values.oneagent.flavor }} - flavor: {{ .Values.oneagent.flavor }} - {{- end }} - -{{end}} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/deployment-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/deployment-operator.yaml deleted file mode 100644 index 954153ab9..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/deployment-operator.yaml +++ /dev/null @@ -1,112 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: apps/v1 -kind: Deployment -metadata: - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -spec: - replicas: 1 - revisionHistoryLimit: 1 - selector: - matchLabels: - name: {{ .Release.Name }} - strategy: - type: Recreate - template: - metadata: - labels: - name: {{ .Release.Name }} - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 8 }} - spec: - containers: - - name: dynatrace-oneagent-operator - args: - - operator - image: {{ include "dynatrace-oneagent-operator.image" . }} - imagePullPolicy: Always - env: - - name: POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - ports: - - containerPort: 8080 - name: metrics - - containerPort: 10080 - name: server-port - resources: - requests: - cpu: 10m - memory: 64Mi - limits: - cpu: 100m - memory: 256Mi - readinessProbe: - httpGet: - path: /healthz - port: server-port - scheme: HTTP - initialDelaySeconds: 15 - periodSeconds: 10 - livenessProbe: - httpGet: - path: /healthz - port: server-port - scheme: HTTP - initialDelaySeconds: 15 - periodSeconds: 10 - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: beta.kubernetes.io/arch - operator: In - values: - - amd64 - - arm64 - - key: beta.kubernetes.io/os - operator: In - values: - - linux - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - amd64 - - arm64 - - key: kubernetes.io/os - operator: In - values: - - linux - serviceAccountName: dynatrace-oneagent-operator - {{- if .Values.operator.customPullSecret }} - imagePullSecrets: - - name: {{ .Values.operator.customPullSecret }} - {{- end }} - {{- if .Values.operator.nodeSelector }} - nodeSelector: {{- toYaml .Values.operator.nodeSelector | nindent 8 }} - {{- end }} - {{- if .Values.operator.tolerations }} - tolerations: {{- toYaml .Values.operator.tolerations | nindent 8 }} - {{- end -}} - diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/deployment-webhook.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/deployment-webhook.yaml deleted file mode 100644 index eb714c939..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/deployment-webhook.yaml +++ /dev/null @@ -1,164 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: apps/v1 -kind: Deployment -metadata: - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} - dynatrace.com/operator: oneagent -spec: - replicas: 1 - revisionHistoryLimit: 1 - selector: - matchLabels: - internal.oneagent.dynatrace.com/component: webhook - internal.oneagent.dynatrace.com/app: webhook - strategy: - type: Recreate - template: - metadata: - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 8 }} - dynatrace.com/operator: oneagent - internal.oneagent.dynatrace.com/component: webhook - internal.oneagent.dynatrace.com/app: webhook - spec: - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: beta.kubernetes.io/arch - operator: In - values: - - amd64 - - arm64 - - key: beta.kubernetes.io/os - operator: In - values: - - linux - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - amd64 - - arm64 - - key: kubernetes.io/os - operator: In - values: - - linux - containers: - - name: webhook - args: - - webhook-server - image: {{ include "dynatrace-oneagent-operator.image" . }} - imagePullPolicy: Always - env: - - name: POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - readinessProbe: - httpGet: - path: /healthz - port: server-port - scheme: HTTPS - initialDelaySeconds: 60 - periodSeconds: 10 - livenessProbe: - httpGet: - path: /healthz - port: server-port - scheme: HTTPS - initialDelaySeconds: 60 - periodSeconds: 10 - ports: - - name: metrics - containerPort: 8383 - - name: server-port - containerPort: 8443 - resources: - requests: - cpu: 10m - memory: 64Mi - limits: - cpu: 100m - memory: 256Mi - volumeMounts: - - name: certs-volume - mountPath: /mnt/webhook-certs - - name: bootstrapper - args: - - webhook-bootstrapper - image: {{ include "dynatrace-oneagent-operator.image" . }} - imagePullPolicy: Always - env: - - name: POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - ports: - - name: metrics - containerPort: 8484 - - name: server-port - containerPort: 9080 - readinessProbe: - httpGet: - path: /healthz - port: server-port - scheme: HTTP - initialDelaySeconds: 60 - periodSeconds: 10 - livenessProbe: - httpGet: - path: /healthz - port: server-port - scheme: HTTP - initialDelaySeconds: 60 - periodSeconds: 10 - resources: - requests: - cpu: 10m - memory: 64Mi - limits: - cpu: 100m - memory: 256Mi - volumeMounts: - - name: certs-volume - mountPath: /mnt/webhook-certs - serviceAccountName: dynatrace-oneagent-webhook - {{- if .Values.operator.customPullSecret }} - imagePullSecrets: - - name: {{ .Values.operator.customPullSecret }} - {{- end }} - {{- if .Values.operator.nodeSelector }} - nodeSelector: {{- toYaml .Values.operator.nodeSelector | nindent 8 }} - {{- end }} - {{- if .Values.operator.tolerations }} - tolerations: {{- toYaml .Values.operator.tolerations | nindent 8 }} - {{- end }} - volumes: - - name: certs-volume - emptyDir: {} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/mutatingwebhookconfiguration.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/mutatingwebhookconfiguration.yaml deleted file mode 100644 index 8d61cc979..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/mutatingwebhookconfiguration.yaml +++ /dev/null @@ -1,42 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if ne .Values.platform "openshift-3-11"}} -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - name: dynatrace-oneagent-webhook - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} -webhooks: - - name: webhook.oneagent.dynatrace.com - rules: - - apiGroups: [""] - apiVersions: ["v1"] - operations: ["CREATE"] - resources: ["pods"] - scope: Namespaced - namespaceSelector: - matchExpressions: - - key: oneagent.dynatrace.com/instance - operator: Exists - clientConfig: - service: - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} - path: /inject - admissionReviewVersions: ["v1beta1", "v1"] - sideEffects: None -{{ end }} \ No newline at end of file diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/rolebinding-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/rolebinding-operator.yaml deleted file mode 100644 index 0ae30a6ca..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/rolebinding-operator.yaml +++ /dev/null @@ -1,29 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -subjects: - - kind: ServiceAccount - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} -roleRef: - kind: Role - name: dynatrace-oneagent-operator - apiGroup: rbac.authorization.k8s.io diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/rolebinding-webhook.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/rolebinding-webhook.yaml deleted file mode 100644 index abe7ed1ff..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/rolebinding-webhook.yaml +++ /dev/null @@ -1,29 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} -subjects: - - kind: ServiceAccount - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} -roleRef: - kind: Role - name: dynatrace-oneagent-webhook - apiGroup: rbac.authorization.k8s.io diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/secret.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/secret.yaml deleted file mode 100644 index 44d07f842..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/secret.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if and (.Values.secret.autoCreate) (ne .Values.oneagent.apiUrl "")}} -apiVersion: v1 -kind: Secret -metadata: - name: {{ .Values.oneagent.name }} - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -data: - {{- if or (eq .Values.mode "fullstack") (eq .Values.oneagent.useImmutableImage true) }} - apiToken: {{ .Values.secret.apiToken | b64enc }} - {{- end }} - paasToken: {{ .Values.secret.paasToken | b64enc }} - {{- if .Values.oneagent.proxy }} - proxy: {{ .Values.oneagent.proxy | b64enc }} - {{- end }} -type: Opaque -{{- end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/service.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/service.yaml deleted file mode 100644 index f0bced27f..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/service.yaml +++ /dev/null @@ -1,30 +0,0 @@ - -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: v1 -kind: Service -metadata: - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} -spec: - selector: - internal.oneagent.dynatrace.com/app: webhook - internal.oneagent.dynatrace.com/component: webhook - ports: - - port: 443 - protocol: TCP - targetPort: server-port diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/serviceaccount-oneagent-unprivileged.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/serviceaccount-oneagent-unprivileged.yaml deleted file mode 100644 index 600c08589..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/serviceaccount-oneagent-unprivileged.yaml +++ /dev/null @@ -1,21 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: dynatrace-oneagent-unprivileged - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/serviceaccount-webhook.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/serviceaccount-webhook.yaml deleted file mode 100644 index ee0550b74..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Common/serviceaccount-webhook.yaml +++ /dev/null @@ -1,21 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/role-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/role-operator.yaml deleted file mode 100644 index 570379d94..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/role-operator.yaml +++ /dev/null @@ -1,134 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if or (eq .Values.platform "kubernetes") (eq .Values.platform "google")}} -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -rules: - - apiGroups: - - dynatrace.com - resources: - - oneagents - - oneagentapms - verbs: - - get - - list - - watch - - update - - apiGroups: - - apps - resources: - - daemonsets - verbs: - - get - - list - - watch - - create - - update - - delete - - apiGroups: - - apps - resources: - - replicasets - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - deployments/finalizers - verbs: - - update - - apiGroups: - - "" # "" indicates the core API group - resources: - - configmaps - verbs: - - get - - list - - watch - - create - - update - - delete - - apiGroups: - - "" # "" indicates the core API group - resources: - - pods - verbs: - - get - - list - - watch - - delete - - apiGroups: - - "" # "" indicates the core API group - resources: - - secrets - verbs: - - create - - update - - delete - - get - - list - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create - - apiGroups: - - dynatrace.com - resources: - - oneagents/finalizers - - oneagents/status - - oneagentapms/finalizers - - oneagentapms/status - verbs: - - update - - apiGroups: - - networking.istio.io - resources: - - serviceentries - - virtualservices - verbs: - - get - - list - - create - - update - - delete - - apiGroups: - - "" - resources: - - events - verbs: - - list - - create - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - update - - create -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/role-webhook.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/role-webhook.yaml deleted file mode 100644 index ef7cd85a8..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/role-webhook.yaml +++ /dev/null @@ -1,68 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if or (eq .Values.platform "kubernetes") (eq .Values.platform "google")}} -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} -rules: - - apiGroups: - - "" - resources: - - services - - configmaps - - secrets - verbs: - - get - - list - - watch - - create - - update - - apiGroups: - - "" - resources: - - pods - verbs: - - get - - list - - watch - - apiGroups: - - dynatrace.com - resources: - - oneagentapms - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - list - - create - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - update - - create -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/serviceaccount-oneagent.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/serviceaccount-oneagent.yaml deleted file mode 100644 index 16581b049..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/serviceaccount-oneagent.yaml +++ /dev/null @@ -1,24 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift or google" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if or (eq .Values.platform "kubernetes") (eq .Values.platform "google")}} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: dynatrace-oneagent - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/serviceaccount-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/serviceaccount-operator.yaml deleted file mode 100644 index 1b90df493..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Kubernetes/serviceaccount-operator.yaml +++ /dev/null @@ -1,24 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if or (eq .Values.platform "kubernetes") (eq .Values.platform "google")}} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/NOTES.txt b/charts/dynatrace/dynatrace-oneagent-operator/templates/NOTES.txt deleted file mode 100644 index 288d31baa..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/NOTES.txt +++ /dev/null @@ -1,58 +0,0 @@ -Thank you for installing {{ .Chart.Name }}. - -Your release is named {{ .Release.Name }}. - -To find more information about the Dynatrace OneAgent Operator, try: -https://github.com/Dynatrace/dynatrace-oneagent-operator - -To verify the current state of the OneAgent deployment, try: - $ kubectl get pods -n {{ .Release.Namespace }} - $ kubectl logs -f deployment/{{ .Release.Name }} -n {{ .Release.Namespace }} - $ kubectl get oneagent {{ .Values.oneagent.name }} -n {{ .Release.Namespace }} - -{{- if eq .Values.mode "apm" -}} - {{- if .Values.oneagent.image -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.image - {{- end -}} - {{- if .Values.oneagent.args -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.args - {{- end -}} - {{- if .Values.oneagent.env -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.env - {{- end -}} - {{- if .Values.oneagent.nodeSelector -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.nodeSelector - {{- end -}} - {{- if .Values.oneagent.labels -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.labels - {{- end -}} - {{- if .Values.oneagent.disableAgentUpdate -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.disableAgentUpdate - {{- end -}} - {{- if .Values.oneagent.dnsPolicy -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.dnsPolicy - {{- end -}} - {{- if .Values.oneagent.resources -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.resources - {{- end -}} - {{- if .Values.oneagent.tolerations -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.tolerations - {{- end -}} - {{- if .Values.oneagent.waitReadySeconds -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.waitReadySeconds - {{- end -}} - {{- if .Values.oneagent.priorityClassName -}} -WARNING: -The following argument did not get applied since it can only be used with fullstack: oneagent.priorityClassName - {{- end -}} -{{- end -}} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/mutatingwebhookconfiguration.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/mutatingwebhookconfiguration.yaml deleted file mode 100644 index 1d5551ecb..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/mutatingwebhookconfiguration.yaml +++ /dev/null @@ -1,45 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift-3-11"}} - -apiVersion: admissionregistration.k8s.io/v1beta1 -kind: MutatingWebhookConfiguration -metadata: - name: dynatrace-oneagent-webhook - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} - dynatrace.com/operator: oneagent - internal.oneagent.dynatrace.com/component: webhook -webhooks: -- name: webhook.oneagent.dynatrace.com - rules: - - apiGroups: [""] - apiVersions: ["v1"] - operations: ["CREATE"] - resources: ["pods"] - scope: Namespaced - namespaceSelector: - matchExpressions: - - key: oneagent.dynatrace.com/instance - operator: Exists - clientConfig: - service: - name: dynatrace-oneagent-webhook - namespace: dynatrace - path: /inject - admissionReviewVersions: ["v1beta1"] - -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/role-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/role-operator.yaml deleted file mode 100644 index 060c6ac62..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/role-operator.yaml +++ /dev/null @@ -1,134 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift-3-11" }} -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -rules: - - apiGroups: - - dynatrace.com - resources: - - oneagents - - oneagentapms - verbs: - - get - - list - - watch - - update - - apiGroups: - - apps - resources: - - daemonsets - verbs: - - get - - list - - watch - - create - - update - - delete - - apiGroups: - - apps - resources: - - replicasets - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - deployments/finalizers - verbs: - - update - - apiGroups: - - "" # "" indicates the core API group - resources: - - configmaps - verbs: - - get - - list - - watch - - create - - update - - delete - - apiGroups: - - "" # "" indicates the core API group - resources: - - pods - verbs: - - get - - list - - watch - - delete - - apiGroups: - - "" # "" indicates the core API group - resources: - - secrets - verbs: - - create - - update - - delete - - get - - list - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create - - apiGroups: - - dynatrace.com - resources: - - oneagents/finalizers - - oneagents/status - - oneagentapms/finalizers - - oneagentapms/status - verbs: - - update - - apiGroups: - - networking.istio.io - resources: - - serviceentries - - virtualservices - verbs: - - get - - list - - create - - update - - delete - - apiGroups: - - "" - resources: - - events - verbs: - - list - - create - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - update - - create -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/role-webhook.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/role-webhook.yaml deleted file mode 100644 index 5f9a2508c..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/role-webhook.yaml +++ /dev/null @@ -1,68 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift-3-11" }} -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} -rules: - - apiGroups: - - "" - resources: - - services - - configmaps - - secrets - verbs: - - get - - list - - watch - - create - - update - - apiGroups: - - "" - resources: - - pods - verbs: - - get - - list - - watch - - apiGroups: - - dynatrace.com - resources: - - oneagentapms - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - list - - create - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - update - - create -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/securitycontextconstraints-unprivileged.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/securitycontextconstraints-unprivileged.yaml deleted file mode 100644 index 58818453c..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/securitycontextconstraints-unprivileged.yaml +++ /dev/null @@ -1,65 +0,0 @@ -# Copyright 2020 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if and (eq .Values.platform "openshift-3-11") (.Values.createSecurityContextConstraints) }} -apiVersion: security.openshift.io/v1 -kind: SecurityContextConstraints -metadata: - annotations: - kubernetes.io/description: "dynatrace-oneagent-privileged allows access to all privileged and host features and the ability to run as any user, any group, any fsGroup, and with any SELinux context. This is a copy of privileged scc." - name: dynatrace-oneagent-unprivileged -allowHostDirVolumePlugin: true -allowHostIPC: true -allowHostNetwork: true -allowHostPID: true -allowHostPorts: true -allowPrivilegedContainer: false -allowedCapabilities: - - CHOWN - - DAC_OVERRIDE - - DAC_READ_SEARCH - - FOWNER - - FSETID - - KILL - - NET_ADMIN - - NET_RAW - - SETFCAP - - SETGID - - SETUID - - SYS_ADMIN - - SYS_CHROOT - - SYS_PTRACE - - SYS_RESOURCE -allowedFlexVolumes: null -defaultAddCapabilities: [] -fsGroup: - type: RunAsAny -priority: 1 -readOnlyRootFilesystem: false -requiredDropCapabilities: - - ALL -runAsUser: - type: RunAsAny -seLinuxContext: - type: RunAsAny -seccompProfiles: - - "*" -supplementalGroups: - type: RunAsAny -users: - - system:serviceaccount:dynatrace:dynatrace-oneagent-unprivileged -volumes: - - "*" -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/securitycontextconstraints.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/securitycontextconstraints.yaml deleted file mode 100644 index 83ad3e471..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/securitycontextconstraints.yaml +++ /dev/null @@ -1,50 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if and (eq .Values.platform "openshift-3-11") (.Values.createSecurityContextConstraints) }} -apiVersion: security.openshift.io/v1 -kind: SecurityContextConstraints -metadata: - annotations: - kubernetes.io/description: "dynatrace-oneagent-privileged allows access to all privileged and host features and the ability to run as any user, any group, any fsGroup, and with any SELinux context. This is a copy of privileged scc." - name: dynatrace-oneagent-privileged -allowHostDirVolumePlugin: true -allowHostIPC: true -allowHostNetwork: true -allowHostPID: true -allowHostPorts: true -allowPrivilegedContainer: true -allowedCapabilities: - - "*" -allowedFlexVolumes: null -defaultAddCapabilities: [] -fsGroup: - type: RunAsAny -priority: 1 -readOnlyRootFilesystem: false -requiredDropCapabilities: [] -runAsUser: - type: RunAsAny -seLinuxContext: - type: RunAsAny -seccompProfiles: - - "*" -supplementalGroups: - type: RunAsAny -users: - - system:serviceaccount:dynatrace:dynatrace-oneagent -volumes: - - "*" -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/serviceaccount-oneagent.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/serviceaccount-oneagent.yaml deleted file mode 100644 index 60baf2700..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/serviceaccount-oneagent.yaml +++ /dev/null @@ -1,25 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift-3-11" }} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: dynatrace-oneagent - namespace: {{ .Release.Namespace }} -imagePullSecrets: - - name: redhat-connect - - name: redhat-connect-sso -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/serviceaccount-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/serviceaccount-operator.yaml deleted file mode 100644 index 2a04ac6db..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift-3.11/serviceaccount-operator.yaml +++ /dev/null @@ -1,25 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift-3-11" }} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} -imagePullSecrets: - - name: redhat-connect - - name: redhat-connect-sso -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/role-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/role-operator.yaml deleted file mode 100644 index 32bfc032f..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/role-operator.yaml +++ /dev/null @@ -1,134 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift" }} -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} -rules: - - apiGroups: - - dynatrace.com - resources: - - oneagents - - oneagentapms - verbs: - - get - - list - - watch - - update - - apiGroups: - - apps - resources: - - daemonsets - verbs: - - get - - list - - watch - - create - - update - - delete - - apiGroups: - - apps - resources: - - replicasets - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - deployments/finalizers - verbs: - - update - - apiGroups: - - "" # "" indicates the core API group - resources: - - configmaps - verbs: - - get - - list - - watch - - create - - update - - delete - - apiGroups: - - "" # "" indicates the core API group - resources: - - pods - verbs: - - get - - list - - watch - - delete - - apiGroups: - - "" # "" indicates the core API group - resources: - - secrets - verbs: - - create - - update - - delete - - get - - list - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create - - apiGroups: - - dynatrace.com - resources: - - oneagents/finalizers - - oneagents/status - - oneagentapms/finalizers - - oneagentapms/status - verbs: - - update - - apiGroups: - - networking.istio.io - resources: - - serviceentries - - virtualservices - verbs: - - get - - list - - create - - update - - delete - - apiGroups: - - "" - resources: - - events - verbs: - - list - - create - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - update - - create -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/role-webhook.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/role-webhook.yaml deleted file mode 100644 index 0a83c26c8..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/role-webhook.yaml +++ /dev/null @@ -1,68 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift" }} -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: dynatrace-oneagent-webhook - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabelswebhook" . | nindent 4 }} -rules: - - apiGroups: - - "" - resources: - - services - - configmaps - - secrets - verbs: - - get - - list - - watch - - create - - update - - apiGroups: - - "" - resources: - - pods - verbs: - - get - - list - - watch - - apiGroups: - - dynatrace.com - resources: - - oneagentapms - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - list - - create - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - get - - update - - create -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/securitycontextconstraints-unprivileged.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/securitycontextconstraints-unprivileged.yaml deleted file mode 100644 index ad6a2d206..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/securitycontextconstraints-unprivileged.yaml +++ /dev/null @@ -1,65 +0,0 @@ -# Copyright 2020 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if and (eq .Values.platform "openshift") (.Values.createSecurityContextConstraints) }} -apiVersion: security.openshift.io/v1 -kind: SecurityContextConstraints -metadata: - annotations: - kubernetes.io/description: "dynatrace-oneagent-privileged allows access to all privileged and host features and the ability to run as any user, any group, any fsGroup, and with any SELinux context. This is a copy of privileged scc." - name: dynatrace-oneagent-unprivileged -allowHostDirVolumePlugin: true -allowHostIPC: true -allowHostNetwork: true -allowHostPID: true -allowHostPorts: true -allowPrivilegedContainer: false -allowedCapabilities: - - CHOWN - - DAC_OVERRIDE - - DAC_READ_SEARCH - - FOWNER - - FSETID - - KILL - - NET_ADMIN - - NET_RAW - - SETFCAP - - SETGID - - SETUID - - SYS_ADMIN - - SYS_CHROOT - - SYS_PTRACE - - SYS_RESOURCE -allowedFlexVolumes: null -defaultAddCapabilities: [] -fsGroup: - type: RunAsAny -priority: 1 -readOnlyRootFilesystem: false -requiredDropCapabilities: - - ALL -runAsUser: - type: RunAsAny -seLinuxContext: - type: RunAsAny -seccompProfiles: - - "*" -supplementalGroups: - type: RunAsAny -users: - - system:serviceaccount:dynatrace:dynatrace-oneagent-unprivileged -volumes: - - "*" -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/securitycontextconstraints.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/securitycontextconstraints.yaml deleted file mode 100644 index 3eda94f0c..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/securitycontextconstraints.yaml +++ /dev/null @@ -1,50 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if and (eq .Values.platform "openshift") (.Values.createSecurityContextConstraints) }} -apiVersion: security.openshift.io/v1 -kind: SecurityContextConstraints -metadata: - annotations: - kubernetes.io/description: "dynatrace-oneagent-privileged allows access to all privileged and host features and the ability to run as any user, any group, any fsGroup, and with any SELinux context. This is a copy of privileged scc." - name: dynatrace-oneagent-privileged -allowHostDirVolumePlugin: true -allowHostIPC: true -allowHostNetwork: true -allowHostPID: true -allowHostPorts: true -allowPrivilegedContainer: true -allowedCapabilities: - - "*" -allowedFlexVolumes: null -defaultAddCapabilities: [] -fsGroup: - type: RunAsAny -priority: 1 -readOnlyRootFilesystem: false -requiredDropCapabilities: [] -runAsUser: - type: RunAsAny -seLinuxContext: - type: RunAsAny -seccompProfiles: - - "*" -supplementalGroups: - type: RunAsAny -users: - - system:serviceaccount:dynatrace:dynatrace-oneagent -volumes: - - "*" -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/serviceaccount-oneagent.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/serviceaccount-oneagent.yaml deleted file mode 100644 index 100b93ecc..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/serviceaccount-oneagent.yaml +++ /dev/null @@ -1,25 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift" }} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: dynatrace-oneagent - namespace: {{ .Release.Namespace }} -imagePullSecrets: - - name: redhat-connect - - name: redhat-connect-sso -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/serviceaccount-operator.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/serviceaccount-operator.yaml deleted file mode 100644 index d80abab71..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/Openshift/serviceaccount-operator.yaml +++ /dev/null @@ -1,25 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes or openshift" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "openshift" }} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: dynatrace-oneagent-operator - namespace: {{ .Release.Namespace }} -imagePullSecrets: - - name: redhat-connect - - name: redhat-connect-sso -{{ end }} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/_helpers.tpl b/charts/dynatrace/dynatrace-oneagent-operator/templates/_helpers.tpl deleted file mode 100644 index 7e7783d70..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/_helpers.tpl +++ /dev/null @@ -1,132 +0,0 @@ -// Copyright 2019 Dynatrace LLC - -// Licensed under the Apache License, Version 2.0 (the "License"); -// you may not use this file except in compliance with the License. -// You may obtain a copy of the License at - -// http://www.apache.org/licenses/LICENSE-2.0 - -// Unless required by applicable law or agreed to in writing, software -// distributed under the License is distributed on an "AS IS" BASIS, -// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -// See the License for the specific language governing permissions and -// limitations under the License. - -{{/* vim: set filetype=mustache: */}} -{{/* -Expand the name of the chart. -*/}} -{{- define "dynatrace-oneagent-operator.name" -}} -{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} -{{- end -}} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "dynatrace-oneagent-operator.fullname" -}} -{{- if .Values.fullnameOverride -}} -{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- $name := default .Chart.Name .Values.nameOverride -}} -{{- if contains $name .Release.Name -}} -{{- .Release.Name | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} -{{- end -}} -{{- end -}} -{{- end -}} - -{{/* -Create chart name and version as used by the chart label. -*/}} -{{- define "dynatrace-oneagent-operator.chart" -}} -{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} -{{- end -}} - -{{/* -Selector labels -*/}} -{{- define "dynatrace-operator.selectorLabels" -}} -app.kubernetes.io/name: {{ .Release.Name }} -app.kubernetes.io/instance: {{ .Release.Name }} -{{- end }} - -{{/* -Common labels -*/}} -{{- define "dynatrace-oneagent-operator.commonlabels" -}} -{{ include "dynatrace-operator.selectorLabels" . }} -dynatrace: operator -operator: oneagent -{{- end -}} - -{{/* -Common labels webhook -*/}} -{{- define "dynatrace-oneagent-operator.commonlabelswebhook" -}} -{{ include "dynatrace-operator.selectorLabels" . }} -dynatrace.com/operator: oneagent -internal.oneagent.dynatrace.com/component: webhook -{{- end -}} - -{{/* -Check if platform is set -*/}} -{{- define "dynatrace-oneagent-operator.platformSet" -}} -{{- if or (eq .Values.platform "kubernetes") (eq .Values.platform "openshift") (eq .Values.platform "google") -}} - {{ default "set" }} -{{- end -}} -{{- if (eq .Values.platform "openshift-3-11") -}} - {{ default "set" }} -{{- end -}} -{{- end -}} - -{{/* -Check if default oneagent image is used -*/}} -{{- define "dynatrace-oneagent.image" -}} -{{- if .Values.oneagent.image -}} - {{- printf "%s" .Values.oneagent.image -}} -{{- else -}} - {{- if eq .Values.oneagent.useImmutableImage false -}} - {{- if eq .Values.platform "kubernetes" -}} - {{- printf "docker.io/dynatrace/oneagent" }} - {{- end -}} - {{- if eq .Values.platform "openshift" -}} - {{- printf "registry.connect.redhat.com/dynatrace/oneagent" }} - {{- end -}} - {{- else -}} - {{- printf "" -}} - {{- end -}} -{{- end -}} -{{- end -}} - -{{/* -Check if default operator image is used -*/}} -{{- define "dynatrace-oneagent-operator.image" -}} -{{- if .Values.operator.image -}} - {{- printf "%s" .Values.operator.image -}} -{{- else -}} - {{- if eq .Values.platform "google" -}} - {{- printf "%s:%s" "gcr.io/dynatrace-marketplace-prod/dynatrace-oneagent-operator" "{{ .Chart.AppVersion }}" }} - {{- else -}} - {{- printf "%s:v%s" "docker.io/dynatrace/dynatrace-oneagent-operator" .Chart.AppVersion }} - {{- end -}} -{{- end -}} -{{- end -}} - -{{/* -Check for correct oneagentapm name -*/}} -{{- define "oneagentapm.name" -}} -{{- if eq .Values.mode "apm" }} - {{- if eq .Values.oneagent.name "oneagent" -}} - {{- printf "oneagentapm" -}} - {{- else -}} - {{- printf "%s" .Values.oneagent.name -}} - {{- end -}} -{{- end -}} -{{- end -}} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/templates/application.yaml b/charts/dynatrace/dynatrace-oneagent-operator/templates/application.yaml deleted file mode 100644 index 313e7c91b..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/templates/application.yaml +++ /dev/null @@ -1,89 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -{{- $platformIsSet := printf "%s" (required "Platform needs to be set to kubernetes, openshift or openshift-3-11" (include "dynatrace-oneagent-operator.platformSet" .))}} -{{- if eq .Values.platform "google"}} - ---- -apiVersion: app.k8s.io/v1beta1 -kind: Application -metadata: - name: {{ .Release.Name }} - namespace: {{ .Release.Namespace }} - labels: - {{- include "dynatrace-oneagent-operator.commonlabels" . | nindent 4 }} - annotations: - kubernetes-engine.cloud.google.com/icon: data:image/png;base64,{{ .Files.Get "logo.png" | b64enc }} - marketplace.cloud.google.com/deploy-info: '{"partner_id": "dynatrace-marketplace-prod", "product_id": "dynatrace-oneagent-operator", "partner_name": "Dynatrace LLC"}' -spec: - descriptor: - type: "Dynatrace OneAgent Operator" - version: "0.10.0" - maintainers: - - name: Dynatrace LLC - url: https://www.dynatrace.com/ - keywords: - - "dynatrace" - - "operator" - - "oneagent" - - "k8s" - - "monitoring" - - "apm" - description: | - The Dynatrace OneAgent Operator allows users to easily deploy full-stack monitoring for [Kubernetes clusters](https://www.dynatrace.com/technologies/kubernetes-monitoring/). The Dynatrace OneAgent automatically monitors workloads in containers down to the code and request level. - - For deployment instructions please consult the [Operator Deploy Guide](https://www.dynatrace.com/support/help/shortlink/kubernetes-deploy). - - links: - - description: Dynatrace Website - url: https://www.dynatrace.com/ - - description: Operator Deploy Guide - url: https://www.dynatrace.com/support/help/shortlink/kubernetes-deploy - - description: Kubernetes Monitoring Info - url: https://www.dynatrace.com/technologies/kubernetes-monitoring - selector: - matchLabels: - app.kubernetes.io/name: "{{ .Release.Name }}" - componentKinds: - - group: dynatrace.com/v1alpha1 - kind: OneAgent - - group: dynatrace.com/v1alpha1 - kind: OneAgentAPM - - group: apps/v1 - kind: DaemonSet - - group: v1 - kind: Pod - - group: v1 - kind: ConfigMap - - group: apps/v1 - kind: Deployment - - group: v1 - kind: Secret - - group: batch/v1 - kind: Job - - group: v1 - kind: Service - - group: v1 - kind: ServiceAccount - - group: admissionregistration.k8s.io/v1 - kind: MutatingWebhookConfiguration - - group: rbac.authorization.k8s.io/v1 - kind: ClusterRole - - group: rbac.authorization.k8s.io/v1 - kind: ClusterRoleBinding - - group: rbac.authorization.k8s.io/v1 - kind: Role - - group: rbac.authorization.k8s.io/v1 - kind: RoleBinding - -{{end}} diff --git a/charts/dynatrace/dynatrace-oneagent-operator/values.yaml b/charts/dynatrace/dynatrace-oneagent-operator/values.yaml deleted file mode 100644 index fb90a107e..000000000 --- a/charts/dynatrace/dynatrace-oneagent-operator/values.yaml +++ /dev/null @@ -1,70 +0,0 @@ -# Copyright 2019 Dynatrace LLC - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -# may be set to "kubernetes", "openshift", "openshift-3-11", "google" -platform: "kubernetes" -mode: "fullstack" - -# Only applicable for Openshift -createSecurityContextConstraints: true - -operator: - image: "" - customPullSecret: "" - # The expected format is YAML and not a string - nodeSelector: "" - # The expected format is YAML and not a string - tolerations: "" - -oneagent: - name: "oneagent" - apiUrl: "" - image: "" - # The expected format is YAML and not a string - args: "" - # The expected format is YAML and not a string - env: "" - # The expected format is YAML and not a string - nodeSelector: "" - # The expected format is YAML and not a string - labels: "" - skipCertCheck: false - disableAgentUpdate: false - enableIstio: false - dnsPolicy: "" - # resources: - # requests: - # cpu: 100m - # memory: 512Mi - # limits: - # cpu: 300m - # memory: 1.5Gi - # The expected format is YAML and not a string - tolerations: "" - waitReadySeconds: null - priorityClassName: "" - serviceAccountName: "" - proxy: "" - trustedCAs: "" - networkZone: "" - useUnprivilegedMode: true - useImmutableImage: false - agentVersion: "" - customPullSecret: "" - flavor: "" - -secret: - autoCreate: true - apiToken: "" - paasToken: "" diff --git a/charts/hpe/hpe-flexvolume-driver/Chart.yaml b/charts/hpe/hpe-flexvolume-driver/Chart.yaml deleted file mode 100644 index 09fded7c5..000000000 --- a/charts/hpe/hpe-flexvolume-driver/Chart.yaml +++ /dev/null @@ -1,24 +0,0 @@ -annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: hpe-flexvolume-driver -apiVersion: v1 -appVersion: "3.1" -description: A Helm chart for installing the HPE Volume Driver for Kubernetes FlexVolume - plugin -home: https://hpe.com/storage/containers -icon: https://raw.githubusercontent.com/hpe-storage/co-deployments/master/docs/assets/hpedev.png -keywords: -- HPE -- Storage -- StorageClass -- CentOS -- Ubuntu -- CloudVolumes -maintainers: -- email: hpe-containers-dev@hpe.com - name: shivamerla -name: hpe-flexvolume-driver -sources: -- https://github.com/hpe-storage/flexvolume-driver -version: 3.1.1 diff --git a/charts/hpe/hpe-flexvolume-driver/README.md b/charts/hpe/hpe-flexvolume-driver/README.md deleted file mode 100644 index 6cf393897..000000000 --- a/charts/hpe/hpe-flexvolume-driver/README.md +++ /dev/null @@ -1,173 +0,0 @@ -# HPE Volume Driver for Kubernetes FlexVolume Plugin Helm chart -The [HPE Volume Driver for Kubernetes FlexVolume Plugin](https://github.com/hpe-storage/flexvolume-driver) leverages HPE storage platforms to provide scalable and persistent storage for stateful applications. This chart also deploys the [HPE Dynamic Provisioner for Kubernetes](https://github.com/hpe-storage/k8s-dynamic-provisioner). - -## Prerequisites - -- Upstream Kubernetes version 1.11 or later -- Other Kubernetes distributions supported -- Rancher 2.x -- OpenShift 3.10, 3.11 (4.x will not be supported, see [CSI Driver Helm chart](https://github.com/hpe-storage/co-deployments/tree/master/helm/charts/hpe-csi-driver)) -- More distributions will be listed as tests are ongoing -- Recent Ubuntu, CentOS or RHEL compute nodes connected to their respective official package repositories - -Depending on which `pluginType` is being used, other prerequisites and requirements may apply. - -### HPE Nimble Storage (nimble) - -- NimbleOS 5.0.8 or later -- NimbleOS 5.1.3 or later - -### HPE Cloud Volumes - -- Amazon EKS 1.12.x/1.13.x -- Microsoft AKS 1.12.x/1.13.x -- US Regions Only - -## Configuration & Installation -The following table lists the configurable parameters of the FlexVolume driver chart and their default values. - -| Parameter | Description | Default | -|---------------------------|----------------------------------------------------------------------------------------------------|------------ | -| backend | HPE storage platform API endpoint. | 192.168.1.1 | -| pluginType | Backend plugin type to use. Currently `nimble` and `cv` are supported. | nimble | -| username | Username for the backend. Access key for HPE Cloud Volumes. | admin | -| password | Password for the backend. Access secret for HPE Cloud Volumes. | admin | -| protocol | Data plane protocol (`fc`, `iscsi`). | iscsi | -| fsType | Type of file to format volumes with (ext4, ext3, xfs, btrfs). | xfs | -| logLevel | Log level. Can be one of `info`, `debug`, `trace`, `warn` and `error` | info | -| mountConflictDelay | Wait this long (in seconds) before forcefully taking over a volume from an isolated or crashed node. | 120 | -| flavor | Kubernetes distribution specific tweaks. Supported flavors include `k8s`, `ocp`, `eks`, `aks` and `rke`. | k8s | -| podsMountDir | This is the directory where the kubelet bind mounts the volume for pods. May differ between Kubernetes distributions. | /var/lib/kubelet/pods | -| storageClass.name | The name to assign the created StorageClass. | hpe-standard | -| storageClass.create | Enables creation of StorageClass to consume this hpe-flexvolume-driver instance. | true | -| storageClass.defaultClass | Whether to set the created StorageClass as the clusters default StorageClass. | false | -| nimble.config | HPE Nimble Storage volume config parameters. | - | -| cv.config | HPE Cloud Volumes volume config parameters. | - | - -It's recommended to create a `values.yaml` file and edit it to fit the environment the chart is being deployed to. - -Example `values.yaml` using a Nimble backend: - -``` ---- -backend: 192.168.1.1 -username: admin -password: admin -pluginType: nimble -fsType: xfs -storageClass: - defaultClass: true -``` - -This will connect the driver to a Nimble based backend with management IP address of `192.168.1.1` and format new volumes with a XFS filesystem. - -The `nimble.config` or `cv.config` stanza will be hosted in a `ConfigMap` and can be used to tweak default parmaters and also override `StorageClass` parameters. More information on these stanzas can be found in the [ADVANCED.md](https://github.com/hpe-storage/flexvolume-driver/blob/master/ADVANCED.md) documentation. - -Example `nimble.config` stanza: - -``` -nimble: - config: - limitIOPS: "-1" - limitMBPS: "-1" - perfPolicy: DockerDefault -``` - -Example `cv.config` stanza: - -``` -cv: - config: - snapPrefix: BaseFor - automatedConnection: true - existingCloudSubnet: 10.1.0.0/24 - region: us-east-1 - privateCloud: vpc-data - cloudComputeProvider: "Amazon AWS" - perfPolicy: Other - volumeType: PF - encryption: true - protectionTemplate: twicedaily:4 - destroyOnRm: true - limitIOPS: "1000" - initiators: - - '"eth0"' - privateCloudResourceGroup: "" -``` - -**Note:** Storage class parameters will override the settings in `defaults` and `global` section. - -### Platform notes -Certain distributions demand certain tweaks to the variables for the driver and dynamic provisioner to operate correctly. See each platform for details. - -#### Upstream Kubernetes -This is the default operating mode, no tweaks are needed. - -#### Red Hat OpenShift and OKD -Applicable to Red Hat OpenShift 3.10 and 3.11. 4.x is not supported*. - -| Key | Value | Description | -|------------|---------------------------|------------------------------------------------------------------------------------| -| podsMountDir | /var/lib/origin/openshift.local.volumes | This is the directory where the kubelet bind mounts the volume for pods. | - -* = If experimentation is desirable with OpenShift 4.x, set `flexVolumeExec` default path for ocp to `/etc/kubernetes/kubelet-plugins/volume/exec`. The driver will only work on RHEL 7.x nodes. - -#### Rancher -Applicable to installing the Helm Chart via the Rancher catalog system. - -| Key | Value | Description | -|------------|---------------------------|------------------------------------------------------------------------------------| -| flavor | rke | Required and prepopulated by default. | -| podsMountDir | /var/lib/kubelet/volumeplugins | This is the directory where the kubelet bind mounts the volume for pods. Required and prepopulated by default.| - -## Installing the Chart -To install the chart with the name `hpe-flexvolume`: - -``` -helm repo add hpe-storage https://hpe-storage.github.io/co-deployments/ -helm install hpe-storage/hpe-flexvolume-driver --namespace kube-system --name hpe-flexvolume -f values.yaml -``` - -**Note:** Omitting the `--name` flag will generate a human readable name. - -## Check status of the Chart -To check status of the `hpe-flexvolume` deployment: - -``` -helm status hpe-flexvolume -``` - -## Uninstalling the Chart -To uninstall/delete the `hpe-flexvolume` deployment: - -``` -helm delete hpe-flexvolume --purge -``` - -## Alternative install method -In some cases it's more practical provide the local configuration via the `helm` command directly. Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example: - -``` -helm install --name hpe-flexvolume hpe/hpe-flexvolume-driver \ ---set backend=X.X.X.X --set username=admin --set password=xxxxxxxxx \ ---set protocol=iscsi --set fsType=xfs -``` - -## Using the HPE Volume Driver for Kubernetes FlexVolume Plugin -To enable dynamic provisioning of `PersistentVolume` through the use of `PersistentVolumeClaim` API objects, a `StorageClass` needs to be declared on the cluster. Please see the [HPE Volume Driver for Kubernetes FlexVolume Plugin](https://github.com/hpe-storage/flexvolume-driver) repository for the official documentation for this Helm chart. Also, it's helpful to be familar with [persistent storage concepts](https://kubernetes.io/docs/concepts/storage/volumes/) in Kubernetes prior to deploying stateful workloads. - -## Support -The HPE Volume Driver for Kubernetes FlexVolume Plugin Helm chart is supported by the respective platform team. Currently supported platforms: - -- HPE Nimble Storage -- HPE Cloud Volumes - -Please file issues through the regular support channels for the particular platform. Feature requests or general questions to developers may be filed through the [GitHub issue tracker](https://github.com/hpe-storage/co-deployments) for this project. - -You may also join our Slack community to chat with HPE folks close to this project for inquiries not requring our immediate response. We hang out in `#NimbleStorage` and `#Kubernetes` at [slack.hpedev.io](https://slack.hpedev.io/). - -## Contributing -We value all feedback and contributions. If you find any issues or want to contribute, please feel free to open an issue or file a PR. More details in [CONTRIBUTING.md](https://github.com/hpe-storage/co-deployments/blob/master/CONTRIBUTING.md) - -## License -This is open source software licensed using the Apache License 2.0. Please see [LICENSE](https://github.com/hpe-storage/co-deployments/blob/master/LICENSE) for details. diff --git a/charts/hpe/hpe-flexvolume-driver/app-readme.md b/charts/hpe/hpe-flexvolume-driver/app-readme.md deleted file mode 100644 index 4d8e79cf5..000000000 --- a/charts/hpe/hpe-flexvolume-driver/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -# HPE Volume Driver for Kubernetes FlexVolume Plugin - -The [HPE Volume Driver for Kubernetes FlexVolume plugin](https://github.com/hpe-storage/flexvolume-driver) leverages HPE storage platforms to provide scalable and persistent storage for stateful applications. This chart also deploys the [HPE Dynamic Provisioner for Kubernetes](https://github.com/hpe-storage/k8s-dynamic-provisioner). diff --git a/charts/hpe/hpe-flexvolume-driver/questions.yml b/charts/hpe/hpe-flexvolume-driver/questions.yml deleted file mode 100644 index 034718811..000000000 --- a/charts/hpe/hpe-flexvolume-driver/questions.yml +++ /dev/null @@ -1,172 +0,0 @@ -questions: -- variable: flavor - label: "Kubernetes flavor" - type: enum - default: "rke" - required: true - options: - - "rke" - - "eks" - - "ocp" - - "aks" - - "gke" - - "gkeop" - - "k8s" - description: "Tweak Helm chart behavior." - group: "Rancher specific settings" -- variable: pluginType - label: "HPE platform" - type: enum - options: - - "nimble" - - "cv" - - "simplivity" - default: "nimble" - description: "HPE platform type for the deployment." - group: "HPE backend settings" -- variable: backend - label: "IP address" - type: string - required: true - description: "Please specify HPE backend IP address." - group: "HPE backend settings" -- variable: username - label: "Username" - type: string - required: true - description: "Specify username with backend storage admin permissions." - group: "HPE backend settings" -- variable: password - label: "Password" - type: password - required: true - description: "Specify password for the backend user." - group: "HPE backend settings" -- variable: fsType - label: "Filesystem" - default: "xfs" - type: enum - options: - - "xfs" - - "ext4" - - "ext3" - - "btrfs" - description: "Select the filesystem for Persistent Volumes, defaults to xfs." - group: "HPE StorageClass and volume settings" -- variable: protocol - label: "HPE storage protocol" - type: enum - default: "iscsi" - options: - - "iscsi" - - "fc" - description: "Specify storage protocol for HPE backend connectivity." - group: "HPE StorageClass and volume settings" -- variable: storageClass.create - label: "Create a StorageClass" - type: boolean - default: true - required: true - description: "If specified as 'true', a StorageClass named 'hpe-standard' will be created with the HPE Volume Driver for Kubernetes FlexVolume Plugin as provisioner." - group: "HPE StorageClass and volume settings" -- variable: storageClass.defaultClass - label: "Mark StorageClass 'hpe-standard' as 'default'." - type: boolean - default: false - description: "If specified as 'true', the 'hpe-standard' StorageClass will be annotated as 'default'. This option is ignored if 'Create a StorageClass' is set to 'false'." - group: "HPE StorageClass and volume settings" -- variable: cv.config.existingCloudSubnet - show_if: "pluginType=cv" - label: "Cloud subnet" - type: string - default: "" - required: true - description: "Cloud subnet of the cluster for connection provisioning" - group: "Cloud instance settings" -- variable: cv.config.privateCloud - show_if: "pluginType=cv" - label: "Virtual private cloud" - type: string - required: true - description: "Virtual private cloud of the cluster" - group: "Cloud instance settings" -- variable: cv.config.region - show_if: "pluginType=cv" - label: "Public cloud region" - type: string - required: true - description: "Public cloud provider region in which cluster resides" - group: "Cloud instance settings" -- variable: cv.config.cloudComputeProvider - show_if: "pluginType=cv" - label: "Public cloud provider" - type: enum - default: "Amazon AWS" - options: - - "Amazon AWS" - - "Microsoft Azure" - description: "Public cloud provider name" - group: "Cloud instance settings" -- variable: cv.config.privateCloudResourceGroup - show_if: "cv.config.cloudComputeProvider=Microsoft Azure" - label: "Azure Resource Group" - type: string - required: true - description: "Azure resource group for the cluster" - group: "Cloud instance settings" -- variable: cv.config.volumeType - show_if: "pluginType=cv" - label: "Volume type" - type: enum - default: "PF" - options: - - "PF" - - "GPF" - description: "HPE Cloud Volume type" - group: "HPE Cloud Volumes settings" -- variable: cv.config.encryption - show_if: "pluginType=cv" - label: "Volume Encryption" - type: boolean - default: true - required: true - description: "Encryption for HPE Cloud Volume" - group: "HPE Cloud Volumes settings" -- variable: cv.config.protectionTemplate - show_if: "pluginType=cv" - label: "Protection template" - type: enum - default: "twicedaily:4" - options: - - "daily:3" - - "daily:7" - - "daily:14" - - "hourly:6" - - "hourly:12" - - "hourly:24" - - "twicedaily:4" - - "twicedaily:8" - - "twicedaily:14" - - "weekly:2" - - "weekly:4" - - "weekly:8" - - "monthly:3" - - "monthly:6" - - "monthly:12" - - "none" - description: "Protection Template" - group: "HPE Cloud Volumes settings" -- variable: cv.config.perfPolicy - show_if: "pluginType=cv" - label: "Performance policy" - type: enum - default: "Other" - options: - - "Other" - - "Exchange" - - "Oracle" - - "SharePoint" - - "SQL" - - "Windows File Server" - description: "Performance policy" - group: "HPE Cloud Volumes settings" diff --git a/charts/hpe/hpe-flexvolume-driver/templates/NOTES.txt b/charts/hpe/hpe-flexvolume-driver/templates/NOTES.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/charts/hpe/hpe-flexvolume-driver/templates/_helpers.tpl b/charts/hpe/hpe-flexvolume-driver/templates/_helpers.tpl deleted file mode 100644 index d0a095b72..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/_helpers.tpl +++ /dev/null @@ -1,32 +0,0 @@ -{{/* vim: set filetype=mustache: */}} -{{/* -Expand the name of the chart. -*/}} -{{- define "hpe-flexvolume-driver.name" -}} -{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} -{{- end -}} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "hpe-flexvolume-driver.fullname" -}} -{{- if .Values.fullnameOverride -}} -{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- $name := default .Chart.Name .Values.nameOverride -}} -{{- if contains $name .Release.Name -}} -{{- .Release.Name | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} -{{- end -}} -{{- end -}} -{{- end -}} - -{{/* -Create chart name and version as used by the chart label. -*/}} -{{- define "hpe-flexvolume-driver.chart" -}} -{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} -{{- end -}} diff --git a/charts/hpe/hpe-flexvolume-driver/templates/hpe-config.yaml b/charts/hpe/hpe-flexvolume-driver/templates/hpe-config.yaml deleted file mode 100644 index c65a2a576..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/hpe-config.yaml +++ /dev/null @@ -1,58 +0,0 @@ ---- -kind: ConfigMap -apiVersion: v1 -metadata: - name: hpe-config - namespace: {{ .Release.Namespace }} -data: - volume-driver.json: |- - {{- if eq .Values.pluginType "nimble"}} - { - "global": {}, - "defaults": { - "limitIOPS": {{ .Values.nimble.config.limitIOPS | quote }}, - "limitMBPS": {{ .Values.nimble.config.limitMBPS | quote }}, - "perfPolicy": {{ .Values.nimble.config.perfPolicy | quote }} - }, - "overrides": {} - } - {{- else if eq .Values.pluginType "cv"}} - { - "global": { - "snapPrefix": {{ .Values.cv.config.snapPrefix | quote }}, - "automatedConnection": {{ .Values.cv.config.automatedConnection }}, - "initiators": [{{- join "," .Values.cv.config.initiators }}], - "automatedConnection": {{ .Values.cv.config.automatedConnection }}, - "existingCloudSubnet": {{ .Values.cv.config.existingCloudSubnet | quote }}, - "region": {{ .Values.cv.config.region | quote }}, - "privateCloud": {{ .Values.cv.config.privateCloud | quote }}, - {{- if and .Values.cv.config.privateCloudResourceGroup (ne .Values.cv.config.privateCloudResourceGroup "") }} - "privateCloudResourceGroup": {{ .Values.cv.config.privateCloudResourceGroup | quote }}, - {{- end }} - "cloudComputeProvider": {{ .Values.cv.config.cloudComputeProvider | quote }} - }, - "defaults": { - "perfPolicy": {{ .Values.cv.config.perfPolicy | quote }}, - "limitIOPS": {{ .Values.cv.config.limitIOPS | quote }}, - "volumeType": {{ .Values.cv.config.volumeType | quote }}, - "encryption": {{ .Values.cv.config.encryption }}, - "protectionTemplate": {{ .Values.cv.config.protectionTemplate | quote }}, - "destroyOnRm": {{ .Values.cv.config.destroyOnRm }} - }, - "overrides": {} - } - {{- else }} - { - "global": {}, - "defaults": {}, - "overrides": {} - } - {{- end }} - - {{- if eq .Values.flavor "rke"}} - {{ .Values.pluginType }}.json: |- - { - "dockerVolumePluginSocketPath": "/host/etc/hpe-storage/{{ .Values.pluginType }}.sock" - } - {{- end }} - diff --git a/charts/hpe/hpe-flexvolume-driver/templates/hpe-doryd-rbac.yaml b/charts/hpe/hpe-flexvolume-driver/templates/hpe-doryd-rbac.yaml deleted file mode 100644 index 788ed97ac..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/hpe-doryd-rbac.yaml +++ /dev/null @@ -1,40 +0,0 @@ ---- -kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: hpe-dynamic-provisioner-role - namespace: {{ .Release.Namespace }} -rules: - - apiGroups: ["storage.k8s.io"] - resources: ["storageclasses"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["persistentvolumeclaims"] - verbs: ["get", "list", "watch", "update"] - - apiGroups: [""] - resources: ["persistentvolumes"] - verbs: ["get", "list", "watch", "create", "delete", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["list", "watch", "create", "update", "patch"] - ---- -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: hpe-dynamic-provisioner-binding -subjects: - - kind: ServiceAccount - name: hpe-flexvolume-sa - namespace: {{ .Release.Namespace }} -roleRef: - kind: ClusterRole - name: hpe-dynamic-provisioner-role - apiGroup: rbac.authorization.k8s.io - ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: hpe-flexvolume-sa - namespace: {{ .Release.Namespace }} \ No newline at end of file diff --git a/charts/hpe/hpe-flexvolume-driver/templates/hpe-doryd.yaml b/charts/hpe/hpe-flexvolume-driver/templates/hpe-doryd.yaml deleted file mode 100644 index eff543acc..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/hpe-doryd.yaml +++ /dev/null @@ -1,67 +0,0 @@ -#### HPE Dynamic Provisioner ### ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: hpe-dynamic-provisioner - namespace: {{ .Release.Namespace }} - labels: - app: hpe-dynamic-provisioner -spec: - selector: - matchLabels: - daemon: hpe-dynamic-provisioner-daemon - strategy: - type: RollingUpdate - template: - metadata: - labels: - daemon: hpe-dynamic-provisioner-daemon - name: hpe-dynamic-provisioner - spec: - restartPolicy: Always - serviceAccountName: hpe-flexvolume-sa - hostNetwork: true - dnsPolicy: ClusterFirstWithHostNet - containers: - - - image: {{ .Values.dynamicProvisionerImage}}: {{- .Values.dynamicProvisionerTag}} - imagePullPolicy: Always - name: hpe-dynamic-provisioner - env: - - name: LOG_LEVEL - value: {{ .Values.logLevel }} - volumeMounts: - - name: k8s - mountPath: /etc/kubernetes - - name: flexvolumedriver - mountPath: /usr/libexec/kubernetes/kubelet-plugins/volume/exec - - name: varlog - mountPath: /var/log - {{- if eq .Values.flavor "rke"}} - - name: hpeconfig - mountPath: /host/etc/hpe-storage - {{- else }} - - name: hpeconfig - mountPath: /etc/hpe-storage - {{- end }} - securityContext: - privileged: true - volumes: - - name: k8s - hostPath: - path: /etc/kubernetes - - name: flexvolumedriver - hostPath: - {{- $flavor := .Values.flavor -}} - {{- range .Values.flexVolumeExec }} - {{- if eq .name $flavor }} - path: {{ .value }} - {{- end }} - {{- end }} - - name: hpeconfig - hostPath: - path: /etc/hpe-storage - - name: varlog - hostPath: - path: /var/log diff --git a/charts/hpe/hpe-flexvolume-driver/templates/hpe-flexvolume-plugin.yaml b/charts/hpe/hpe-flexvolume-driver/templates/hpe-flexvolume-plugin.yaml deleted file mode 100644 index af86aae33..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/hpe-flexvolume-plugin.yaml +++ /dev/null @@ -1,216 +0,0 @@ - #### Flexvolume Driver ### ---- -apiVersion: apps/v1 -kind: DaemonSet -metadata: - name: hpe-flexvolume-driver - namespace: {{ .Release.Namespace }} - labels: - k8s-app: hpe-flexvolume-driver -spec: - selector: - matchLabels: - name: hpe-flexvolume-driver - template: - metadata: - labels: - name: hpe-flexvolume-driver - spec: - hostNetwork: true - dnsPolicy: ClusterFirstWithHostNet - serviceAccountName: hpe-flexvolume-sa - containers: - - name: flexvolume - image: {{ .Values.flexVolumeDriverImage}}: {{- .Values.flexVolumeDriverTag}} - imagePullPolicy: "Always" - lifecycle: - preStop: - # create empty file to let plugin signal handler to perform cleanup of config/cert/dory files - exec: - command: [ "/bin/sh", "-c", "touch /etc/hpe-storage/remove" ] - {{- if eq .Values.flavor "rke"}} - postStart: - exec: - command: [ "/bin/bash", "-c", - "while [[ ! -d /var/lib/kubelet/volumeplugins/hpe.com~{{ .Values.pluginType }} ]] || [[ ! -f /etc/hpe-storage/{{ .Values.pluginType }}.json ]]; do sleep 1; done; cp -a /etc/hpe-storage/{{ .Values.pluginType }}.json /var/lib/kubelet/volumeplugins/hpe.com~{{ .Values.pluginType }}/{{ .Values.pluginType }}.json" ] - {{- end }} - env: - - name: LOG_LEVEL - value: {{ .Values.logLevel }} - - name: FLAVOR - value: {{ .Values.flavor }} - - name: PROVIDER_IP - valueFrom: - secretKeyRef: - name: hpe-secret - key: backend - - name: PROVIDER_USERNAME - valueFrom: - secretKeyRef: - name: hpe-secret - key: username - - name: PROVIDER_PASSWORD - valueFrom: - secretKeyRef: - name: hpe-secret - key: password - - name: PROTOCOL - valueFrom: - secretKeyRef: - name: hpe-secret - key: protocol - {{- if eq .Values.pluginType "cv"}} - - name: PROVIDER_PORT - valueFrom: - secretKeyRef: - name: hpe-secret - key: servicePort - - name: PROVIDER_SERVICE - valueFrom: - secretKeyRef: - name: hpe-secret - key: serviceName - {{- end }} - - name: SCOPE - value: global - - name: PLUGIN_TYPE - value: {{ .Values.pluginType }} - volumeMounts: - - name: pluginmountdir - mountPath: /var/lib/kubelet - mountPropagation: Bidirectional - - name: bindmountdir - mountPath: {{ .Values.podsMountDir }} - mountPropagation: Bidirectional - - name: legacymounts - mountPath: /opt/nimble - mountPropagation: Bidirectional - - name: dev - mountPath: /dev - - name: libmodules - mountPath: /lib/modules - - name: var-log - mountPath: /var/log - - name: var-lib-iscsi - mountPath: /var/lib/iscsi - - name: exec - mountPath: /usr/libexec/kubernetes/kubelet-plugins/volume/exec - - name: runlock - mountPath: /run/lock - - name: etc-iscsi - mountPath: /etc/iscsi - - name: etc-multipath - mountPath: /etc/multipath - {{- if ne .Values.flavor "rke"}} - - name: etc-multipath-conf - mountPath: /etc/multipath.conf - {{- end }} - - name: etc-redhat-release - mountPath: /etc/redhat-release - - name: etc-os-release - mountPath: /etc/os-release - - name: etc-hpe-storage-dir - mountPath: /etc/hpe-storage - {{- if eq .Values.flavor "rke"}} - - name: etc-hpe-storage-dir - mountPath: /host/etc/hpe-storage - {{- end }} - - name: sys - mountPath: /sys - - name: iscsiadm - mountPath: /sbin/iscsiadm - - name: config-file - mountPath: /etc/hpe-storage/volume-driver.json - subPath: volume-driver.json - {{- if eq .Values.flavor "rke"}} - - name: config-file - mountPath: /etc/hpe-storage/{{ .Values.pluginType }}.json - subPath: {{ .Values.pluginType }}.json - {{- end }} - - name: runsystemd - mountPath: /run/systemd - - name: libsystemd - mountPath: /lib/systemd/system - - name: usrlocal - mountPath: /usr_local - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] - allowPrivilegeEscalation: true - volumes: - - name: pluginmountdir - hostPath: - path: /var/lib/kubelet - - name: bindmountdir - hostPath: - path: {{ .Values.podsMountDir }} - # required to handle legacy mounts from NLT based plugin. Remove this for CoreOS - - name: legacymounts - hostPath: - path: /opt/nimble/ - - name: dev - hostPath: - path: /dev - - name: libmodules - hostPath: - path: /lib/modules - - name: var-log - hostPath: - path: /var/log - - name: var-lib-iscsi - hostPath: - path: /var/lib/iscsi/ - - name: exec - hostPath: - {{- $flavor := .Values.flavor -}} - {{- range .Values.flexVolumeExec }} - {{- if eq .name $flavor }} - path: {{ .value }} - {{- end }} - {{- end }} - - name: runlock - hostPath: - path: /run/lock - - name: etc-iscsi - hostPath: - path: /etc/iscsi/ - - name: etc-multipath - hostPath: - path: /etc/multipath/ - {{- if ne .Values.flavor "rke"}} - - name: etc-multipath-conf - hostPath: - path: /etc/multipath.conf - type: FileOrCreate - {{- end }} - - name: etc-redhat-release - hostPath: - path: /etc/redhat-release - type: FileOrCreate - - name: etc-os-release - hostPath: - path: /etc/os-release - type: FileOrCreate - - name: etc-hpe-storage-dir - hostPath: - path: /etc/hpe-storage/ - - name: sys - hostPath: - path: /sys - - name: iscsiadm - hostPath: - path: /sbin/iscsiadm - type: FileOrCreate - - name: config-file - configMap: - name: hpe-config - - name: runsystemd - hostPath: - path: /run/systemd - - name: libsystemd - hostPath: - path: /lib/systemd/system - - name: usrlocal - hostPath: - path: /usr diff --git a/charts/hpe/hpe-flexvolume-driver/templates/hpe-secret.yaml b/charts/hpe/hpe-flexvolume-driver/templates/hpe-secret.yaml deleted file mode 100644 index 7aaee67e9..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/hpe-secret.yaml +++ /dev/null @@ -1,18 +0,0 @@ ---- -apiVersion: v1 -kind: Secret -metadata: - name: hpe-secret - namespace: {{ .Release.Namespace }} -stringData: - username: {{ .Values.username }} - password: {{ .Values.password }} - {{- if eq .Values.pluginType "cv"}} - backend: {{ .Values.backend }} - servicePort: {{ .Values.servicePort | quote }} - serviceName: {{ .Values.serviceName }} - protocol: "iscsi" - {{- else }} - backend: {{ .Values.backend }} - protocol: {{ .Values.protocol }} - {{- end }} diff --git a/charts/hpe/hpe-flexvolume-driver/templates/hpecv-cp.yaml b/charts/hpe/hpe-flexvolume-driver/templates/hpecv-cp.yaml deleted file mode 100644 index fd28355ee..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/hpecv-cp.yaml +++ /dev/null @@ -1,66 +0,0 @@ -{{- if eq .Values.pluginType "cv"}} -# Configuration to deploy the HPE Nimble Storage Container Provider service -# -# example usage: kubectl create -f - ---- - -####################################### -############ CP Service ############ -####################################### -kind: Service -apiVersion: v1 -metadata: - name: {{ .Values.serviceName }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Values.serviceName }} -spec: - ports: - - port: {{ .Values.servicePort }} - protocol: TCP - selector: - app: cv-cp - ---- - -########################################## -############ CP Deployment ############ -########################################## -kind: Deployment -apiVersion: apps/v1 -metadata: - name: cv-cp - namespace: {{ .Release.Namespace }} -spec: - selector: - matchLabels: - app: cv-cp - replicas: 1 - template: - metadata: - labels: - app: cv-cp - spec: - serviceAccountName: hpe-flexvolume-sa - containers: - - name: cv-cp - image: {{ .Values.containerProviderImage}}: {{- .Values.containerProviderTag}} - imagePullPolicy: Always - env: - - name: CLOUDVOLUMES_PORTAL_SERVER - value: {{ .Values.backend }} - - name: CLOUDVOLUMES_PORT - value: {{ .Values.servicePort | quote }} - - name: LOG_LEVEL - value: {{ .Values.logLevel }} - ports: - - containerPort: {{ .Values.servicePort }} - volumeMounts: - - name: log-dir - mountPath: /var/log - volumes: - - name: log-dir - hostPath: - path: /var/log -{{- end }} diff --git a/charts/hpe/hpe-flexvolume-driver/templates/post-install.yaml b/charts/hpe/hpe-flexvolume-driver/templates/post-install.yaml deleted file mode 100644 index 60dfa8559..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/post-install.yaml +++ /dev/null @@ -1,28 +0,0 @@ -apiVersion: batch/v1 -kind: Job -metadata: - name: "{{.Release.Name}}" - labels: - app.kubernetes.io/managed-by: {{.Release.Service | quote}} - app.kubernetes.io/instance: {{.Release.Name | quote}} - app.kubernetes.io/version: {{.Chart.AppVersion | quote}} - helm.sh/chart: "{{.Chart.Name}}-{{.Chart.Version}}" - annotations: - "helm.sh/hook": post-install - "helm.sh/hook-weight": "-5" - "helm.sh/hook-delete-policy": hook-succeeded -spec: - template: - metadata: - name: "{{.Release.Name}}" - labels: - app.kubernetes.io/managed-by: {{.Release.Service | quote }} - app.kubernetes.io/instance: {{.Release.Name | quote }} - helm.sh/chart: "{{.Chart.Name}}-{{.Chart.Version}}" - spec: - restartPolicy: Never - containers: - - name: post-install-job - image: "alpine:3.3" - command: ["/bin/sleep","{{default "10" .Values.serviceWaitTime}}"] - diff --git a/charts/hpe/hpe-flexvolume-driver/templates/sc.yaml b/charts/hpe/hpe-flexvolume-driver/templates/sc.yaml deleted file mode 100644 index 3dc98eb48..000000000 --- a/charts/hpe/hpe-flexvolume-driver/templates/sc.yaml +++ /dev/null @@ -1,16 +0,0 @@ -{{ if .Values.storageClass.create -}} ---- -apiVersion: storage.k8s.io/v1 -kind: StorageClass -metadata: - name: {{ .Values.storageClass.name }} - labels: - plugin: {{ .Release.Name }} - {{- if .Values.storageClass.defaultClass }} - annotations: - storageclass.kubernetes.io/is-default-class: "true" - {{- end }} -provisioner: hpe.com/{{ .Values.pluginType }} -parameters: - description: {{ .Values.volumeDescription }} -{{- end }} diff --git a/charts/hpe/hpe-flexvolume-driver/values.yaml b/charts/hpe/hpe-flexvolume-driver/values.yaml deleted file mode 100644 index 77d2762c2..000000000 --- a/charts/hpe/hpe-flexvolume-driver/values.yaml +++ /dev/null @@ -1,97 +0,0 @@ -# Default values for hpe-flexvolume-driver -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -#doryd image -dynamicProvisionerTag: v3.1.0 -dynamicProvisionerImage: store/hpestorage/k8s-dynamic-provisioner - -#flexvolume plugin image -flexVolumeDriverTag: v3.1.0 -flexVolumeDriverImage: store/hpestorage/flexvolume-driver - -#container-provider image -containerProviderTag: v3.1.0 -containerProviderImage: store/hpestorage/cv-cp - -#parameters -backend: 192.168.1.1 -username: admin -password: admin -protocol: iscsi -servicePort: "8080" -serviceName: cv-cp-svc - -#storage class parameters -fsType: xfs -volumeDescription: "Volume created by HPE Volume Driver for Kubernetes FlexVolume Plugin" - -#service parameters -# wait seconds for doryd/flexvolume node plugins to start -serviceWaitTime: "10" - -#flavor -flavor: k8s - -#platform for which plugin is being deployed.i.e nimble or cv -pluginType: nimble - -#bindMountPath where kubelet bindmounts volume to pod namespace -podsMountDir: /var/lib/kubelet/pods - -#volumePluginDir volume plugin directory where kubelet watches for flexvolume plugin -flexVolumeExec: - - name: eks - value: /usr/libexec/kubernetes/kubelet-plugins/volume/exec - - name: k8s - value: /usr/libexec/kubernetes/kubelet-plugins/volume/exec - - name: ocp - value: /etc/kubernetes/kubelet-plugins/volume/exec - - name: gkeop - value: /usr/libexec/kubernetes/kubelet-plugins/volume/exec - - name: gke - value: /home/kubernetes/flexvolume - - name: aks - value: /etc/kubernetes/volumeplugins - - name: rke - value: /var/lib/kubelet/volumeplugins - -#log level for flexvolume driver and dynamic provisioner -logLevel: info - -## For creating the StorageClass automatically: -storageClass: - create: true - - ## Set StorageClass as the default StorageClass - ## Ignored if storageClass.create is false - defaultClass: false - - ## Set a StorageClass name - ## Ignored if storageClass.create is false - name: hpe-standard - -nimble: - config: - limitIOPS: "-1" - limitMBPS: "-1" - perfPolicy: DockerDefault - -cv: - config: - snapPrefix: BaseFor - automatedConnection: true - existingCloudSubnet: 10.1.0.0/24 - region: us-east-1 - privateCloud: vpc-data - cloudComputeProvider: "Amazon AWS" - perfPolicy: Other - volumeType: PF - encryption: true - protectionTemplate: twicedaily:4 - destroyOnRm: true - limitIOPS: "1000" - # In case of multiple initiators, add one per line and escape double quotes as below - initiators: - - '"eth0"' - privateCloudResourceGroup: "" diff --git a/charts/softiron/ceph-csi-rbd/Chart.yaml b/charts/softiron/ceph-csi-rbd/Chart.yaml deleted file mode 100644 index e82b1189b..000000000 --- a/charts/softiron/ceph-csi-rbd/Chart.yaml +++ /dev/null @@ -1,20 +0,0 @@ -annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/display-name: SoftIron Ceph RBD - catalog.cattle.io/release-name: ceph-csi-rbd -apiVersion: v1 -appVersion: canary -description: CSI RBD Driver for SoftIron HyperDrive -home: https://github.com/softiron/ceph-csi -icon: https://cdn.softiron.com/helm/assets/icon.png -keywords: -- ceph -- rbd -- ceph-csi -- softiron -- hyperdrive -kubeVersion: 1.18 - 1.22 -name: ceph-csi-rbd -sources: -- https://github.com/softiron/ceph-csi/tree/rancher-softiron/charts/ceph-csi-rbd -version: 1.3.1 diff --git a/charts/softiron/ceph-csi-rbd/README.md b/charts/softiron/ceph-csi-rbd/README.md deleted file mode 100644 index 46223c54d..000000000 --- a/charts/softiron/ceph-csi-rbd/README.md +++ /dev/null @@ -1,186 +0,0 @@ -# ceph-csi-rbd - -The ceph-csi-rbd chart adds rbd volume support to your cluster. - -## Install from release repo - -Add chart repository to install helm charts from it - -```console -helm repo add ceph-csi https://ceph.github.io/csi-charts -``` - -## Install from local Chart - -we need to enter into the directory where all charts are present - -```console -cd charts -``` - -**Note:** charts directory is present in root of the ceph-csi project - -### Install chart - -To install the Chart into your Kubernetes cluster - -- For helm 2.x - - ```bash - helm install --namespace "ceph-csi-rbd" --name "ceph-csi-rbd" ceph-csi/ceph-csi-rbd - ``` - -- For helm 3.x - - Create the namespace where Helm should install the components with - - ```bash - kubectl create namespace "ceph-csi-rbd" - ``` - - Run the installation - - ```bash - helm install --namespace "ceph-csi-rbd" "ceph-csi-rbd" ceph-csi/ceph-csi-rbd - ``` - -After installation succeeds, you can get a status of Chart - -```bash -helm status "ceph-csi-rbd" -``` - -### Delete Chart - -If you want to delete your Chart, use this command - -- For helm 2.x - - ```bash - helm delete --purge "ceph-csi-rbd" - ``` - -- For helm 3.x - - ```bash - helm uninstall "ceph-csi-rbd" --namespace "ceph-csi-rbd" - ``` - -If you want to delete the namespace, use this command - -```bash -kubectl delete namespace ceph-csi-rbd -``` - -### Configuration - -The following table lists the configurable parameters of the ceph-csi-cephfs -charts and their default values. - -| Parameter | Description | Default | -| ---------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------- | -| `rbac.create` | Specifies whether RBAC resources should be created | `true` | -| `serviceAccounts.nodeplugin.create` | Specifies whether a nodeplugin ServiceAccount should be created | `true` | -| `serviceAccounts.nodeplugin.name` | The name of the nodeplugin ServiceAccount to use. If not set and create is true, a name is generated using the fullname | "" | -| `serviceAccounts.provisioner.create` | Specifies whether a provisioner ServiceAccount should be created | `true` | -| `serviceAccounts.provisioner.name` | The name of the provisioner ServiceAccount to use. If not set and create is true, a name is generated using the fullname | "" | -| `csiConfig` | Configuration for the CSI to connect to the cluster | [] | -| `csiMapping` | Configuration details of clusterID,PoolID,FscID mapping | [] | -| `encryptionKMSConfig` | Configuration for the encryption KMS | `{}` | -| `logLevel` | Set logging level for csi containers. Supported values from 0 to 5. 0 for general useful logs, 5 for trace level verbosity. | `5` | -| `nodeplugin.name` | Specifies the nodeplugins name | `nodeplugin` | -| `nodeplugin.updateStrategy` | Specifies the update Strategy. If you are using ceph-fuse client set this value to OnDelete | `RollingUpdate` | -| `nodeplugin.priorityClassName` | Set user created priorityclassName for csi plugin pods. default is system-node-critical which is highest priority | `system-node-critical` | -| `nodeplugin.profiling.enabled` | Specifies whether profiling should be enabled | `false` | -| `nodeplugin.registrar.image.repository` | Node Registrar image repository URL | `k8s.gcr.io/sig-storage/csi-node-driver-registrar` | -| `nodeplugin.registrar.image.tag` | Image tag | `v2.2.0` | -| `nodeplugin.registrar.image.pullPolicy` | Image pull policy | `IfNotPresent` | -| `nodeplugin.plugin.image.repository` | Nodeplugin image repository URL | `quay.io/cephcsi/cephcsi` | -| `nodeplugin.plugin.image.tag` | Image tag | `canary` | -| `nodeplugin.plugin.image.pullPolicy` | Image pull policy | `IfNotPresent` | -| `nodeplugin.nodeSelector` | Kubernetes `nodeSelector` to add to the Daemonset | `{}` | -| `nodeplugin.tolerations` | List of Kubernetes `tolerations` to add to the Daemonset | `{}` | -| `nodeplugin.podSecurityPolicy.enabled` | If true, create & use [Pod Security Policy resources](https://kubernetes.io/docs/concepts/policy/pod-security-policy/). | `false` | -| `provisioner.name` | Specifies the name of provisioner | `provisioner` | -| `provisioner.replicaCount` | Specifies the replicaCount | `3` | -| `provisioner.defaultFSType` | Specifies the default Fstype | `ext4` | -| `provisioner.deployController` | It enables or disables the deployment of controller which generates the OMAP data if it is not present | `true` | -| `provisioner.hardMaxCloneDepth` | Hard limit for maximum number of nested volume clones that are taken before a flatten occurs | `8` | -| `provisioner.softMaxCloneDepth` | Soft limit for maximum number of nested volume clones that are taken before a flatten occurs | `4` | -| `provisioner.maxSnapshotsOnImage` | Maximum number of snapshots allowed on rbd image without flattening | `450` | -| `provisioner.minSnapshotsOnImage` | Minimum number of snapshots allowed on rbd image to trigger flattening | `250` | -| `provisioner.skipForceFlatten` | Skip image flattening if kernel support mapping of rbd images which has the deep-flatten feature | `false` | -| `provisioner.timeout` | GRPC timeout for waiting for creation or deletion of a volume | `60s` | -| `provisioner.priorityClassName` | Set user created priorityclassName for csi provisioner pods. Default is `system-cluster-critical` which is less priority than `system-node-critical` | `system-cluster-critical` | -| `provisioner.profiling.enabled` | Specifies whether profiling should be enabled | `false` | -| `provisioner.provisioner.image.repository` | Specifies the csi-provisioner image repository URL | `k8s.gcr.io/sig-storage/csi-provisioner` | -| `provisioner.provisioner.image.tag` | Specifies image tag | `v2.2.2` | -| `provisioner.provisioner.image.pullPolicy` | Specifies pull policy | `IfNotPresent` | -| `provisioner.attacher.image.repository` | Specifies the csi-attacher image repository URL | `k8s.gcr.io/sig-storage/csi-attacher` | -| `provisioner.attacher.image.tag` | Specifies image tag | `v3.2.1` | -| `provisioner.attacher.image.pullPolicy` | Specifies pull policy | `IfNotPresent` | -| `provisioner.attacher.name` | Specifies the name of csi-attacher sidecar | `attacher` | -| `provisioner.attacher.enabled` | Specifies whether attacher sidecar is enabled | `true` | -| `provisioner.resizer.image.repository` | Specifies the csi-resizer image repository URL | `k8s.gcr.io/sig-storage/csi-resizer` | -| `provisioner.resizer.image.tag` | Specifies image tag | `v1.2.0` | -| `provisioner.resizer.image.pullPolicy` | Specifies pull policy | `IfNotPresent` | -| `provisioner.resizer.name` | Specifies the name of csi-resizer sidecar | `resizer` | -| `provisioner.resizer.enabled` | Specifies whether resizer sidecar is enabled | `true` | -| `provisioner.snapshotter.image.repository` | Specifies the csi-snapshotter image repository URL | `k8s.gcr.io/sig-storage/csi-snapshotter` | -| `provisioner.snapshotter.image.tag` | Specifies image tag | `v4.1.1` | -| `provisioner.snapshotter.image.pullPolicy` | Specifies pull policy | `IfNotPresent` | -| `provisioner.nodeSelector` | Specifies the node selector for provisioner deployment | `{}` | -| `provisioner.tolerations` | Specifies the tolerations for provisioner deployment | `{}` | -| `provisioner.affinity` | Specifies the affinity for provisioner deployment | `{}` | -| `provisioner.podSecurityPolicy.enabled` | Specifies whether podSecurityPolicy is enabled | `false` | -| `topology.enabled` | Specifies whether topology based provisioning support should be exposed by CSI | `false` | -| `topology.domainLabels` | DomainLabels define which node labels to use as domains for CSI nodeplugins to advertise their domains | `{}` | -| `provisionerSocketFile` | The filename of the provisioner socket | `csi-provisioner.sock` | -| `pluginSocketFile` | The filename of the plugin socket | `csi.sock` | -| `kubeletDir` | kubelet working directory | `/var/lib/kubelet` | -| `cephLogDirHostPath` | Host path location for ceph client processes logging, ex: rbd-nbd | `/var/log/ceph` | -| `driverName` | Name of the csi-driver | `rbd.csi.ceph.com` | -| `configMapName` | Name of the configmap which contains cluster configuration | `ceph-csi-config` | -| `externallyManagedConfigmap` | Specifies the use of an externally provided configmap | `false` | -| `kmsConfigMapName` | Name of the configmap used for encryption kms configuration | `ceph-csi-encryption-kms-config` | -| `storageClass.create` | Specifies whether the StorageClass should be created | `false` | -| `storageClass.name` | Specifies the rbd StorageClass name | `csi-rbd-sc` | -| `storageClass.clusterID` | String representing a Ceph cluster to provision storage from | `` | -| `storageClass.dataPool` | Specifies the erasure coded pool | `""` | -| `storageClass.pool` | Ceph pool into which the RBD image shall be created | `replicapool` | -| `storageClass.thickProvision` | Specifies whether thick provision should be enabled | `false` | -| `storageclass.imageFeatures` | Specifies RBD image features | `layering` | -| `storageClass.mounter` | Specifies RBD mounter | `""` | -| `storageClass.cephLogDir` | ceph client log location, it is the target bindmount path used inside container | `"/var/log/ceph"` | -| `storageClass.cephLogStrategy` | ceph client log strategy, available options `remove` or `compress` or `preserve` | `"remove"` | -| `storageClass.volumeNamePrefix` | Prefix to use for naming RBD images | `""` | -| `storageClass.encrypted` | Specifies whether volume should be encrypted. Set it to true if you want to enable encryption | `""` | -| `storageClass.encryptionKMSID` | Specifies the encryption kms id | `""` | -| `storageClass.topologyConstrainedPools` | Add topology constrained pools configuration, if topology based pools are setup, and topology constrained provisioning is required | `[]` | -| `storageClass.mapOptions` | Specifies comma-separated list of map options | `""` | -| `storageClass.unmapOtpions` | Specifies comma-separated list of unmap options | `""` | -| `storageClass.provisionerSecret` | The secrets have to contain user and/or Ceph admin credentials. | `csi-rbd-secret` | -| `storageClass.provisionerSecretNamespace` | Specifies the provisioner secret namespace | `""` | -| `storageClass.controllerExpandSecret` | Specifies the controller expand secret name | `csi-rbd-secret` | -| `storageClass.controllerExpandSecretNamespace` | Specifies the controller expand secret namespace | `""` | -| `storageClass.nodeStageSecret` | Specifies the node stage secret name | `csi-rbd-secret` | -| `storageClass.nodeStageSecretNamespace` | Specifies the node stage secret namespace | `""` | -| `storageClass.fstype` | Specify the filesystem type of the volume | `ext4` | -| `storageClass.reclaimPolicy` | Specifies the reclaim policy of the StorageClass | `Delete` | -| `storageClass.allowVolumeExpansion` | Specifies whether volume expansion should be allowed | `true` | -| `storageClass.mountOptions` | Specifies the mount options for storageClass | `[]` | -| `secret.create` | Specifies whether the secret should be created | `false` | -| `secret.name` | Specifies the rbd secret name | `csi-rbd-secret` | -| `secret.userID` | Specifies the user ID of the rbd secret | `` | -| `secret.userKey` | Specifies the key that corresponds to the userID | `<Ceph auth key corresponding to ID above>` | -| `secret.encryptionPassphrase` | Specifies the encryption passphrase of the secret | `test_passphrase` | - -### Command Line - -You can pass the settings with helm command line parameters. -Specify each parameter using the --set key=value argument to helm install. -For Example: - -```bash -helm install --set configMapName=ceph-csi-config --set provisioner.podSecurityPolicy.enabled=true -``` diff --git a/charts/softiron/ceph-csi-rbd/app-readme.md b/charts/softiron/ceph-csi-rbd/app-readme.md deleted file mode 100644 index 206ab3ae6..000000000 --- a/charts/softiron/ceph-csi-rbd/app-readme.md +++ /dev/null @@ -1,5 +0,0 @@ -# SoftIron Ceph CSI RBD Driver - -This Chart is the RBD Plugin for Kubernetes, based off the ceph-csi-rbd project, for integrating SoftIron HyperDrive RBD with Kubernetes clusters. - -Variable names can be found in the main README. diff --git a/charts/softiron/ceph-csi-rbd/templates/NOTES.txt b/charts/softiron/ceph-csi-rbd/templates/NOTES.txt deleted file mode 100644 index 47e90f707..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/NOTES.txt +++ /dev/null @@ -1,2 +0,0 @@ -Examples on how to configure a storage class and start using the driver are here: -https://github.com/ceph/ceph-csi/tree/devel/examples/rbd diff --git a/charts/softiron/ceph-csi-rbd/templates/_helpers.tpl b/charts/softiron/ceph-csi-rbd/templates/_helpers.tpl deleted file mode 100644 index 0a2613d63..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/_helpers.tpl +++ /dev/null @@ -1,90 +0,0 @@ -{{/* vim: set filetype=mustache: */}} -{{/* -Expand the name of the chart. -*/}} -{{- define "ceph-csi-rbd.name" -}} -{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} -{{- end -}} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "ceph-csi-rbd.fullname" -}} -{{- if .Values.fullnameOverride -}} -{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- $name := default .Chart.Name .Values.nameOverride -}} -{{- if contains $name .Release.Name -}} -{{- .Release.Name | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} -{{- end -}} -{{- end -}} -{{- end -}} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "ceph-csi-rbd.nodeplugin.fullname" -}} -{{- if .Values.nodeplugin.fullnameOverride -}} -{{- .Values.nodeplugin.fullnameOverride | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- $name := default .Chart.Name .Values.nameOverride -}} -{{- if contains $name .Release.Name -}} -{{- printf "%s-%s" .Release.Name .Values.nodeplugin.name | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- printf "%s-%s-%s" .Release.Name $name .Values.nodeplugin.name | trunc 63 | trimSuffix "-" -}} -{{- end -}} -{{- end -}} -{{- end -}} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "ceph-csi-rbd.provisioner.fullname" -}} -{{- if .Values.provisioner.fullnameOverride -}} -{{- .Values.provisioner.fullnameOverride | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- $name := default .Chart.Name .Values.nameOverride -}} -{{- if contains $name .Release.Name -}} -{{- printf "%s-%s" .Release.Name .Values.provisioner.name | trunc 63 | trimSuffix "-" -}} -{{- else -}} -{{- printf "%s-%s-%s" .Release.Name $name .Values.provisioner.name | trunc 63 | trimSuffix "-" -}} -{{- end -}} -{{- end -}} -{{- end -}} - -{{/* -Create chart name and version as used by the chart label. -*/}} -{{- define "ceph-csi-rbd.chart" -}} -{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} -{{- end -}} - -{{/* -Create the name of the service account to use -*/}} -{{- define "ceph-csi-rbd.serviceAccountName.nodeplugin" -}} -{{- if .Values.serviceAccounts.nodeplugin.create -}} - {{ default (include "ceph-csi-rbd.nodeplugin.fullname" .) .Values.serviceAccounts.nodeplugin.name }} -{{- else -}} - {{ default "default" .Values.serviceAccounts.nodeplugin.name }} -{{- end -}} -{{- end -}} - -{{/* -Create the name of the service account to use -*/}} -{{- define "ceph-csi-rbd.serviceAccountName.provisioner" -}} -{{- if .Values.serviceAccounts.provisioner.create -}} - {{ default (include "ceph-csi-rbd.provisioner.fullname" .) .Values.serviceAccounts.provisioner.name }} -{{- else -}} - {{ default "default" .Values.serviceAccounts.provisioner.name }} -{{- end -}} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/ceph-conf.yaml b/charts/softiron/ceph-csi-rbd/templates/ceph-conf.yaml deleted file mode 100644 index a9a6f0026..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/ceph-conf.yaml +++ /dev/null @@ -1,15 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - name: ceph-config - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -data: - ceph.conf: | -{{ tpl .Values.cephconf . | indent 4 }} - keyring: "" diff --git a/charts/softiron/ceph-csi-rbd/templates/csidriver-crd.yaml b/charts/softiron/ceph-csi-rbd/templates/csidriver-crd.yaml deleted file mode 100644 index 92c3d916a..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/csidriver-crd.yaml +++ /dev/null @@ -1,11 +0,0 @@ -{{ if semverCompare ">=1.18.0-beta.1" .Capabilities.KubeVersion.Version }} -apiVersion: storage.k8s.io/v1 -{{ else }} -apiVersion: storage.k8s.io/v1beta1 -{{ end }} -kind: CSIDriver -metadata: - name: {{ .Values.driverName }} -spec: - attachRequired: true - podInfoOnMount: false diff --git a/charts/softiron/ceph-csi-rbd/templates/csiplugin-configmap.yaml b/charts/softiron/ceph-csi-rbd/templates/csiplugin-configmap.yaml deleted file mode 100644 index 3cec53e6e..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/csiplugin-configmap.yaml +++ /dev/null @@ -1,18 +0,0 @@ -{{- if not .Values.externallyManagedConfigmap }} -apiVersion: v1 -kind: ConfigMap -metadata: - name: {{ .Values.configMapName | quote }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -data: - config.json: |- -{{ toJson .Values.csiConfig | indent 4 -}} - cluster-mapping.json: |- -{{ toJson .Values.csiMapping | indent 4 -}} -{{- end }} diff --git a/charts/softiron/ceph-csi-rbd/templates/encryptionkms-configmap.yaml b/charts/softiron/ceph-csi-rbd/templates/encryptionkms-configmap.yaml deleted file mode 100644 index 47b7d093d..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/encryptionkms-configmap.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - name: {{ .Values.kmsConfigMapName | quote }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -data: - config.json: |- -{{ toJson .Values.encryptionKMSConfig | indent 4 -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml b/charts/softiron/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml deleted file mode 100644 index 93ec30ed6..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-clusterrole.yaml +++ /dev/null @@ -1,34 +0,0 @@ -{{- if .Values.rbac.create -}} -kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -rules: -{{- if .Values.topology.enabled }} - - apiGroups: [""] - resources: ["nodes"] - verbs: ["get"] -{{- end }} - # allow to read Vault Token and connection options from the Tenants namespace - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: [""] - resources: ["configmaps"] - verbs: ["get"] - - apiGroups: [""] - resources: ["serviceaccounts"] - verbs: ["get"] - - apiGroups: [""] - resources: ["persistentvolumes"] - verbs: ["get"] - - apiGroups: ["storage.k8s.io"] - resources: ["volumeattachments"] - verbs: ["list", "get"] -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-clusterrolebinding.yaml b/charts/softiron/ceph-csi-rbd/templates/nodeplugin-clusterrolebinding.yaml deleted file mode 100644 index fdc79be4a..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-clusterrolebinding.yaml +++ /dev/null @@ -1,22 +0,0 @@ -{{- if .Values.rbac.create -}} -{{- if .Values.topology.enabled }} -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -subjects: - - kind: ServiceAccount - name: {{ include "ceph-csi-rbd.serviceAccountName.nodeplugin" . }} - namespace: {{ .Release.Namespace }} -roleRef: - kind: ClusterRole - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} - apiGroup: rbac.authorization.k8s.io -{{- end }} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-daemonset.yaml b/charts/softiron/ceph-csi-rbd/templates/nodeplugin-daemonset.yaml deleted file mode 100644 index 1ccc49d08..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-daemonset.yaml +++ /dev/null @@ -1,224 +0,0 @@ -kind: DaemonSet -apiVersion: apps/v1 -metadata: - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -spec: - selector: - matchLabels: - app: {{ include "ceph-csi-rbd.name" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - updateStrategy: - type: {{ .Values.nodeplugin.updateStrategy }} - template: - metadata: - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} - spec: - serviceAccountName: {{ include "ceph-csi-rbd.serviceAccountName.nodeplugin" . }} - hostNetwork: true - hostPID: true -{{- if .Values.nodeplugin.priorityClassName }} - priorityClassName: {{ .Values.nodeplugin.priorityClassName }} -{{- end }} - # to use e.g. Rook orchestrated cluster, and mons' FQDN is - # resolved through k8s service, set dns policy to cluster first - dnsPolicy: ClusterFirstWithHostNet - containers: - - name: driver-registrar - # This is necessary only for systems with SELinux, where - # non-privileged sidecar containers cannot access unix domain socket - # created by privileged CSI driver container. - securityContext: - privileged: true - image: "{{ .Values.nodeplugin.registrar.image.repository }}:{{ .Values.nodeplugin.registrar.image.tag }}" - imagePullPolicy: {{ .Values.nodeplugin.registrar.image.pullPolicy }} - args: - - "--v={{ .Values.logLevel }}" - - "--csi-address=/csi/{{ .Values.pluginSocketFile }}" - - "--kubelet-registration-path={{ .Values.kubeletDir }}/plugins/{{ .Values.driverName }}/{{ .Values.pluginSocketFile }}" - env: - - name: KUBE_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - volumeMounts: - - name: socket-dir - mountPath: /csi - - name: registration-dir - mountPath: /registration - resources: -{{ toYaml .Values.nodeplugin.registrar.resources | indent 12 }} - - name: csi-rbdplugin - image: "{{ .Values.nodeplugin.plugin.image.repository }}:{{ .Values.nodeplugin.plugin.image.tag }}" - imagePullPolicy: {{ .Values.nodeplugin.plugin.image.pullPolicy }} - args: - - "--nodeid=$(NODE_ID)" - - "--pluginpath={{ .Values.kubeletDir }}/plugins" - - "--stagingpath={{ .Values.kubeletDir }}/plugins/kubernetes.io/csi/pv/" - - "--type=rbd" - - "--nodeserver=true" - - "--pidlimit=-1" - - "--endpoint=$(CSI_ENDPOINT)" - - "--v={{ .Values.logLevel }}" - - "--drivername=$(DRIVER_NAME)" -{{- if .Values.topology.enabled }} - - "--domainlabels={{ .Values.topology.domainLabels | join "," }}" -{{- end }} -{{- if .Values.nodeplugin.profiling.enabled }} - - "--enableprofiling={{ .Values.nodeplugin.profiling.enabled }}" -{{- end }} - env: - - name: POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: DRIVER_NAME - value: {{ .Values.driverName }} - - name: NODE_ID - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: CSI_ENDPOINT - value: "unix:///csi/{{ .Values.pluginSocketFile }}" - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] - allowPrivilegeEscalation: true - volumeMounts: - - name: socket-dir - mountPath: /csi - - mountPath: /dev - name: host-dev - - mountPath: /run/mount - name: host-mount - - mountPath: /sys - name: host-sys - - mountPath: /etc/selinux - name: etc-selinux - readOnly: true - - mountPath: /lib/modules - name: lib-modules - readOnly: true - - name: ceph-csi-config - mountPath: /etc/ceph-csi-config/ - - name: ceph-config - mountPath: /etc/ceph/ - - name: ceph-csi-encryption-kms-config - mountPath: /etc/ceph-csi-encryption-kms-config/ - - name: plugin-dir - mountPath: {{ .Values.kubeletDir }}/plugins - mountPropagation: "Bidirectional" - - name: mountpoint-dir - mountPath: {{ .Values.kubeletDir }}/pods - mountPropagation: "Bidirectional" - - name: keys-tmp-dir - mountPath: /tmp/csi/keys - - name: ceph-logdir - mountPath: /var/log/ceph - resources: -{{ toYaml .Values.nodeplugin.plugin.resources | indent 12 }} -{{- if .Values.nodeplugin.httpMetrics.enabled }} - - name: liveness-prometheus - securityContext: - privileged: true - image: "{{ .Values.nodeplugin.plugin.image.repository }}:{{ .Values.nodeplugin.plugin.image.tag }}" - imagePullPolicy: {{ .Values.nodeplugin.plugin.image.pullPolicy }} - args: - - "--type=liveness" - - "--endpoint=$(CSI_ENDPOINT)" - - "--metricsport={{ .Values.nodeplugin.httpMetrics.containerPort }}" - - "--metricspath=/metrics" - - "--polltime=60s" - - "--timeout=3s" - env: - - name: CSI_ENDPOINT - value: "unix:///csi/{{ .Values.pluginSocketFile }}" - - name: POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: -{{ toYaml .Values.nodeplugin.plugin.resources | indent 12 }} -{{- end }} - volumes: - - name: socket-dir - hostPath: - path: "{{ .Values.kubeletDir }}/plugins/{{ .Values.driverName }}" - type: DirectoryOrCreate - - name: registration-dir - hostPath: - path: {{ .Values.kubeletDir }}/plugins_registry - type: Directory - - name: plugin-dir - hostPath: - path: {{ .Values.kubeletDir }}/plugins - type: Directory - - name: mountpoint-dir - hostPath: - path: {{ .Values.kubeletDir }}/pods - type: DirectoryOrCreate - - name: ceph-logdir - hostPath: - path: {{ .Values.cephLogDirHostPath }} - type: DirectoryOrCreate - - name: host-dev - hostPath: - path: /dev - - name: host-mount - hostPath: - path: /run/mount - - name: host-sys - hostPath: - path: /sys - - name: etc-selinux - hostPath: - path: /etc/selinux - - name: lib-modules - hostPath: - path: /lib/modules - - name: ceph-config - configMap: - name: ceph-config - - name: ceph-csi-config - configMap: - name: {{ .Values.configMapName | quote }} -{{- if .Values.configMapKey }} - items: - - key: {{ .Values.configMapKey | quote }} - path: config.json -{{- end }} - - name: ceph-csi-encryption-kms-config - configMap: - name: {{ .Values.kmsConfigMapName | quote }} - - name: keys-tmp-dir - emptyDir: { - medium: "Memory" - } -{{- if .Values.nodeplugin.affinity }} - affinity: -{{ toYaml .Values.nodeplugin.affinity | indent 8 -}} -{{- end -}} -{{- if .Values.nodeplugin.nodeSelector }} - nodeSelector: -{{ toYaml .Values.nodeplugin.nodeSelector | indent 8 -}} -{{- end -}} -{{- if .Values.nodeplugin.tolerations }} - tolerations: -{{ toYaml .Values.nodeplugin.tolerations | indent 8 -}} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-http-service.yaml b/charts/softiron/ceph-csi-rbd/templates/nodeplugin-http-service.yaml deleted file mode 100644 index 68a3942e8..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-http-service.yaml +++ /dev/null @@ -1,41 +0,0 @@ -{{- if .Values.nodeplugin.httpMetrics.service.enabled -}} -apiVersion: v1 -kind: Service -metadata: -{{- if .Values.nodeplugin.httpMetrics.service.annotations }} - annotations: -{{ toYaml .Values.nodeplugin.httpMetrics.service.annotations | indent 4 }} -{{- end }} - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }}-http-metrics - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.fullname" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -spec: -{{- if .Values.nodeplugin.httpMetrics.service.clusterIP }} - clusterIP: "{{ .Values.nodeplugin.httpMetrics.service.clusterIP }}" -{{- end }} -{{- if .Values.nodeplugin.httpMetrics.service.externalIPs }} - externalIPs: -{{ toYaml .Values.nodeplugin.httpMetrics.service.externalIPs | indent 4 }} -{{- end }} -{{- if .Values.nodeplugin.httpMetrics.service.loadBalancerIP }} - loadBalancerIP: "{{ .Values.nodeplugin.httpMetrics.service.loadBalancerIP }}" -{{- end }} -{{- if .Values.nodeplugin.httpMetrics.service.loadBalancerSourceRanges }} - loadBalancerSourceRanges: -{{ toYaml .Values.nodeplugin.httpMetrics.service.loadBalancerSourceRanges | indent 4 }} -{{- end }} - ports: - - name: http-metrics - port: {{ .Values.nodeplugin.httpMetrics.service.servicePort }} - targetPort: {{ .Values.nodeplugin.httpMetrics.containerPort }} - selector: - app: {{ include "ceph-csi-rbd.name" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - type: "{{ .Values.nodeplugin.httpMetrics.service.type }}" -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-psp.yaml b/charts/softiron/ceph-csi-rbd/templates/nodeplugin-psp.yaml deleted file mode 100644 index e4c01cd80..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-psp.yaml +++ /dev/null @@ -1,48 +0,0 @@ -{{- if .Values.nodeplugin.podSecurityPolicy.enabled -}} -apiVersion: policy/v1beta1 -kind: PodSecurityPolicy -metadata: - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -spec: - allowPrivilegeEscalation: true - allowedCapabilities: - - 'SYS_ADMIN' - fsGroup: - rule: RunAsAny - privileged: true - hostNetwork: true - hostPID: true - runAsUser: - rule: RunAsAny - seLinux: - rule: RunAsAny - supplementalGroups: - rule: RunAsAny - volumes: - - 'configMap' - - 'emptyDir' - - 'projected' - - 'secret' - - 'hostPath' - allowedHostPaths: - - pathPrefix: '/dev' - readOnly: false - - pathPrefix: '/run/mount' - readOnly: false - - pathPrefix: '/sys' - readOnly: false - - pathPrefix: '/etc/selinux' - readOnly: true - - pathPrefix: '/lib/modules' - readOnly: true - - pathPrefix: '{{ .Values.cephLogDirHostPath }}' - readOnly: false - - pathPrefix: '{{ .Values.kubeletDir }}' - readOnly: false -{{- end }} diff --git a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-role.yaml b/charts/softiron/ceph-csi-rbd/templates/nodeplugin-role.yaml deleted file mode 100644 index d9d5a0e7b..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-role.yaml +++ /dev/null @@ -1,18 +0,0 @@ -{{- if and .Values.rbac.create .Values.nodeplugin.podSecurityPolicy.enabled -}} -kind: Role -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -rules: - - apiGroups: ['policy'] - resources: ['podsecuritypolicies'] - verbs: ['use'] - resourceNames: ['{{ include "ceph-csi-rbd.nodeplugin.fullname" . }}'] -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-rolebinding.yaml b/charts/softiron/ceph-csi-rbd/templates/nodeplugin-rolebinding.yaml deleted file mode 100644 index f4cce98af..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-rolebinding.yaml +++ /dev/null @@ -1,21 +0,0 @@ -{{- if and .Values.rbac.create .Values.nodeplugin.podSecurityPolicy.enabled -}} -kind: RoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -subjects: - - kind: ServiceAccount - name: {{ include "ceph-csi-rbd.serviceAccountName.nodeplugin" . }} - namespace: {{ .Release.Namespace }} -roleRef: - kind: Role - name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} - apiGroup: rbac.authorization.k8s.io -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-serviceaccount.yaml b/charts/softiron/ceph-csi-rbd/templates/nodeplugin-serviceaccount.yaml deleted file mode 100644 index 36e1ee745..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/nodeplugin-serviceaccount.yaml +++ /dev/null @@ -1,13 +0,0 @@ -{{- if .Values.serviceAccounts.nodeplugin.create -}} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ include "ceph-csi-rbd.serviceAccountName.nodeplugin" . }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.nodeplugin.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/provisioner-clusterrole.yaml b/charts/softiron/ceph-csi-rbd/templates/provisioner-clusterrole.yaml deleted file mode 100644 index 032705753..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/provisioner-clusterrole.yaml +++ /dev/null @@ -1,71 +0,0 @@ -{{- if .Values.rbac.create -}} -kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -rules: - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["persistentvolumes"] - verbs: ["get", "list", "watch", "create", "update", "delete", "patch"] - - apiGroups: [""] - resources: ["persistentvolumeclaims"] - verbs: ["get", "list", "watch", "update"] - - apiGroups: ["storage.k8s.io"] - resources: ["storageclasses"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["events"] - verbs: ["list", "watch", "create", "update", "patch"] - - apiGroups: [""] - resources: ["endpoints"] - verbs: ["get", "create", "update"] -{{- if .Values.provisioner.attacher.enabled }} - - apiGroups: ["storage.k8s.io"] - resources: ["volumeattachments"] - verbs: ["get", "list", "watch", "update", "patch"] - - apiGroups: ["storage.k8s.io"] - resources: ["volumeattachments/status"] - verbs: ["patch"] -{{- end }} - - apiGroups: ["snapshot.storage.k8s.io"] - resources: ["volumesnapshots"] - verbs: ["get", "list"] - - apiGroups: ["snapshot.storage.k8s.io"] - resources: ["volumesnapshotcontents"] - verbs: ["create", "get", "list", "watch", "update", "delete"] - - apiGroups: ["snapshot.storage.k8s.io"] - resources: ["volumesnapshotclasses"] - verbs: ["get", "list", "watch"] - - apiGroups: ["snapshot.storage.k8s.io"] - resources: ["volumesnapshotcontents/status"] - verbs: ["update"] - - apiGroups: [""] - resources: ["configmaps"] - verbs: ["get"] - - apiGroups: [""] - resources: ["serviceaccounts"] - verbs: ["get"] -{{- if .Values.provisioner.resizer.enabled }} - - apiGroups: [""] - resources: ["persistentvolumeclaims/status"] - verbs: ["update", "patch"] -{{- end }} -{{- if .Values.topology.enabled }} - - apiGroups: [""] - resources: ["nodes"] - verbs: ["get", "list","watch"] - - apiGroups: ["storage.k8s.io"] - resources: ["csinodes"] - verbs: ["get", "list", "watch"] -{{- end }} - -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/provisioner-clusterrolebinding.yaml b/charts/softiron/ceph-csi-rbd/templates/provisioner-clusterrolebinding.yaml deleted file mode 100644 index 5a086103a..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/provisioner-clusterrolebinding.yaml +++ /dev/null @@ -1,20 +0,0 @@ -{{- if .Values.rbac.create -}} -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -subjects: - - kind: ServiceAccount - name: {{ include "ceph-csi-rbd.serviceAccountName.provisioner" . }} - namespace: {{ .Release.Namespace }} -roleRef: - kind: ClusterRole - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }} - apiGroup: rbac.authorization.k8s.io -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/provisioner-deployment.yaml b/charts/softiron/ceph-csi-rbd/templates/provisioner-deployment.yaml deleted file mode 100644 index 5c20f545b..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/provisioner-deployment.yaml +++ /dev/null @@ -1,278 +0,0 @@ -kind: Deployment -apiVersion: apps/v1 -metadata: - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -spec: - replicas: {{ .Values.provisioner.replicaCount }} - strategy: - type: {{ .Values.provisioner.strategy.type }} -{{- if eq .Values.provisioner.strategy.type "RollingUpdate" }} - rollingUpdate: - maxUnavailable: {{ .Values.provisioner.strategy.rollingUpdate.maxUnavailable }} -{{- end }} - selector: - matchLabels: - app: {{ include "ceph-csi-rbd.name" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - template: - metadata: - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} - spec: -{{- if gt (int .Values.provisioner.replicaCount) 1 }} - affinity: - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: app - operator: In - values: - - {{ include "ceph-csi-rbd.name" . }} - - key: component - operator: In - values: - - {{ .Values.provisioner.name }} - topologyKey: "kubernetes.io/hostname" -{{- end }} - serviceAccountName: {{ include "ceph-csi-rbd.serviceAccountName.provisioner" . }} -{{- if .Values.provisioner.priorityClassName }} - priorityClassName: {{ .Values.provisioner.priorityClassName }} -{{- end }} - containers: - - name: csi-provisioner - image: "{{ .Values.provisioner.provisioner.image.repository }}:{{ .Values.provisioner.provisioner.image.tag }}" - imagePullPolicy: {{ .Values.provisioner.provisioner.image.pullPolicy }} - args: - - "--csi-address=$(ADDRESS)" - - "--v={{ .Values.logLevel }}" - - "--timeout={{ .Values.provisioner.timeout }}" - - "--leader-election=true" - - "--retry-interval-start=500ms" - - "--default-fstype={{ .Values.provisioner.defaultFSType }}" - - "--extra-create-metadata=true" -{{- if .Values.topology.enabled }} - - "--feature-gates=Topology=true" -{{- end }} - env: - - name: ADDRESS - value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: -{{ toYaml .Values.provisioner.provisioner.resources | indent 12 }} -{{- if .Values.provisioner.resizer.enabled }} - - name: csi-resizer - image: "{{ .Values.provisioner.resizer.image.repository }}:{{ .Values.provisioner.resizer.image.tag }}" - imagePullPolicy: {{ .Values.provisioner.resizer.image.pullPolicy }} - args: - - "--v={{ .Values.logLevel }}" - - "--csi-address=$(ADDRESS)" - - "--timeout={{ .Values.provisioner.timeout }}" - - "--leader-election" - - "--retry-interval-start=500ms" - - "--handle-volume-inuse-error=false" - env: - - name: ADDRESS - value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: -{{ toYaml .Values.provisioner.resizer.resources | indent 12 }} -{{- end }} - - name: csi-snapshotter - image: {{ .Values.provisioner.snapshotter.image.repository }}:{{ .Values.provisioner.snapshotter.image.tag }} - imagePullPolicy: {{ .Values.provisioner.snapshotter.image.pullPolicy }} - args: - - "--csi-address=$(ADDRESS)" - - "--v={{ .Values.logLevel }}" - - "--timeout={{ .Values.provisioner.timeout }}" - - "--leader-election=true" - env: - - name: ADDRESS - value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: -{{ toYaml .Values.provisioner.snapshotter.resources | indent 12 }} -{{- if .Values.provisioner.attacher.enabled }} - - name: csi-attacher - image: "{{ .Values.provisioner.attacher.image.repository }}:{{ .Values.provisioner.attacher.image.tag }}" - imagePullPolicy: {{ .Values.provisioner.attacher.image.pullPolicy }} - args: - - "--v={{ .Values.logLevel }}" - - "--csi-address=$(ADDRESS)" - - "--leader-election=true" - - "--retry-interval-start=500ms" - env: - - name: ADDRESS - value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: -{{ toYaml .Values.provisioner.attacher.resources | indent 12 }} -{{- end }} - - name: csi-rbdplugin - image: "{{ .Values.nodeplugin.plugin.image.repository }}:{{ .Values.nodeplugin.plugin.image.tag }}" - imagePullPolicy: {{ .Values.nodeplugin.plugin.image.pullPolicy }} - args: - - "--nodeid=$(NODE_ID)" - - "--type=rbd" - - "--controllerserver=true" - - "--pidlimit=-1" - - "--endpoint=$(CSI_ENDPOINT)" - - "--v={{ .Values.logLevel }}" - - "--drivername=$(DRIVER_NAME)" - - "--rbdhardmaxclonedepth={{ .Values.provisioner.hardMaxCloneDepth }}" - - "--rbdsoftmaxclonedepth={{ .Values.provisioner.softMaxCloneDepth }}" - - "--maxsnapshotsonimage={{ .Values.provisioner.maxSnapshotsOnImage }}" - - "--minsnapshotsonimage={{ .Values.provisioner.minSnapshotsOnImage }}" - {{- if .Values.provisioner.skipForceFlatten }} - - "--skipforceflatten={{ .Values.provisioner.skipForceFlatten }}" - {{- end }} - {{- if .Values.provisioner.profiling.enabled }} - - "--enableprofiling={{ .Values.provisioner.profiling.enabled }}" - {{- end }} - env: - - name: POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: DRIVER_NAME - value: {{ .Values.driverName }} - - name: NODE_ID - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: CSI_ENDPOINT - value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - volumeMounts: - - name: socket-dir - mountPath: /csi - - mountPath: /dev - name: host-dev - - mountPath: /sys - name: host-sys - - mountPath: /lib/modules - name: lib-modules - readOnly: true - - name: ceph-csi-config - mountPath: /etc/ceph-csi-config/ - - name: ceph-config - mountPath: /etc/ceph/ - - name: ceph-csi-encryption-kms-config - mountPath: /etc/ceph-csi-encryption-kms-config/ - - name: keys-tmp-dir - mountPath: /tmp/csi/keys - resources: -{{ toYaml .Values.nodeplugin.plugin.resources | indent 12 }} -{{- if .Values.provisioner.deployController }} - - name: csi-rbdplugin-controller - image: "{{ .Values.nodeplugin.plugin.image.repository }}:{{ .Values.nodeplugin.plugin.image.tag }}" - imagePullPolicy: {{ .Values.nodeplugin.plugin.image.pullPolicy }} - args: - - "--type=controller" - - "--v={{ .Values.logLevel }}" - - "--drivername=$(DRIVER_NAME)" - - "--drivernamespace=$(DRIVER_NAMESPACE)" - env: - - name: DRIVER_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: DRIVER_NAME - value: {{ .Values.driverName }} - volumeMounts: - - name: ceph-csi-config - mountPath: /etc/ceph-csi-config/ - - name: keys-tmp-dir - mountPath: /tmp/csi/keys - - name: ceph-config - mountPath: /etc/ceph/ - resources: -{{ toYaml .Values.nodeplugin.plugin.resources | indent 12 }} -{{- end }} -{{- if .Values.provisioner.httpMetrics.enabled }} - - name: liveness-prometheus - image: "{{ .Values.nodeplugin.plugin.image.repository }}:{{ .Values.nodeplugin.plugin.image.tag }}" - imagePullPolicy: {{ .Values.nodeplugin.plugin.image.pullPolicy }} - args: - - "--type=liveness" - - "--endpoint=$(CSI_ENDPOINT)" - - "--metricsport={{ .Values.provisioner.httpMetrics.containerPort }}" - - "--metricspath=/metrics" - - "--polltime=60s" - - "--timeout=3s" - env: - - name: CSI_ENDPOINT - value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - - name: POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - volumeMounts: - - name: socket-dir - mountPath: /csi - resources: -{{ toYaml .Values.nodeplugin.plugin.resources | indent 12 }} -{{- end }} - volumes: - - name: socket-dir - emptyDir: { - medium: "Memory" - } - - name: host-dev - hostPath: - path: /dev - - name: host-sys - hostPath: - path: /sys - - name: lib-modules - hostPath: - path: /lib/modules - - name: ceph-config - configMap: - name: ceph-config - - name: ceph-csi-config - configMap: - name: {{ .Values.configMapName | quote }} -{{- if .Values.configMapKey }} - items: - - key: {{ .Values.configMapKey | quote }} - path: config.json -{{- end }} - - name: ceph-csi-encryption-kms-config - configMap: - name: {{ .Values.kmsConfigMapName | quote }} - - name: keys-tmp-dir - emptyDir: { - medium: "Memory" - } -{{- if .Values.provisioner.affinity }} - affinity: -{{ toYaml .Values.provisioner.affinity | indent 8 -}} -{{- end -}} -{{- if .Values.provisioner.nodeSelector }} - nodeSelector: -{{ toYaml .Values.provisioner.nodeSelector | indent 8 -}} -{{- end -}} -{{- if .Values.provisioner.tolerations }} - tolerations: -{{ toYaml .Values.provisioner.tolerations | indent 8 -}} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/provisioner-http-service.yaml b/charts/softiron/ceph-csi-rbd/templates/provisioner-http-service.yaml deleted file mode 100644 index 0d4c925ec..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/provisioner-http-service.yaml +++ /dev/null @@ -1,41 +0,0 @@ -{{- if .Values.provisioner.httpMetrics.service.enabled -}} -apiVersion: v1 -kind: Service -metadata: -{{- if .Values.provisioner.httpMetrics.service.annotations }} - annotations: -{{ toYaml .Values.provisioner.httpMetrics.service.annotations | indent 4 }} -{{- end }} - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }}-http-metrics - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.fullname" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -spec: -{{- if .Values.provisioner.httpMetrics.service.clusterIP }} - clusterIP: "{{ .Values.provisioner.httpMetrics.service.clusterIP }}" -{{- end }} -{{- if .Values.provisioner.httpMetrics.service.externalIPs }} - externalIPs: -{{ toYaml .Values.provisioner.httpMetrics.service.externalIPs | indent 4 }} -{{- end }} -{{- if .Values.provisioner.httpMetrics.service.loadBalancerIP }} - loadBalancerIP: "{{ .Values.provisioner.httpMetrics.service.loadBalancerIP }}" -{{- end }} -{{- if .Values.provisioner.httpMetrics.service.loadBalancerSourceRanges }} - loadBalancerSourceRanges: -{{ toYaml .Values.provisioner.httpMetrics.service.loadBalancerSourceRanges | indent 4 }} -{{- end }} - ports: - - name: http-metrics - port: {{ .Values.provisioner.httpMetrics.service.servicePort }} - targetPort: {{ .Values.provisioner.httpMetrics.containerPort }} - selector: - app: {{ include "ceph-csi-rbd.name" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - type: "{{ .Values.provisioner.httpMetrics.service.type }}" -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/provisioner-psp.yaml b/charts/softiron/ceph-csi-rbd/templates/provisioner-psp.yaml deleted file mode 100644 index 111226e14..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/provisioner-psp.yaml +++ /dev/null @@ -1,34 +0,0 @@ -{{- if .Values.provisioner.podSecurityPolicy.enabled -}} -apiVersion: policy/v1beta1 -kind: PodSecurityPolicy -metadata: - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -spec: - fsGroup: - rule: RunAsAny - runAsUser: - rule: RunAsAny - seLinux: - rule: RunAsAny - supplementalGroups: - rule: RunAsAny - volumes: - - 'configMap' - - 'emptyDir' - - 'projected' - - 'secret' - - 'hostPath' - allowedHostPaths: - - pathPrefix: '/dev' - readOnly: false - - pathPrefix: '/sys' - readOnly: false - - pathPrefix: '/lib/modules' - readOnly: true -{{- end }} diff --git a/charts/softiron/ceph-csi-rbd/templates/provisioner-role.yaml b/charts/softiron/ceph-csi-rbd/templates/provisioner-role.yaml deleted file mode 100644 index ae16fde62..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/provisioner-role.yaml +++ /dev/null @@ -1,26 +0,0 @@ -{{- if .Values.rbac.create -}} -kind: Role -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -rules: - - apiGroups: [""] - resources: ["configmaps"] - verbs: ["get", "list", "watch", "create","update", "delete"] - - apiGroups: ["coordination.k8s.io"] - resources: ["leases"] - verbs: ["get", "watch", "list", "delete", "update", "create"] -{{- if .Values.provisioner.podSecurityPolicy.enabled }} - - apiGroups: ['policy'] - resources: ['podsecuritypolicies'] - verbs: ['use'] - resourceNames: ['{{ include "ceph-csi-rbd.provisioner.fullname" . }}'] -{{- end -}} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/provisioner-rolebinding.yaml b/charts/softiron/ceph-csi-rbd/templates/provisioner-rolebinding.yaml deleted file mode 100644 index 23fa39fed..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/provisioner-rolebinding.yaml +++ /dev/null @@ -1,21 +0,0 @@ -{{- if .Values.rbac.create -}} -kind: RoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -subjects: - - kind: ServiceAccount - name: {{ include "ceph-csi-rbd.serviceAccountName.provisioner" . }} - namespace: {{ .Release.Namespace }} -roleRef: - kind: Role - name: {{ include "ceph-csi-rbd.provisioner.fullname" . }} - apiGroup: rbac.authorization.k8s.io -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/provisioner-serviceaccount.yaml b/charts/softiron/ceph-csi-rbd/templates/provisioner-serviceaccount.yaml deleted file mode 100644 index 893b43a9c..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/provisioner-serviceaccount.yaml +++ /dev/null @@ -1,13 +0,0 @@ -{{- if .Values.serviceAccounts.provisioner.create -}} -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ include "ceph-csi-rbd.serviceAccountName.provisioner" . }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - component: {{ .Values.provisioner.name }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/secret.yaml b/charts/softiron/ceph-csi-rbd/templates/secret.yaml deleted file mode 100644 index 1553ceec7..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/secret.yaml +++ /dev/null @@ -1,17 +0,0 @@ -{{- if .Values.secret.create -}} -apiVersion: v1 -kind: Secret -metadata: - name: {{ .Values.secret.name }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -stringData: - userID: {{ .Values.secret.userID }} - userKey: {{ .Values.secret.userKey }} - - encryptionPassphrase: {{ .Values.secret.encryptionPassphrase }} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/templates/storageclass.yaml b/charts/softiron/ceph-csi-rbd/templates/storageclass.yaml deleted file mode 100644 index 88d12c1a4..000000000 --- a/charts/softiron/ceph-csi-rbd/templates/storageclass.yaml +++ /dev/null @@ -1,76 +0,0 @@ -{{- if .Values.storageClass.create -}} -apiVersion: storage.k8s.io/v1 -kind: StorageClass -metadata: - name: {{ .Values.storageClass.name }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ include "ceph-csi-rbd.name" . }} - chart: {{ include "ceph-csi-rbd.chart" . }} - release: {{ .Release.Name }} - heritage: {{ .Release.Service }} -provisioner: {{ .Values.driverName }} -parameters: - clusterID: {{ .Values.storageClass.clusterID }} - pool: {{ .Values.storageClass.pool }} - imageFeatures: {{ .Values.storageClass.imageFeatures }} - thickProvision: {{ .Values.storageClass.thickProvision | quote}} -{{- if .Values.storageClass.mounter }} - mounter: {{ .Values.storageClass.mounter }} -{{- end }} -{{- if .Values.storageClass.cephLogDir }} - cephLogDir: {{ .Values.storageClass.cephLogDir }} -{{- end }} -{{- if .Values.storageClass.cephLogStrategy }} - cephLogStrategy: {{ .Values.storageClass.cephLogStrategy }} -{{- end }} -{{- if .Values.storageClass.dataPool }} - dataPool: {{ .Values.storageClass.dataPool }} -{{- end }} -{{- if .Values.storageClass.volumeNamePrefix }} - volumeNamePrefix: "{{ .Values.storageClass.volumeNamePrefix }}" -{{- end }} -{{- if .Values.storageClass.encrypted }} - encrypted: "{{ .Values.storageClass.encrypted }}" -{{- end }} -{{- if .Values.storageClass.encryptionKMSID }} - encryptionKMSID: {{ .Values.storageClass.encryptionKMSID }} -{{- end }} -{{- if .Values.storageClass.topologyConstrainedPools }} - topologyConstrainedPools: - {{ toYaml .Values.storageClass.topologyConstrainedPools | indent 4 -}} -{{- end }} -{{- if .Values.storageClass.mapOptions }} - mapOptions: {{ .Values.storageClass.mapOptions }} -{{- end }} -{{- if .Values.storageClass.unmapOptions }} - unmapOptions: {{ .Values.storageClass.unmapOptions }} -{{- end }} - csi.storage.k8s.io/provisioner-secret-name: {{ .Values.storageClass.provisionerSecret }} -{{- if .Values.storageClass.provisionerSecretNamespace }} - csi.storage.k8s.io/provisioner-secret-namespace: {{ .Values.storageClass.provisionerSecretNamespace }} -{{ else }} - csi.storage.k8s.io/provisioner-secret-namespace: {{ .Release.Namespace }} -{{- end }} - csi.storage.k8s.io/controller-expand-secret-name: {{ .Values.storageClass.controllerExpandSecret }} -{{- if .Values.storageClass.controllerExpandSecretNamespace }} - csi.storage.k8s.io/controller-expand-secret-namespace: {{ .Values.storageClass.controllerExpandSecretNamespace }} -{{ else }} - csi.storage.k8s.io/controller-expand-secret-namespace: {{ .Release.Namespace }} -{{- end }} - csi.storage.k8s.io/node-stage-secret-name: {{ .Values.storageClass.nodeStageSecret }} -{{- if .Values.storageClass.nodeStageSecretNamespace }} - csi.storage.k8s.io/node-stage-secret-namespace: {{ .Values.storageClass.nodeStageSecretNamespace }} -{{ else }} - csi.storage.k8s.io/node-stage-secret-namespace: {{ .Release.Namespace }} -{{- end }} - csi.storage.k8s.io/fstype: {{ .Values.storageClass.fstype }} -reclaimPolicy: {{ .Values.storageClass.reclaimPolicy }} -allowVolumeExpansion: {{ .Values.storageClass.allowVolumeExpansion }} -{{- if .Values.storageClass.mountOptions }} -mountOptions: - {{- range .Values.storageClass.mountOptions }} - - {{ . }} - {{- end }} -{{- end }} -{{- end -}} diff --git a/charts/softiron/ceph-csi-rbd/values.yaml b/charts/softiron/ceph-csi-rbd/values.yaml deleted file mode 100644 index 655fce1aa..000000000 --- a/charts/softiron/ceph-csi-rbd/values.yaml +++ /dev/null @@ -1,432 +0,0 @@ ---- -rbac: - # Specifies whether RBAC resources should be created - create: true - -serviceAccounts: - nodeplugin: - # Specifies whether a ServiceAccount should be created - create: true - # The name of the ServiceAccount to use. - # If not set and create is true, a name is generated using the fullname - name: - provisioner: - # Specifies whether a ServiceAccount should be created - create: true - # The name of the ServiceAccount to use. - # If not set and create is true, a name is generated using the fullname - name: - -# Configuration for the CSI to connect to the cluster -# Ref: https://github.com/ceph/ceph-csi/blob/devel/examples/README.md -# Example: -# csiConfig: -# - clusterID: "<cluster-id>" -# monitors: -# - "<MONValue1>" -# - "<MONValue2>" -csiConfig: [] - -# Configuration details of clusterID,PoolID and FscID mapping -# csiMapping: -# - clusterIDMapping: -# clusterID on site1: clusterID on site2 -# RBDPoolIDMapping: -# - poolID on site1: poolID on site2 -# CephFSFscIDMapping: -# - CephFS FscID on site1: CephFS FscID on site2 -csiMapping: [] - -# Configuration for the encryption KMS -# Ref: https://github.com/ceph/ceph-csi/blob/devel/docs/deploy-rbd.md -# Example: -# encryptionKMSConfig: -# vault-unique-id-1: -# encryptionKMSType: vault -# vaultAddress: https://vault.example.com -# vaultAuthPath: /v1/auth/kubernetes/login -# vaultRole: csi-kubernetes -# vaultPassphraseRoot: /v1/secret -# vaultPassphrasePath: ceph-csi/ -# vaultCAVerify: "false" -encryptionKMSConfig: {} - -# Set logging level for csi containers. -# Supported values from 0 to 5. 0 for general useful logs, -# 5 for trace level verbosity. -logLevel: 5 - -nodeplugin: - name: nodeplugin - # set user created priorityclassName for csi plugin pods. default is - # system-node-critical which is high priority - priorityClassName: system-node-critical - # if you are using rbd-nbd client set this value to OnDelete - updateStrategy: RollingUpdate - - httpMetrics: - # Metrics only available for cephcsi/cephcsi => 1.2.0 - # Specifies whether http metrics should be exposed - enabled: true - # The port of the container to expose the metrics - containerPort: 8080 - - service: - # Specifies whether a service should be created for the metrics - enabled: true - # The port to use for the service - servicePort: 8080 - type: ClusterIP - - # Annotations for the service - # Example: - # annotations: - # prometheus.io/scrape: "true" - # prometheus.io/port: "8080" - annotations: {} - - clusterIP: "" - - ## List of IP addresses at which the stats-exporter service is available - ## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips - ## - externalIPs: [] - - loadBalancerIP: "" - loadBalancerSourceRanges: [] - - profiling: - # enable profiling to check for memory leaks - enabled: false - - registrar: - image: - repository: k8s.gcr.io/sig-storage/csi-node-driver-registrar - tag: v2.3.0 - pullPolicy: IfNotPresent - resources: {} - - plugin: - image: - repository: quay.io/cephcsi/cephcsi - tag: canary - pullPolicy: IfNotPresent - resources: {} - - nodeSelector: {} - - tolerations: [] - - affinity: {} - - # If true, create & use Pod Security Policy resources - # https://kubernetes.io/docs/concepts/policy/pod-security-policy/ - podSecurityPolicy: - enabled: false - -provisioner: - name: provisioner - replicaCount: 3 - strategy: - # RollingUpdate strategy replaces old pods with new ones gradually, - # without incurring downtime. - type: RollingUpdate - rollingUpdate: - # maxUnavailable is the maximum number of pods that can be - # unavailable during the update process. - maxUnavailable: 50% - # if fstype is not specified in storageclass, ext4 is default - defaultFSType: ext4 - # deployController to enable or disable the deployment of controller which - # generates the OMAP data if its not Present. - deployController: true - # Timeout for waiting for creation or deletion of a volume - timeout: 60s - # Hard limit for maximum number of nested volume clones that are taken before - # a flatten occurs - hardMaxCloneDepth: 8 - # Soft limit for maximum number of nested volume clones that are taken before - # a flatten occurs - softMaxCloneDepth: 4 - # Maximum number of snapshots allowed on rbd image without flattening - maxSnapshotsOnImage: 450 - # Minimum number of snapshots allowed on rbd image to trigger flattening - minSnapshotsOnImage: 250 - # skip image flattening if kernel support mapping of rbd images - # which has the deep-flatten feature - # skipForceFlatten: false - - # set user created priorityclassName for csi provisioner pods. default is - # system-cluster-critical which is less priority than system-node-critical - priorityClassName: system-cluster-critical - - httpMetrics: - # Metrics only available for cephcsi/cephcsi => 1.2.0 - # Specifies whether http metrics should be exposed - enabled: true - # The port of the container to expose the metrics - containerPort: 8080 - - service: - # Specifies whether a service should be created for the metrics - enabled: true - # The port to use for the service - servicePort: 8080 - type: ClusterIP - - # Annotations for the service - # Example: - # annotations: - # prometheus.io/scrape: "true" - # prometheus.io/port: "8080" - annotations: {} - - clusterIP: "" - - ## List of IP addresses at which the stats-exporter service is available - ## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips - ## - externalIPs: [] - - loadBalancerIP: "" - loadBalancerSourceRanges: [] - - profiling: - # enable profiling to check for memory leaks - enabled: false - - provisioner: - image: - repository: k8s.gcr.io/sig-storage/csi-provisioner - tag: v3.0.0 - pullPolicy: IfNotPresent - resources: {} - - attacher: - name: attacher - enabled: true - image: - repository: k8s.gcr.io/sig-storage/csi-attacher - tag: v3.3.0 - pullPolicy: IfNotPresent - resources: {} - - resizer: - name: resizer - enabled: true - image: - repository: k8s.gcr.io/sig-storage/csi-resizer - tag: v1.3.0 - pullPolicy: IfNotPresent - resources: {} - - snapshotter: - image: - repository: k8s.gcr.io/sig-storage/csi-snapshotter - tag: v4.2.0 - pullPolicy: IfNotPresent - resources: {} - - nodeSelector: {} - - tolerations: [] - - affinity: {} - - # If true, create & use Pod Security Policy resources - # https://kubernetes.io/docs/concepts/policy/pod-security-policy/ - podSecurityPolicy: - enabled: false - -topology: - # Specifies whether topology based provisioning support should - # be exposed by CSI - enabled: false - # domainLabels define which node labels to use as domains - # for CSI nodeplugins to advertise their domains - # NOTE: the value here serves as an example and needs to be - # updated with node labels that define domains of interest - domainLabels: - - failure-domain/region - - failure-domain/zone - -storageClass: - # Specifies whether the storageclass should be created - create: false - name: csi-rbd-sc - # (required) String representing a Ceph cluster to provision storage from. - # Should be unique across all Ceph clusters in use for provisioning, - # cannot be greater than 36 bytes in length, and should remain immutable for - # the lifetime of the StorageClass in use. - clusterID: <cluster-ID> - - # (optional) If you want to use erasure coded pool with RBD, you need to - # create two pools. one erasure coded and one replicated. - # You need to specify the replicated pool here in the `pool` parameter, it is - # used for the metadata of the images. - # The erasure coded pool must be set as the `dataPool` parameter below. - # dataPool: <ec-data-pool> - dataPool: "" - - # (required) Ceph pool into which the RBD image shall be created - # eg: pool: replicapool - pool: replicapool - - # Set thickProvision to true if you want RBD images to be fully allocated on - # creation (thin provisioning is the default). - thickProvision: false - - # (required) RBD image features, CSI creates image with image-format 2 - # CSI RBD currently supports `layering`, `journaling`, `exclusive-lock` - # features. If `journaling` is enabled, must enable `exclusive-lock` too. - # imageFeatures: layering,journaling,exclusive-lock - imageFeatures: layering - - # (optional) uncomment the following to use rbd-nbd as mounter - # on supported nodes - # mounter: rbd-nbd - mounter: "" - - # (optional) ceph client log location, eg: rbd-nbd - # By default host-path /var/log/ceph of node is bind-mounted into - # csi-rbdplugin pod at /var/log/ceph mount path. This is to configure - # target bindmount path used inside container for ceph clients logging. - # See docs/rbd-nbd.md for available configuration options. - # cephLogDir: /var/log/ceph - cephLogDir: "" - - # (optional) ceph client log strategy - # By default, log file belonging to a particular volume will be deleted - # on unmap, but you can choose to just compress instead of deleting it - # or even preserve the log file in text format as it is. - # Available options `remove` or `compress` or `preserve` - # cephLogStrategy: remove - cephLogStrategy: "" - - # (optional) Prefix to use for naming RBD images. - # If omitted, defaults to "csi-vol-". - # volumeNamePrefix: "foo-bar-" - volumeNamePrefix: "" - - # (optional) Instruct the plugin it has to encrypt the volume - # By default it is disabled. Valid values are "true" or "false". - # A string is expected here, i.e. "true", not true. - # encrypted: "true" - encrypted: "" - - # (optional) Use external key management system for encryption passphrases by - # specifying a unique ID matching KMS ConfigMap. The ID is only used for - # correlation to configmap entry. - encryptionKMSID: "" - - # Add topology constrained pools configuration, if topology based pools - # are setup, and topology constrained provisioning is required. - # For further information read TODO<doc> - # topologyConstrainedPools: | - # [{"poolName":"pool0", - # "dataPool":"ec-pool0" # optional, erasure-coded pool for data - # "domainSegments":[ - # {"domainLabel":"region","value":"east"}, - # {"domainLabel":"zone","value":"zone1"}]}, - # {"poolName":"pool1", - # "dataPool":"ec-pool1" # optional, erasure-coded pool for data - # "domainSegments":[ - # {"domainLabel":"region","value":"east"}, - # {"domainLabel":"zone","value":"zone2"}]}, - # {"poolName":"pool2", - # "dataPool":"ec-pool2" # optional, erasure-coded pool for data - # "domainSegments":[ - # {"domainLabel":"region","value":"west"}, - # {"domainLabel":"zone","value":"zone1"}]} - # ] - topologyConstrainedPools: [] - - # (optional) mapOptions is a comma-separated list of map options. - # For krbd options refer - # https://docs.ceph.com/docs/master/man/8/rbd/#kernel-rbd-krbd-options - # For nbd options refer - # https://docs.ceph.com/docs/master/man/8/rbd-nbd/#options - mapOptions: "" - - # (optional) unmapOptions is a comma-separated list of unmap options. - # For krbd options refer - # https://docs.ceph.com/docs/master/man/8/rbd/#kernel-rbd-krbd-options - # For nbd options refer - # https://docs.ceph.com/docs/master/man/8/rbd-nbd/#options - unmapOptions: "" - - # The secrets have to contain Ceph credentials with required access - # to the 'pool'. - provisionerSecret: csi-rbd-secret - # If Namespaces are left empty, the secrets are assumed to be in the - # Release namespace. - provisionerSecretNamespace: "" - controllerExpandSecret: csi-rbd-secret - controllerExpandSecretNamespace: "" - nodeStageSecret: csi-rbd-secret - nodeStageSecretNamespace: "" - # Specify the filesystem type of the volume. If not specified, - # csi-provisioner will set default as `ext4`. - fstype: ext4 - reclaimPolicy: Delete - allowVolumeExpansion: true - mountOptions: [] - # Mount Options - # Example: - # mountOptions: - # - discard - -secret: - # Specifies whether the secret should be created - create: false - name: csi-rbd-secret - # Key values correspond to a user name and its key, as defined in the - # ceph cluster. User ID should have required access to the 'pool' - # specified in the storage class - userID: <plaintext ID> - userKey: <Ceph auth key corresponding to userID above> - # Encryption passphrase - encryptionPassphrase: test_passphrase - -# This is a sample configmap that helps define a Ceph configuration as required -# by the CSI plugins. -# Sample ceph.conf available at -# https://github.com/ceph/ceph/blob/master/src/sample.ceph.conf Detailed -# documentation is available at -# https://docs.ceph.com/en/latest/rados/configuration/ceph-conf/ -cephconf: | - [global] - auth_cluster_required = cephx - auth_service_required = cephx - auth_client_required = cephx - - # Workaround for http://tracker.ceph.com/issues/23446 - fuse_set_user_groups = false - - # ceph-fuse which uses libfuse2 by default has write buffer size of 2KiB - # adding 'fuse_big_writes = true' option by default to override this limit - # see https://github.com/ceph/ceph-csi/issues/1928 - fuse_big_writes = true - -######################################################### -# Variables for 'internal' use please use with caution! # -######################################################### - -# The filename of the provisioner socket -provisionerSocketFile: csi-provisioner.sock -# The filename of the plugin socket -pluginSocketFile: csi.sock -# kubelet working directory,can be set using `--root-dir` when starting kubelet. -kubeletDir: /var/lib/kubelet -# Host path location for ceph client processes logging, ex: rbd-nbd -cephLogDirHostPath: /var/log/ceph -# Name of the csi-driver -driverName: rbd.csi.ceph.com -# Name of the configmap used for state -configMapName: ceph-csi-config -# Key to use in the Configmap if not config.json -# configMapKey: -# Use an externally provided configmap -externallyManagedConfigmap: false -# Name of the configmap used for encryption kms configuration -kmsConfigMapName: ceph-csi-encryption-kms-config diff --git a/index.yaml b/index.yaml index bb6b47020..b694a76d7 100644 --- a/index.yaml +++ b/index.yaml @@ -10547,38 +10547,6 @@ entries: urls: - assets/asserts/asserts-1.6.0.tgz version: 1.6.0 - aws-event-sources: - - annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/display-name: Sources for Amazon Web Services - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: aws-event-sources - apiVersion: v2 - appVersion: 1.7.0 - created: "2022-05-05T03:17:41.903057-04:00" - description: AWS Event Sources controller for Kubernetes - digest: 1c34c4b96c7114116bca775a5deb949f2d8b5698e0967889d56087f39952c487 - home: https://github.com/triggermesh/aws-event-sources - icon: https://global-uploads.webflow.com/5f683649f57c927210b6707e/5f683649f57c9261bab67097_logo.svg - keywords: - - knative-eventing - - sources - - aws - - triggermesh - - serverless - kubeVersion: '>=1.18.0' - maintainers: - - email: sameer@triggermesh.com - name: sameersbn - - email: antoine@triggermesh.com - name: antoineco - name: aws-event-sources - sources: - - https://github.com/triggermesh/aws-event-sources - type: application - urls: - - assets/aws-event-sources/aws-event-sources-0.1.901.tgz - version: 0.1.901 cassandra: - annotations: catalog.cattle.io/certified: partner @@ -11659,31 +11627,6 @@ entries: urls: - assets/bitnami/cassandra-9.7.3.tgz version: 9.7.3 - ceph-csi-rbd: - - annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/display-name: SoftIron Ceph RBD - catalog.cattle.io/release-name: ceph-csi-rbd - apiVersion: v1 - appVersion: canary - created: "2021-12-15T07:55:17.202211116-05:00" - description: CSI RBD Driver for SoftIron HyperDrive - digest: b2b196a93aa7cd4d88a7a21c2cb993f77ccfe515f21c1c09e1f22b4dc6e50df7 - home: https://github.com/softiron/ceph-csi - icon: https://cdn.softiron.com/helm/assets/icon.png - keywords: - - ceph - - rbd - - ceph-csi - - softiron - - hyperdrive - kubeVersion: 1.18 - 1.22 - name: ceph-csi-rbd - sources: - - https://github.com/softiron/ceph-csi/tree/rancher-softiron/charts/ceph-csi-rbd - urls: - - assets/softiron/ceph-csi-rbd-1.3.1.tgz - version: 1.3.1 cert-manager: - annotations: artifacthub.io/license: Apache-2.0 @@ -20378,83 +20321,7 @@ entries: type: application urls: - assets/dh2i/dxemssql-1.0.1.tgz - version: 1.0.1 - dynatrace-oneagent-operator: - - annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/display-name: Dynatrace Oneagent Operator - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: dynatrace-oneagent-operator - apiVersion: v2 - appVersion: 0.10.2 - created: "2022-08-29T15:03:21.747942-04:00" - description: The Dynatrace OneAgent Operator Helm chart for Kubernetes and Openshift - digest: 859d20a3486ef7e9f9cc6053986e4459b31646319e67053d9c475f1af46684db - home: https://www.dynatrace.com/ - icon: https://assets.dynatrace.com/global/resources/Signet_Logo_RGB_CP_512x512px.png - kubeVersion: '>= 1.19' - maintainers: - - email: marco.mader@dynatrace.com - name: DTMad - - email: michael.mayr@dynatrace.com - name: mmayr-at - name: dynatrace-oneagent-operator - sources: - - https://github.com/Dynatrace/helm-charts - type: application - urls: - - assets/dynatrace/dynatrace-oneagent-operator-0.10.201.tgz - version: 0.10.201 - - annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: dynatrace-oneagent-operator - apiVersion: v2 - appVersion: 0.8.0 - created: "2022-08-29T15:03:21.749412-04:00" - description: The Dynatrace OneAgent Operator Helm chart for Kubernetes and Openshift - digest: 84cf3e7ed6d8a662e363aae486fcf6ac55a9bc8214a0f96a41017abf7fdf44ec - home: https://www.dynatrace.com/ - icon: https://assets.dynatrace.com/global/resources/Signet_Logo_RGB_CP_512x512px.png - maintainers: - - email: marco.mader@dynatrace.com - name: DTMad - - email: luis.garcia@dynatrace.com - name: lrgar - - email: michael.mayr@dynatrace.com - name: mmayr-at - name: dynatrace-oneagent-operator - sources: - - https://github.com/Dynatrace/helm-charts - type: application - urls: - - assets/dynatrace/dynatrace-oneagent-operator-0.8.1.tgz - version: 0.8.1 - - annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: dynatrace-oneagent-operator - apiVersion: v2 - appVersion: 0.8.0 - created: "2022-08-29T15:03:21.748676-04:00" - description: The Dynatrace OneAgent Operator Helm chart for Kubernetes and Openshift - digest: 42b573bfca1f8b5035ca50681672054e95fcead1bf12949d193d529c8b2914bf - home: https://www.dynatrace.com/ - icon: https://assets.dynatrace.com/global/resources/Signet_Logo_RGB_CP_512x512px.png - maintainers: - - email: marco.mader@dynatrace.com - name: DTMad - - email: luis.garcia@dynatrace.com - name: lrgar - - email: michael.mayr@dynatrace.com - name: mmayr-at - name: dynatrace-oneagent-operator - sources: - - https://github.com/Dynatrace/helm-charts - type: application - urls: - - assets/dynatrace/dynatrace-oneagent-operator-0.8.000.tgz - version: 0.8.000 + version: 1.0.1 dynatrace-operator: - annotations: catalog.cattle.io/certified: partner @@ -25771,64 +25638,7 @@ entries: - https://github.com/hpe-storage/co-deployments urls: - assets/hpe/hpe-csi-info-metrics-1.0.1.tgz - version: 1.0.1 - hpe-flexvolume-driver: - - annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: hpe-flexvolume-driver - apiVersion: v1 - appVersion: "3.1" - created: "2022-08-12T16:18:16.263844-04:00" - description: A Helm chart for installing the HPE Volume Driver for Kubernetes - FlexVolume plugin - digest: 9db366ca3229a4bf3280c13e0445a2eb6864521666180b3947cbbed392ed1fd9 - home: https://hpe.com/storage/containers - icon: https://raw.githubusercontent.com/hpe-storage/co-deployments/master/docs/assets/hpedev.png - keywords: - - HPE - - Storage - - StorageClass - - CentOS - - Ubuntu - - CloudVolumes - maintainers: - - email: hpe-containers-dev@hpe.com - name: shivamerla - name: hpe-flexvolume-driver - sources: - - https://github.com/hpe-storage/flexvolume-driver - urls: - - assets/hpe/hpe-flexvolume-driver-3.1.1.tgz - version: 3.1.1 - - annotations: - catalog.cattle.io/certified: partner - catalog.cattle.io/hidden: "true" - catalog.cattle.io/release-name: hpe-flexvolume-driver - apiVersion: v1 - appVersion: "3.1" - created: "2022-08-12T16:18:16.263432-04:00" - description: A Helm chart for installing the HPE Volume Driver for Kubernetes - FlexVolume plugin - digest: 82446dc75a7a0b7e0f50e0645dd2762b05d16a25cb0836044fd100c8fcc8bd04 - home: https://hpe.com/storage/containers - icon: https://raw.githubusercontent.com/hpe-storage/co-deployments/master/docs/assets/hpedev.png - keywords: - - HPE - - Storage - - StorageClass - - CentOS - - Ubuntu - - CloudVolumes - maintainers: - - email: hpe-containers-dev@hpe.com - name: shivamerla - name: hpe-flexvolume-driver - sources: - - https://github.com/hpe-storage/flexvolume-driver - urls: - - assets/hpe/hpe-flexvolume-driver-3.1.000.tgz - version: 3.1.000 + version: 1.0.1 instana-agent: - annotations: artifacthub.io/links: | diff --git a/packages/softiron/generated-changes/overlay/app-readme.md b/packages/softiron/generated-changes/overlay/app-readme.md deleted file mode 100644 index 206ab3ae6..000000000 --- a/packages/softiron/generated-changes/overlay/app-readme.md +++ /dev/null @@ -1,5 +0,0 @@ -# SoftIron Ceph CSI RBD Driver - -This Chart is the RBD Plugin for Kubernetes, based off the ceph-csi-rbd project, for integrating SoftIron HyperDrive RBD with Kubernetes clusters. - -Variable names can be found in the main README. diff --git a/packages/softiron/generated-changes/patch/Chart.yaml.patch b/packages/softiron/generated-changes/patch/Chart.yaml.patch deleted file mode 100644 index fd33efcce..000000000 --- a/packages/softiron/generated-changes/patch/Chart.yaml.patch +++ /dev/null @@ -1,11 +0,0 @@ ---- charts-original/Chart.yaml -+++ charts/Chart.yaml -@@ -14,3 +14,8 @@ - sources: - - https://github.com/softiron/ceph-csi/tree/rancher-softiron/charts/ceph-csi-rbd - icon: https://cdn.softiron.com/helm/assets/icon.png -+kubeVersion: 1.18 - 1.22 -+annotations: -+ catalog.cattle.io/certified: partner -+ catalog.cattle.io/display-name: SoftIron Ceph RBD -+ catalog.cattle.io/release-name: ceph-csi-rbd diff --git a/packages/softiron/package.yaml b/packages/softiron/package.yaml deleted file mode 100644 index 1c6dd1324..000000000 --- a/packages/softiron/package.yaml +++ /dev/null @@ -1,2 +0,0 @@ -url: http://charts.softiron.com/ceph-csi-rbd.tgz -packageVersion: 01