Samuel Attwood
GitHub
commit
a8554737b2
Binary file not shown.
|
|
@ -0,0 +1,17 @@
|
|||
annotations:
|
||||
catalog.cattle.io/certified: partner
|
||||
catalog.cattle.io/display-name: Pixie
|
||||
catalog.cattle.io/release-name: pixie
|
||||
apiVersion: v2
|
||||
description: Pixie is an open source observability tool for Kubernetes applications.
|
||||
Use Pixie to view the high-level state of your cluster and also drill-down into
|
||||
more detailed views.
|
||||
icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/pixie/icon/color/pixie-icon-color.svg
|
||||
keywords:
|
||||
- monitoring
|
||||
- metric
|
||||
- observability
|
||||
kubeVersion: '>=1.16.0'
|
||||
name: pixie-operator-chart
|
||||
type: application
|
||||
version: 0.0.2501
|
||||
|
|
@ -0,0 +1,19 @@
|
|||
# Pixie
|
||||
|
||||
Pixie is an open source observability tool for Kubernetes applications. Use Pixie to view the high-level state of your cluster (service maps, cluster resources, application traffic) and also drill-down into more detailed views (pod state, flame graphs, individual full-body application requests).
|
||||
|
||||
Three features enable Pixie's magical developer experience:
|
||||
|
||||
- **Auto-telemetry:** Pixie uses eBPF to automatically collect telemetry data such as full-body requests, resource and network metrics, application profiles, and more. See the full list of data sources [here](https://docs.px.dev/about-pixie/data-sources/).
|
||||
|
||||
- **In-Cluster Edge Compute:** Pixie collects, stores and queries all telemetry data locally in the cluster. Pixie uses less than 5% of cluster CPU, and in most cases less than 2%.
|
||||
|
||||
- **Scriptability:** [PxL](https://docs.px.dev/reference/pxl/), Pixie’s flexible Pythonic query language, can be used across Pixie’s UI, CLI, and client APIs.
|
||||
|
||||
## Prerequisites
|
||||
|
||||
You must have either:
|
||||
|
||||
- You need to have a Pixie account and deployment key on [Community Cloud for Pixie](https://withpixie.ai).
|
||||
- Or a Pixie account and deployment key on a [self-hosted Pixie Cloud](https://docs.px.dev/installing-pixie/install-guides/self-hosted-pixie/).
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,264 @@
|
|||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.4.1
|
||||
creationTimestamp: null
|
||||
name: viziers.px.dev
|
||||
spec:
|
||||
group: px.dev
|
||||
names:
|
||||
kind: Vizier
|
||||
listKind: VizierList
|
||||
plural: viziers
|
||||
singular: vizier
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1alpha1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Vizier is the Schema for the viziers API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: VizierSpec defines the desired state of Vizier
|
||||
properties:
|
||||
clockConverter:
|
||||
description: ClockConverter specifies which routine to use for converting
|
||||
timestamps to a synced reference time.
|
||||
enum:
|
||||
- default
|
||||
- grpc
|
||||
type: string
|
||||
cloudAddr:
|
||||
description: CloudAddr is the address of the cloud instance that the
|
||||
Vizier should be pointing to.
|
||||
type: string
|
||||
clusterName:
|
||||
description: ClusterName is a name for the Vizier instance, usually
|
||||
specifying which cluster the Vizier is deployed to. If not specified,
|
||||
a random name will be generated.
|
||||
type: string
|
||||
customDeployKeySecret:
|
||||
description: CustomDeployKeySecret is the name of the secret where
|
||||
the deploy key is stored.
|
||||
type: string
|
||||
dataAccess:
|
||||
description: DataAccess defines the level of data that may be accesssed
|
||||
when executing a script on the cluster. If none specified, assumes
|
||||
full data access.
|
||||
enum:
|
||||
- Full
|
||||
- Restricted
|
||||
type: string
|
||||
dataCollectorParams:
|
||||
description: DataCollectorParams specifies the set of params for configuring
|
||||
the dataCollector. If no params are specified, defaults are used.
|
||||
properties:
|
||||
customPEMFlags:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: This contains custom flags that should be passed
|
||||
to the PEM via environment variables.
|
||||
type: object
|
||||
datastreamBufferSize:
|
||||
description: DatastreamBufferSize is the data buffer size per
|
||||
connection. Default size is 1 Mbyte. For high-throughput applications,
|
||||
try increasing this number if experiencing data loss.
|
||||
format: int32
|
||||
type: integer
|
||||
datastreamBufferSpikeSize:
|
||||
description: DatastreamBufferSpikeSize is the maximum temporary
|
||||
size of a data stream buffer before processing.
|
||||
format: int32
|
||||
type: integer
|
||||
type: object
|
||||
deployKey:
|
||||
description: DeployKey is the deploy key associated with the Vizier
|
||||
instance. This is used to link the Vizier to a specific user/org.
|
||||
This is required unless specifying a CustomDeployKeySecret.
|
||||
type: string
|
||||
devCloudNamespace:
|
||||
description: 'DevCloudNamespace should be specified only for dev versions
|
||||
of Pixie cloud which have no ingress to help redirect traffic to
|
||||
the correct service. The DevCloudNamespace is the namespace that
|
||||
the dev Pixie cloud is running on, for example: "plc-dev".'
|
||||
type: string
|
||||
disableAutoUpdate:
|
||||
description: DisableAutoUpdate specifies whether auto update should
|
||||
be enabled for the Vizier instance.
|
||||
type: boolean
|
||||
leadershipElectionParams:
|
||||
description: LeadershipElectionParams specifies configurable values
|
||||
for the K8s leaderships elections which Vizier uses manage pod leadership.
|
||||
properties:
|
||||
electionPeriodMs:
|
||||
description: ElectionPeriodMs defines how frequently Vizier attempts
|
||||
to run a K8s leader election, in milliseconds. The period also
|
||||
determines how long Vizier waits for a leader election response
|
||||
back from the K8s API. If the K8s API is slow to respond, consider
|
||||
increasing this number.
|
||||
format: int64
|
||||
type: integer
|
||||
type: object
|
||||
patches:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Patches defines patches that should be applied to Vizier
|
||||
resources. The key of the patch should be the name of the resource
|
||||
that is patched. The value of the patch is the patch, encoded as
|
||||
a string which follow the "strategic merge patch" rules for K8s.
|
||||
type: object
|
||||
pemMemoryLimit:
|
||||
description: PemMemoryLimit is a memory limit applied specifically
|
||||
to PEM pods.
|
||||
type: string
|
||||
pemMemoryRequest:
|
||||
description: PemMemoryRequest is a memory request applied specifically
|
||||
to PEM pods. It will automatically use the value of pemMemoryLimit
|
||||
if not specified.
|
||||
type: string
|
||||
pod:
|
||||
description: Pod defines the policy for creating Vizier pods.
|
||||
properties:
|
||||
annotations:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Annotations specifies the annotations to attach to
|
||||
pods the operator creates.
|
||||
type: object
|
||||
labels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Labels specifies the labels to attach to pods the
|
||||
operator creates.
|
||||
type: object
|
||||
nodeSelector:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: 'NodeSelector is a selector which must be true for
|
||||
the pod to fit on a node. Selector which must match a node''s
|
||||
labels for the pod to be scheduled on that node. More info:
|
||||
https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
This field cannot be updated once the cluster is created.'
|
||||
type: object
|
||||
resources:
|
||||
description: Resources is the resource requirements for a container.
|
||||
This field cannot be updated once the cluster is created.
|
||||
properties:
|
||||
limits:
|
||||
additionalProperties:
|
||||
anyOf:
|
||||
- type: integer
|
||||
- type: string
|
||||
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
||||
x-kubernetes-int-or-string: true
|
||||
description: 'Limits describes the maximum amount of compute
|
||||
resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/'
|
||||
type: object
|
||||
requests:
|
||||
additionalProperties:
|
||||
anyOf:
|
||||
- type: integer
|
||||
- type: string
|
||||
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
||||
x-kubernetes-int-or-string: true
|
||||
description: 'Requests describes the minimum amount of compute
|
||||
resources required. If Requests is omitted for a container,
|
||||
it defaults to Limits if that is explicitly specified, otherwise
|
||||
to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/'
|
||||
type: object
|
||||
type: object
|
||||
securityContext:
|
||||
description: The securityContext which should be set on non-privileged
|
||||
pods. All pods which require privileged permissions will still
|
||||
require a privileged securityContext.
|
||||
properties:
|
||||
enabled:
|
||||
description: Whether a securityContext should be set on the
|
||||
pod. In cases where no PSPs are applied to the cluster,
|
||||
this is not necessary.
|
||||
type: boolean
|
||||
fsGroup:
|
||||
description: A special supplemental group that applies to
|
||||
all containers in a pod.
|
||||
format: int64
|
||||
type: integer
|
||||
runAsGroup:
|
||||
description: The GID to run the entrypoint of the container
|
||||
process.
|
||||
format: int64
|
||||
type: integer
|
||||
runAsUser:
|
||||
description: The UID to run the entrypoint of the container
|
||||
process.
|
||||
format: int64
|
||||
type: integer
|
||||
type: object
|
||||
type: object
|
||||
useEtcdOperator:
|
||||
description: UseEtcdOperator specifies whether the metadata service
|
||||
should use etcd for storage.
|
||||
type: boolean
|
||||
version:
|
||||
description: Version is the desired version of the Vizier instance.
|
||||
type: string
|
||||
type: object
|
||||
status:
|
||||
description: VizierStatus defines the observed state of Vizier
|
||||
properties:
|
||||
lastReconciliationPhaseTime:
|
||||
description: LastReconciliationPhaseTime is the last time that the
|
||||
ReconciliationPhase changed.
|
||||
format: date-time
|
||||
type: string
|
||||
message:
|
||||
description: Message is a human-readable message with details about
|
||||
why the Vizier is in this condition.
|
||||
type: string
|
||||
reconciliationPhase:
|
||||
description: ReconciliationPhase describes the state the Reconciler
|
||||
is in for this Vizier. See the documentation above the ReconciliationPhase
|
||||
type for more information.
|
||||
type: string
|
||||
sentryDSN:
|
||||
description: SentryDSN is key for Viziers that is used to send errors
|
||||
and stacktraces to Sentry.
|
||||
type: string
|
||||
version:
|
||||
description: Version is the actual version of the Vizier instance.
|
||||
type: string
|
||||
vizierPhase:
|
||||
description: VizierPhase is a high-level summary of where the Vizier
|
||||
is in its lifecycle.
|
||||
type: string
|
||||
vizierReason:
|
||||
description: VizierReason is a short, machine understandable string
|
||||
that gives the reason for the transition into the Vizier's current
|
||||
status.
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
|
|
@ -0,0 +1,8 @@
|
|||
questions:
|
||||
- variable: deployKey
|
||||
default: ""
|
||||
required: true
|
||||
type: password
|
||||
label: Pixie Deploy Key
|
||||
group: Deploy Settings
|
||||
description: Your Pixie deploy key. This can be generated through the Pixie CLI (px deploy-key create) or in Pixie's admin UI.
|
||||
|
|
@ -0,0 +1,197 @@
|
|||
{{- $lookupLen := 0 -}}{{- $opLookup := (lookup "operators.coreos.com/v1" "OperatorGroup" "" "").items -}}{{if $opLookup }}{{ $lookupLen = len $opLookup }}{{ end }}
|
||||
{{ if (or (eq (.Values.deployOLM | toString) "true") (and (not (eq (.Values.deployOLM | toString) "false")) (eq $lookupLen 0))) }}
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: {{ .Values.olmNamespace }}
|
||||
---
|
||||
kind: ServiceAccount
|
||||
apiVersion: v1
|
||||
metadata:
|
||||
name: olm-operator-serviceaccount
|
||||
namespace: {{ .Values.olmNamespace }}
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: system:controller:operator-lifecycle-manager
|
||||
rules:
|
||||
- apiGroups: ["*"]
|
||||
resources: ["*"]
|
||||
verbs: ["*"]
|
||||
- nonResourceURLs: ["*"]
|
||||
verbs: ["*"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: olm-operator-cluster-binding-olm
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: system:controller:operator-lifecycle-manager
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: olm-operator-serviceaccount
|
||||
namespace: {{ .Values.olmNamespace }}
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: olm-operator
|
||||
namespace: {{ .Values.olmNamespace }}
|
||||
labels:
|
||||
app: olm-operator
|
||||
spec:
|
||||
strategy:
|
||||
type: RollingUpdate
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: olm-operator
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: olm-operator
|
||||
spec:
|
||||
serviceAccountName: olm-operator-serviceaccount
|
||||
containers:
|
||||
- name: olm-operator
|
||||
command:
|
||||
- /bin/olm
|
||||
args:
|
||||
- --namespace
|
||||
- $(OPERATOR_NAMESPACE)
|
||||
- --writeStatusName
|
||||
- ""
|
||||
image: quay.io/operator-framework/olm@sha256:b706ee6583c4c3cf8059d44234c8a4505804adcc742bcddb3d1e2f6eff3d6519
|
||||
imagePullPolicy: IfNotPresent
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
- containerPort: 8081
|
||||
name: metrics
|
||||
protocol: TCP
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 8080
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 8080
|
||||
terminationMessagePolicy: FallbackToLogsOnError
|
||||
env:
|
||||
|
||||
- name: OPERATOR_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: OPERATOR_NAME
|
||||
value: olm-operator
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 160Mi
|
||||
|
||||
|
||||
nodeSelector:
|
||||
kubernetes.io/os: linux
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: catalog-operator
|
||||
namespace: {{ .Values.olmNamespace }}
|
||||
labels:
|
||||
app: catalog-operator
|
||||
spec:
|
||||
strategy:
|
||||
type: RollingUpdate
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: catalog-operator
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: catalog-operator
|
||||
spec:
|
||||
serviceAccountName: olm-operator-serviceaccount
|
||||
containers:
|
||||
- name: catalog-operator
|
||||
command:
|
||||
- /bin/catalog
|
||||
args:
|
||||
- '-namespace'
|
||||
- {{ .Values.olmNamespace }}
|
||||
- -configmapServerImage=quay.io/operator-framework/configmap-operator-registry:latest
|
||||
- -util-image
|
||||
- quay.io/operator-framework/olm@sha256:b706ee6583c4c3cf8059d44234c8a4505804adcc742bcddb3d1e2f6eff3d6519
|
||||
image: quay.io/operator-framework/olm@sha256:b706ee6583c4c3cf8059d44234c8a4505804adcc742bcddb3d1e2f6eff3d6519
|
||||
imagePullPolicy: IfNotPresent
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
- containerPort: 8081
|
||||
name: metrics
|
||||
protocol: TCP
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 8080
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 8080
|
||||
terminationMessagePolicy: FallbackToLogsOnError
|
||||
env:
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 80Mi
|
||||
|
||||
|
||||
nodeSelector:
|
||||
kubernetes.io/os: linux
|
||||
---
|
||||
kind: ClusterRole
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
name: aggregate-olm-edit
|
||||
labels:
|
||||
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
||||
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
||||
rules:
|
||||
- apiGroups: ["operators.coreos.com"]
|
||||
resources: ["subscriptions"]
|
||||
verbs: ["create", "update", "patch", "delete"]
|
||||
- apiGroups: ["operators.coreos.com"]
|
||||
resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions"]
|
||||
verbs: ["delete"]
|
||||
---
|
||||
kind: ClusterRole
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
name: aggregate-olm-view
|
||||
labels:
|
||||
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
||||
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
||||
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
||||
rules:
|
||||
- apiGroups: ["operators.coreos.com"]
|
||||
resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: ["packages.operators.coreos.com"]
|
||||
resources: ["packagemanifests", "packagemanifests/icon"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
---
|
||||
apiVersion: operators.coreos.com/v1
|
||||
kind: OperatorGroup
|
||||
metadata:
|
||||
name: olm-operators
|
||||
namespace: {{ .Values.olmNamespace }}
|
||||
spec:
|
||||
targetNamespaces:
|
||||
- {{ .Values.olmNamespace }}
|
||||
{{- end}}
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
---
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: {{ .Values.olmOperatorNamespace }}
|
||||
---
|
||||
apiVersion: operators.coreos.com/v1
|
||||
kind: OperatorGroup
|
||||
metadata:
|
||||
name: global-operators
|
||||
namespace: {{ .Values.olmOperatorNamespace }}
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
apiVersion: operators.coreos.com/v1alpha1
|
||||
kind: CatalogSource
|
||||
metadata:
|
||||
name: pixie-operator-index
|
||||
namespace: {{ .Values.olmOperatorNamespace }}
|
||||
spec:
|
||||
sourceType: grpc
|
||||
image: gcr.io/pixie-oss/pixie-prod/operator/bundle_index:0.0.1
|
||||
displayName: Pixie Vizier Operator
|
||||
publisher: px.dev
|
||||
updateStrategy:
|
||||
registryPoll:
|
||||
interval: 10m
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
apiVersion: operators.coreos.com/v1alpha1
|
||||
kind: Subscription
|
||||
metadata:
|
||||
name: pixie-operator-subscription
|
||||
namespace: {{ .Values.olmOperatorNamespace }}
|
||||
spec:
|
||||
channel: {{ .Values.olmBundleChannel }}
|
||||
name: pixie-operator
|
||||
source: pixie-operator-index
|
||||
sourceNamespace: {{ .Values.olmOperatorNamespace }}
|
||||
installPlanApproval: Automatic
|
||||
|
|
@ -0,0 +1,85 @@
|
|||
apiVersion: px.dev/v1alpha1
|
||||
kind: Vizier
|
||||
metadata:
|
||||
name: {{ .Values.name }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
spec:
|
||||
{{- if .Values.version }}
|
||||
version: {{ .Values.version }}
|
||||
{{- end }}
|
||||
deployKey: {{ .Values.deployKey }}
|
||||
{{- if .Values.customDeployKeySecret }}
|
||||
customDeployKeySecret: {{ .Values.customDeployKeySecret }}
|
||||
{{- end }}
|
||||
cloudAddr: {{ .Values.cloudAddr }}
|
||||
disableAutoUpdate: {{ .Values.disableAutoUpdate }}
|
||||
useEtcdOperator: {{ .Values.useEtcdOperator }}
|
||||
{{- if .Values.clusterName }}
|
||||
clusterName: {{ .Values.clusterName }}
|
||||
{{- end }}
|
||||
{{- if .Values.devCloudNamespace }}
|
||||
devCloudNamespace: {{ .Values.devCloudNamespace }}
|
||||
{{- end }}
|
||||
{{- if .Values.pemMemoryLimit }}
|
||||
pemMemoryLimit: {{ .Values.pemMemoryLimit }}
|
||||
{{- end }}
|
||||
{{- if .Values.pemMemoryRequest }}
|
||||
pemMemoryRequest: {{ .Values.pemMemoryRequest }}
|
||||
{{- end }}
|
||||
{{- if .Values.dataAccess }}
|
||||
dataAccess: {{ .Values.dataAccess }}
|
||||
{{- end }}
|
||||
{{- if .Values.patches }}
|
||||
patches: {{ .Values.patches | toYaml | nindent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.dataCollectorParams }}
|
||||
dataCollectorParams:
|
||||
{{- if .Values.dataCollectorParams.datastreamBufferSize }}
|
||||
datastreamBufferSize: {{ .Values.dataCollectorParams.datastreamBufferSize }}
|
||||
{{- end }}
|
||||
{{- if .Values.dataCollectorParams.datastreamBufferSpikeSize }}
|
||||
datastreamBufferSpikeSize: {{ .Values.dataCollectorParams.datastreamBufferSpikeSize }}
|
||||
{{- end }}
|
||||
{{- if .Values.dataCollectorParams.customPEMFlags }}
|
||||
customPEMFlags:
|
||||
{{- range $key, $value := .Values.dataCollectorParams.customPEMFlags}}
|
||||
{{$key}}: "{{$value}}"
|
||||
{{- end}}
|
||||
{{- end }}
|
||||
{{- end}}
|
||||
{{- if .Values.leadershipElectionParams }}
|
||||
leadershipElectionParams:
|
||||
{{- if .Values.leadershipElectionParams.electionPeriodMs }}
|
||||
electionPeriodMs: {{ .Values.leadershipElectionParams.electionPeriodMs }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if or .Values.pod.securityContext (or .Values.pod.nodeSelector (or .Values.pod.annotations (or .Values.pod.labels .Values.pod.resources))) }}
|
||||
pod:
|
||||
{{- if .Values.pod.annotations }}
|
||||
annotations: {{ .Values.pod.annotations | toYaml | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.pod.labels }}
|
||||
labels: {{ .Values.pod.labels | toYaml | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.pod.resources }}
|
||||
resources: {{ .Values.pod.resources | toYaml | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.pod.nodeSelector }}
|
||||
nodeSelector: {{ .Values.pod.nodeSelector | toYaml | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.pod.securityContext }}
|
||||
securityContext:
|
||||
enabled: {{ .Values.pod.securityContext.enabled }}
|
||||
{{- if .Values.pod.securityContext.enabled }}
|
||||
{{- if .Values.pod.securityContext.fsGroup }}
|
||||
fsGroup: {{ .Values.pod.securityContext.fsGroup }}
|
||||
{{- end }}
|
||||
{{- if .Values.pod.securityContext.runAsUser }}
|
||||
runAsUser: {{ .Values.pod.securityContext.runAsUser }}
|
||||
{{- end }}
|
||||
{{- if .Values.pod.securityContext.runAsGroup }}
|
||||
runAsGroup: {{ .Values.pod.securityContext.runAsGroup }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
|
|
@ -0,0 +1,25 @@
|
|||
apiVersion: batch/v1
|
||||
kind: Job
|
||||
metadata:
|
||||
annotations:
|
||||
helm.sh/hook: pre-delete
|
||||
helm.sh/hook-delete-policy: hook-succeeded
|
||||
name: vizier-deleter
|
||||
namespace: '{{ .Release.Namespace }}'
|
||||
spec:
|
||||
template:
|
||||
metadata:
|
||||
name: vizier-deleter
|
||||
spec:
|
||||
containers:
|
||||
- env:
|
||||
- name: PL_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
- name: PL_VIZIER_NAME
|
||||
value: '{{ .Values.name }}'
|
||||
image: gcr.io/pixie-oss/pixie-prod/operator/vizier_deleter:0.0.25
|
||||
name: delete-job
|
||||
restartPolicy: Never
|
||||
serviceAccountName: pl-deleter-service-account
|
||||
|
|
@ -0,0 +1,55 @@
|
|||
---
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: pl-deleter-service-account
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: pl-deleter-binding
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: pl-deleter-role
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: pl-deleter-service-account
|
||||
namespace: "{{ .Release.Namespace }}"
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: pl-deleter-role
|
||||
rules:
|
||||
# Allow actions on Kubernetes objects
|
||||
- apiGroups:
|
||||
- ""
|
||||
- apps
|
||||
- rbac.authorization.k8s.io
|
||||
- extensions
|
||||
- etcd.database.coreos.com
|
||||
- batch
|
||||
- nats.io
|
||||
- policy
|
||||
resources:
|
||||
- clusterroles
|
||||
- clusterrolebindings
|
||||
- configmaps
|
||||
- secrets
|
||||
- pods
|
||||
- services
|
||||
- deployments
|
||||
- daemonsets
|
||||
- persistentvolumes
|
||||
- persistentvolumeclaims
|
||||
- roles
|
||||
- rolebindings
|
||||
- serviceaccounts
|
||||
- etcdclusters
|
||||
- statefulsets
|
||||
- cronjobs
|
||||
- jobs
|
||||
- natsclusters
|
||||
- podsecuritypolicies
|
||||
verbs: ["*"]
|
||||
|
|
@ -0,0 +1,69 @@
|
|||
## OLM configuration
|
||||
# OLM is used for deploying and ensuring the operator is up-to-date.
|
||||
# deployOLM indicates whether OLM should be deployed. This should only be
|
||||
# disabled if an instance of OLM is already configured on the cluster.
|
||||
# Should be string "true" if true, but "false" otherwise. If empty, defaults
|
||||
# to whether OLM is present in the cluster.
|
||||
deployOLM: ""
|
||||
# The namespace that olm should run in. If olm has already been deployed
|
||||
# to the cluster, this should be the namespace that olm is already running in.
|
||||
olmNamespace: "olm"
|
||||
# The namespace which olm operators should run in. If olm has already
|
||||
# been deployed to the cluster, this should be the namespace that the olm operators
|
||||
# are running in.
|
||||
olmOperatorNamespace: "px-operator"
|
||||
# The bundle channel which OLM should listen to for the Vizier operator bundles.
|
||||
# Should be "stable" for production-versions of the operator, and "test" for release candidates.
|
||||
olmBundleChannel: "stable"
|
||||
|
||||
## Vizier configuration
|
||||
# The name of the Vizier instance deployed to the cluster.
|
||||
name: "pixie"
|
||||
# The name of the cluster that the Vizier is monitoring. If empty,
|
||||
# a random name will be generated.
|
||||
clusterName: ""
|
||||
# The version of the Vizier instance deployed to the cluster. If empty,
|
||||
# the operator will automatically deploy the latest version.
|
||||
version: ""
|
||||
# The deploy key is used to link the deployed Vizier to a specific user/project.
|
||||
# This is required if not specifying a customDeployKeySecret, and can be generated through the UI or CLI.
|
||||
deployKey: ""
|
||||
# The deploy key may be read from a custom secret in the Pixie namespace. This secret should be formatted where the
|
||||
# key of the deploy key is "deploy-key".
|
||||
customDeployKeySecret: ""
|
||||
# Whether auto-update should be disabled.
|
||||
disableAutoUpdate: false
|
||||
# Whether the metadata service should use etcd for in-memory storage. Recommended
|
||||
# only for clusters which do not have persistent volumes configured.
|
||||
useEtcdOperator: false
|
||||
# The address of the Pixie cloud instance that the Vizier should be connected to.
|
||||
# This should only be updated when using a self-hosted version of Pixie Cloud.
|
||||
cloudAddr: "withpixie.ai:443"
|
||||
# DevCloudNamespace should be specified only for self-hosted versions of Pixie cloud which have no ingress to help
|
||||
# redirect traffic to the correct service. The DevCloudNamespace is the namespace that the dev Pixie cloud is
|
||||
# running on, for example: "plc-dev".
|
||||
devCloudNamespace: ""
|
||||
# A memory limit applied specifically to PEM pods. If none is specified, a default limit of 2Gi is set.
|
||||
pemMemoryLimit: ""
|
||||
# A memory request applied specifically to PEM pods. If none is specified, it will default to pemMemoryLimit.
|
||||
pemMemoryRequest: ""
|
||||
# DataAccess defines the level of data that may be accesssed when executing a script on the cluster.
|
||||
dataAccess: "Full"
|
||||
pod:
|
||||
# Optional custom annotations to add to deployed pods.
|
||||
annotations: {}
|
||||
# Optional custom labels to add to deployed pods.
|
||||
labels: {}
|
||||
resources: {}
|
||||
# limits:
|
||||
# cpu: 500m
|
||||
# memory: 7Gi
|
||||
# requests:
|
||||
# cpu: 100m
|
||||
# memory: 5Gi
|
||||
nodeSelector: {}
|
||||
# A set of custom patches to apply to the deployed Vizier resources.
|
||||
# The key should be the name of the resource to apply the patch to, and the value is the patch to apply.
|
||||
# Currently, only a JSON format is accepted, such as:
|
||||
# `{"spec": {"template": {"spec": { "tolerations": [{"key": "test", "operator": "Exists", "effect": "NoExecute" }]}}}}`
|
||||
patches: {}
|
||||
22
index.yaml
22
index.yaml
|
|
@ -3463,6 +3463,28 @@ entries:
|
|||
urls:
|
||||
- assets/openebs/openebs-1.12.300.tgz
|
||||
version: 1.12.300
|
||||
pixie-operator-chart:
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: partner
|
||||
catalog.cattle.io/display-name: Pixie
|
||||
catalog.cattle.io/release-name: pixie
|
||||
apiVersion: v2
|
||||
created: "2022-05-03T10:40:47.008333989-07:00"
|
||||
description: Pixie is an open source observability tool for Kubernetes applications.
|
||||
Use Pixie to view the high-level state of your cluster and also drill-down into
|
||||
more detailed views.
|
||||
digest: 2eacbbc04c5034e8b435f11ab941719a14760d42b59e3610440132dbbfeb4f48
|
||||
icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/pixie/icon/color/pixie-icon-color.svg
|
||||
keywords:
|
||||
- monitoring
|
||||
- metric
|
||||
- observability
|
||||
kubeVersion: '>=1.16.0'
|
||||
name: pixie-operator-chart
|
||||
type: application
|
||||
urls:
|
||||
- assets/pixie/pixie-operator-chart-0.0.2501.tgz
|
||||
version: 0.0.2501
|
||||
portshift-operator:
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: partner
|
||||
|
|
|
|||
|
|
@ -0,0 +1,19 @@
|
|||
# Pixie
|
||||
|
||||
Pixie is an open source observability tool for Kubernetes applications. Use Pixie to view the high-level state of your cluster (service maps, cluster resources, application traffic) and also drill-down into more detailed views (pod state, flame graphs, individual full-body application requests).
|
||||
|
||||
Three features enable Pixie's magical developer experience:
|
||||
|
||||
- **Auto-telemetry:** Pixie uses eBPF to automatically collect telemetry data such as full-body requests, resource and network metrics, application profiles, and more. See the full list of data sources [here](https://docs.px.dev/about-pixie/data-sources/).
|
||||
|
||||
- **In-Cluster Edge Compute:** Pixie collects, stores and queries all telemetry data locally in the cluster. Pixie uses less than 5% of cluster CPU, and in most cases less than 2%.
|
||||
|
||||
- **Scriptability:** [PxL](https://docs.px.dev/reference/pxl/), Pixie’s flexible Pythonic query language, can be used across Pixie’s UI, CLI, and client APIs.
|
||||
|
||||
## Prerequisites
|
||||
|
||||
You must have either:
|
||||
|
||||
- You need to have a Pixie account and deployment key on [Community Cloud for Pixie](https://withpixie.ai).
|
||||
- Or a Pixie account and deployment key on a [self-hosted Pixie Cloud](https://docs.px.dev/installing-pixie/install-guides/self-hosted-pixie/).
|
||||
|
||||
|
|
@ -0,0 +1,8 @@
|
|||
questions:
|
||||
- variable: deployKey
|
||||
default: ""
|
||||
required: true
|
||||
type: password
|
||||
label: Pixie Deploy Key
|
||||
group: Deploy Settings
|
||||
description: Your Pixie deploy key. This can be generated through the Pixie CLI (px deploy-key create) or in Pixie's admin UI.
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
--- charts-original/Chart.yaml
|
||||
+++ charts/Chart.yaml
|
||||
@@ -2,3 +2,14 @@
|
||||
name: pixie-operator-chart
|
||||
type: application
|
||||
version: 0.0.25
|
||||
+kubeVersion: '>=1.16.0'
|
||||
+icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/pixie/icon/color/pixie-icon-color.svg
|
||||
+annotations:
|
||||
+ catalog.cattle.io/certified: partner
|
||||
+ catalog.cattle.io/release-name: pixie
|
||||
+ catalog.cattle.io/display-name: Pixie
|
||||
+description: Pixie is an open source observability tool for Kubernetes applications. Use Pixie to view the high-level state of your cluster and also drill-down into more detailed views.
|
||||
+keywords:
|
||||
+- monitoring
|
||||
+- metric
|
||||
+- observability
|
||||
|
|
@ -0,0 +1,2 @@
|
|||
url: https://storage.googleapis.com/pixie-operator-charts/pixie-operator-chart-0.0.25.tgz
|
||||
packageVersion: 01
|
||||
Loading…
Reference in New Issue