Charts CI (#1009)
Adam Pickering
GitHub
parent
62c7e1e00b
commit
91c5b67333
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
|
@ -1,7 +1,7 @@
|
|||
annotations:
|
||||
artifacthub.io/changes: |
|
||||
- kind: changed
|
||||
description: Bump argo-cd to v2.10.6
|
||||
description: Bump argo-cd to v2.10.7
|
||||
artifacthub.io/signKey: |
|
||||
fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
|
||||
url: https://argoproj.github.io/argo-helm/pgp_keys.asc
|
||||
|
|
@ -11,7 +11,7 @@ annotations:
|
|||
catalog.cattle.io/kube-version: '>=1.23.0-0'
|
||||
catalog.cattle.io/release-name: argo-cd
|
||||
apiVersion: v2
|
||||
appVersion: v2.10.6
|
||||
appVersion: v2.10.7
|
||||
dependencies:
|
||||
- condition: redis-ha.enabled
|
||||
name: redis-ha
|
||||
|
|
@ -33,4 +33,4 @@ name: argo-cd
|
|||
sources:
|
||||
- https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd
|
||||
- https://github.com/argoproj/argo-cd
|
||||
version: 6.7.10
|
||||
version: 6.7.12
|
||||
|
|
|
|||
|
|
@ -725,6 +725,7 @@ NAME: my-release
|
|||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| controller.affinity | object | `{}` (defaults to global.affinity preset) | Assign custom [affinity] rules to the deployment |
|
||||
| controller.automountServiceAccountToken | bool | `true` | Automount API credentials for the Service Account into the pod. |
|
||||
| controller.clusterRoleRules.enabled | bool | `false` | Enable custom rules for the application controller's ClusterRole resource |
|
||||
| controller.clusterRoleRules.rules | list | `[]` | List of custom rules for the application controller's ClusterRole resource |
|
||||
| controller.containerPorts.metrics | int | `8082` | Metrics container port |
|
||||
|
|
@ -806,6 +807,7 @@ NAME: my-release
|
|||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| repoServer.affinity | object | `{}` (defaults to global.affinity preset) | Assign custom [affinity] rules to the deployment |
|
||||
| repoServer.automountServiceAccountToken | bool | `true` | Automount API credentials for the Service Account into the pod. |
|
||||
| repoServer.autoscaling.behavior | object | `{}` | Configures the scaling behavior of the target in both Up and Down directions. |
|
||||
| repoServer.autoscaling.enabled | bool | `false` | Enable Horizontal Pod Autoscaler ([HPA]) for the repo server |
|
||||
| repoServer.autoscaling.maxReplicas | int | `5` | Maximum number of replicas for the repo server [HPA] |
|
||||
|
|
@ -903,6 +905,7 @@ NAME: my-release
|
|||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| server.affinity | object | `{}` (defaults to global.affinity preset) | Assign custom [affinity] rules to the deployment |
|
||||
| server.automountServiceAccountToken | bool | `true` | Automount API credentials for the Service Account into the pod. |
|
||||
| server.autoscaling.behavior | object | `{}` | Configures the scaling behavior of the target in both Up and Down directions. |
|
||||
| server.autoscaling.enabled | bool | `false` | Enable Horizontal Pod Autoscaler ([HPA]) for the Argo CD server |
|
||||
| server.autoscaling.maxReplicas | int | `5` | Maximum number of replicas for the Argo CD server [HPA] |
|
||||
|
|
@ -1064,6 +1067,7 @@ NAME: my-release
|
|||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| dex.affinity | object | `{}` (defaults to global.affinity preset) | Assign custom [affinity] rules to the deployment |
|
||||
| dex.automountServiceAccountToken | bool | `true` | Automount API credentials for the Service Account into the pod. |
|
||||
| dex.certificateSecret.annotations | object | `{}` | Annotations to be added to argocd-dex-server-tls secret |
|
||||
| dex.certificateSecret.ca | string | `""` | Certificate authority. Required for self-signed certificates. |
|
||||
| dex.certificateSecret.crt | string | `""` | Certificate data. Must contain SANs of Dex service (ie: argocd-dex-server, argocd-dex-server.argo-cd.svc) |
|
||||
|
|
@ -1160,6 +1164,7 @@ NAME: my-release
|
|||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| redis.affinity | object | `{}` (defaults to global.affinity preset) | Assign custom [affinity] rules to the deployment |
|
||||
| redis.automountServiceAccountToken | bool | `true` | Automount API credentials for the Service Account into the pod. |
|
||||
| redis.containerPorts.metrics | int | `9121` | Metrics container port |
|
||||
| redis.containerPorts.redis | int | `6379` | Redis container port |
|
||||
| redis.containerSecurityContext | object | See [values.yaml] | Redis container-level security context |
|
||||
|
|
@ -1310,6 +1315,7 @@ If you want to use an existing Redis (eg. a managed service from a cloud provide
|
|||
|-----|------|---------|-------------|
|
||||
| applicationSet.affinity | object | `{}` (defaults to global.affinity preset) | Assign custom [affinity] rules |
|
||||
| applicationSet.allowAnyNamespace | bool | `false` | Enable ApplicationSet in any namespace feature |
|
||||
| applicationSet.automountServiceAccountToken | bool | `true` | Automount API credentials for the Service Account into the pod. |
|
||||
| applicationSet.certificate.additionalHosts | list | `[]` | Certificate Subject Alternate Names (SANs) |
|
||||
| applicationSet.certificate.annotations | object | `{}` | Annotations to be applied to the ApplicationSet Certificate |
|
||||
| applicationSet.certificate.domain | string | `""` (defaults to global.domain) | Certificate primary domain (commonName) |
|
||||
|
|
@ -1419,6 +1425,7 @@ If you want to use an existing Redis (eg. a managed service from a cloud provide
|
|||
|-----|------|---------|-------------|
|
||||
| notifications.affinity | object | `{}` (defaults to global.affinity preset) | Assign custom [affinity] rules |
|
||||
| notifications.argocdUrl | string | `""` (defaults to https://`global.domain`) | Argo CD dashboard url; used in place of {{.context.argocdUrl}} in templates |
|
||||
| notifications.automountServiceAccountToken | bool | `true` | Automount API credentials for the Service Account into the pod. |
|
||||
| notifications.clusterRoleRules.rules | list | `[]` | List of custom rules for the notifications controller's ClusterRole resource |
|
||||
| notifications.cm.create | bool | `true` | Whether helm chart creates notifications controller config map |
|
||||
| notifications.containerPorts.metrics | int | `9001` | Metrics container port |
|
||||
|
|
|
|||
|
|
@ -55,6 +55,7 @@ spec:
|
|||
terminationGracePeriodSeconds: {{ .Values.controller.terminationGracePeriodSeconds }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "argo-cd.controller.serviceAccountName" . }}
|
||||
automountServiceAccountToken: {{ .Values.controller.automountServiceAccountToken }}
|
||||
containers:
|
||||
- args:
|
||||
- /usr/local/bin/argocd-application-controller
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ spec:
|
|||
terminationGracePeriodSeconds: {{ .Values.controller.terminationGracePeriodSeconds }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "argo-cd.controller.serviceAccountName" . }}
|
||||
automountServiceAccountToken: {{ .Values.controller.automountServiceAccountToken }}
|
||||
containers:
|
||||
- args:
|
||||
- /usr/local/bin/argocd-application-controller
|
||||
|
|
|
|||
|
|
@ -56,6 +56,7 @@ spec:
|
|||
terminationGracePeriodSeconds: {{ .Values.applicationSet.terminationGracePeriodSeconds }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "argo-cd.applicationSet.serviceAccountName" . }}
|
||||
automountServiceAccountToken: {{ .Values.applicationSet.automountServiceAccountToken }}
|
||||
containers:
|
||||
- name: {{ .Values.applicationSet.name }}
|
||||
image: {{ default .Values.global.image.repository .Values.applicationSet.image.repository }}:{{ default (include "argo-cd.defaultTag" .) .Values.applicationSet.image.tag }}
|
||||
|
|
|
|||
|
|
@ -55,6 +55,7 @@ spec:
|
|||
terminationGracePeriodSeconds: {{ .Values.notifications.terminationGracePeriodSeconds }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "argo-cd.notifications.serviceAccountName" . }}
|
||||
automountServiceAccountToken: {{ .Values.notifications.automountServiceAccountToken }}
|
||||
containers:
|
||||
- name: {{ .Values.notifications.name }}
|
||||
image: {{ default .Values.global.image.repository .Values.notifications.image.repository }}:{{ default (include "argo-cd.defaultTag" .) .Values.notifications.image.tag }}
|
||||
|
|
|
|||
|
|
@ -66,6 +66,7 @@ spec:
|
|||
terminationGracePeriodSeconds: {{ .Values.repoServer.terminationGracePeriodSeconds }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "argo-cd.repoServer.serviceAccountName" . }}
|
||||
automountServiceAccountToken: {{ .Values.repoServer.automountServiceAccountToken }}
|
||||
containers:
|
||||
- name: {{ .Values.repoServer.name }}
|
||||
image: {{ default .Values.global.image.repository .Values.repoServer.image.repository }}:{{ default (include "argo-cd.defaultTag" .) .Values.repoServer.image.tag }}
|
||||
|
|
|
|||
|
|
@ -60,6 +60,7 @@ spec:
|
|||
terminationGracePeriodSeconds: {{ .Values.server.terminationGracePeriodSeconds }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "argo-cd.server.serviceAccountName" . }}
|
||||
automountServiceAccountToken: {{ .Values.server.automountServiceAccountToken }}
|
||||
containers:
|
||||
- name: {{ .Values.server.name }}
|
||||
image: {{ default .Values.global.image.repository .Values.server.image.repository }}:{{ default (include "argo-cd.defaultTag" .) .Values.server.image.tag }}
|
||||
|
|
|
|||
|
|
@ -59,6 +59,7 @@ spec:
|
|||
terminationGracePeriodSeconds: {{ .Values.dex.terminationGracePeriodSeconds }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ template "argo-cd.dex.serviceAccountName" . }}
|
||||
automountServiceAccountToken: {{ .Values.dex.automountServiceAccountToken }}
|
||||
containers:
|
||||
- name: {{ .Values.dex.name }}
|
||||
image: {{ .Values.dex.image.repository }}:{{ .Values.dex.image.tag }}
|
||||
|
|
|
|||
|
|
@ -52,6 +52,7 @@ spec:
|
|||
terminationGracePeriodSeconds: {{ .Values.redis.terminationGracePeriodSeconds }}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ include "argo-cd.redis.serviceAccountName" . }}
|
||||
automountServiceAccountToken: {{ .Values.redis.automountServiceAccountToken }}
|
||||
containers:
|
||||
- name: {{ .Values.redis.name }}
|
||||
image: {{ .Values.redis.image.repository }}:{{ .Values.redis.image.tag }}
|
||||
|
|
|
|||
|
|
@ -768,6 +768,9 @@ controller:
|
|||
# topologyKey: topology.kubernetes.io/zone
|
||||
# whenUnsatisfiable: DoNotSchedule
|
||||
|
||||
# -- Automount API credentials for the Service Account into the pod.
|
||||
automountServiceAccountToken: true
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the application controller
|
||||
create: true
|
||||
|
|
@ -1110,6 +1113,9 @@ dex:
|
|||
# -- terminationGracePeriodSeconds for container lifecycle hook
|
||||
terminationGracePeriodSeconds: 30
|
||||
|
||||
# -- Automount API credentials for the Service Account into the pod.
|
||||
automountServiceAccountToken: true
|
||||
|
||||
serviceAccount:
|
||||
# -- Create dex service account
|
||||
create: true
|
||||
|
|
@ -1410,6 +1416,9 @@ redis:
|
|||
# -- terminationGracePeriodSeconds for container lifecycle hook
|
||||
terminationGracePeriodSeconds: 30
|
||||
|
||||
# -- Automount API credentials for the Service Account into the pod.
|
||||
automountServiceAccountToken: true
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the redis pod
|
||||
create: false
|
||||
|
|
@ -2009,6 +2018,9 @@ server:
|
|||
# -- Prometheus ServiceMonitor annotations
|
||||
annotations: {}
|
||||
|
||||
# -- Automount API credentials for the Service Account into the pod.
|
||||
automountServiceAccountToken: true
|
||||
|
||||
serviceAccount:
|
||||
# -- Create server service account
|
||||
create: true
|
||||
|
|
@ -2586,6 +2598,9 @@ repoServer:
|
|||
# -- List of custom rules for the Repo server's Cluster Role resource
|
||||
rules: []
|
||||
|
||||
# -- Automount API credentials for the Service Account into the pod.
|
||||
automountServiceAccountToken: true
|
||||
|
||||
## Repo server service account
|
||||
## If create is set to true, make sure to uncomment the name and update the rbac section below
|
||||
serviceAccount:
|
||||
|
|
@ -2747,6 +2762,9 @@ applicationSet:
|
|||
# -- ApplicationSet service port name
|
||||
portName: http-webhook
|
||||
|
||||
# -- Automount API credentials for the Service Account into the pod.
|
||||
automountServiceAccountToken: true
|
||||
|
||||
serviceAccount:
|
||||
# -- Create ApplicationSet controller service account
|
||||
create: true
|
||||
|
|
@ -3208,6 +3226,9 @@ notifications:
|
|||
# @default -- `""` (defaults to global.priorityClassName)
|
||||
priorityClassName: ""
|
||||
|
||||
# -- Automount API credentials for the Service Account into the pod.
|
||||
automountServiceAccountToken: true
|
||||
|
||||
serviceAccount:
|
||||
# -- Create notifications controller service account
|
||||
create: true
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@ annotations:
|
|||
catalog.cattle.io/kube-version: '>=1.8-0'
|
||||
catalog.cattle.io/release-name: cockroachdb
|
||||
apiVersion: v1
|
||||
appVersion: 23.2.3
|
||||
appVersion: 23.2.4
|
||||
description: CockroachDB is a scalable, survivable, strongly-consistent SQL database.
|
||||
home: https://www.cockroachlabs.com
|
||||
icon: https://raw.githubusercontent.com/cockroachdb/cockroach/master/docs/media/cockroach_db.png
|
||||
|
|
@ -14,4 +14,4 @@ maintainers:
|
|||
name: cockroachdb
|
||||
sources:
|
||||
- https://github.com/cockroachdb/cockroach
|
||||
version: 12.0.3
|
||||
version: 12.0.4
|
||||
|
|
|
|||
|
|
@ -229,10 +229,10 @@ kubectl get pods \
|
|||
```
|
||||
|
||||
```
|
||||
my-release-cockroachdb-0 cockroachdb/cockroach:v23.2.3
|
||||
my-release-cockroachdb-1 cockroachdb/cockroach:v23.2.3
|
||||
my-release-cockroachdb-2 cockroachdb/cockroach:v23.2.3
|
||||
my-release-cockroachdb-3 cockroachdb/cockroach:v23.2.3
|
||||
my-release-cockroachdb-0 cockroachdb/cockroach:v23.2.4
|
||||
my-release-cockroachdb-1 cockroachdb/cockroach:v23.2.4
|
||||
my-release-cockroachdb-2 cockroachdb/cockroach:v23.2.4
|
||||
my-release-cockroachdb-3 cockroachdb/cockroach:v23.2.4
|
||||
```
|
||||
|
||||
Resume normal operations. Once you are comfortable that the stability and performance of the cluster is what you'd expect post-upgrade, finalize the upgrade:
|
||||
|
|
@ -316,7 +316,7 @@ For details see the [`values.yaml`](values.yaml) file.
|
|||
| `conf.store.size` | CockroachDB storage size | `""` |
|
||||
| `conf.store.attrs` | CockroachDB storage attributes | `""` |
|
||||
| `image.repository` | Container image name | `cockroachdb/cockroach` |
|
||||
| `image.tag` | Container image tag | `v23.2.3` |
|
||||
| `image.tag` | Container image tag | `v23.2.4` |
|
||||
| `image.pullPolicy` | Container pull policy | `IfNotPresent` |
|
||||
| `image.credentials` | `registry`, `user` and `pass` credentials to pull private image | `{}` |
|
||||
| `statefulset.replicas` | StatefulSet replicas number | `3` |
|
||||
|
|
|
|||
|
|
@ -7,7 +7,7 @@ fullnameOverride: ""
|
|||
|
||||
image:
|
||||
repository: cockroachdb/cockroach
|
||||
tag: v23.2.3
|
||||
tag: v23.2.4
|
||||
pullPolicy: IfNotPresent
|
||||
credentials: {}
|
||||
# registry: docker.io
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@ annotations:
|
|||
catalog.cattle.io/kube-version: '>=1.15-0'
|
||||
catalog.cattle.io/release-name: confluent-for-kubernetes
|
||||
apiVersion: v1
|
||||
appVersion: 2.8.0
|
||||
appVersion: 2.8.2
|
||||
description: A Helm chart to deploy Confluent for Kubernetes
|
||||
home: https://www.confluent.io/
|
||||
icon: https://cdn.confluent.io/wp-content/uploads/seo-logo-meadow.png
|
||||
|
|
@ -19,4 +19,4 @@ maintainers:
|
|||
name: confluent-for-kubernetes
|
||||
sources:
|
||||
- https://docs.confluent.io/current/index.html
|
||||
version: 0.921.2
|
||||
version: 0.921.20
|
||||
|
|
|
|||
|
|
@ -1789,7 +1789,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1951,7 +1951,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
|
|||
|
|
@ -1114,7 +1114,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1276,7 +1276,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
|
|||
|
|
@ -1022,7 +1022,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1184,7 +1184,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
|
|||
|
|
@ -1486,7 +1486,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`.
|
||||
More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1667,7 +1667,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`.
|
||||
More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -2077,7 +2077,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -2255,7 +2255,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -2742,7 +2742,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -2920,7 +2920,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -6929,7 +6929,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -7107,7 +7107,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -7408,7 +7408,7 @@ spec:
|
|||
Kubernetes session affinity. The valid options
|
||||
are `ClientIP` and `None`. `ClientIP` enables
|
||||
the client IP-based session affinity. The
|
||||
default value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
default value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -7600,7 +7600,7 @@ spec:
|
|||
Kubernetes session affinity. The valid options
|
||||
are `ClientIP` and `None`. `ClientIP` enables
|
||||
the client IP-based session affinity. The
|
||||
default value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
default value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -8057,7 +8057,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -8235,7 +8235,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -8536,7 +8536,7 @@ spec:
|
|||
Kubernetes session affinity. The valid options
|
||||
are `ClientIP` and `None`. `ClientIP` enables
|
||||
the client IP-based session affinity. The
|
||||
default value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
default value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -8728,7 +8728,7 @@ spec:
|
|||
Kubernetes session affinity. The valid options
|
||||
are `ClientIP` and `None`. `ClientIP` enables
|
||||
the client IP-based session affinity. The
|
||||
default value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
default value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
|
|||
|
|
@ -1144,7 +1144,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1306,7 +1306,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1697,7 +1697,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1875,7 +1875,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
|
|||
|
|
@ -593,7 +593,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -755,7 +755,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1147,7 +1147,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -1325,7 +1325,7 @@ spec:
|
|||
session affinity. The valid options are `ClientIP`
|
||||
and `None`. `ClientIP` enables the client IP-based
|
||||
session affinity. The default value is `None`. More
|
||||
info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
|
|||
|
|
@ -301,7 +301,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
@ -463,7 +463,7 @@ spec:
|
|||
description: 'sessionAffinity defines the Kubernetes session
|
||||
affinity. The valid options are `ClientIP` and `None`. `ClientIP`
|
||||
enables the client IP-based session affinity. The default
|
||||
value is `None`. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies.'
|
||||
value is `None`. More info: https://kubernetes.io/docs/reference/networking/virtual-ips/#session-affinity.'
|
||||
enum:
|
||||
- ClientIP
|
||||
- None
|
||||
|
|
|
|||
|
|
@ -81,7 +81,7 @@ image:
|
|||
registry: docker.io
|
||||
repository: confluentinc/confluent-operator
|
||||
pullPolicy: IfNotPresent
|
||||
tag: "0.921.2"
|
||||
tag: "0.921.20"
|
||||
|
||||
###
|
||||
## Priority class for Confluent Operator pod
|
||||
|
|
|
|||
|
|
@ -1,10 +1,19 @@
|
|||
# Datadog changelog
|
||||
|
||||
## 3.59.6
|
||||
|
||||
* Add configuration option datadog.apm.instrumentation.skipKPITelemetry.
|
||||
|
||||
## 3.59.5
|
||||
|
||||
* Add configuration option datadog.apm.instrumentation.skipKPITelemetry.
|
||||
|
||||
## 3.59.4
|
||||
|
||||
* Add language detection enable option for `APM` instrumentation.
|
||||
|
||||
## 3.59.3
|
||||
|
||||
* Add `contimage-intake.datadoghq.com` & `contlcycle-intake.datadoghq.com` endpoints to the `Agent` cilium network policy.
|
||||
|
||||
## 3.59.2
|
||||
|
|
|
|||
|
|
@ -19,4 +19,4 @@ name: datadog
|
|||
sources:
|
||||
- https://app.datadoghq.com/account/settings#agent/kubernetes
|
||||
- https://github.com/DataDog/datadog-agent
|
||||
version: 3.59.4
|
||||
version: 3.59.6
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# Datadog
|
||||
|
||||
 
|
||||
 
|
||||
|
||||
[Datadog](https://www.datadoghq.com/) is a hosted infrastructure monitoring platform. This chart adds the Datadog Agent to all nodes in your cluster via a DaemonSet. It also optionally depends on the [kube-state-metrics chart](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-state-metrics). For more information about monitoring Kubernetes with Datadog, please refer to the [Datadog documentation website](https://docs.datadoghq.com/agent/basic_agent_usage/kubernetes/).
|
||||
|
||||
|
|
@ -508,7 +508,7 @@ helm install <RELEASE_NAME> \
|
|||
| agents.image.pullPolicy | string | `"IfNotPresent"` | Datadog Agent image pull policy |
|
||||
| agents.image.pullSecrets | list | `[]` | Datadog Agent repository pullSecret (ex: specify docker registry credentials) |
|
||||
| agents.image.repository | string | `nil` | Override default registry + image.name for Agent |
|
||||
| agents.image.tag | string | `"7.52.0"` | Define the Agent version to use |
|
||||
| agents.image.tag | string | `"7.52.1"` | Define the Agent version to use |
|
||||
| agents.image.tagSuffix | string | `""` | Suffix to append to Agent tag |
|
||||
| agents.localService.forceLocalServiceEnabled | bool | `false` | Force the creation of the internal traffic policy service to target the agent running on the local node. By default, the internal traffic service is created only on Kubernetes 1.22+ where the feature became beta and enabled by default. This option allows to force the creation of the internal traffic service on kubernetes 1.21 where the feature was alpha and required a feature gate to be explicitly enabled. |
|
||||
| agents.localService.overrideName | string | `""` | Name of the internal traffic service to target the agent running on the local node |
|
||||
|
|
@ -582,7 +582,7 @@ helm install <RELEASE_NAME> \
|
|||
| clusterAgent.image.pullPolicy | string | `"IfNotPresent"` | Cluster Agent image pullPolicy |
|
||||
| clusterAgent.image.pullSecrets | list | `[]` | Cluster Agent repository pullSecret (ex: specify docker registry credentials) |
|
||||
| clusterAgent.image.repository | string | `nil` | Override default registry + image.name for Cluster Agent |
|
||||
| clusterAgent.image.tag | string | `"7.52.0"` | Cluster Agent image tag to use |
|
||||
| clusterAgent.image.tag | string | `"7.52.1"` | Cluster Agent image tag to use |
|
||||
| clusterAgent.livenessProbe | object | Every 15s / 6 KO / 1 OK | Override default Cluster Agent liveness probe settings |
|
||||
| clusterAgent.metricsProvider.aggregator | string | `"avg"` | Define the aggregator the cluster agent will use to process the metrics. The options are (avg, min, max, sum) |
|
||||
| clusterAgent.metricsProvider.createReaderRbac | bool | `true` | Create `external-metrics-reader` RBAC automatically (to allow HPA to read data from Cluster Agent) |
|
||||
|
|
@ -633,7 +633,7 @@ helm install <RELEASE_NAME> \
|
|||
| clusterChecksRunner.image.pullPolicy | string | `"IfNotPresent"` | Datadog Agent image pull policy |
|
||||
| clusterChecksRunner.image.pullSecrets | list | `[]` | Datadog Agent repository pullSecret (ex: specify docker registry credentials) |
|
||||
| clusterChecksRunner.image.repository | string | `nil` | Override default registry + image.name for Cluster Check Runners |
|
||||
| clusterChecksRunner.image.tag | string | `"7.52.0"` | Define the Agent version to use |
|
||||
| clusterChecksRunner.image.tag | string | `"7.52.1"` | Define the Agent version to use |
|
||||
| clusterChecksRunner.image.tagSuffix | string | `""` | Suffix to append to Agent tag |
|
||||
| clusterChecksRunner.livenessProbe | object | Every 15s / 6 KO / 1 OK | Override default agent liveness probe settings |
|
||||
| clusterChecksRunner.networkPolicy.create | bool | `false` | If true, create a NetworkPolicy for the cluster checks runners. DEPRECATED. Use datadog.networkPolicy.create instead |
|
||||
|
|
@ -667,6 +667,7 @@ helm install <RELEASE_NAME> \
|
|||
| datadog.apm.instrumentation.enabledNamespaces | list | `[]` | Enable injecting the Datadog APM libraries into pods in specific namespaces (beta). |
|
||||
| datadog.apm.instrumentation.language_detection.enabled | bool | `true` | Run language detection to automatically detect languages of user workloads (beta). |
|
||||
| datadog.apm.instrumentation.libVersions | object | `{}` | Inject specific version of tracing libraries with Single Step Instrumentation (beta). |
|
||||
| datadog.apm.instrumentation.skipKPITelemetry | bool | `false` | Disable generating Configmap for APM Instrumentation KPIs |
|
||||
| datadog.apm.port | int | `8126` | Override the trace Agent port |
|
||||
| datadog.apm.portEnabled | bool | `false` | Enable APM over TCP communication (hostPort 8126 by default) |
|
||||
| datadog.apm.socketEnabled | bool | `true` | Enable APM over Socket (Unix Socket or windows named pipe) |
|
||||
|
|
|
|||
|
|
@ -6,6 +6,11 @@ metadata:
|
|||
labels:
|
||||
{{ include "datadog.labels" . | indent 4 }}
|
||||
data:
|
||||
install_id: {{ uuidv4 | quote }}
|
||||
install_type: k8s_manual
|
||||
{{- if .Values.datadog.apm.instrumentation.skipKPITelemetry }}
|
||||
install_id: "00000000-0000-0000-0000-000000000000"
|
||||
install_time: "0"
|
||||
{{- else }}
|
||||
install_id: {{ uuidv4 | quote }}
|
||||
install_time: {{ now | unixEpoch | quote }}
|
||||
{{- end }}
|
||||
|
|
|
|||
|
|
@ -480,6 +480,9 @@ datadog:
|
|||
# datadog.apm.instrumentation.libVersions -- Inject specific version of tracing libraries with Single Step Instrumentation (beta).
|
||||
libVersions: {}
|
||||
|
||||
# datadog.apm.instrumentation.skipKPITelemetry -- Disable generating Configmap for APM Instrumentation KPIs
|
||||
skipKPITelemetry: false
|
||||
|
||||
# Language detection currently only detects languages and adds them as annotations on deployments, but doesn't use these languages for injecting libraries to applicative pods.
|
||||
# It requires Agent 7.52+ and Cluster Agent 7.52+
|
||||
language_detection:
|
||||
|
|
@ -898,7 +901,7 @@ clusterAgent:
|
|||
name: cluster-agent
|
||||
|
||||
# clusterAgent.image.tag -- Cluster Agent image tag to use
|
||||
tag: 7.52.0
|
||||
tag: 7.52.1
|
||||
|
||||
# clusterAgent.image.digest -- Cluster Agent image digest to use, takes precedence over tag if specified
|
||||
digest: ""
|
||||
|
|
@ -1376,7 +1379,7 @@ agents:
|
|||
name: agent
|
||||
|
||||
# agents.image.tag -- Define the Agent version to use
|
||||
tag: 7.52.0
|
||||
tag: 7.52.1
|
||||
|
||||
# agents.image.digest -- Define Agent image digest to use, takes precedence over tag if specified
|
||||
digest: ""
|
||||
|
|
@ -1844,7 +1847,7 @@ clusterChecksRunner:
|
|||
name: agent
|
||||
|
||||
# clusterChecksRunner.image.tag -- Define the Agent version to use
|
||||
tag: 7.52.0
|
||||
tag: 7.52.1
|
||||
|
||||
# clusterChecksRunner.image.digest -- Define Agent image digest to use, takes precedence over tag if specified
|
||||
digest: ""
|
||||
|
|
|
|||
|
|
@ -2,27 +2,27 @@ annotations:
|
|||
artifacthub.io/containsSecurityUpdates: "true"
|
||||
artifacthub.io/images: |
|
||||
- name: auth-server
|
||||
image: ghcr.io/janssenproject/jans/auth-server:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/auth-server:1.1.1-1
|
||||
- name: auth-server-key-rotation
|
||||
image: ghcr.io/janssenproject/jans/certmanager:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/certmanager:1.1.1-1
|
||||
- name: configuration-manager
|
||||
image: ghcr.io/janssenproject/jans/configurator:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/configurator:1.1.1-1
|
||||
- name: config-api
|
||||
image: ghcr.io/janssenproject/jans/config-api:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/config-api:1.1.1-1
|
||||
- name: fido2
|
||||
image: ghcr.io/janssenproject/jans/fido2:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/fido2:1.1.1-1
|
||||
- name: persistence
|
||||
image: ghcr.io/janssenproject/jans/persistence-loader:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/persistence-loader:1.1.1-1
|
||||
- name: scim
|
||||
image: ghcr.io/janssenproject/jans/scim:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/scim:1.1.1-1
|
||||
- name: casa
|
||||
image: ghcr.io/janssenproject/jans/casa:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/casa:1.1.1-1
|
||||
- name: admin-ui
|
||||
image: ghcr.io/gluufederation/flex/admin-ui:5.1.0-1
|
||||
image: ghcr.io/gluufederation/flex/admin-ui:5.1.1-1
|
||||
- name: link
|
||||
image: ghcr.io/janssenproject/jans/link:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/link:1.1.1-1
|
||||
- name: saml
|
||||
image: ghcr.io/janssenproject/jans/saml:1.1.0-1
|
||||
image: ghcr.io/janssenproject/jans/saml:1.1.1-1
|
||||
artifacthub.io/license: Apache-2.0
|
||||
catalog.cattle.io/certified: partner
|
||||
catalog.cattle.io/display-name: Gluu Cloud Identity and Access Management
|
||||
|
|
@ -30,64 +30,64 @@ annotations:
|
|||
catalog.cattle.io/kube-version: '>=v1.21.0-0'
|
||||
catalog.cattle.io/release-name: gluu
|
||||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
dependencies:
|
||||
- condition: global.config.enabled
|
||||
name: config
|
||||
repository: file://./charts/config
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.config-api.enabled
|
||||
name: config-api
|
||||
repository: file://./charts/config-api
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.opendj.enabled
|
||||
name: opendj
|
||||
repository: file://./charts/opendj
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
- condition: global.auth-server.enabled
|
||||
name: auth-server
|
||||
repository: file://./charts/auth-server
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.admin-ui.enabled
|
||||
name: admin-ui
|
||||
repository: file://./charts/admin-ui
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
- condition: global.fido2.enabled
|
||||
name: fido2
|
||||
repository: file://./charts/fido2
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.scim.enabled
|
||||
name: scim
|
||||
repository: file://./charts/scim
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.nginx-ingress.enabled
|
||||
name: nginx-ingress
|
||||
repository: file://./charts/nginx-ingress
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
- condition: global.casa.enabled
|
||||
name: casa
|
||||
repository: file://./charts/casa
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.auth-server-key-rotation.enabled
|
||||
name: auth-server-key-rotation
|
||||
repository: file://./charts/auth-server-key-rotation
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.persistence.enabled
|
||||
name: persistence
|
||||
repository: file://./charts/persistence
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.istio.ingress
|
||||
name: cn-istio-ingress
|
||||
repository: file://./charts/cn-istio-ingress
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
- condition: global.link.enabled
|
||||
name: link
|
||||
repository: file://./charts/link
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
- condition: global.saml.enabled
|
||||
name: saml
|
||||
repository: file://./charts/saml
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
description: Gluu Access and Identity Management
|
||||
home: https://www.gluu.org
|
||||
icon: https://gluu.org/docs/gluu-server/favicon.ico
|
||||
|
|
@ -98,4 +98,4 @@ maintainers:
|
|||
name: gluu
|
||||
sources:
|
||||
- https://docs.gluu.org
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
|
|
|
|||
File diff suppressed because one or more lines are too long
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Admin GUI. Requires license.
|
||||
home: https://docs.gluu.org
|
||||
icon: https://gluu.org/docs/gluu-server/favicon.ico
|
||||
|
|
@ -17,4 +17,4 @@ sources:
|
|||
- https://github.com/GluuFederation/docker-gluu-admin-ui
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/admin-ui
|
||||
type: application
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# admin-ui
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Admin GUI. Requires license.
|
||||
|
||||
|
|
@ -36,7 +36,7 @@ Kubernetes: `>=v1.21.0-0`
|
|||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"gluufederation/admin-ui"` | Image to use for deploying. |
|
||||
| image.tag | string | `"5.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"5.1.1-1"` | Image tag to use for deploying. |
|
||||
| lifecycle | object | `{}` | |
|
||||
| livenessProbe | object | `{"failureThreshold":20,"initialDelaySeconds":60,"periodSeconds":25,"tcpSocket":{"port":8080},"timeoutSeconds":5}` | Configure the liveness healthcheck for the admin ui if needed. |
|
||||
| readinessProbe | object | `{"failureThreshold":20,"initialDelaySeconds":60,"periodSeconds":25,"tcpSocket":{"port":8080},"timeoutSeconds":5}` | Configure the readiness healthcheck for the admin ui if needed. |
|
||||
|
|
|
|||
|
|
@ -83,9 +83,6 @@ spec:
|
|||
{{- with .Values.volumeMounts }}
|
||||
{{- toYaml . | nindent 10 }}
|
||||
{{- end }}
|
||||
- mountPath: /etc/jans/conf/ssa
|
||||
name: license-ssa
|
||||
subPath: ssa
|
||||
{{ if or (eq .Values.global.configSecretAdapter "aws") (eq .Values.global.configAdapterName "aws") }}
|
||||
- mountPath: {{ .Values.global.cnAwsSharedCredentialsFile }}
|
||||
name: aws-shared-credential-file
|
||||
|
|
@ -160,9 +157,6 @@ spec:
|
|||
{{- with .Values.volumes }}
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
- name: license-ssa
|
||||
secret:
|
||||
secretName: {{ .Release.Name }}-license-ssa
|
||||
{{ if or (eq .Values.global.configSecretAdapter "aws") (eq .Values.global.configAdapterName "aws") }}
|
||||
- name: aws-shared-credential-file
|
||||
secret:
|
||||
|
|
|
|||
|
|
@ -27,7 +27,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: gluufederation/admin-ui
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 5.1.0-1
|
||||
tag: 5.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- Service replica number.
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Responsible for regenerating auth-keys per x hours
|
||||
home: https://docs.gluu.org
|
||||
icon: https://gluu.org/docs/gluu-server/favicon.ico
|
||||
|
|
@ -15,4 +15,4 @@ sources:
|
|||
- https://github.com/JanssenProject/docker-jans-certmanager
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/auth-server-key-rotation
|
||||
type: application
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# auth-server-key-rotation
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Responsible for regenerating auth-keys per x hours
|
||||
|
||||
|
|
@ -34,7 +34,7 @@ Kubernetes: `>=v1.21.0-0`
|
|||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"janssenproject/certmanager"` | Image to use for deploying. |
|
||||
| image.tag | string | `"1.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"1.1.1-1"` | Image tag to use for deploying. |
|
||||
| keysLife | int | `48` | Auth server key rotation keys life in hours |
|
||||
| keysPushDelay | int | `0` | Delay (in seconds) before pushing private keys to Auth server |
|
||||
| keysPushStrategy | string | `"NEWER"` | Set key selection strategy after pushing private keys to Auth server (only takes effect when keysPushDelay value is greater than 0) |
|
||||
|
|
|
|||
|
|
@ -18,7 +18,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: janssenproject/certmanager
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 1.1.0-1
|
||||
tag: 1.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- Auth server key rotation keys life in hours
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: OAuth Authorization Server, the OpenID Connect Provider, the UMA Authorization
|
||||
Server--this is the main Internet facing component of Gluu. It's the service that
|
||||
returns tokens, JWT's and identity assertions. This service must be Internet facing.
|
||||
|
|
@ -19,4 +19,4 @@ sources:
|
|||
- https://github.com/JanssenProject/docker-jans-auth-server
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/auth-server
|
||||
type: application
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# auth-server
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
OAuth Authorization Server, the OpenID Connect Provider, the UMA Authorization Server--this is the main Internet facing component of Gluu. It's the service that returns tokens, JWT's and identity assertions. This service must be Internet facing.
|
||||
|
||||
|
|
@ -37,7 +37,7 @@ Kubernetes: `>=v1.21.0-0`
|
|||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"janssenproject/auth-server"` | Image to use for deploying. |
|
||||
| image.tag | string | `"1.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"1.1.1-1"` | Image tag to use for deploying. |
|
||||
| lifecycle | object | `{}` | |
|
||||
| livenessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. |
|
||||
| livenessProbe.exec | object | `{"command":["python3","/app/scripts/healthcheck.py"]}` | Executes the python3 healthcheck. |
|
||||
|
|
|
|||
|
|
@ -67,6 +67,21 @@ Create user custom defined secret envs
|
|||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create JAVA_OPTIONS ENV for passing custom work and detailed logs
|
||||
*/}}
|
||||
{{- define "auth-server.customJavaOptions"}}
|
||||
{{ $custom := "" }}
|
||||
{{- $cnCustomJavaOptions := index .Values.global "auth-server" "cnCustomJavaOptions" }}
|
||||
{{- $custom := printf "%s" $cnCustomJavaOptions }}
|
||||
{{ $memory := .Values.resources.limits.memory | replace "Mi" "" | int -}}
|
||||
{{- $maxDirectMemory := printf "-XX:MaxDirectMemorySize=%dm" $memory -}}
|
||||
{{- $xmx := printf "-Xmx%dm" (sub $memory 300) -}}
|
||||
{{- $customJavaOptions := printf "%s %s %s" $custom $maxDirectMemory $xmx -}}
|
||||
{{ $customJavaOptions | trim | quote }}
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{/*
|
||||
Create topologySpreadConstraints lists
|
||||
*/}}
|
||||
|
|
|
|||
|
|
@ -46,6 +46,8 @@ spec:
|
|||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
|
||||
env:
|
||||
- name: CN_AUTH_JAVA_OPTIONS
|
||||
value: {{ include "auth-server.customJavaOptions" . | trim }}
|
||||
{{- include "auth-server.usr-envs" . | indent 12 }}
|
||||
{{- include "auth-server.usr-secret-envs" . | indent 12 }}
|
||||
securityContext:
|
||||
|
|
|
|||
|
|
@ -28,7 +28,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: janssenproject/auth-server
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 1.1.0-1
|
||||
tag: 1.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- Service replica number.
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Jans Casa ("Casa") is a self-service web portal for end-users to manage
|
||||
authentication and authorization preferences for their account in a Jans Server.
|
||||
home: https://gluu.org/docs/casa/
|
||||
|
|
@ -18,4 +18,4 @@ sources:
|
|||
- https://gluu.org/casa/
|
||||
- https://github.com/JanssenProject/jans/docker-jans-casa
|
||||
type: application
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# casa
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Jans Casa ("Casa") is a self-service web portal for end-users to manage authentication and authorization preferences for their account in a Jans Server.
|
||||
|
||||
|
|
@ -37,7 +37,7 @@ Kubernetes: `>=v1.21.0-0`
|
|||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"janssenproject/casa"` | Image to use for deploying. |
|
||||
| image.tag | string | `"1.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"1.1.1-1"` | Image tag to use for deploying. |
|
||||
| lifecycle | object | `{}` | |
|
||||
| livenessProbe | object | `{"httpGet":{"path":"/jans-casa/health-check","port":"http-casa"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the liveness healthcheck for casa if needed. |
|
||||
| livenessProbe.httpGet.path | string | `"/jans-casa/health-check"` | http liveness probe endpoint |
|
||||
|
|
|
|||
|
|
@ -78,6 +78,19 @@ Create user custom defined secret envs
|
|||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create JAVA_OPTIONS ENV for passing custom work and detailed logs
|
||||
*/}}
|
||||
{{- define "casa.customJavaOptions"}}
|
||||
{{ $custom := "" }}
|
||||
{{ $custom = printf "%s" .Values.global.casa.cnCustomJavaOptions }}
|
||||
{{ $memory := .Values.resources.limits.memory | replace "Mi" "" | int -}}
|
||||
{{- $maxDirectMemory := printf "-XX:MaxDirectMemorySize=%dm" $memory -}}
|
||||
{{- $xmx := printf "-Xmx%dm" (sub $memory 300) -}}
|
||||
{{- $customJavaOptions := printf "%s %s %s" $custom $maxDirectMemory $xmx -}}
|
||||
{{ $customJavaOptions | trim | quote }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create topologySpreadConstraints lists
|
||||
*/}}
|
||||
|
|
|
|||
|
|
@ -52,6 +52,8 @@ spec:
|
|||
{{- toYaml .Values.securityContext | nindent 12 }}
|
||||
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CN_CASA_JAVA_OPTIONS
|
||||
value: {{ include "casa.customJavaOptions" . | trim }}
|
||||
{{- include "casa.usr-envs" . | indent 12 }}
|
||||
{{- include "casa.usr-secret-envs" . | indent 12 }}
|
||||
{{- if or (eq .Values.global.storageClass.provisioner "kubernetes.io/aws-ebs") (eq .Values.global.storageClass.provisioner "openebs.io/local") ( .Values.customScripts) }}
|
||||
|
|
|
|||
|
|
@ -27,7 +27,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: janssenproject/casa
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 1.1.0-1
|
||||
tag: 1.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- Service replica number.
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Istio Gateway
|
||||
home: https://docs.gluu.org/
|
||||
icon: https://gluu.org/docs/gluu-server/favicon.ico
|
||||
|
|
@ -16,4 +16,4 @@ sources:
|
|||
- https://gluu.org/docs/gluu-server/
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/cn-istio-ingress
|
||||
type: application
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# cn-istio-ingress
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Istio Gateway
|
||||
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Jans Config Api endpoints can be used to configure jans-auth-server,
|
||||
which is an open-source OpenID Connect Provider (OP) and UMA Authorization Server
|
||||
(AS)
|
||||
|
|
@ -19,4 +19,4 @@ sources:
|
|||
- https://github.com/JanssenProject/jans/docker-jans-config-api
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/config-api
|
||||
type: application
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# config-api
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Jans Config Api endpoints can be used to configure jans-auth-server, which is an open-source OpenID Connect Provider (OP) and UMA Authorization Server (AS)
|
||||
|
||||
|
|
@ -39,7 +39,7 @@ Kubernetes: `>=v1.21.0-0`
|
|||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"janssenproject/config-api"` | Image to use for deploying. |
|
||||
| image.tag | string | `"1.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"1.1.1-1"` | Image tag to use for deploying. |
|
||||
| lifecycle | object | `{}` | |
|
||||
| livenessProbe | object | `{"httpGet":{"path":"/jans-config-api/api/v1/health/live","port":8074},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. |
|
||||
| livenessProbe.httpGet | object | `{"path":"/jans-config-api/api/v1/health/live","port":8074}` | Executes the python3 healthcheck. |
|
||||
|
|
|
|||
|
|
@ -67,6 +67,20 @@ Create user custom defined secret envs
|
|||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create JAVA_OPTIONS ENV for passing custom work and detailed logs
|
||||
*/}}
|
||||
{{- define "config-api.customJavaOptions"}}
|
||||
{{ $custom := "" }}
|
||||
{{- $cnCustomJavaOptions := index .Values.global "config-api" "cnCustomJavaOptions" }}
|
||||
{{- $custom := printf "%s" $cnCustomJavaOptions }}
|
||||
{{ $memory := .Values.resources.limits.memory | replace "Mi" "" | int -}}
|
||||
{{- $maxDirectMemory := printf "-XX:MaxDirectMemorySize=%dm" $memory -}}
|
||||
{{- $xmx := printf "-Xmx%dm" (sub $memory 300) -}}
|
||||
{{- $customJavaOptions := printf "%s %s %s" $custom $maxDirectMemory $xmx -}}
|
||||
{{ $customJavaOptions | trim | quote }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create topologySpreadConstraints lists
|
||||
*/}}
|
||||
|
|
|
|||
|
|
@ -45,6 +45,8 @@ spec:
|
|||
- name: {{ include "config-api.name" . }}
|
||||
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CN_CONFIG_API_JAVA_OPTIONS
|
||||
value: {{ include "config-api.customJavaOptions" . | trim }}
|
||||
{{- include "config-api.usr-envs" . | indent 12 }}
|
||||
{{- include "config-api.usr-secret-envs" . | indent 12 }}
|
||||
securityContext:
|
||||
|
|
|
|||
|
|
@ -31,7 +31,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: janssenproject/config-api
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 1.1.0-1
|
||||
tag: 1.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- Service replica number.
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Configuration parameters for setup and initial configuration secret and
|
||||
config layers used by Gluu services.
|
||||
home: https://docs.gluu.org
|
||||
|
|
@ -18,4 +18,4 @@ sources:
|
|||
- https://github.com/JanssenProject/jans/docker-jans-configurator
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/config
|
||||
type: application
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# config
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Configuration parameters for setup and initial configuration secret and config layers used by Gluu services.
|
||||
|
||||
|
|
@ -105,7 +105,7 @@ Kubernetes: `>=v1.21.0-0`
|
|||
| fullNameOverride | string | `""` | |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"janssenproject/configurator"` | Image to use for deploying. |
|
||||
| image.tag | string | `"1.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"1.1.1-1"` | Image tag to use for deploying. |
|
||||
| ldapPassword | string | `"P@ssw0rds"` | LDAP admin password if OpennDJ is used for persistence. |
|
||||
| ldapTruststorePassword | string | `"changeit"` | LDAP truststore password if OpenDJ is used for persistence |
|
||||
| lifecycle | object | `{}` | |
|
||||
|
|
|
|||
|
|
@ -1,17 +0,0 @@
|
|||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: {{ .Release.Name }}-license-ssa
|
||||
labels:
|
||||
{{ include "config.labels" . | indent 4 }}
|
||||
{{- if .Values.additionalLabels }}
|
||||
{{ toYaml .Values.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.additionalAnnotations }}
|
||||
annotations:
|
||||
{{ toYaml .Values.additionalAnnotations | indent 4 }}
|
||||
{{- end }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
type: Opaque
|
||||
data:
|
||||
ssa: {{ required "global.licenseSsa is required in chart values. This is a base64 string provided by Gluu to activate your license." .Values.global.licenseSsa }}
|
||||
|
|
@ -176,7 +176,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: janssenproject/configurator
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 1.1.0-1
|
||||
tag: 1.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- LDAP admin password if OpennDJ is used for persistence.
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: FIDO 2.0 (FIDO2) is an open authentication standard that enables leveraging
|
||||
common devices to authenticate to online services in both mobile and desktop environments.
|
||||
home: https://docs.gluu.org/
|
||||
|
|
@ -19,4 +19,4 @@ sources:
|
|||
- https://github.com/JanssenProject/jans/docker-jans-fido2
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/fido2
|
||||
type: application
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# fido2
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
FIDO 2.0 (FIDO2) is an open authentication standard that enables leveraging common devices to authenticate to online services in both mobile and desktop environments.
|
||||
|
||||
|
|
@ -38,7 +38,7 @@ Kubernetes: `>=v1.21.0-0`
|
|||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"janssenproject/fido2"` | Image to use for deploying. |
|
||||
| image.tag | string | `"1.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"1.1.1-1"` | Image tag to use for deploying. |
|
||||
| lifecycle | object | `{}` | |
|
||||
| livenessProbe | object | `{"httpGet":{"path":"/jans-fido2/sys/health-check","port":"http-fido2"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the liveness healthcheck for the fido2 if needed. |
|
||||
| livenessProbe.httpGet | object | `{"path":"/jans-fido2/sys/health-check","port":"http-fido2"}` | http liveness probe endpoint |
|
||||
|
|
|
|||
|
|
@ -67,6 +67,19 @@ Create user custom defined secret envs
|
|||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create JAVA_OPTIONS ENV for passing custom work and detailed logs
|
||||
*/}}
|
||||
{{- define "fido2.customJavaOptions"}}
|
||||
{{ $custom := "" }}
|
||||
{{ $custom = printf "%s" .Values.global.fido2.cnCustomJavaOptions }}
|
||||
{{ $memory := .Values.resources.limits.memory | replace "Mi" "" | int -}}
|
||||
{{- $maxDirectMemory := printf "-XX:MaxDirectMemorySize=%dm" $memory -}}
|
||||
{{- $xmx := printf "-Xmx%dm" (sub $memory 300) -}}
|
||||
{{- $customJavaOptions := printf "%s %s %s" $custom $maxDirectMemory $xmx -}}
|
||||
{{ $customJavaOptions | trim | quote }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create topologySpreadConstraints lists
|
||||
*/}}
|
||||
|
|
|
|||
|
|
@ -49,6 +49,8 @@ spec:
|
|||
runAsUser: 1000
|
||||
runAsNonRoot: true
|
||||
env:
|
||||
- name: CN_FIDO2_JAVA_OPTIONS
|
||||
value: {{ include "fido2.customJavaOptions" . | trim }}
|
||||
{{- include "fido2.usr-envs" . | indent 12 }}
|
||||
{{- include "fido2.usr-secret-envs" . | indent 12 }}
|
||||
{{- if or (eq .Values.global.storageClass.provisioner "kubernetes.io/aws-ebs") (eq .Values.global.storageClass.provisioner "openebs.io/local") ( .Values.customScripts) }}
|
||||
|
|
|
|||
|
|
@ -29,7 +29,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: janssenproject/fido2
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 1.1.0-1
|
||||
tag: 1.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- Service replica number.
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Jans Link
|
||||
home: https://jans.io
|
||||
icon: https://github.com/JanssenProject/jans/raw/main/docs/assets/logo/janssen_project_favicon_transparent_50px_50px.png
|
||||
|
|
@ -15,4 +15,4 @@ sources:
|
|||
- https://github.com/JanssenProject/jans/jans-link
|
||||
- https://github.com/JanssenProject/jans/docker-jans-link
|
||||
type: application
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# link
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Jans Link
|
||||
|
||||
|
|
@ -38,7 +38,7 @@ Kubernetes: `>=v1.22.0-0`
|
|||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"ghcr.io/janssenproject/jans/link"` | Image to use for deploying. |
|
||||
| image.tag | string | `"1.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"1.1.1-1"` | Image tag to use for deploying. |
|
||||
| lifecycle | object | `{}` | |
|
||||
| livenessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the link if needed. |
|
||||
| livenessProbe.exec | object | `{"command":["python3","/app/scripts/healthcheck.py"]}` | Executes the python3 healthcheck. |
|
||||
|
|
|
|||
|
|
@ -67,6 +67,19 @@ Create user custom defined secret envs
|
|||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create JAVA_OPTIONS ENV for passing custom work and detailed logs
|
||||
*/}}
|
||||
{{- define "link.customJavaOptions"}}
|
||||
{{ $custom := "" }}
|
||||
{{ $custom = printf "%s" .Values.global.link.cnCustomJavaOptions }}
|
||||
{{ $memory := .Values.resources.limits.memory | replace "Mi" "" | int -}}
|
||||
{{- $maxDirectMemory := printf "-XX:MaxDirectMemorySize=%dm" $memory -}}
|
||||
{{- $xmx := printf "-Xmx%dm" (sub $memory 300) -}}
|
||||
{{- $customJavaOptions := printf "%s %s %s" $custom $maxDirectMemory $xmx -}}
|
||||
{{ $customJavaOptions | trim | quote }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create topologySpreadConstraints lists
|
||||
*/}}
|
||||
|
|
|
|||
|
|
@ -45,6 +45,8 @@ spec:
|
|||
- name: {{ include "link.name" . }}
|
||||
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CN_LINK_JAVA_OPTIONS
|
||||
value: {{ include "link.customJavaOptions" . | trim }}
|
||||
{{- include "link.usr-envs" . | indent 12 }}
|
||||
{{- include "link.usr-secret-envs" . | indent 12 }}
|
||||
securityContext:
|
||||
|
|
|
|||
|
|
@ -31,7 +31,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: ghcr.io/janssenproject/jans/link
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 1.1.0-1
|
||||
tag: 1.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- Service replica number.
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Nginx ingress definitions chart
|
||||
home: https://docs.gluu.org
|
||||
icon: https://gluu.org/docs/gluu-server/favicon.ico
|
||||
|
|
@ -17,4 +17,4 @@ sources:
|
|||
- https://kubernetes.io/docs/concepts/services-networking/ingress/
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/nginx-ingress
|
||||
type: application
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# nginx-ingress
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Nginx ingress definitions chart
|
||||
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: OpenDJ is a directory server which implements a wide range of Lightweight
|
||||
Directory Access Protocol and related standards, including full compliance with
|
||||
LDAPv3 but also support for Directory Service Markup Language (DSMLv2).Written in
|
||||
|
|
@ -19,4 +19,4 @@ sources:
|
|||
- https://github.com/GluuFederation/docker-opendj
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/opendj
|
||||
type: application
|
||||
version: 5.1.0
|
||||
version: 5.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# opendj
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
OpenDJ is a directory server which implements a wide range of Lightweight Directory Access Protocol and related standards, including full compliance with LDAPv3 but also support for Directory Service Markup Language (DSMLv2).Written in Java, OpenDJ offers multi-master replication, access control, and many extensions.
|
||||
|
||||
|
|
|
|||
|
|
@ -1,5 +1,5 @@
|
|||
apiVersion: v2
|
||||
appVersion: 5.1.0
|
||||
appVersion: 5.1.1
|
||||
description: Job to generate data and initial config for Gluu Server persistence layer.
|
||||
home: https://docs.gluu.org
|
||||
icon: https://gluu.org/docs/gluu-server/favicon.ico
|
||||
|
|
@ -15,4 +15,4 @@ sources:
|
|||
- https://github.com/JanssenProject/jans/docker-jans-persistence-loader
|
||||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/persistence
|
||||
type: application
|
||||
version: 1.1.0
|
||||
version: 1.1.1
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
# persistence
|
||||
|
||||
  
|
||||
  
|
||||
|
||||
Job to generate data and initial config for Gluu Server persistence layer.
|
||||
|
||||
|
|
@ -34,7 +34,7 @@ Kubernetes: `>=v1.21.0-0`
|
|||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
|
||||
| image.pullSecrets | list | `[]` | Image Pull Secrets |
|
||||
| image.repository | string | `"janssenproject/persistence"` | Image to use for deploying. |
|
||||
| image.tag | string | `"1.1.0-1"` | Image tag to use for deploying. |
|
||||
| image.tag | string | `"1.1.1-1"` | Image tag to use for deploying. |
|
||||
| imagePullSecrets | list | `[]` | |
|
||||
| lifecycle | object | `{}` | |
|
||||
| nameOverride | string | `""` | |
|
||||
|
|
|
|||
|
|
@ -18,7 +18,7 @@ image:
|
|||
# -- Image to use for deploying.
|
||||
repository: janssenproject/persistence
|
||||
# -- Image tag to use for deploying.
|
||||
tag: 1.1.0-1
|
||||
tag: 1.1.1-1
|
||||
# -- Image Pull Secrets
|
||||
pullSecrets: [ ]
|
||||
# -- Resource specs.
|
||||
|
|
|
|||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue