Added chart versions:
jenkins/jenkins:
- 5.5.1
linux-polska/ezd-backend:
- 1.5.1
linux-polska/ezd-crd:
- 1.5.1
pull/1059/head
github-actions[bot]
parent
dbdc6e8273
commit
a96bc2f28a
Binary file not shown.
Binary file not shown.
Binary file not shown.
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,54 @@
|
||||||
|
annotations:
|
||||||
|
artifacthub.io/category: integration-delivery
|
||||||
|
artifacthub.io/changes: |
|
||||||
|
- Update `kubernetes` to version `4265.v78b_d4a_1c864a_`
|
||||||
|
artifacthub.io/images: |
|
||||||
|
- name: jenkins
|
||||||
|
image: docker.io/jenkins/jenkins:2.452.3-jdk17
|
||||||
|
- name: k8s-sidecar
|
||||||
|
image: docker.io/kiwigrid/k8s-sidecar:1.27.5
|
||||||
|
- name: inbound-agent
|
||||||
|
image: jenkins/inbound-agent:3256.v88a_f6e922152-1
|
||||||
|
artifacthub.io/license: Apache-2.0
|
||||||
|
artifacthub.io/links: |
|
||||||
|
- name: Chart Source
|
||||||
|
url: https://github.com/jenkinsci/helm-charts/tree/main/charts/jenkins
|
||||||
|
- name: Jenkins
|
||||||
|
url: https://www.jenkins.io/
|
||||||
|
- name: support
|
||||||
|
url: https://github.com/jenkinsci/helm-charts/issues
|
||||||
|
catalog.cattle.io/certified: partner
|
||||||
|
catalog.cattle.io/display-name: Jenkins
|
||||||
|
catalog.cattle.io/kube-version: '>=1.14-0'
|
||||||
|
catalog.cattle.io/release-name: jenkins
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 2.452.3
|
||||||
|
description: 'Jenkins - Build great things at any scale! As the leading open source
|
||||||
|
automation server, Jenkins provides over 1800 plugins to support building, deploying
|
||||||
|
and automating any project. '
|
||||||
|
home: https://www.jenkins.io/
|
||||||
|
icon: file://assets/icons/jenkins.svg
|
||||||
|
keywords:
|
||||||
|
- jenkins
|
||||||
|
- ci
|
||||||
|
- devops
|
||||||
|
kubeVersion: '>=1.14-0'
|
||||||
|
maintainers:
|
||||||
|
- email: maor.friedman@redhat.com
|
||||||
|
name: maorfr
|
||||||
|
- email: mail@torstenwalter.de
|
||||||
|
name: torstenwalter
|
||||||
|
- email: garridomota@gmail.com
|
||||||
|
name: mogaal
|
||||||
|
- email: wmcdona89@gmail.com
|
||||||
|
name: wmcdona89
|
||||||
|
- email: timjacomb1@gmail.com
|
||||||
|
name: timja
|
||||||
|
name: jenkins
|
||||||
|
sources:
|
||||||
|
- https://github.com/jenkinsci/jenkins
|
||||||
|
- https://github.com/jenkinsci/docker-inbound-agent
|
||||||
|
- https://github.com/maorfr/kube-tasks
|
||||||
|
- https://github.com/jenkinsci/configuration-as-code-plugin
|
||||||
|
type: application
|
||||||
|
version: 5.5.1
|
||||||
|
|
@ -0,0 +1,706 @@
|
||||||
|
# Jenkins
|
||||||
|
|
||||||
|
[](https://artifacthub.io/packages/helm/jenkinsci/jenkins)
|
||||||
|
[](https://opensource.org/licenses/Apache-2.0)
|
||||||
|
[](https://github.com/jenkinsci/helm-charts/releases)
|
||||||
|
[](https://app.gitter.im/#/room/#jenkins-ci:matrix.org)
|
||||||
|
|
||||||
|
[Jenkins](https://www.jenkins.io/) is the leading open source automation server, Jenkins provides over 1800 plugins to support building, deploying and automating any project.
|
||||||
|
|
||||||
|
This chart installs a Jenkins server which spawns agents on [Kubernetes](http://kubernetes.io) utilizing the [Jenkins Kubernetes plugin](https://plugins.jenkins.io/kubernetes/).
|
||||||
|
|
||||||
|
Inspired by the awesome work of [Carlos Sanchez](https://github.com/carlossg).
|
||||||
|
|
||||||
|
## Get Repository Info
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm repo add jenkins https://charts.jenkins.io
|
||||||
|
helm repo update
|
||||||
|
```
|
||||||
|
|
||||||
|
_See [`helm repo`](https://helm.sh/docs/helm/helm_repo/) for command documentation._
|
||||||
|
|
||||||
|
## Install Chart
|
||||||
|
|
||||||
|
```console
|
||||||
|
# Helm 3
|
||||||
|
$ helm install [RELEASE_NAME] jenkins/jenkins [flags]
|
||||||
|
```
|
||||||
|
|
||||||
|
_See [configuration](#configuration) below._
|
||||||
|
|
||||||
|
_See [helm install](https://helm.sh/docs/helm/helm_install/) for command documentation._
|
||||||
|
|
||||||
|
## Uninstall Chart
|
||||||
|
|
||||||
|
```console
|
||||||
|
# Helm 3
|
||||||
|
$ helm uninstall [RELEASE_NAME]
|
||||||
|
```
|
||||||
|
|
||||||
|
This removes all the Kubernetes components associated with the chart and deletes the release.
|
||||||
|
|
||||||
|
_See [helm uninstall](https://helm.sh/docs/helm/helm_uninstall/) for command documentation._
|
||||||
|
|
||||||
|
## Upgrade Chart
|
||||||
|
|
||||||
|
```console
|
||||||
|
# Helm 3
|
||||||
|
$ helm upgrade [RELEASE_NAME] jenkins/jenkins [flags]
|
||||||
|
```
|
||||||
|
|
||||||
|
_See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command documentation._
|
||||||
|
|
||||||
|
Visit the chart's [CHANGELOG](https://github.com/jenkinsci/helm-charts/blob/main/charts/jenkins/CHANGELOG.md) to view the chart's release history.
|
||||||
|
For migration between major version check [migration guide](#migration-guide).
|
||||||
|
|
||||||
|
## Building weekly releases
|
||||||
|
|
||||||
|
The default charts target Long-Term-Support (LTS) releases of Jenkins.
|
||||||
|
To use other versions the easiest way is to update the image tag to the version you want.
|
||||||
|
You can also rebuild the chart if you want the `appVersion` field to match.
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
See [Customizing the Chart Before Installing](https://helm.sh/docs/intro/using_helm/#customizing-the-chart-before-installing).
|
||||||
|
To see all configurable options with detailed comments, visit the chart's [values.yaml](https://github.com/jenkinsci/helm-charts/blob/main/charts/jenkins/values.yaml), or run these configuration commands:
|
||||||
|
|
||||||
|
```console
|
||||||
|
# Helm 3
|
||||||
|
$ helm show values jenkins/jenkins
|
||||||
|
```
|
||||||
|
|
||||||
|
For a summary of all configurable options, see [VALUES_SUMMARY.md](https://github.com/jenkinsci/helm-charts/blob/main/charts/jenkins/VALUES_SUMMARY.md).
|
||||||
|
|
||||||
|
### Configure Security Realm and Authorization Strategy
|
||||||
|
|
||||||
|
This chart configured a `securityRealm` and `authorizationStrategy` as shown below:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
JCasC:
|
||||||
|
securityRealm: |-
|
||||||
|
local:
|
||||||
|
allowsSignup: false
|
||||||
|
enableCaptcha: false
|
||||||
|
users:
|
||||||
|
- id: "${chart-admin-username}"
|
||||||
|
name: "Jenkins Admin"
|
||||||
|
password: "${chart-admin-password}"
|
||||||
|
authorizationStrategy: |-
|
||||||
|
loggedInUsersCanDoAnything:
|
||||||
|
allowAnonymousRead: false
|
||||||
|
```
|
||||||
|
|
||||||
|
With the configuration above there is only a single user.
|
||||||
|
This is fine for getting started quickly, but it needs to be adjusted for any serious environment.
|
||||||
|
|
||||||
|
So you should adjust this to suite your needs.
|
||||||
|
That could be using LDAP / OIDC / .. as authorization strategy and use globalMatrix as authorization strategy to configure more fine-grained permissions.
|
||||||
|
|
||||||
|
### Consider using a custom image
|
||||||
|
|
||||||
|
This chart allows the user to specify plugins which should be installed. However, for production use cases one should consider to build a custom Jenkins image which has all required plugins pre-installed.
|
||||||
|
This way you can be sure which plugins Jenkins is using when starting up and you avoid trouble in case of connectivity issues to the Jenkins update site.
|
||||||
|
|
||||||
|
The [docker repository](https://github.com/jenkinsci/docker) for the Jenkins image contains [documentation](https://github.com/jenkinsci/docker#preinstalling-plugins) how to do it.
|
||||||
|
|
||||||
|
Here is an example how that can be done:
|
||||||
|
|
||||||
|
```Dockerfile
|
||||||
|
FROM jenkins/jenkins:lts
|
||||||
|
RUN jenkins-plugin-cli --plugins kubernetes workflow-aggregator git configuration-as-code
|
||||||
|
```
|
||||||
|
|
||||||
|
NOTE: If you want a reproducible build then you should specify a non-floating tag for the image `jenkins/jenkins:2.249.3` and specify plugin versions.
|
||||||
|
|
||||||
|
Once you built the image and pushed it to your registry you can specify it in your values file like this:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
image: "registry/my-jenkins"
|
||||||
|
tag: "v1.2.3"
|
||||||
|
installPlugins: false
|
||||||
|
```
|
||||||
|
|
||||||
|
Notice: `installPlugins` is set to false to disable plugin download. In this case, the image `registry/my-jenkins:v1.2.3` must have the plugins specified as default value for [the `controller.installPlugins` directive](https://github.com/jenkinsci/helm-charts/blob/main/charts/jenkins/VALUES_SUMMARY.md#jenkins-plugins) to ensure that the configuration side-car system works as expected.
|
||||||
|
|
||||||
|
In case you are using a private registry you can use 'imagePullSecretName' to specify the name of the secret to use when pulling the image:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
image: "registry/my-jenkins"
|
||||||
|
tag: "v1.2.3"
|
||||||
|
imagePullSecretName: registry-secret
|
||||||
|
installPlugins: false
|
||||||
|
```
|
||||||
|
|
||||||
|
### External URL Configuration
|
||||||
|
|
||||||
|
If you are using the ingress definitions provided by this chart via the `controller.ingress` block the configured hostname will be the ingress hostname starting with `https://` or `http://` depending on the `tls` configuration.
|
||||||
|
The Protocol can be overwritten by specifying `controller.jenkinsUrlProtocol`.
|
||||||
|
|
||||||
|
If you are not using the provided ingress you can specify `controller.jenkinsUrl` to change the URL definition.
|
||||||
|
|
||||||
|
### Configuration as Code
|
||||||
|
|
||||||
|
Jenkins Configuration as Code (JCasC) is now a standard component in the Jenkins project.
|
||||||
|
To allow JCasC's configuration from the helm values, the plugin [`configuration-as-code`](https://plugins.jenkins.io/configuration-as-code/) must be installed in the Jenkins Controller's Docker image (which is the case by default as specified by the [default value of the directive `controller.installPlugins`](https://github.com/jenkinsci/helm-charts/blob/main/charts/jenkins/VALUES_SUMMARY.md#jenkins-plugins)).
|
||||||
|
|
||||||
|
JCasc configuration is passed through Helm values under the key `controller.JCasC`.
|
||||||
|
The section ["Jenkins Configuration as Code (JCasC)" of the page "VALUES_SUMMARY.md"](https://github.com/jenkinsci/helm-charts/blob/main/charts/jenkins/VALUES_SUMMARY.md#jenkins-configuration-as-code-jcasc) lists all the possible directives.
|
||||||
|
|
||||||
|
In particular, you may specify custom JCasC scripts by adding sub-key under the `controller.JCasC.configScripts` for each configuration area where each corresponds to a plugin or section of the UI.
|
||||||
|
|
||||||
|
The sub-keys (prior to `|` character) are only labels used to give the section a meaningful name.
|
||||||
|
The only restriction is they must conform to RFC 1123 definition of a DNS label, so they may only contain lowercase letters, numbers, and hyphens.
|
||||||
|
|
||||||
|
Each key will become the name of a configuration yaml file on the controller in `/var/jenkins_home/casc_configs` (by default) and will be processed by the Configuration as Code Plugin during Jenkins startup.
|
||||||
|
|
||||||
|
The lines after each `|` become the content of the configuration yaml file.
|
||||||
|
|
||||||
|
The first line after this is a JCasC root element, e.g. jenkins, credentials, etc.
|
||||||
|
|
||||||
|
Best reference is the Documentation link here: `https://<jenkins_url>/configuration-as-code`.
|
||||||
|
|
||||||
|
The example below sets custom systemMessage:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
JCasC:
|
||||||
|
configScripts:
|
||||||
|
welcome-message: |
|
||||||
|
jenkins:
|
||||||
|
systemMessage: Welcome to our CI\CD server.
|
||||||
|
```
|
||||||
|
|
||||||
|
More complex example that creates ldap settings:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
JCasC:
|
||||||
|
configScripts:
|
||||||
|
ldap-settings: |
|
||||||
|
jenkins:
|
||||||
|
securityRealm:
|
||||||
|
ldap:
|
||||||
|
configurations:
|
||||||
|
- server: ldap.acme.com
|
||||||
|
rootDN: dc=acme,dc=uk
|
||||||
|
managerPasswordSecret: ${LDAP_PASSWORD}
|
||||||
|
groupMembershipStrategy:
|
||||||
|
fromUserRecord:
|
||||||
|
attributeName: "memberOf"
|
||||||
|
```
|
||||||
|
|
||||||
|
Keep in mind that default configuration file already contains some values that you won't be able to override under configScripts section.
|
||||||
|
|
||||||
|
For example, you can not configure Jenkins URL and System Admin email address like this because of conflicting configuration error.
|
||||||
|
|
||||||
|
Incorrect:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
JCasC:
|
||||||
|
configScripts:
|
||||||
|
jenkins-url: |
|
||||||
|
unclassified:
|
||||||
|
location:
|
||||||
|
url: https://example.com/jenkins
|
||||||
|
adminAddress: example@mail.com
|
||||||
|
```
|
||||||
|
|
||||||
|
Correct:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
jenkinsUrl: https://example.com/jenkins
|
||||||
|
jenkinsAdminEmail: example@mail.com
|
||||||
|
```
|
||||||
|
|
||||||
|
Further JCasC examples can be found [here](https://github.com/jenkinsci/configuration-as-code-plugin/tree/master/demos).
|
||||||
|
|
||||||
|
#### Breaking out large Config as Code scripts
|
||||||
|
|
||||||
|
Jenkins Config as Code scripts can become quite large, and maintaining all of your scripts within one yaml file can be difficult. The Config as Code plugin itself suggests updating the `CASC_JENKINS_CONFIG` environment variable to be a comma separated list of paths for the plugin to traverse, picking up the yaml files as needed.
|
||||||
|
However, under the Jenkins helm chart, this `CASC_JENKINS_CONFIG` value is maintained through the templates. A better solution is to split your `controller.JCasC.configScripts` into separate values files, and provide each file during the helm install.
|
||||||
|
|
||||||
|
For example, you can have a values file (e.g values_main.yaml) that defines the values described in the `VALUES_SUMMARY.md` for your Jenkins configuration:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
jenkins:
|
||||||
|
controller:
|
||||||
|
jenkinsUrlProtocol: https
|
||||||
|
installPlugins: false
|
||||||
|
...
|
||||||
|
```
|
||||||
|
|
||||||
|
In a second file (e.g values_jenkins_casc.yaml), you can define a section of your config scripts:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
jenkins:
|
||||||
|
controller:
|
||||||
|
JCasC:
|
||||||
|
configScripts:
|
||||||
|
jenkinsCasc: |
|
||||||
|
jenkins:
|
||||||
|
disableRememberMe: false
|
||||||
|
mode: NORMAL
|
||||||
|
...
|
||||||
|
```
|
||||||
|
|
||||||
|
And keep extending your config scripts by creating more files (so not all config scripts are located in one yaml file for better maintenance):
|
||||||
|
|
||||||
|
values_jenkins_unclassified.yaml
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
jenkins:
|
||||||
|
controller:
|
||||||
|
JCasC:
|
||||||
|
configScripts:
|
||||||
|
unclassifiedCasc: |
|
||||||
|
unclassified:
|
||||||
|
...
|
||||||
|
```
|
||||||
|
|
||||||
|
When installing, you provide all relevant yaml files (e.g `helm install -f values_main.yaml -f values_jenkins_casc.yaml -f values_jenkins_unclassified.yaml ...`). Instead of updating the `CASC_JENKINS_CONFIG` environment variable to include multiple paths, multiple CasC yaml files will be created in the same path `var/jenkins_home/casc_configs`.
|
||||||
|
|
||||||
|
#### Config as Code With or Without Auto-Reload
|
||||||
|
|
||||||
|
Config as Code changes (to `controller.JCasC.configScripts`) can either force a new pod to be created and only be applied at next startup, or can be auto-reloaded on-the-fly.
|
||||||
|
If you set `controller.sidecars.configAutoReload.enabled` to `true`, a second, auxiliary container will be installed into the Jenkins controller pod, known as a "sidecar".
|
||||||
|
This watches for changes to configScripts, copies the content onto the Jenkins file-system and issues a POST to `http://<jenkins_url>/reload-configuration-as-code` with a pre-shared key.
|
||||||
|
You can monitor this sidecar's logs using command `kubectl logs <controller_pod> -c config-reload -f`.
|
||||||
|
If you want to enable auto-reload then you also need to configure rbac as the container which triggers the reload needs to watch the config maps:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
sidecars:
|
||||||
|
configAutoReload:
|
||||||
|
enabled: true
|
||||||
|
rbac:
|
||||||
|
create: true
|
||||||
|
```
|
||||||
|
|
||||||
|
### Allow Limited HTML Markup in User-Submitted Text
|
||||||
|
|
||||||
|
Some third-party systems (e.g. GitHub) use HTML-formatted data in their payload sent to a Jenkins webhook (e.g. URL of a pull-request being built).
|
||||||
|
To display such data as processed HTML instead of raw text set `controller.enableRawHtmlMarkupFormatter` to true.
|
||||||
|
This option requires installation of the [OWASP Markup Formatter Plugin (antisamy-markup-formatter)](https://plugins.jenkins.io/antisamy-markup-formatter/).
|
||||||
|
This plugin is **not** installed by default but may be added to `controller.additionalPlugins`.
|
||||||
|
|
||||||
|
### Change max connections to Kubernetes API
|
||||||
|
When using agents with containers other than JNLP, The kubernetes plugin will communicate with those containers using the Kubernetes API. this changes the maximum concurrent connections
|
||||||
|
```yaml
|
||||||
|
agent:
|
||||||
|
maxRequestsPerHostStr: "32"
|
||||||
|
```
|
||||||
|
This will change the configuration of the kubernetes "cloud" (as called by jenkins) that is created automatically as part of this helm chart.
|
||||||
|
|
||||||
|
### Change container cleanup timeout API
|
||||||
|
For tasks that use very large images, this timeout can be increased to avoid early termination of the task while the Kubernetes pod is still deploying.
|
||||||
|
```yaml
|
||||||
|
agent:
|
||||||
|
retentionTimeout: "32"
|
||||||
|
```
|
||||||
|
This will change the configuration of the kubernetes "cloud" (as called by jenkins) that is created automatically as part of this helm chart.
|
||||||
|
|
||||||
|
### Change seconds to wait for pod to be running
|
||||||
|
This will change how long Jenkins will wait (seconds) for pod to be in running state.
|
||||||
|
```yaml
|
||||||
|
agent:
|
||||||
|
waitForPodSec: "32"
|
||||||
|
```
|
||||||
|
This will change the configuration of the kubernetes "cloud" (as called by jenkins) that is created automatically as part of this helm chart.
|
||||||
|
|
||||||
|
### Mounting Volumes into Agent Pods
|
||||||
|
|
||||||
|
Your Jenkins Agents will run as pods, and it's possible to inject volumes where needed:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
agent:
|
||||||
|
volumes:
|
||||||
|
- type: Secret
|
||||||
|
secretName: jenkins-mysecrets
|
||||||
|
mountPath: /var/run/secrets/jenkins-mysecrets
|
||||||
|
```
|
||||||
|
|
||||||
|
The supported volume types are: `ConfigMap`, `EmptyDir`, `HostPath`, `Nfs`, `PVC`, `Secret`.
|
||||||
|
Each type supports a different set of configurable attributes, defined by [the corresponding Java class](https://github.com/jenkinsci/kubernetes-plugin/tree/master/src/main/java/org/csanchez/jenkins/plugins/kubernetes/volumes).
|
||||||
|
|
||||||
|
### NetworkPolicy
|
||||||
|
|
||||||
|
To make use of the NetworkPolicy resources created by default, install [a networking plugin that implements the Kubernetes NetworkPolicy spec](https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy#before-you-begin).
|
||||||
|
|
||||||
|
[Install](#install-chart) helm chart with network policy enabled by setting `networkPolicy.enabled` to `true`.
|
||||||
|
|
||||||
|
You can use `controller.networkPolicy.internalAgents` and `controller.networkPolicy.externalAgents` stanzas for fine-grained controls over where internal/external agents can connect from.
|
||||||
|
Internal ones are allowed based on pod labels and (optionally) namespaces, and external ones are allowed based on IP ranges.
|
||||||
|
|
||||||
|
### Script approval list
|
||||||
|
|
||||||
|
`controller.scriptApproval` allows to pass function signatures that will be allowed in pipelines.
|
||||||
|
Example:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
scriptApproval:
|
||||||
|
- "method java.util.Base64$Decoder decode java.lang.String"
|
||||||
|
- "new java.lang.String byte[]"
|
||||||
|
- "staticMethod java.util.Base64 getDecoder"
|
||||||
|
```
|
||||||
|
|
||||||
|
### Custom Labels
|
||||||
|
|
||||||
|
`controller.serviceLabels` can be used to add custom labels in `jenkins-controller-svc.yaml`.
|
||||||
|
For example:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
ServiceLabels:
|
||||||
|
expose: true
|
||||||
|
```
|
||||||
|
|
||||||
|
### Persistence
|
||||||
|
|
||||||
|
The Jenkins image stores persistence under `/var/jenkins_home` path of the container.
|
||||||
|
A dynamically managed Persistent Volume Claim is used to keep the data across deployments, by default.
|
||||||
|
This is known to work in GCE, AWS, and minikube. Alternatively, a previously configured Persistent Volume Claim can be used.
|
||||||
|
|
||||||
|
It is possible to mount several volumes using `persistence.volumes` and `persistence.mounts` parameters.
|
||||||
|
See additional `persistence` values using [configuration commands](#configuration).
|
||||||
|
|
||||||
|
#### Existing PersistentVolumeClaim
|
||||||
|
|
||||||
|
1. Create the PersistentVolume
|
||||||
|
2. Create the PersistentVolumeClaim
|
||||||
|
3. [Install](#install-chart) the chart, setting `persistence.existingClaim` to `PVC_NAME`
|
||||||
|
|
||||||
|
#### Long Volume Attach/Mount Times
|
||||||
|
|
||||||
|
Certain volume type and filesystem format combinations may experience long
|
||||||
|
attach/mount times, [10 or more minutes][K8S_VOLUME_TIMEOUT], when using
|
||||||
|
`fsGroup`. This issue may result in the following entries in the pod's event
|
||||||
|
history:
|
||||||
|
|
||||||
|
```console
|
||||||
|
Warning FailedMount 38m kubelet, aks-default-41587790-2 Unable to attach or mount volumes: unmounted volumes=[jenkins-home], unattached volumes=[plugins plugin-dir jenkins-token-rmq2g sc-config-volume tmp jenkins-home jenkins-config secrets-dir]: timed out waiting for the condition
|
||||||
|
```
|
||||||
|
|
||||||
|
In these cases, experiment with replacing `fsGroup` with
|
||||||
|
`supplementalGroups` in the pod's `securityContext`. This can be achieved by
|
||||||
|
setting the `controller.podSecurityContextOverride` Helm chart value to
|
||||||
|
something like:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
podSecurityContextOverride:
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 1000
|
||||||
|
supplementalGroups: [1000]
|
||||||
|
```
|
||||||
|
|
||||||
|
This issue has been reported on [azureDisk with ext4][K8S_VOLUME_TIMEOUT] and
|
||||||
|
on [Alibaba cloud][K8S_VOLUME_TIMEOUT_ALIBABA].
|
||||||
|
|
||||||
|
[K8S_VOLUME_TIMEOUT]: https://github.com/kubernetes/kubernetes/issues/67014
|
||||||
|
[K8S_VOLUME_TIMEOUT_ALIBABA]: https://github.com/kubernetes/kubernetes/issues/67014#issuecomment-698770511
|
||||||
|
|
||||||
|
#### Storage Class
|
||||||
|
|
||||||
|
It is possible to define which storage class to use, by setting `persistence.storageClass` to `[customStorageClass]`.
|
||||||
|
If set to a dash (`-`), dynamic provisioning is disabled.
|
||||||
|
If the storage class is set to null or left undefined (`""`), the default provisioner is used (gp2 on AWS, standard on GKE, AWS & OpenStack).
|
||||||
|
|
||||||
|
### Additional Secrets
|
||||||
|
|
||||||
|
Additional secrets and Additional Existing Secrets,
|
||||||
|
can be mounted into the Jenkins controller through the chart or created using `controller.additionalSecrets` or `controller.additionalExistingSecrets`.
|
||||||
|
A common use case might be identity provider credentials if using an external LDAP or OIDC-based identity provider.
|
||||||
|
The secret may then be referenced in JCasC configuration (see [JCasC configuration](#configuration-as-code)).
|
||||||
|
|
||||||
|
`values.yaml` controller section, referencing mounted secrets:
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
# the 'name' and 'keyName' are concatenated with a '-' in between, so for example:
|
||||||
|
# an existing secret "secret-credentials" and a key inside it named "github-password" should be used in Jcasc as ${secret-credentials-github-password}
|
||||||
|
# 'name' and 'keyName' must be lowercase RFC 1123 label must consist of lower case alphanumeric characters or '-',
|
||||||
|
# and must start and end with an alphanumeric character (e.g. 'my-name', or '123-abc')
|
||||||
|
# existingSecret existing secret "secret-credentials" and a key inside it named "github-username" should be used in Jcasc as ${github-username}
|
||||||
|
# When using existingSecret no need to specify the keyName under additionalExistingSecrets.
|
||||||
|
existingSecret: secret-credentials
|
||||||
|
|
||||||
|
additionalExistingSecrets:
|
||||||
|
- name: secret-credentials
|
||||||
|
keyName: github-username
|
||||||
|
- name: secret-credentials
|
||||||
|
keyName: github-password
|
||||||
|
- name: secret-credentials
|
||||||
|
keyName: token
|
||||||
|
|
||||||
|
additionalSecrets:
|
||||||
|
- name: client_id
|
||||||
|
value: abc123
|
||||||
|
- name: client_secret
|
||||||
|
value: xyz999
|
||||||
|
JCasC:
|
||||||
|
securityRealm: |
|
||||||
|
oic:
|
||||||
|
clientId: ${client_id}
|
||||||
|
clientSecret: ${client_secret}
|
||||||
|
...
|
||||||
|
configScripts:
|
||||||
|
jenkins-casc-configs: |
|
||||||
|
credentials:
|
||||||
|
system:
|
||||||
|
domainCredentials:
|
||||||
|
- credentials:
|
||||||
|
- string:
|
||||||
|
description: "github access token"
|
||||||
|
id: "github_app_token"
|
||||||
|
scope: GLOBAL
|
||||||
|
secret: ${secret-credentials-token}
|
||||||
|
- usernamePassword:
|
||||||
|
description: "github access username password"
|
||||||
|
id: "github_username_pass"
|
||||||
|
password: ${secret-credentials-github-password}
|
||||||
|
scope: GLOBAL
|
||||||
|
username: ${secret-credentials-github-username}
|
||||||
|
```
|
||||||
|
|
||||||
|
For more information, see [JCasC documentation](https://github.com/jenkinsci/configuration-as-code-plugin/blob/master/docs/features/secrets.adoc#kubernetes-secrets).
|
||||||
|
|
||||||
|
### Secret Claims from HashiCorp Vault
|
||||||
|
|
||||||
|
It's possible for this chart to generate `SecretClaim` resources in order to automatically create and maintain Kubernetes `Secrets` from HashiCorp [Vault](https://www.vaultproject.io/) via [`kube-vault-controller`](https://github.com/roboll/kube-vault-controller)
|
||||||
|
|
||||||
|
These `Secrets` can then be referenced in the same manner as Additional Secrets above.
|
||||||
|
|
||||||
|
This can be achieved by defining required Secret Claims within `controller.secretClaims`, as follows:
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
secretClaims:
|
||||||
|
- name: jenkins-secret
|
||||||
|
path: secret/path
|
||||||
|
- name: jenkins-short-ttl
|
||||||
|
path: secret/short-ttl-path
|
||||||
|
renew: 60
|
||||||
|
```
|
||||||
|
|
||||||
|
### RBAC
|
||||||
|
|
||||||
|
RBAC is enabled by default. If you want to disable it you will need to set `rbac.create` to `false`.
|
||||||
|
|
||||||
|
### Adding Custom Pod Templates
|
||||||
|
|
||||||
|
It is possible to add custom pod templates for the default configured kubernetes cloud.
|
||||||
|
Add a key under `agent.podTemplates` for each pod template. Each key (prior to `|` character) is just a label, and can be any value.
|
||||||
|
Keys are only used to give the pod template a meaningful name. The only restriction is they may only contain RFC 1123 \ DNS label characters: lowercase letters, numbers, and hyphens. Each pod template can contain multiple containers.
|
||||||
|
There's no need to add the _jnlp_ container since the kubernetes plugin will automatically inject it into the pod.
|
||||||
|
For this pod templates configuration to be loaded the following values must be set:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller.JCasC.defaultConfig: true
|
||||||
|
```
|
||||||
|
|
||||||
|
The example below creates a python pod template in the kubernetes cloud:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
agent:
|
||||||
|
podTemplates:
|
||||||
|
python: |
|
||||||
|
- name: python
|
||||||
|
label: jenkins-python
|
||||||
|
serviceAccount: jenkins
|
||||||
|
containers:
|
||||||
|
- name: python
|
||||||
|
image: python:3
|
||||||
|
command: "/bin/sh -c"
|
||||||
|
args: "cat"
|
||||||
|
ttyEnabled: true
|
||||||
|
privileged: true
|
||||||
|
resourceRequestCpu: "400m"
|
||||||
|
resourceRequestMemory: "512Mi"
|
||||||
|
resourceLimitCpu: "1"
|
||||||
|
resourceLimitMemory: "1024Mi"
|
||||||
|
```
|
||||||
|
|
||||||
|
Best reference is `https://<jenkins_url>/configuration-as-code/reference#Cloud-kubernetes`.
|
||||||
|
|
||||||
|
### Adding Pod Templates Using additionalAgents
|
||||||
|
|
||||||
|
`additionalAgents` may be used to configure additional kubernetes pod templates.
|
||||||
|
Each additional agent corresponds to `agent` in terms of the configurable values and inherits all values from `agent` so you only need to specify values which differ.
|
||||||
|
For example:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
agent:
|
||||||
|
podName: default
|
||||||
|
customJenkinsLabels: default
|
||||||
|
# set resources for additional agents to inherit
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: "1"
|
||||||
|
memory: "2048Mi"
|
||||||
|
|
||||||
|
additionalAgents:
|
||||||
|
maven:
|
||||||
|
podName: maven
|
||||||
|
customJenkinsLabels: maven
|
||||||
|
# An example of overriding the jnlp container
|
||||||
|
# sideContainerName: jnlp
|
||||||
|
image: jenkins/jnlp-agent-maven
|
||||||
|
tag: latest
|
||||||
|
python:
|
||||||
|
podName: python
|
||||||
|
customJenkinsLabels: python
|
||||||
|
sideContainerName: python
|
||||||
|
image: python
|
||||||
|
tag: "3"
|
||||||
|
command: "/bin/sh -c"
|
||||||
|
args: "cat"
|
||||||
|
TTYEnabled: true
|
||||||
|
```
|
||||||
|
|
||||||
|
### Ingress Configuration
|
||||||
|
|
||||||
|
This chart provides ingress resources configurable via the `controller.ingress` block.
|
||||||
|
|
||||||
|
The simplest configuration looks like the following:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
ingress:
|
||||||
|
enabled: true
|
||||||
|
paths: []
|
||||||
|
apiVersion: "extensions/v1beta1"
|
||||||
|
hostName: jenkins.example.com
|
||||||
|
```
|
||||||
|
|
||||||
|
This snippet configures an ingress rule for exposing jenkins at `jenkins.example.com`
|
||||||
|
|
||||||
|
You can define labels and annotations via `controller.ingress.labels` and `controller.ingress.annotations` respectively.
|
||||||
|
Additionally, you can configure the ingress tls via `controller.ingress.tls`.
|
||||||
|
By default, this ingress rule exposes all paths.
|
||||||
|
If needed this can be overwritten by specifying the wanted paths in `controller.ingress.paths`
|
||||||
|
|
||||||
|
If you want to configure a secondary ingress e.g. you don't want the jenkins instance exposed but still want to receive webhooks you can configure `controller.secondaryingress`.
|
||||||
|
The secondaryingress doesn't expose anything by default and has to be configured via `controller.secondaryingress.paths`:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
ingress:
|
||||||
|
enabled: true
|
||||||
|
apiVersion: "extensions/v1beta1"
|
||||||
|
hostName: "jenkins.internal.example.com"
|
||||||
|
annotations:
|
||||||
|
kubernetes.io/ingress.class: "internal"
|
||||||
|
secondaryingress:
|
||||||
|
enabled: true
|
||||||
|
apiVersion: "extensions/v1beta1"
|
||||||
|
hostName: "jenkins-scm.example.com"
|
||||||
|
annotations:
|
||||||
|
kubernetes.io/ingress.class: "public"
|
||||||
|
paths:
|
||||||
|
- /github-webhook
|
||||||
|
```
|
||||||
|
|
||||||
|
## Prometheus Metrics
|
||||||
|
|
||||||
|
If you want to expose Prometheus metrics you need to install the [Jenkins Prometheus Metrics Plugin](https://github.com/jenkinsci/prometheus-plugin).
|
||||||
|
It will expose an endpoint (default `/prometheus`) with metrics where a Prometheus Server can scrape.
|
||||||
|
|
||||||
|
If you have implemented [Prometheus Operator](https://github.com/prometheus-operator/prometheus-operator), you can set `controller.prometheus.enabled` to `true` to configure a `ServiceMonitor` and `PrometheusRule`.
|
||||||
|
If you want to further adjust alerting rules you can do so by configuring `controller.prometheus.alertingrules`
|
||||||
|
|
||||||
|
If you have implemented Prometheus without using the operator, you can leave `controller.prometheus.enabled` set to `false`.
|
||||||
|
|
||||||
|
### Running Behind a Forward Proxy
|
||||||
|
|
||||||
|
The controller pod uses an Init Container to install plugins etc. If you are behind a corporate proxy it may be useful to set `controller.initContainerEnv` to add environment variables such as `http_proxy`, so that these can be downloaded.
|
||||||
|
|
||||||
|
Additionally, you may want to add env vars for the init container, the Jenkins container, and the JVM (`controller.javaOpts`):
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
initContainerEnv:
|
||||||
|
- name: http_proxy
|
||||||
|
value: "http://192.168.64.1:3128"
|
||||||
|
- name: https_proxy
|
||||||
|
value: "http://192.168.64.1:3128"
|
||||||
|
- name: no_proxy
|
||||||
|
value: ""
|
||||||
|
- name: JAVA_OPTS
|
||||||
|
value: "-Dhttps.proxyHost=proxy_host_name_without_protocol -Dhttps.proxyPort=3128"
|
||||||
|
containerEnv:
|
||||||
|
- name: http_proxy
|
||||||
|
value: "http://192.168.64.1:3128"
|
||||||
|
- name: https_proxy
|
||||||
|
value: "http://192.168.64.1:3128"
|
||||||
|
javaOpts: >-
|
||||||
|
-Dhttp.proxyHost=192.168.64.1
|
||||||
|
-Dhttp.proxyPort=3128
|
||||||
|
-Dhttps.proxyHost=192.168.64.1
|
||||||
|
-Dhttps.proxyPort=3128
|
||||||
|
```
|
||||||
|
|
||||||
|
### HTTPS Keystore Configuration
|
||||||
|
|
||||||
|
[This configuration](https://wiki.jenkins.io/pages/viewpage.action?pageId=135468777) enables jenkins to use keystore in order to serve HTTPS.
|
||||||
|
Here is the [value file section](https://wiki.jenkins.io/pages/viewpage.action?pageId=135468777#RunningJenkinswithnativeSSL/HTTPS-ConfigureJenkinstouseHTTPSandtheJKSkeystore) related to keystore configuration.
|
||||||
|
Keystore itself should be placed in front of `jenkinsKeyStoreBase64Encoded` key and in base64 encoded format. To achieve that after having `keystore.jks` file simply do this: `cat keystore.jks | base64` and paste the output in front of `jenkinsKeyStoreBase64Encoded`.
|
||||||
|
After enabling `httpsKeyStore.enable` make sure that `httpPort` and `targetPort` are not the same, as `targetPort` will serve HTTPS.
|
||||||
|
Do not set `controller.httpsKeyStore.httpPort` to `-1` because it will cause readiness and liveliness prob to fail.
|
||||||
|
If you already have a kubernetes secret that has keystore and its password you can specify its' name in front of `jenkinsHttpsJksSecretName`, You need to remember that your secret should have proper data key names `jenkins-jks-file` (or override the key name using `jenkinsHttpsJksSecretKey`)
|
||||||
|
and `https-jks-password` (or override the key name using `jenkinsHttpsJksPasswordSecretKey`; additionally you can make it get the password from a different secret using `jenkinsHttpsJksPasswordSecretName`). Example:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
httpsKeyStore:
|
||||||
|
enable: true
|
||||||
|
jenkinsHttpsJksSecretName: ''
|
||||||
|
httpPort: 8081
|
||||||
|
path: "/var/jenkins_keystore"
|
||||||
|
fileName: "keystore.jks"
|
||||||
|
password: "changeit"
|
||||||
|
jenkinsKeyStoreBase64Encoded: ''
|
||||||
|
```
|
||||||
|
### AWS Security Group Policies
|
||||||
|
|
||||||
|
To create SecurityGroupPolicies set `awsSecurityGroupPolicies.enabled` to true and add your policies. Each policy requires a `name`, array of `securityGroupIds` and a `podSelector`. Example:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
awsSecurityGroupPolicies:
|
||||||
|
enabled: true
|
||||||
|
policies:
|
||||||
|
- name: "jenkins-controller"
|
||||||
|
securityGroupIds:
|
||||||
|
- sg-123456789
|
||||||
|
podSelector:
|
||||||
|
matchExpressions:
|
||||||
|
- key: app.kubernetes.io/component
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- jenkins-controller
|
||||||
|
```
|
||||||
|
|
||||||
|
### Agent Direct Connection
|
||||||
|
|
||||||
|
Set `directConnection` to `true` to allow agents to connect directly to a given TCP port without having to negotiate a HTTP(S) connection. This can allow you to have agent connections without an external HTTP(S) port. Example:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
agent:
|
||||||
|
jenkinsTunnel: "jenkinsci-agent:50000"
|
||||||
|
directConnection: true
|
||||||
|
```
|
||||||
|
|
||||||
|
## Migration Guide
|
||||||
|
|
||||||
|
### From stable repository
|
||||||
|
|
||||||
|
Upgrade an existing release from `stable/jenkins` to `jenkins/jenkins` seamlessly by ensuring you have the latest [repository info](#get-repository-info) and running the [upgrade commands](#upgrade-chart) specifying the `jenkins/jenkins` chart.
|
||||||
|
|
||||||
|
### Major Version Upgrades
|
||||||
|
|
||||||
|
Chart release versions follow [SemVer](../../CONTRIBUTING.md#versioning), where a MAJOR version change (example `1.0.0` -> `2.0.0`) indicates an incompatible breaking change needing manual actions.
|
||||||
|
|
||||||
|
See [UPGRADING.md](./UPGRADING.md) for a list of breaking changes
|
||||||
|
|
@ -0,0 +1,148 @@
|
||||||
|
# Upgrade Notes
|
||||||
|
|
||||||
|
## To 5.0.0
|
||||||
|
- `controller.image`, `controller.tag`, and `controller.tagLabel` have been removed. If you want to overwrite the image you now need to configure any or all of:
|
||||||
|
- `controller.image.registry`
|
||||||
|
- `controller.image.repository`
|
||||||
|
- `controller.image.tag`
|
||||||
|
- `controller.image.tagLabel`
|
||||||
|
- `controller.imagePullPolicy` has been removed. If you want to overwrite the pull policy you now need to configure `controller.image.pullPolicy`.
|
||||||
|
- `controller.sidecars.configAutoReload.image` has been removed. If you want to overwrite the configAutoReload image you now need to configure any or all of:
|
||||||
|
- `controller.sidecars.configAutoReload.image.registry`
|
||||||
|
- `controller.sidecars.configAutoReload.image.repository`
|
||||||
|
- `controller.sidecars.configAutoReload.image.tag`
|
||||||
|
- `controller.sidecars.other` has been renamed to `controller.sidecars.additionalSidecarContainers`.
|
||||||
|
- `agent.image` and `agent.tag` have been removed. If you want to overwrite the agent image you now need to configure any or all of:
|
||||||
|
- `agent.image.repository`
|
||||||
|
- `agent.image.tag`
|
||||||
|
- The registry can still be overwritten by `agent.jnlpregistry`
|
||||||
|
- `agent.additionalContainers[*].image` has been renamed to `agent.additionalContainers[*].image.repository`
|
||||||
|
- `agent.additionalContainers[*].tag` has been renamed to `agent.additionalContainers[*].image.tag`
|
||||||
|
- `additionalAgents.*.image` has been renamed to `additionalAgents.*.image.repository`
|
||||||
|
- `additionalAgents.*.tag` has been renamed to `additionalAgents.*.image.tag`
|
||||||
|
- `additionalClouds.*.additionalAgents.*.image` has been renamed to `additionalClouds.*.additionalAgents.*.image.repository`
|
||||||
|
- `additionalClouds.*.additionalAgents.*.tag` has been renamed to `additionalClouds.*.additionalAgents.*.image.tag`
|
||||||
|
- `helmtest.bats.image` has been split up to:
|
||||||
|
- `helmtest.bats.image.registry`
|
||||||
|
- `helmtest.bats.image.repository`
|
||||||
|
- `helmtest.bats.image.tag`
|
||||||
|
- `controller.adminUsername` and `controller.adminPassword` have been renamed to `controller.admin.username` and `controller.admin.password` respectively
|
||||||
|
- `controller.adminSecret` has been renamed to `controller.admin.createSecret`
|
||||||
|
- `backup.*` was unmaintained and has thus been removed. See the following page for alternatives: [Kubernetes Backup and Migrations](https://nubenetes.com/kubernetes-backup-migrations/).
|
||||||
|
|
||||||
|
## To 4.0.0
|
||||||
|
Removes automatic `remotingSecurity` setting when using a container tag older than `2.326` (introduced in [`3.11.7`](./CHANGELOG.md#3117)). If you're using a version older than `2.326`, you should explicitly set `.controller.legacyRemotingSecurityEnabled` to `true`.
|
||||||
|
|
||||||
|
## To 3.0.0
|
||||||
|
|
||||||
|
* Check `securityRealm` and `authorizationStrategy` and adjust it.
|
||||||
|
Otherwise, your configured users and permissions will be overridden.
|
||||||
|
* You need to use helm version 3 as the `Chart.yaml` uses `apiVersion: v2`.
|
||||||
|
* All XML configuration options have been removed.
|
||||||
|
In case those are still in use you need to migrate to configuration as code.
|
||||||
|
Upgrade guide to 2.0.0 contains pointers how to do that.
|
||||||
|
* Jenkins is now using a `StatefulSet` instead of a `Deployment`
|
||||||
|
* terminology has been adjusted that's also reflected in values.yaml
|
||||||
|
The following values from `values.yaml` have been renamed:
|
||||||
|
|
||||||
|
* `master` => `controller`
|
||||||
|
* `master.useSecurity` => `controller.adminSecret`
|
||||||
|
* `master.slaveListenerPort` => `controller.agentListenerPort`
|
||||||
|
* `master.slaveHostPort` => `controller.agentListenerHostPort`
|
||||||
|
* `master.slaveKubernetesNamespace` => `agent.namespace`
|
||||||
|
* `master.slaveDefaultsProviderTemplate` => `agent.defaultsProviderTemplate`
|
||||||
|
* `master.slaveJenkinsUrl` => `agent.jenkinsUrl`
|
||||||
|
* `master.slaveJenkinsTunnel` => `agent.jenkinsTunnel`
|
||||||
|
* `master.slaveConnectTimeout` => `agent.kubernetesConnectTimeout`
|
||||||
|
* `master.slaveReadTimeout` => `agent.kubernetesReadTimeout`
|
||||||
|
* `master.slaveListenerServiceAnnotations` => `controller.agentListenerServiceAnnotations`
|
||||||
|
* `master.slaveListenerServiceType` => `controller.agentListenerServiceType`
|
||||||
|
* `master.slaveListenerLoadBalancerIP` => `controller.agentListenerLoadBalancerIP`
|
||||||
|
* `agent.slaveConnectTimeout` => `agent.connectTimeout`
|
||||||
|
* Removed values:
|
||||||
|
|
||||||
|
* `master.imageTag`: use `controller.image` and `controller.tag` instead
|
||||||
|
* `slave.imageTag`: use `agent.image` and `agent.tag` instead
|
||||||
|
|
||||||
|
## To 2.0.0
|
||||||
|
|
||||||
|
Configuration as Code is now default + container does not run as root anymore.
|
||||||
|
|
||||||
|
### Configuration as Code new default
|
||||||
|
|
||||||
|
Configuration is done via [Jenkins Configuration as Code Plugin](https://github.com/jenkinsci/configuration-as-code-plugin) by default.
|
||||||
|
That means that changes in values which result in a configuration change are always applied.
|
||||||
|
In contrast, the XML configuration was only applied during the first start and never altered.
|
||||||
|
|
||||||
|
:exclamation::exclamation::exclamation:
|
||||||
|
Attention:
|
||||||
|
This also means if you manually altered configuration then this will most likely be reset to what was configured by default.
|
||||||
|
It also applies to `securityRealm` and `authorizationStrategy` as they are also configured using configuration as code.
|
||||||
|
:exclamation::exclamation::exclamation:
|
||||||
|
|
||||||
|
### Image does not run as root anymore
|
||||||
|
|
||||||
|
It's not recommended to run containers in Kubernetes as `root`.
|
||||||
|
|
||||||
|
❗Attention: If you had not configured a different user before then you need to ensure that your image supports the user and group ID configured and also manually change permissions of all files so that Jenkins is still able to use them.
|
||||||
|
|
||||||
|
### Summary of updated values
|
||||||
|
|
||||||
|
As version 2.0.0 only updates default values and nothing else it's still possible to migrate to this version and opt out of some or all new defaults.
|
||||||
|
All you have to do is ensure the old values are set in your installation.
|
||||||
|
|
||||||
|
Here we show which values have changed and the previous default values:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
controller:
|
||||||
|
runAsUser: 1000 # was unset before
|
||||||
|
fsGroup: 1000 # was unset before
|
||||||
|
JCasC:
|
||||||
|
enabled: true # was false
|
||||||
|
defaultConfig: true # was false
|
||||||
|
sidecars:
|
||||||
|
configAutoReload:
|
||||||
|
enabled: true # was false
|
||||||
|
```
|
||||||
|
|
||||||
|
### Migration steps
|
||||||
|
|
||||||
|
Migration instructions heavily depend on your current setup.
|
||||||
|
So think of the list below more as a general guideline of what should be done.
|
||||||
|
|
||||||
|
- Ensure that the Jenkins image you are using contains a user with ID 1000 and a group with the same ID.
|
||||||
|
That's the case for `jenkins/jenkins:lts` image, which the chart uses by default
|
||||||
|
- Make a backup of your existing installation especially the persistent volume
|
||||||
|
- Ensure that you have the configuration as code plugin installed
|
||||||
|
- Export your current settings via the plugin:
|
||||||
|
`Manage Jenkins` -> `Configuration as Code` -> `Download Configuration`
|
||||||
|
- prepare your values file for the update e.g. add additional configuration as code setting that you need.
|
||||||
|
The export taken from above might be a good starting point for this.
|
||||||
|
In addition, the [demos](https://github.com/jenkinsci/configuration-as-code-plugin/tree/master/demos) from the plugin itself are quite useful.
|
||||||
|
- Test drive those setting on a separate installation
|
||||||
|
- Put Jenkins to Quiet Down mode so that it does not accept new jobs
|
||||||
|
`<JENKINS_URL>/quietDown`
|
||||||
|
- Change permissions of all files and folders to the new user and group ID:
|
||||||
|
|
||||||
|
```console
|
||||||
|
kubectl exec -it <jenkins_pod> -c jenkins /bin/bash
|
||||||
|
chown -R 1000:1000 /var/jenkins_home
|
||||||
|
```
|
||||||
|
|
||||||
|
- Update Jenkins
|
||||||
|
|
||||||
|
## To 1.0.0
|
||||||
|
|
||||||
|
Breaking changes:
|
||||||
|
|
||||||
|
- Values have been renamed to follow [helm recommended naming conventions](https://helm.sh/docs/chart_best_practices/#naming-conventions) so that all variables start with a lowercase letter and words are separated with camelcase
|
||||||
|
- All resources are now using [helm recommended standard labels](https://helm.sh/docs/chart_best_practices/#standard-labels)
|
||||||
|
|
||||||
|
As a result of the label changes also the selectors of the deployment have been updated.
|
||||||
|
Those are immutable so trying an updated will cause an error like:
|
||||||
|
|
||||||
|
```console
|
||||||
|
Error: Deployment.apps "jenkins" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"app.kubernetes.io/component":"jenkins-controller", "app.kubernetes.io/instance":"jenkins"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable
|
||||||
|
```
|
||||||
|
|
||||||
|
In order to upgrade, [uninstall](./README.md#uninstall-chart) the Jenkins Deployment before upgrading:
|
||||||
|
|
@ -0,0 +1,311 @@
|
||||||
|
# Jenkins
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
The following tables list the configurable parameters of the Jenkins chart and their default values.
|
||||||
|
|
||||||
|
## Values
|
||||||
|
|
||||||
|
| Key | Type | Description | Default |
|
||||||
|
|:----|:-----|:---------|:------------|
|
||||||
|
| [additionalAgents](./values.yaml#L1169) | object | Configure additional | `{}` |
|
||||||
|
| [additionalClouds](./values.yaml#L1194) | object | | `{}` |
|
||||||
|
| [agent.TTYEnabled](./values.yaml#L1087) | bool | Allocate pseudo tty to the side container | `false` |
|
||||||
|
| [agent.additionalContainers](./values.yaml#L1122) | list | Add additional containers to the agents | `[]` |
|
||||||
|
| [agent.alwaysPullImage](./values.yaml#L980) | bool | Always pull agent container image before build | `false` |
|
||||||
|
| [agent.annotations](./values.yaml#L1118) | object | Annotations to apply to the pod | `{}` |
|
||||||
|
| [agent.args](./values.yaml#L1081) | string | Arguments passed to command to execute | `"${computer.jnlpmac} ${computer.name}"` |
|
||||||
|
| [agent.command](./values.yaml#L1079) | string | Command to execute when side container starts | `nil` |
|
||||||
|
| [agent.componentName](./values.yaml#L948) | string | | `"jenkins-agent"` |
|
||||||
|
| [agent.connectTimeout](./values.yaml#L1116) | int | Timeout in seconds for an agent to be online | `100` |
|
||||||
|
| [agent.containerCap](./values.yaml#L1089) | int | Max number of agents to launch | `10` |
|
||||||
|
| [agent.customJenkinsLabels](./values.yaml#L945) | list | Append Jenkins labels to the agent | `[]` |
|
||||||
|
| [agent.defaultsProviderTemplate](./values.yaml#L907) | string | The name of the pod template to use for providing default values | `""` |
|
||||||
|
| [agent.directConnection](./values.yaml#L951) | bool | | `false` |
|
||||||
|
| [agent.disableDefaultAgent](./values.yaml#L1140) | bool | Disable the default Jenkins Agent configuration | `false` |
|
||||||
|
| [agent.enabled](./values.yaml#L905) | bool | Enable Kubernetes plugin jnlp-agent podTemplate | `true` |
|
||||||
|
| [agent.envVars](./values.yaml#L1062) | list | Environment variables for the agent Pod | `[]` |
|
||||||
|
| [agent.hostNetworking](./values.yaml#L959) | bool | Enables the agent to use the host network | `false` |
|
||||||
|
| [agent.idleMinutes](./values.yaml#L1094) | int | Allows the Pod to remain active for reuse until the configured number of minutes has passed since the last step was executed on it | `0` |
|
||||||
|
| [agent.image.repository](./values.yaml#L938) | string | Repository to pull the agent jnlp image from | `"jenkins/inbound-agent"` |
|
||||||
|
| [agent.image.tag](./values.yaml#L940) | string | Tag of the image to pull | `"3256.v88a_f6e922152-1"` |
|
||||||
|
| [agent.imagePullSecretName](./values.yaml#L947) | string | Name of the secret to be used to pull the image | `nil` |
|
||||||
|
| [agent.inheritYamlMergeStrategy](./values.yaml#L1114) | bool | Controls whether the defined yaml merge strategy will be inherited if another defined pod template is configured to inherit from the current one | `false` |
|
||||||
|
| [agent.jenkinsTunnel](./values.yaml#L915) | string | Overrides the Kubernetes Jenkins tunnel | `nil` |
|
||||||
|
| [agent.jenkinsUrl](./values.yaml#L911) | string | Overrides the Kubernetes Jenkins URL | `nil` |
|
||||||
|
| [agent.jnlpregistry](./values.yaml#L935) | string | Custom registry used to pull the agent jnlp image from | `nil` |
|
||||||
|
| [agent.kubernetesConnectTimeout](./values.yaml#L921) | int | The connection timeout in seconds for connections to Kubernetes API. The minimum value is 5 | `5` |
|
||||||
|
| [agent.kubernetesReadTimeout](./values.yaml#L923) | int | The read timeout in seconds for connections to Kubernetes API. The minimum value is 15 | `15` |
|
||||||
|
| [agent.livenessProbe](./values.yaml#L970) | object | | `{}` |
|
||||||
|
| [agent.maxRequestsPerHostStr](./values.yaml#L925) | string | The maximum concurrent connections to Kubernetes API | `"32"` |
|
||||||
|
| [agent.namespace](./values.yaml#L931) | string | Namespace in which the Kubernetes agents should be launched | `nil` |
|
||||||
|
| [agent.nodeSelector](./values.yaml#L1073) | object | Node labels for pod assignment | `{}` |
|
||||||
|
| [agent.nodeUsageMode](./values.yaml#L943) | string | | `"NORMAL"` |
|
||||||
|
| [agent.podLabels](./values.yaml#L933) | object | Custom Pod labels (an object with `label-key: label-value` pairs) | `{}` |
|
||||||
|
| [agent.podName](./values.yaml#L1091) | string | Agent Pod base name | `"default"` |
|
||||||
|
| [agent.podRetention](./values.yaml#L989) | string | | `"Never"` |
|
||||||
|
| [agent.podTemplates](./values.yaml#L1150) | object | Configures extra pod templates for the default kubernetes cloud | `{}` |
|
||||||
|
| [agent.privileged](./values.yaml#L953) | bool | Agent privileged container | `false` |
|
||||||
|
| [agent.resources](./values.yaml#L961) | object | Resources allocation (Requests and Limits) | `{"limits":{"cpu":"512m","memory":"512Mi"},"requests":{"cpu":"512m","memory":"512Mi"}}` |
|
||||||
|
| [agent.restrictedPssSecurityContext](./values.yaml#L986) | bool | Set a restricted securityContext on jnlp containers | `false` |
|
||||||
|
| [agent.retentionTimeout](./values.yaml#L927) | int | Time in minutes after which the Kubernetes cloud plugin will clean up an idle worker that has not already terminated | `5` |
|
||||||
|
| [agent.runAsGroup](./values.yaml#L957) | string | Configure container group | `nil` |
|
||||||
|
| [agent.runAsUser](./values.yaml#L955) | string | Configure container user | `nil` |
|
||||||
|
| [agent.secretEnvVars](./values.yaml#L1066) | list | Mount a secret as environment variable | `[]` |
|
||||||
|
| [agent.showRawYaml](./values.yaml#L993) | bool | | `true` |
|
||||||
|
| [agent.sideContainerName](./values.yaml#L1083) | string | Side container name | `"jnlp"` |
|
||||||
|
| [agent.skipTlsVerify](./values.yaml#L917) | bool | Disables the verification of the controller certificate on remote connection. This flag correspond to the "Disable https certificate check" flag in kubernetes plugin UI | `false` |
|
||||||
|
| [agent.usageRestricted](./values.yaml#L919) | bool | Enable the possibility to restrict the usage of this agent to specific folder. This flag correspond to the "Restrict pipeline support to authorized folders" flag in kubernetes plugin UI | `false` |
|
||||||
|
| [agent.volumes](./values.yaml#L1000) | list | Additional volumes | `[]` |
|
||||||
|
| [agent.waitForPodSec](./values.yaml#L929) | int | Seconds to wait for pod to be running | `600` |
|
||||||
|
| [agent.websocket](./values.yaml#L950) | bool | Enables agent communication via websockets | `false` |
|
||||||
|
| [agent.workingDir](./values.yaml#L942) | string | Configure working directory for default agent | `"/home/jenkins/agent"` |
|
||||||
|
| [agent.workspaceVolume](./values.yaml#L1035) | object | Workspace volume (defaults to EmptyDir) | `{}` |
|
||||||
|
| [agent.yamlMergeStrategy](./values.yaml#L1112) | string | Defines how the raw yaml field gets merged with yaml definitions from inherited pod templates. Possible values: "merge" or "override" | `"override"` |
|
||||||
|
| [agent.yamlTemplate](./values.yaml#L1101) | string | The raw yaml of a Pod API Object to merge into the agent spec | `""` |
|
||||||
|
| [awsSecurityGroupPolicies.enabled](./values.yaml#L1320) | bool | | `false` |
|
||||||
|
| [awsSecurityGroupPolicies.policies[0].name](./values.yaml#L1322) | string | | `""` |
|
||||||
|
| [awsSecurityGroupPolicies.policies[0].podSelector](./values.yaml#L1324) | object | | `{}` |
|
||||||
|
| [awsSecurityGroupPolicies.policies[0].securityGroupIds](./values.yaml#L1323) | list | | `[]` |
|
||||||
|
| [checkDeprecation](./values.yaml#L1317) | bool | Checks if any deprecated values are used | `true` |
|
||||||
|
| [clusterZone](./values.yaml#L21) | string | Override the cluster name for FQDN resolving | `"cluster.local"` |
|
||||||
|
| [controller.JCasC.authorizationStrategy](./values.yaml#L533) | string | Jenkins Config as Code Authorization Strategy-section | `"loggedInUsersCanDoAnything:\n allowAnonymousRead: false"` |
|
||||||
|
| [controller.JCasC.configMapAnnotations](./values.yaml#L538) | object | Annotations for the JCasC ConfigMap | `{}` |
|
||||||
|
| [controller.JCasC.configScripts](./values.yaml#L507) | object | List of Jenkins Config as Code scripts | `{}` |
|
||||||
|
| [controller.JCasC.configUrls](./values.yaml#L504) | list | Remote URLs for configuration files. | `[]` |
|
||||||
|
| [controller.JCasC.defaultConfig](./values.yaml#L498) | bool | Enables default Jenkins configuration via configuration as code plugin | `true` |
|
||||||
|
| [controller.JCasC.overwriteConfiguration](./values.yaml#L502) | bool | Whether Jenkins Config as Code should overwrite any existing configuration | `false` |
|
||||||
|
| [controller.JCasC.security](./values.yaml#L514) | object | Jenkins Config as Code security-section | `{"apiToken":{"creationOfLegacyTokenEnabled":false,"tokenGenerationOnCreationEnabled":false,"usageStatisticsEnabled":true}}` |
|
||||||
|
| [controller.JCasC.securityRealm](./values.yaml#L522) | string | Jenkins Config as Code Security Realm-section | `"local:\n allowsSignup: false\n enableCaptcha: false\n users:\n - id: \"${chart-admin-username}\"\n name: \"Jenkins Admin\"\n password: \"${chart-admin-password}\""` |
|
||||||
|
| [controller.additionalExistingSecrets](./values.yaml#L459) | list | List of additional existing secrets to mount | `[]` |
|
||||||
|
| [controller.additionalPlugins](./values.yaml#L409) | list | List of plugins to install in addition to those listed in controller.installPlugins | `[]` |
|
||||||
|
| [controller.additionalSecrets](./values.yaml#L468) | list | List of additional secrets to create and mount | `[]` |
|
||||||
|
| [controller.admin.createSecret](./values.yaml#L91) | bool | Create secret for admin user | `true` |
|
||||||
|
| [controller.admin.existingSecret](./values.yaml#L94) | string | The name of an existing secret containing the admin credentials | `""` |
|
||||||
|
| [controller.admin.password](./values.yaml#L81) | string | Admin password created as a secret if `controller.admin.createSecret` is true | `<random password>` |
|
||||||
|
| [controller.admin.passwordKey](./values.yaml#L86) | string | The key in the existing admin secret containing the password | `"jenkins-admin-password"` |
|
||||||
|
| [controller.admin.userKey](./values.yaml#L84) | string | The key in the existing admin secret containing the username | `"jenkins-admin-user"` |
|
||||||
|
| [controller.admin.username](./values.yaml#L78) | string | Admin username created as a secret if `controller.admin.createSecret` is true | `"admin"` |
|
||||||
|
| [controller.affinity](./values.yaml#L660) | object | Affinity settings | `{}` |
|
||||||
|
| [controller.agentListenerEnabled](./values.yaml#L318) | bool | Create Agent listener service | `true` |
|
||||||
|
| [controller.agentListenerExternalTrafficPolicy](./values.yaml#L328) | string | Traffic Policy of for the agentListener service | `nil` |
|
||||||
|
| [controller.agentListenerHostPort](./values.yaml#L322) | string | Host port to listen for agents | `nil` |
|
||||||
|
| [controller.agentListenerLoadBalancerIP](./values.yaml#L358) | string | Static IP for the agentListener LoadBalancer | `nil` |
|
||||||
|
| [controller.agentListenerLoadBalancerSourceRanges](./values.yaml#L330) | list | Allowed inbound IP for the agentListener service | `["0.0.0.0/0"]` |
|
||||||
|
| [controller.agentListenerNodePort](./values.yaml#L324) | string | Node port to listen for agents | `nil` |
|
||||||
|
| [controller.agentListenerPort](./values.yaml#L320) | int | Listening port for agents | `50000` |
|
||||||
|
| [controller.agentListenerServiceAnnotations](./values.yaml#L353) | object | Annotations for the agentListener service | `{}` |
|
||||||
|
| [controller.agentListenerServiceType](./values.yaml#L350) | string | Defines how to expose the agentListener service | `"ClusterIP"` |
|
||||||
|
| [controller.backendconfig.annotations](./values.yaml#L763) | object | backendconfig annotations | `{}` |
|
||||||
|
| [controller.backendconfig.apiVersion](./values.yaml#L757) | string | backendconfig API version | `"extensions/v1beta1"` |
|
||||||
|
| [controller.backendconfig.enabled](./values.yaml#L755) | bool | Enables backendconfig | `false` |
|
||||||
|
| [controller.backendconfig.labels](./values.yaml#L761) | object | backendconfig labels | `{}` |
|
||||||
|
| [controller.backendconfig.name](./values.yaml#L759) | string | backendconfig name | `nil` |
|
||||||
|
| [controller.backendconfig.spec](./values.yaml#L765) | object | backendconfig spec | `{}` |
|
||||||
|
| [controller.cloudName](./values.yaml#L487) | string | Name of default cloud configuration. | `"kubernetes"` |
|
||||||
|
| [controller.clusterIp](./values.yaml#L217) | string | k8s service clusterIP. Only used if serviceType is ClusterIP | `nil` |
|
||||||
|
| [controller.componentName](./values.yaml#L34) | string | Used for label app.kubernetes.io/component | `"jenkins-controller"` |
|
||||||
|
| [controller.containerEnv](./values.yaml#L150) | list | Environment variables for Jenkins Container | `[]` |
|
||||||
|
| [controller.containerEnvFrom](./values.yaml#L147) | list | Environment variable sources for Jenkins Container | `[]` |
|
||||||
|
| [controller.containerSecurityContext](./values.yaml#L205) | object | Allow controlling the securityContext for the jenkins container | `{"allowPrivilegeEscalation":false,"readOnlyRootFilesystem":true,"runAsGroup":1000,"runAsUser":1000}` |
|
||||||
|
| [controller.csrf.defaultCrumbIssuer.enabled](./values.yaml#L339) | bool | Enable the default CSRF Crumb issuer | `true` |
|
||||||
|
| [controller.csrf.defaultCrumbIssuer.proxyCompatability](./values.yaml#L341) | bool | Enable proxy compatibility | `true` |
|
||||||
|
| [controller.customInitContainers](./values.yaml#L541) | list | Custom init-container specification in raw-yaml format | `[]` |
|
||||||
|
| [controller.customJenkinsLabels](./values.yaml#L68) | list | Append Jenkins labels to the controller | `[]` |
|
||||||
|
| [controller.disableRememberMe](./values.yaml#L59) | bool | Disable use of remember me | `false` |
|
||||||
|
| [controller.disabledAgentProtocols](./values.yaml#L333) | list | Disabled agent protocols | `["JNLP-connect","JNLP2-connect"]` |
|
||||||
|
| [controller.enableRawHtmlMarkupFormatter](./values.yaml#L429) | bool | Enable HTML parsing using OWASP Markup Formatter Plugin (antisamy-markup-formatter) | `false` |
|
||||||
|
| [controller.executorMode](./values.yaml#L65) | string | Sets the executor mode of the Jenkins node. Possible values are "NORMAL" or "EXCLUSIVE" | `"NORMAL"` |
|
||||||
|
| [controller.existingSecret](./values.yaml#L456) | string | | `nil` |
|
||||||
|
| [controller.extraPorts](./values.yaml#L388) | list | Optionally configure other ports to expose in the controller container | `[]` |
|
||||||
|
| [controller.fsGroup](./values.yaml#L186) | int | Deprecated in favor of `controller.podSecurityContextOverride`. uid that will be used for persistent volume. | `1000` |
|
||||||
|
| [controller.googlePodMonitor.enabled](./values.yaml#L826) | bool | | `false` |
|
||||||
|
| [controller.googlePodMonitor.scrapeEndpoint](./values.yaml#L831) | string | | `"/prometheus"` |
|
||||||
|
| [controller.googlePodMonitor.scrapeInterval](./values.yaml#L829) | string | | `"60s"` |
|
||||||
|
| [controller.healthProbes](./values.yaml#L248) | bool | Enable Kubernetes Probes configuration configured in `controller.probes` | `true` |
|
||||||
|
| [controller.hostAliases](./values.yaml#L779) | list | Allows for adding entries to Pod /etc/hosts | `[]` |
|
||||||
|
| [controller.hostNetworking](./values.yaml#L70) | bool | | `false` |
|
||||||
|
| [controller.httpsKeyStore.disableSecretMount](./values.yaml#L847) | bool | | `false` |
|
||||||
|
| [controller.httpsKeyStore.enable](./values.yaml#L838) | bool | Enables HTTPS keystore on jenkins controller | `false` |
|
||||||
|
| [controller.httpsKeyStore.fileName](./values.yaml#L855) | string | Jenkins keystore filename which will appear under controller.httpsKeyStore.path | `"keystore.jks"` |
|
||||||
|
| [controller.httpsKeyStore.httpPort](./values.yaml#L851) | int | HTTP Port that Jenkins should listen to along with HTTPS, it also serves as the liveness and readiness probes port. | `8081` |
|
||||||
|
| [controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretKey](./values.yaml#L846) | string | Name of the key in the secret that contains the JKS password | `"https-jks-password"` |
|
||||||
|
| [controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretName](./values.yaml#L844) | string | Name of the secret that contains the JKS password, if it is not in the same secret as the JKS file | `""` |
|
||||||
|
| [controller.httpsKeyStore.jenkinsHttpsJksSecretKey](./values.yaml#L842) | string | Name of the key in the secret that already has ssl keystore | `"jenkins-jks-file"` |
|
||||||
|
| [controller.httpsKeyStore.jenkinsHttpsJksSecretName](./values.yaml#L840) | string | Name of the secret that already has ssl keystore | `""` |
|
||||||
|
| [controller.httpsKeyStore.jenkinsKeyStoreBase64Encoded](./values.yaml#L860) | string | Base64 encoded Keystore content. Keystore must be converted to base64 then being pasted here | `nil` |
|
||||||
|
| [controller.httpsKeyStore.password](./values.yaml#L857) | string | Jenkins keystore password | `"password"` |
|
||||||
|
| [controller.httpsKeyStore.path](./values.yaml#L853) | string | Path of HTTPS keystore file | `"/var/jenkins_keystore"` |
|
||||||
|
| [controller.image.pullPolicy](./values.yaml#L47) | string | Controller image pull policy | `"Always"` |
|
||||||
|
| [controller.image.registry](./values.yaml#L37) | string | Controller image registry | `"docker.io"` |
|
||||||
|
| [controller.image.repository](./values.yaml#L39) | string | Controller image repository | `"jenkins/jenkins"` |
|
||||||
|
| [controller.image.tag](./values.yaml#L42) | string | Controller image tag override; i.e., tag: "2.440.1-jdk17" | `nil` |
|
||||||
|
| [controller.image.tagLabel](./values.yaml#L45) | string | Controller image tag label | `"jdk17"` |
|
||||||
|
| [controller.imagePullSecretName](./values.yaml#L49) | string | Controller image pull secret | `nil` |
|
||||||
|
| [controller.ingress.annotations](./values.yaml#L702) | object | Ingress annotations | `{}` |
|
||||||
|
| [controller.ingress.apiVersion](./values.yaml#L698) | string | Ingress API version | `"extensions/v1beta1"` |
|
||||||
|
| [controller.ingress.enabled](./values.yaml#L681) | bool | Enables ingress | `false` |
|
||||||
|
| [controller.ingress.hostName](./values.yaml#L715) | string | Ingress hostname | `nil` |
|
||||||
|
| [controller.ingress.labels](./values.yaml#L700) | object | Ingress labels | `{}` |
|
||||||
|
| [controller.ingress.path](./values.yaml#L711) | string | Ingress path | `nil` |
|
||||||
|
| [controller.ingress.paths](./values.yaml#L685) | list | Override for the default Ingress paths | `[]` |
|
||||||
|
| [controller.ingress.resourceRootUrl](./values.yaml#L717) | string | Hostname to serve assets from | `nil` |
|
||||||
|
| [controller.ingress.tls](./values.yaml#L719) | list | Ingress TLS configuration | `[]` |
|
||||||
|
| [controller.initConfigMap](./values.yaml#L446) | string | Name of the existing ConfigMap that contains init scripts | `nil` |
|
||||||
|
| [controller.initContainerEnv](./values.yaml#L141) | list | Environment variables for Init Container | `[]` |
|
||||||
|
| [controller.initContainerEnvFrom](./values.yaml#L137) | list | Environment variable sources for Init Container | `[]` |
|
||||||
|
| [controller.initContainerResources](./values.yaml#L128) | object | Resources allocation (Requests and Limits) for Init Container | `{}` |
|
||||||
|
| [controller.initScripts](./values.yaml#L442) | object | Map of groovy init scripts to be executed during Jenkins controller start | `{}` |
|
||||||
|
| [controller.initializeOnce](./values.yaml#L414) | bool | Initialize only on first installation. Ensures plugins do not get updated inadvertently. Requires `persistence.enabled` to be set to `true` | `false` |
|
||||||
|
| [controller.installLatestPlugins](./values.yaml#L403) | bool | Download the minimum required version or latest version of all dependencies | `true` |
|
||||||
|
| [controller.installLatestSpecifiedPlugins](./values.yaml#L406) | bool | Set to true to download the latest version of any plugin that is requested to have the latest version | `false` |
|
||||||
|
| [controller.installPlugins](./values.yaml#L395) | list | List of Jenkins plugins to install. If you don't want to install plugins, set it to `false` | `["kubernetes:4265.v78b_d4a_1c864a_","workflow-aggregator:600.vb_57cdd26fdd7","git:5.2.2","configuration-as-code:1836.vccda_4a_122a_a_e"]` |
|
||||||
|
| [controller.javaOpts](./values.yaml#L156) | string | Append to `JAVA_OPTS` env var | `nil` |
|
||||||
|
| [controller.jenkinsAdminEmail](./values.yaml#L96) | string | Email address for the administrator of the Jenkins instance | `nil` |
|
||||||
|
| [controller.jenkinsHome](./values.yaml#L101) | string | Custom Jenkins home path | `"/var/jenkins_home"` |
|
||||||
|
| [controller.jenkinsOpts](./values.yaml#L158) | string | Append to `JENKINS_OPTS` env var | `nil` |
|
||||||
|
| [controller.jenkinsRef](./values.yaml#L106) | string | Custom Jenkins reference path | `"/usr/share/jenkins/ref"` |
|
||||||
|
| [controller.jenkinsUriPrefix](./values.yaml#L173) | string | Root URI Jenkins will be served on | `nil` |
|
||||||
|
| [controller.jenkinsUrl](./values.yaml#L168) | string | Set Jenkins URL if you are not using the ingress definitions provided by the chart | `nil` |
|
||||||
|
| [controller.jenkinsUrlProtocol](./values.yaml#L165) | string | Set protocol for Jenkins URL; `https` if `controller.ingress.tls`, `http` otherwise | `nil` |
|
||||||
|
| [controller.jenkinsWar](./values.yaml#L109) | string | | `"/usr/share/jenkins/jenkins.war"` |
|
||||||
|
| [controller.jmxPort](./values.yaml#L385) | string | Open a port, for JMX stats | `nil` |
|
||||||
|
| [controller.legacyRemotingSecurityEnabled](./values.yaml#L361) | bool | Whether legacy remoting security should be enabled | `false` |
|
||||||
|
| [controller.lifecycle](./values.yaml#L51) | object | Lifecycle specification for controller-container | `{}` |
|
||||||
|
| [controller.loadBalancerIP](./values.yaml#L376) | string | Optionally assign a known public LB IP | `nil` |
|
||||||
|
| [controller.loadBalancerSourceRanges](./values.yaml#L372) | list | Allowed inbound IP addresses | `["0.0.0.0/0"]` |
|
||||||
|
| [controller.markupFormatter](./values.yaml#L433) | string | Yaml of the markup formatter to use | `"plainText"` |
|
||||||
|
| [controller.nodePort](./values.yaml#L223) | string | k8s node port. Only used if serviceType is NodePort | `nil` |
|
||||||
|
| [controller.nodeSelector](./values.yaml#L647) | object | Node labels for pod assignment | `{}` |
|
||||||
|
| [controller.numExecutors](./values.yaml#L62) | int | Set Number of executors | `0` |
|
||||||
|
| [controller.overwritePlugins](./values.yaml#L418) | bool | Overwrite installed plugins on start | `false` |
|
||||||
|
| [controller.overwritePluginsFromImage](./values.yaml#L422) | bool | Overwrite plugins that are already installed in the controller image | `true` |
|
||||||
|
| [controller.podAnnotations](./values.yaml#L668) | object | Annotations for controller pod | `{}` |
|
||||||
|
| [controller.podDisruptionBudget.annotations](./values.yaml#L312) | object | | `{}` |
|
||||||
|
| [controller.podDisruptionBudget.apiVersion](./values.yaml#L310) | string | Policy API version | `"policy/v1beta1"` |
|
||||||
|
| [controller.podDisruptionBudget.enabled](./values.yaml#L305) | bool | Enable Kubernetes Pod Disruption Budget configuration | `false` |
|
||||||
|
| [controller.podDisruptionBudget.labels](./values.yaml#L313) | object | | `{}` |
|
||||||
|
| [controller.podDisruptionBudget.maxUnavailable](./values.yaml#L315) | string | Number of pods that can be unavailable. Either an absolute number or a percentage | `"0"` |
|
||||||
|
| [controller.podLabels](./values.yaml#L241) | object | Custom Pod labels (an object with `label-key: label-value` pairs) | `{}` |
|
||||||
|
| [controller.podSecurityContextOverride](./values.yaml#L202) | string | Completely overwrites the contents of the pod security context, ignoring the values provided for `runAsUser`, `fsGroup`, and `securityContextCapabilities` | `nil` |
|
||||||
|
| [controller.priorityClassName](./values.yaml#L665) | string | The name of a `priorityClass` to apply to the controller pod | `nil` |
|
||||||
|
| [controller.probes.livenessProbe.failureThreshold](./values.yaml#L266) | int | Set the failure threshold for the liveness probe | `5` |
|
||||||
|
| [controller.probes.livenessProbe.httpGet.path](./values.yaml#L269) | string | Set the Pod's HTTP path for the liveness probe | `"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"` |
|
||||||
|
| [controller.probes.livenessProbe.httpGet.port](./values.yaml#L271) | string | Set the Pod's HTTP port to use for the liveness probe | `"http"` |
|
||||||
|
| [controller.probes.livenessProbe.initialDelaySeconds](./values.yaml#L280) | string | Set the initial delay for the liveness probe in seconds | `nil` |
|
||||||
|
| [controller.probes.livenessProbe.periodSeconds](./values.yaml#L273) | int | Set the time interval between two liveness probes executions in seconds | `10` |
|
||||||
|
| [controller.probes.livenessProbe.timeoutSeconds](./values.yaml#L275) | int | Set the timeout for the liveness probe in seconds | `5` |
|
||||||
|
| [controller.probes.readinessProbe.failureThreshold](./values.yaml#L284) | int | Set the failure threshold for the readiness probe | `3` |
|
||||||
|
| [controller.probes.readinessProbe.httpGet.path](./values.yaml#L287) | string | Set the Pod's HTTP path for the liveness probe | `"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"` |
|
||||||
|
| [controller.probes.readinessProbe.httpGet.port](./values.yaml#L289) | string | Set the Pod's HTTP port to use for the readiness probe | `"http"` |
|
||||||
|
| [controller.probes.readinessProbe.initialDelaySeconds](./values.yaml#L298) | string | Set the initial delay for the readiness probe in seconds | `nil` |
|
||||||
|
| [controller.probes.readinessProbe.periodSeconds](./values.yaml#L291) | int | Set the time interval between two readiness probes executions in seconds | `10` |
|
||||||
|
| [controller.probes.readinessProbe.timeoutSeconds](./values.yaml#L293) | int | Set the timeout for the readiness probe in seconds | `5` |
|
||||||
|
| [controller.probes.startupProbe.failureThreshold](./values.yaml#L253) | int | Set the failure threshold for the startup probe | `12` |
|
||||||
|
| [controller.probes.startupProbe.httpGet.path](./values.yaml#L256) | string | Set the Pod's HTTP path for the startup probe | `"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"` |
|
||||||
|
| [controller.probes.startupProbe.httpGet.port](./values.yaml#L258) | string | Set the Pod's HTTP port to use for the startup probe | `"http"` |
|
||||||
|
| [controller.probes.startupProbe.periodSeconds](./values.yaml#L260) | int | Set the time interval between two startup probes executions in seconds | `10` |
|
||||||
|
| [controller.probes.startupProbe.timeoutSeconds](./values.yaml#L262) | int | Set the timeout for the startup probe in seconds | `5` |
|
||||||
|
| [controller.projectNamingStrategy](./values.yaml#L425) | string | | `"standard"` |
|
||||||
|
| [controller.prometheus.alertingRulesAdditionalLabels](./values.yaml#L812) | object | Additional labels to add to the PrometheusRule object | `{}` |
|
||||||
|
| [controller.prometheus.alertingrules](./values.yaml#L810) | list | Array of prometheus alerting rules | `[]` |
|
||||||
|
| [controller.prometheus.enabled](./values.yaml#L795) | bool | Enables prometheus service monitor | `false` |
|
||||||
|
| [controller.prometheus.metricRelabelings](./values.yaml#L822) | list | | `[]` |
|
||||||
|
| [controller.prometheus.prometheusRuleNamespace](./values.yaml#L814) | string | Set a custom namespace where to deploy PrometheusRule resource | `""` |
|
||||||
|
| [controller.prometheus.relabelings](./values.yaml#L820) | list | | `[]` |
|
||||||
|
| [controller.prometheus.scrapeEndpoint](./values.yaml#L805) | string | The endpoint prometheus should get metrics from | `"/prometheus"` |
|
||||||
|
| [controller.prometheus.scrapeInterval](./values.yaml#L801) | string | How often prometheus should scrape metrics | `"60s"` |
|
||||||
|
| [controller.prometheus.serviceMonitorAdditionalLabels](./values.yaml#L797) | object | Additional labels to add to the service monitor object | `{}` |
|
||||||
|
| [controller.prometheus.serviceMonitorNamespace](./values.yaml#L799) | string | Set a custom namespace where to deploy ServiceMonitor resource | `nil` |
|
||||||
|
| [controller.resources](./values.yaml#L115) | object | Resource allocation (Requests and Limits) | `{"limits":{"cpu":"2000m","memory":"4096Mi"},"requests":{"cpu":"50m","memory":"256Mi"}}` |
|
||||||
|
| [controller.route.annotations](./values.yaml#L774) | object | Route annotations | `{}` |
|
||||||
|
| [controller.route.enabled](./values.yaml#L770) | bool | Enables openshift route | `false` |
|
||||||
|
| [controller.route.labels](./values.yaml#L772) | object | Route labels | `{}` |
|
||||||
|
| [controller.route.path](./values.yaml#L776) | string | Route path | `nil` |
|
||||||
|
| [controller.runAsUser](./values.yaml#L183) | int | Deprecated in favor of `controller.podSecurityContextOverride`. uid that jenkins runs with. | `1000` |
|
||||||
|
| [controller.schedulerName](./values.yaml#L643) | string | Name of the Kubernetes scheduler to use | `""` |
|
||||||
|
| [controller.scriptApproval](./values.yaml#L437) | list | List of groovy functions to approve | `[]` |
|
||||||
|
| [controller.secondaryingress.annotations](./values.yaml#L737) | object | | `{}` |
|
||||||
|
| [controller.secondaryingress.apiVersion](./values.yaml#L735) | string | | `"extensions/v1beta1"` |
|
||||||
|
| [controller.secondaryingress.enabled](./values.yaml#L729) | bool | | `false` |
|
||||||
|
| [controller.secondaryingress.hostName](./values.yaml#L744) | string | | `nil` |
|
||||||
|
| [controller.secondaryingress.labels](./values.yaml#L736) | object | | `{}` |
|
||||||
|
| [controller.secondaryingress.paths](./values.yaml#L732) | list | | `[]` |
|
||||||
|
| [controller.secondaryingress.tls](./values.yaml#L745) | string | | `nil` |
|
||||||
|
| [controller.secretClaims](./values.yaml#L480) | list | List of `SecretClaim` resources to create | `[]` |
|
||||||
|
| [controller.securityContextCapabilities](./values.yaml#L192) | object | | `{}` |
|
||||||
|
| [controller.serviceAnnotations](./values.yaml#L230) | object | Jenkins controller service annotations | `{}` |
|
||||||
|
| [controller.serviceExternalTrafficPolicy](./values.yaml#L227) | string | | `nil` |
|
||||||
|
| [controller.serviceLabels](./values.yaml#L236) | object | Labels for the Jenkins controller-service | `{}` |
|
||||||
|
| [controller.servicePort](./values.yaml#L219) | int | k8s service port | `8080` |
|
||||||
|
| [controller.serviceType](./values.yaml#L214) | string | k8s service type | `"ClusterIP"` |
|
||||||
|
| [controller.shareProcessNamespace](./values.yaml#L124) | bool | | `false` |
|
||||||
|
| [controller.sidecars.additionalSidecarContainers](./values.yaml#L625) | list | Configures additional sidecar container(s) for the Jenkins controller | `[]` |
|
||||||
|
| [controller.sidecars.configAutoReload.additionalVolumeMounts](./values.yaml#L571) | list | Enables additional volume mounts for the config auto-reload container | `[]` |
|
||||||
|
| [controller.sidecars.configAutoReload.containerSecurityContext](./values.yaml#L620) | object | Enable container security context | `{"allowPrivilegeEscalation":false,"readOnlyRootFilesystem":true}` |
|
||||||
|
| [controller.sidecars.configAutoReload.enabled](./values.yaml#L554) | bool | Enables Jenkins Config as Code auto-reload | `true` |
|
||||||
|
| [controller.sidecars.configAutoReload.env](./values.yaml#L602) | object | Environment variables for the Jenkins Config as Code auto-reload container | `{}` |
|
||||||
|
| [controller.sidecars.configAutoReload.envFrom](./values.yaml#L600) | list | Environment variable sources for the Jenkins Config as Code auto-reload container | `[]` |
|
||||||
|
| [controller.sidecars.configAutoReload.folder](./values.yaml#L613) | string | | `"/var/jenkins_home/casc_configs"` |
|
||||||
|
| [controller.sidecars.configAutoReload.image.registry](./values.yaml#L557) | string | Registry for the image that triggers the reload | `"docker.io"` |
|
||||||
|
| [controller.sidecars.configAutoReload.image.repository](./values.yaml#L559) | string | Repository of the image that triggers the reload | `"kiwigrid/k8s-sidecar"` |
|
||||||
|
| [controller.sidecars.configAutoReload.image.tag](./values.yaml#L561) | string | Tag for the image that triggers the reload | `"1.27.5"` |
|
||||||
|
| [controller.sidecars.configAutoReload.imagePullPolicy](./values.yaml#L562) | string | | `"IfNotPresent"` |
|
||||||
|
| [controller.sidecars.configAutoReload.logging](./values.yaml#L577) | object | Config auto-reload logging settings | `{"configuration":{"backupCount":3,"formatter":"JSON","logLevel":"INFO","logToConsole":true,"logToFile":false,"maxBytes":1024,"override":false}}` |
|
||||||
|
| [controller.sidecars.configAutoReload.logging.configuration.override](./values.yaml#L581) | bool | Enables custom log config utilizing using the settings below. | `false` |
|
||||||
|
| [controller.sidecars.configAutoReload.reqRetryConnect](./values.yaml#L595) | int | How many connection-related errors to retry on | `10` |
|
||||||
|
| [controller.sidecars.configAutoReload.resources](./values.yaml#L563) | object | | `{}` |
|
||||||
|
| [controller.sidecars.configAutoReload.scheme](./values.yaml#L590) | string | The scheme to use when connecting to the Jenkins configuration as code endpoint | `"http"` |
|
||||||
|
| [controller.sidecars.configAutoReload.skipTlsVerify](./values.yaml#L592) | bool | Skip TLS verification when connecting to the Jenkins configuration as code endpoint | `false` |
|
||||||
|
| [controller.sidecars.configAutoReload.sleepTime](./values.yaml#L597) | string | How many seconds to wait before updating config-maps/secrets (sets METHOD=SLEEP on the sidecar) | `nil` |
|
||||||
|
| [controller.sidecars.configAutoReload.sshTcpPort](./values.yaml#L611) | int | | `1044` |
|
||||||
|
| [controller.statefulSetAnnotations](./values.yaml#L670) | object | Annotations for controller StatefulSet | `{}` |
|
||||||
|
| [controller.statefulSetLabels](./values.yaml#L232) | object | Jenkins controller custom labels for the StatefulSet | `{}` |
|
||||||
|
| [controller.targetPort](./values.yaml#L221) | int | k8s target port | `8080` |
|
||||||
|
| [controller.terminationGracePeriodSeconds](./values.yaml#L653) | string | Set TerminationGracePeriodSeconds | `nil` |
|
||||||
|
| [controller.terminationMessagePath](./values.yaml#L655) | string | Set the termination message path | `nil` |
|
||||||
|
| [controller.terminationMessagePolicy](./values.yaml#L657) | string | Set the termination message policy | `nil` |
|
||||||
|
| [controller.testEnabled](./values.yaml#L834) | bool | Can be used to disable rendering controller test resources when using helm template | `true` |
|
||||||
|
| [controller.tolerations](./values.yaml#L651) | list | Toleration labels for pod assignment | `[]` |
|
||||||
|
| [controller.topologySpreadConstraints](./values.yaml#L677) | object | Topology spread constraints | `{}` |
|
||||||
|
| [controller.updateStrategy](./values.yaml#L674) | object | Update strategy for StatefulSet | `{}` |
|
||||||
|
| [controller.usePodSecurityContext](./values.yaml#L176) | bool | Enable pod security context (must be `true` if podSecurityContextOverride, runAsUser or fsGroup are set) | `true` |
|
||||||
|
| [credentialsId](./values.yaml#L27) | string | The Jenkins credentials to access the Kubernetes API server. For the default cluster it is not needed. | `nil` |
|
||||||
|
| [fullnameOverride](./values.yaml#L13) | string | Override the full resource names | `jenkins-(release-name)` or `jenkins` if the release-name is `jenkins` |
|
||||||
|
| [helmtest.bats.image.registry](./values.yaml#L1333) | string | Registry of the image used to test the framework | `"docker.io"` |
|
||||||
|
| [helmtest.bats.image.repository](./values.yaml#L1335) | string | Repository of the image used to test the framework | `"bats/bats"` |
|
||||||
|
| [helmtest.bats.image.tag](./values.yaml#L1337) | string | Tag of the image to test the framework | `"1.11.0"` |
|
||||||
|
| [kubernetesURL](./values.yaml#L24) | string | The URL of the Kubernetes API server | `"https://kubernetes.default"` |
|
||||||
|
| [nameOverride](./values.yaml#L10) | string | Override the resource name prefix | `Chart.Name` |
|
||||||
|
| [namespaceOverride](./values.yaml#L16) | string | Override the deployment namespace | `Release.Namespace` |
|
||||||
|
| [networkPolicy.apiVersion](./values.yaml#L1263) | string | NetworkPolicy ApiVersion | `"networking.k8s.io/v1"` |
|
||||||
|
| [networkPolicy.enabled](./values.yaml#L1258) | bool | Enable the creation of NetworkPolicy resources | `false` |
|
||||||
|
| [networkPolicy.externalAgents.except](./values.yaml#L1277) | list | A list of IP sub-ranges to be excluded from the allowlisted IP range | `[]` |
|
||||||
|
| [networkPolicy.externalAgents.ipCIDR](./values.yaml#L1275) | string | The IP range from which external agents are allowed to connect to controller, i.e., 172.17.0.0/16 | `nil` |
|
||||||
|
| [networkPolicy.internalAgents.allowed](./values.yaml#L1267) | bool | Allow internal agents (from the same cluster) to connect to controller. Agent pods will be filtered based on PodLabels | `true` |
|
||||||
|
| [networkPolicy.internalAgents.namespaceLabels](./values.yaml#L1271) | object | A map of labels (keys/values) that agents namespaces must have to be able to connect to controller | `{}` |
|
||||||
|
| [networkPolicy.internalAgents.podLabels](./values.yaml#L1269) | object | A map of labels (keys/values) that agent pods must have to be able to connect to controller | `{}` |
|
||||||
|
| [persistence.accessMode](./values.yaml#L1233) | string | The PVC access mode | `"ReadWriteOnce"` |
|
||||||
|
| [persistence.annotations](./values.yaml#L1229) | object | Annotations for the PVC | `{}` |
|
||||||
|
| [persistence.dataSource](./values.yaml#L1239) | object | Existing data source to clone PVC from | `{}` |
|
||||||
|
| [persistence.enabled](./values.yaml#L1213) | bool | Enable the use of a Jenkins PVC | `true` |
|
||||||
|
| [persistence.existingClaim](./values.yaml#L1219) | string | Provide the name of a PVC | `nil` |
|
||||||
|
| [persistence.labels](./values.yaml#L1231) | object | Labels for the PVC | `{}` |
|
||||||
|
| [persistence.mounts](./values.yaml#L1251) | list | Additional mounts | `[]` |
|
||||||
|
| [persistence.size](./values.yaml#L1235) | string | The size of the PVC | `"8Gi"` |
|
||||||
|
| [persistence.storageClass](./values.yaml#L1227) | string | Storage class for the PVC | `nil` |
|
||||||
|
| [persistence.subPath](./values.yaml#L1244) | string | SubPath for jenkins-home mount | `nil` |
|
||||||
|
| [persistence.volumes](./values.yaml#L1246) | list | Additional volumes | `[]` |
|
||||||
|
| [rbac.create](./values.yaml#L1283) | bool | Whether RBAC resources are created | `true` |
|
||||||
|
| [rbac.readSecrets](./values.yaml#L1285) | bool | Whether the Jenkins service account should be able to read Kubernetes secrets | `false` |
|
||||||
|
| [renderHelmLabels](./values.yaml#L30) | bool | Enables rendering of the helm.sh/chart label to the annotations | `true` |
|
||||||
|
| [serviceAccount.annotations](./values.yaml#L1295) | object | Configures annotations for the ServiceAccount | `{}` |
|
||||||
|
| [serviceAccount.create](./values.yaml#L1289) | bool | Configures if a ServiceAccount with this name should be created | `true` |
|
||||||
|
| [serviceAccount.extraLabels](./values.yaml#L1297) | object | Configures extra labels for the ServiceAccount | `{}` |
|
||||||
|
| [serviceAccount.imagePullSecretName](./values.yaml#L1299) | string | Controller ServiceAccount image pull secret | `nil` |
|
||||||
|
| [serviceAccount.name](./values.yaml#L1293) | string | | `nil` |
|
||||||
|
| [serviceAccountAgent.annotations](./values.yaml#L1310) | object | Configures annotations for the agent ServiceAccount | `{}` |
|
||||||
|
| [serviceAccountAgent.create](./values.yaml#L1304) | bool | Configures if an agent ServiceAccount should be created | `false` |
|
||||||
|
| [serviceAccountAgent.extraLabels](./values.yaml#L1312) | object | Configures extra labels for the agent ServiceAccount | `{}` |
|
||||||
|
| [serviceAccountAgent.imagePullSecretName](./values.yaml#L1314) | string | Agent ServiceAccount image pull secret | `nil` |
|
||||||
|
| [serviceAccountAgent.name](./values.yaml#L1308) | string | The name of the agent ServiceAccount to be used by access-controlled resources | `nil` |
|
||||||
|
|
@ -0,0 +1,28 @@
|
||||||
|
# Jenkins
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
The following tables list the configurable parameters of the Jenkins chart and their default values.
|
||||||
|
|
||||||
|
{{- define "chart.valueDefaultColumnRender" -}}
|
||||||
|
{{- $defaultValue := (trimAll "`" (default .Default .AutoDefault) | replace "\n" "") -}}
|
||||||
|
`{{- $defaultValue | replace "\n" "" -}}`
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "chart.typeColumnRender" -}}
|
||||||
|
{{- .Type -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "chart.valueDescription" -}}
|
||||||
|
{{- default .Description .AutoDescription }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "chart.valuesTable" -}}
|
||||||
|
| Key | Type | Description | Default |
|
||||||
|
|:----|:-----|:---------|:------------|
|
||||||
|
{{- range .Values }}
|
||||||
|
| [{{ .Key }}](./values.yaml#L{{ .LineNumber }}) | {{ template "chart.typeColumnRender" . }} | {{ template "chart.valueDescription" . }} | {{ template "chart.valueDefaultColumnRender" . }} |
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{ template "chart.valuesSection" . }}
|
||||||
|
|
@ -0,0 +1,68 @@
|
||||||
|
{{- $prefix := .Values.controller.jenkinsUriPrefix | default "" -}}
|
||||||
|
{{- $url := "" -}}
|
||||||
|
1. Get your '{{ .Values.controller.admin.username }}' user password by running:
|
||||||
|
kubectl exec --namespace {{ template "jenkins.namespace" . }} -it svc/{{ template "jenkins.fullname" . }} -c jenkins -- /bin/cat /run/secrets/additional/chart-admin-password && echo
|
||||||
|
{{- if .Values.controller.ingress.hostName -}}
|
||||||
|
{{- if .Values.controller.ingress.tls -}}
|
||||||
|
{{- $url = print "https://" .Values.controller.ingress.hostName $prefix -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $url = print "http://" .Values.controller.ingress.hostName $prefix -}}
|
||||||
|
{{- end }}
|
||||||
|
2. Visit {{ $url }}
|
||||||
|
{{- else }}
|
||||||
|
2. Get the Jenkins URL to visit by running these commands in the same shell:
|
||||||
|
{{- if contains "NodePort" .Values.controller.serviceType }}
|
||||||
|
export NODE_PORT=$(kubectl get --namespace {{ template "jenkins.namespace" . }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ template "jenkins.fullname" . }})
|
||||||
|
export NODE_IP=$(kubectl get nodes --namespace {{ template "jenkins.namespace" . }} -o jsonpath="{.items[0].status.addresses[0].address}")
|
||||||
|
{{- if .Values.controller.httpsKeyStore.enable -}}
|
||||||
|
{{- $url = print "https://$NODE_IP:$NODE_PORT" $prefix -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $url = print "http://$NODE_IP:$NODE_PORT" $prefix -}}
|
||||||
|
{{- end }}
|
||||||
|
echo {{ $url }}
|
||||||
|
|
||||||
|
{{- else if contains "LoadBalancer" .Values.controller.serviceType }}
|
||||||
|
NOTE: It may take a few minutes for the LoadBalancer IP to be available.
|
||||||
|
You can watch the status of by running 'kubectl get svc --namespace {{ template "jenkins.namespace" . }} -w {{ template "jenkins.fullname" . }}'
|
||||||
|
export SERVICE_IP=$(kubectl get svc --namespace {{ template "jenkins.namespace" . }} {{ template "jenkins.fullname" . }} --template "{{ "{{ range (index .status.loadBalancer.ingress 0) }}{{ . }}{{ end }}" }}")
|
||||||
|
{{- if .Values.controller.httpsKeyStore.enable -}}
|
||||||
|
{{- $url = print "https://$SERVICE_IP:" .Values.controller.servicePort $prefix -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $url = print "http://$SERVICE_IP:" .Values.controller.servicePort $prefix -}}
|
||||||
|
{{- end }}
|
||||||
|
echo {{ $url }}
|
||||||
|
|
||||||
|
{{- else if contains "ClusterIP" .Values.controller.serviceType -}}
|
||||||
|
{{- if .Values.controller.httpsKeyStore.enable -}}
|
||||||
|
{{- $url = print "https://127.0.0.1:" .Values.controller.servicePort $prefix -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $url = print "http://127.0.0.1:" .Values.controller.servicePort $prefix -}}
|
||||||
|
{{- end }}
|
||||||
|
echo {{ $url }}
|
||||||
|
kubectl --namespace {{ template "jenkins.namespace" . }} port-forward svc/{{template "jenkins.fullname" . }} {{ .Values.controller.servicePort }}:{{ .Values.controller.servicePort }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
3. Login with the password from step 1 and the username: {{ .Values.controller.admin.username }}
|
||||||
|
4. Configure security realm and authorization strategy
|
||||||
|
5. Use Jenkins Configuration as Code by specifying configScripts in your values.yaml file, see documentation: {{ $url }}/configuration-as-code and examples: https://github.com/jenkinsci/configuration-as-code-plugin/tree/master/demos
|
||||||
|
|
||||||
|
For more information on running Jenkins on Kubernetes, visit:
|
||||||
|
https://cloud.google.com/solutions/jenkins-on-container-engine
|
||||||
|
|
||||||
|
For more information about Jenkins Configuration as Code, visit:
|
||||||
|
https://jenkins.io/projects/jcasc/
|
||||||
|
|
||||||
|
{{ if and (eq .Values.controller.image.repository "jenkins/jenkins") (eq .Values.controller.image.registry "docker.io") }}
|
||||||
|
NOTE: Consider using a custom image with pre-installed plugins
|
||||||
|
{{- else if .Values.controller.installPlugins }}
|
||||||
|
NOTE: Consider disabling `installPlugins` if your image already contains plugins.
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.persistence.enabled }}
|
||||||
|
{{- else }}
|
||||||
|
#################################################################################
|
||||||
|
###### WARNING: Persistence is disabled!!! You will lose your data when #####
|
||||||
|
###### the Jenkins pod is terminated. #####
|
||||||
|
#################################################################################
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,673 @@
|
||||||
|
{{/* vim: set filetype=mustache: */}}
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Expand the label of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.label" -}}
|
||||||
|
{{- printf "%s-%s" (include "jenkins.name" .) .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Allow the release namespace to be overridden for multi-namespace deployments in combined charts.
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.namespace" -}}
|
||||||
|
{{- if .Values.namespaceOverride -}}
|
||||||
|
{{- .Values.namespaceOverride -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- .Release.Namespace -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "jenkins.agent.namespace" -}}
|
||||||
|
{{- if .Values.agent.namespace -}}
|
||||||
|
{{- tpl .Values.agent.namespace . -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- if .Values.namespaceOverride -}}
|
||||||
|
{{- .Values.namespaceOverride -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- .Release.Namespace -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
If release name contains chart name it will be used as a full name.
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.fullname" -}}
|
||||||
|
{{- if .Values.fullnameOverride -}}
|
||||||
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $name := default .Chart.Name .Values.nameOverride -}}
|
||||||
|
{{- if contains $name .Release.Name -}}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Returns the admin password
|
||||||
|
https://github.com/helm/charts/issues/5167#issuecomment-619137759
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.password" -}}
|
||||||
|
{{- if .Values.controller.admin.password -}}
|
||||||
|
{{- .Values.controller.admin.password | b64enc | quote }}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $secret := (lookup "v1" "Secret" .Release.Namespace (include "jenkins.fullname" .)).data -}}
|
||||||
|
{{- if $secret -}}
|
||||||
|
{{/*
|
||||||
|
Reusing current password since secret exists
|
||||||
|
*/}}
|
||||||
|
{{- index $secret ( .Values.controller.admin.passwordKey | default "jenkins-admin-password" ) -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{/*
|
||||||
|
Generate new password
|
||||||
|
*/}}
|
||||||
|
{{- randAlphaNum 22 | b64enc | quote }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Returns the Jenkins URL
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.url" -}}
|
||||||
|
{{- if .Values.controller.jenkinsUrl }}
|
||||||
|
{{- .Values.controller.jenkinsUrl }}
|
||||||
|
{{- else }}
|
||||||
|
{{- if .Values.controller.ingress.hostName }}
|
||||||
|
{{- if .Values.controller.ingress.tls }}
|
||||||
|
{{- default "https" .Values.controller.jenkinsUrlProtocol }}://{{ tpl .Values.controller.ingress.hostName $ }}{{ default "" .Values.controller.jenkinsUriPrefix }}
|
||||||
|
{{- else }}
|
||||||
|
{{- default "http" .Values.controller.jenkinsUrlProtocol }}://{{ tpl .Values.controller.ingress.hostName $ }}{{ default "" .Values.controller.jenkinsUriPrefix }}
|
||||||
|
{{- end }}
|
||||||
|
{{- else }}
|
||||||
|
{{- default "http" .Values.controller.jenkinsUrlProtocol }}://{{ template "jenkins.fullname" . }}:{{.Values.controller.servicePort}}{{ default "" .Values.controller.jenkinsUriPrefix }}
|
||||||
|
{{- end}}
|
||||||
|
{{- end}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Returns configuration as code default config
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.casc.defaults" -}}
|
||||||
|
jenkins:
|
||||||
|
{{- $configScripts := toYaml .Values.controller.JCasC.configScripts }}
|
||||||
|
{{- if and (.Values.controller.JCasC.authorizationStrategy) (not (contains "authorizationStrategy:" $configScripts)) }}
|
||||||
|
authorizationStrategy:
|
||||||
|
{{- tpl .Values.controller.JCasC.authorizationStrategy . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if and (.Values.controller.JCasC.securityRealm) (not (contains "securityRealm:" $configScripts)) }}
|
||||||
|
securityRealm:
|
||||||
|
{{- tpl .Values.controller.JCasC.securityRealm . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
disableRememberMe: {{ .Values.controller.disableRememberMe }}
|
||||||
|
{{- if .Values.controller.legacyRemotingSecurityEnabled }}
|
||||||
|
remotingSecurity:
|
||||||
|
enabled: true
|
||||||
|
{{- end }}
|
||||||
|
mode: {{ .Values.controller.executorMode }}
|
||||||
|
numExecutors: {{ .Values.controller.numExecutors }}
|
||||||
|
{{- if not (kindIs "invalid" .Values.controller.customJenkinsLabels) }}
|
||||||
|
labelString: "{{ join " " .Values.controller.customJenkinsLabels }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.projectNamingStrategy }}
|
||||||
|
{{- if kindIs "string" .Values.controller.projectNamingStrategy }}
|
||||||
|
projectNamingStrategy: "{{ .Values.controller.projectNamingStrategy }}"
|
||||||
|
{{- else }}
|
||||||
|
projectNamingStrategy:
|
||||||
|
{{- toYaml .Values.controller.projectNamingStrategy | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
markupFormatter:
|
||||||
|
{{- if .Values.controller.enableRawHtmlMarkupFormatter }}
|
||||||
|
rawHtml:
|
||||||
|
disableSyntaxHighlighting: true
|
||||||
|
{{- else }}
|
||||||
|
{{- toYaml .Values.controller.markupFormatter | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
clouds:
|
||||||
|
- kubernetes:
|
||||||
|
containerCapStr: "{{ .Values.agent.containerCap }}"
|
||||||
|
{{- if .Values.agent.jnlpregistry }}
|
||||||
|
jnlpregistry: "{{ .Values.agent.jnlpregistry }}"
|
||||||
|
{{- end }}
|
||||||
|
defaultsProviderTemplate: "{{ .Values.agent.defaultsProviderTemplate }}"
|
||||||
|
connectTimeout: "{{ .Values.agent.kubernetesConnectTimeout }}"
|
||||||
|
readTimeout: "{{ .Values.agent.kubernetesReadTimeout }}"
|
||||||
|
{{- if .Values.agent.directConnection }}
|
||||||
|
directConnection: true
|
||||||
|
{{- else }}
|
||||||
|
{{- if .Values.agent.jenkinsUrl }}
|
||||||
|
jenkinsUrl: "{{ tpl .Values.agent.jenkinsUrl . }}"
|
||||||
|
{{- else }}
|
||||||
|
jenkinsUrl: "http://{{ template "jenkins.fullname" . }}.{{ template "jenkins.namespace" . }}.svc.{{.Values.clusterZone}}:{{.Values.controller.servicePort}}{{ default "" .Values.controller.jenkinsUriPrefix }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- if not .Values.agent.websocket }}
|
||||||
|
{{- if .Values.agent.jenkinsTunnel }}
|
||||||
|
jenkinsTunnel: "{{ tpl .Values.agent.jenkinsTunnel . }}"
|
||||||
|
{{- else }}
|
||||||
|
jenkinsTunnel: "{{ template "jenkins.fullname" . }}-agent.{{ template "jenkins.namespace" . }}.svc.{{.Values.clusterZone}}:{{ .Values.controller.agentListenerPort }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- else }}
|
||||||
|
webSocket: true
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
skipTlsVerify: {{ .Values.agent.skipTlsVerify | default false}}
|
||||||
|
usageRestricted: {{ .Values.agent.usageRestricted | default false}}
|
||||||
|
maxRequestsPerHostStr: {{ .Values.agent.maxRequestsPerHostStr | quote }}
|
||||||
|
retentionTimeout: {{ .Values.agent.retentionTimeout | quote }}
|
||||||
|
waitForPodSec: {{ .Values.agent.waitForPodSec | quote }}
|
||||||
|
name: "{{ .Values.controller.cloudName }}"
|
||||||
|
namespace: "{{ template "jenkins.agent.namespace" . }}"
|
||||||
|
restrictedPssSecurityContext: {{ .Values.agent.restrictedPssSecurityContext }}
|
||||||
|
serverUrl: "{{ .Values.kubernetesURL }}"
|
||||||
|
credentialsId: "{{ .Values.credentialsId }}"
|
||||||
|
{{- if .Values.agent.enabled }}
|
||||||
|
podLabels:
|
||||||
|
- key: "jenkins/{{ .Release.Name }}-{{ .Values.agent.componentName }}"
|
||||||
|
value: "true"
|
||||||
|
{{- range $key, $val := .Values.agent.podLabels }}
|
||||||
|
- key: {{ $key | quote }}
|
||||||
|
value: {{ $val | quote }}
|
||||||
|
{{- end }}
|
||||||
|
templates:
|
||||||
|
{{- if not .Values.agent.disableDefaultAgent }}
|
||||||
|
{{- include "jenkins.casc.podTemplate" . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.additionalAgents }}
|
||||||
|
{{- /* save .Values.agent */}}
|
||||||
|
{{- $agent := .Values.agent }}
|
||||||
|
{{- range $name, $additionalAgent := .Values.additionalAgents }}
|
||||||
|
{{- $additionalContainersEmpty := and (hasKey $additionalAgent "additionalContainers") (empty $additionalAgent.additionalContainers) }}
|
||||||
|
{{- /* merge original .Values.agent into additional agent to ensure it at least has the default values */}}
|
||||||
|
{{- $additionalAgent := merge $additionalAgent $agent }}
|
||||||
|
{{- /* clear list of additional containers in case it is configured empty for this agent (merge might have overwritten that) */}}
|
||||||
|
{{- if $additionalContainersEmpty }}
|
||||||
|
{{- $_ := set $additionalAgent "additionalContainers" list }}
|
||||||
|
{{- end }}
|
||||||
|
{{- /* set .Values.agent to $additionalAgent */}}
|
||||||
|
{{- $_ := set $.Values "agent" $additionalAgent }}
|
||||||
|
{{- include "jenkins.casc.podTemplate" $ | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- /* restore .Values.agent */}}
|
||||||
|
{{- $_ := set .Values "agent" $agent }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.agent.podTemplates }}
|
||||||
|
{{- range $key, $val := .Values.agent.podTemplates }}
|
||||||
|
{{- tpl $val $ | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.additionalClouds }}
|
||||||
|
{{- /* save root */}}
|
||||||
|
{{- $oldRoot := deepCopy $ }}
|
||||||
|
{{- range $name, $additionalCloud := .Values.additionalClouds }}
|
||||||
|
{{- $newRoot := deepCopy $ }}
|
||||||
|
{{- /* clear additionalAgents from the copy if override set to `true` */}}
|
||||||
|
{{- if .additionalAgentsOverride }}
|
||||||
|
{{- $_ := set $newRoot.Values "additionalAgents" list}}
|
||||||
|
{{- end}}
|
||||||
|
{{- $newValues := merge $additionalCloud $newRoot.Values }}
|
||||||
|
{{- $_ := set $newRoot "Values" $newValues }}
|
||||||
|
{{- /* clear additionalClouds from the copy */}}
|
||||||
|
{{- $_ := set $newRoot.Values "additionalClouds" list }}
|
||||||
|
{{- with $newRoot}}
|
||||||
|
- kubernetes:
|
||||||
|
containerCapStr: "{{ .Values.agent.containerCap }}"
|
||||||
|
{{- if .Values.agent.jnlpregistry }}
|
||||||
|
jnlpregistry: "{{ .Values.agent.jnlpregistry }}"
|
||||||
|
{{- end }}
|
||||||
|
defaultsProviderTemplate: "{{ .Values.agent.defaultsProviderTemplate }}"
|
||||||
|
connectTimeout: "{{ .Values.agent.kubernetesConnectTimeout }}"
|
||||||
|
readTimeout: "{{ .Values.agent.kubernetesReadTimeout }}"
|
||||||
|
{{- if .Values.agent.directConnection }}
|
||||||
|
directConnection: true
|
||||||
|
{{- else }}
|
||||||
|
{{- if .Values.agent.jenkinsUrl }}
|
||||||
|
jenkinsUrl: "{{ tpl .Values.agent.jenkinsUrl . }}"
|
||||||
|
{{- else }}
|
||||||
|
jenkinsUrl: "http://{{ template "jenkins.fullname" . }}.{{ template "jenkins.namespace" . }}.svc.{{.Values.clusterZone}}:{{.Values.controller.servicePort}}{{ default "" .Values.controller.jenkinsUriPrefix }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- if not .Values.agent.websocket }}
|
||||||
|
{{- if .Values.agent.jenkinsTunnel }}
|
||||||
|
jenkinsTunnel: "{{ tpl .Values.agent.jenkinsTunnel . }}"
|
||||||
|
{{- else }}
|
||||||
|
jenkinsTunnel: "{{ template "jenkins.fullname" . }}-agent.{{ template "jenkins.namespace" . }}.svc.{{.Values.clusterZone}}:{{ .Values.controller.agentListenerPort }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- else }}
|
||||||
|
webSocket: true
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
skipTlsVerify: {{ .Values.agent.skipTlsVerify | default false}}
|
||||||
|
usageRestricted: {{ .Values.agent.usageRestricted | default false}}
|
||||||
|
maxRequestsPerHostStr: {{ .Values.agent.maxRequestsPerHostStr | quote }}
|
||||||
|
retentionTimeout: {{ .Values.agent.retentionTimeout | quote }}
|
||||||
|
waitForPodSec: {{ .Values.agent.waitForPodSec | quote }}
|
||||||
|
name: {{ $name | quote }}
|
||||||
|
namespace: "{{ template "jenkins.agent.namespace" . }}"
|
||||||
|
restrictedPssSecurityContext: {{ .Values.agent.restrictedPssSecurityContext }}
|
||||||
|
serverUrl: "{{ .Values.kubernetesURL }}"
|
||||||
|
credentialsId: "{{ .Values.credentialsId }}"
|
||||||
|
{{- if .Values.agent.enabled }}
|
||||||
|
podLabels:
|
||||||
|
- key: "jenkins/{{ .Release.Name }}-{{ .Values.agent.componentName }}"
|
||||||
|
value: "true"
|
||||||
|
{{- range $key, $val := .Values.agent.podLabels }}
|
||||||
|
- key: {{ $key | quote }}
|
||||||
|
value: {{ $val | quote }}
|
||||||
|
{{- end }}
|
||||||
|
templates:
|
||||||
|
{{- if not .Values.agent.disableDefaultAgent }}
|
||||||
|
{{- include "jenkins.casc.podTemplate" . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.additionalAgents }}
|
||||||
|
{{- /* save .Values.agent */}}
|
||||||
|
{{- $agent := .Values.agent }}
|
||||||
|
{{- range $name, $additionalAgent := .Values.additionalAgents }}
|
||||||
|
{{- $additionalContainersEmpty := and (hasKey $additionalAgent "additionalContainers") (empty $additionalAgent.additionalContainers) }}
|
||||||
|
{{- /* merge original .Values.agent into additional agent to ensure it at least has the default values */}}
|
||||||
|
{{- $additionalAgent := merge $additionalAgent $agent }}
|
||||||
|
{{- /* clear list of additional containers in case it is configured empty for this agent (merge might have overwritten that) */}}
|
||||||
|
{{- if $additionalContainersEmpty }}
|
||||||
|
{{- $_ := set $additionalAgent "additionalContainers" list }}
|
||||||
|
{{- end }}
|
||||||
|
{{- /* set .Values.agent to $additionalAgent */}}
|
||||||
|
{{- $_ := set $.Values "agent" $additionalAgent }}
|
||||||
|
{{- include "jenkins.casc.podTemplate" $ | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- /* restore .Values.agent */}}
|
||||||
|
{{- $_ := set .Values "agent" $agent }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.agent.podTemplates }}
|
||||||
|
{{- range $key, $val := . }}
|
||||||
|
{{- tpl $val $ | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- /* restore root */}}
|
||||||
|
{{- $_ := set $ "Values" $oldRoot.Values }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.csrf.defaultCrumbIssuer.enabled }}
|
||||||
|
crumbIssuer:
|
||||||
|
standard:
|
||||||
|
excludeClientIPFromCrumb: {{ if .Values.controller.csrf.defaultCrumbIssuer.proxyCompatability }}true{{ else }}false{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- include "jenkins.casc.security" . }}
|
||||||
|
{{- with .Values.controller.scriptApproval }}
|
||||||
|
scriptApproval:
|
||||||
|
approvedSignatures:
|
||||||
|
{{- range $key, $val := . }}
|
||||||
|
- "{{ $val }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
unclassified:
|
||||||
|
location:
|
||||||
|
{{- with .Values.controller.jenkinsAdminEmail }}
|
||||||
|
adminAddress: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
url: {{ template "jenkins.url" . }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Returns a name template to be used for jcasc configmaps, using
|
||||||
|
suffix passed in at call as index 0
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.casc.configName" -}}
|
||||||
|
{{- $name := index . 0 -}}
|
||||||
|
{{- $root := index . 1 -}}
|
||||||
|
"{{- include "jenkins.fullname" $root -}}-jenkins-{{ $name }}"
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Returns kubernetes pod template configuration as code
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.casc.podTemplate" -}}
|
||||||
|
- name: "{{ .Values.agent.podName }}"
|
||||||
|
namespace: "{{ template "jenkins.agent.namespace" . }}"
|
||||||
|
{{- if .Values.agent.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- range $key, $value := .Values.agent.annotations }}
|
||||||
|
- key: {{ $key }}
|
||||||
|
value: {{ $value | quote }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
id: {{ sha256sum (toYaml .Values.agent) }}
|
||||||
|
containers:
|
||||||
|
- name: "{{ .Values.agent.sideContainerName }}"
|
||||||
|
alwaysPullImage: {{ .Values.agent.alwaysPullImage }}
|
||||||
|
args: "{{ .Values.agent.args | replace "$" "^$" }}"
|
||||||
|
{{- with .Values.agent.command }}
|
||||||
|
command: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
envVars:
|
||||||
|
- envVar:
|
||||||
|
{{- if .Values.agent.directConnection }}
|
||||||
|
key: "JENKINS_DIRECT_CONNECTION"
|
||||||
|
{{- if .Values.agent.jenkinsTunnel }}
|
||||||
|
value: "{{ tpl .Values.agent.jenkinsTunnel . }}"
|
||||||
|
{{- else }}
|
||||||
|
value: "{{ template "jenkins.fullname" . }}-agent.{{ template "jenkins.namespace" . }}.svc.{{.Values.clusterZone}}:{{ .Values.controller.agentListenerPort }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- else }}
|
||||||
|
key: "JENKINS_URL"
|
||||||
|
{{- if .Values.agent.jenkinsUrl }}
|
||||||
|
value: {{ tpl .Values.agent.jenkinsUrl . }}
|
||||||
|
{{- else }}
|
||||||
|
value: "http://{{ template "jenkins.fullname" . }}.{{ template "jenkins.namespace" . }}.svc.{{.Values.clusterZone}}:{{.Values.controller.servicePort}}{{ default "/" .Values.controller.jenkinsUriPrefix }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
image: "{{ .Values.agent.image.repository }}:{{ .Values.agent.image.tag }}"
|
||||||
|
{{- if .Values.agent.livenessProbe }}
|
||||||
|
livenessProbe:
|
||||||
|
execArgs: {{.Values.agent.livenessProbe.execArgs | quote}}
|
||||||
|
failureThreshold: {{.Values.agent.livenessProbe.failureThreshold}}
|
||||||
|
initialDelaySeconds: {{.Values.agent.livenessProbe.initialDelaySeconds}}
|
||||||
|
periodSeconds: {{.Values.agent.livenessProbe.periodSeconds}}
|
||||||
|
successThreshold: {{.Values.agent.livenessProbe.successThreshold}}
|
||||||
|
timeoutSeconds: {{.Values.agent.livenessProbe.timeoutSeconds}}
|
||||||
|
{{- end }}
|
||||||
|
privileged: "{{- if .Values.agent.privileged }}true{{- else }}false{{- end }}"
|
||||||
|
resourceLimitCpu: {{.Values.agent.resources.limits.cpu}}
|
||||||
|
resourceLimitMemory: {{.Values.agent.resources.limits.memory}}
|
||||||
|
{{- with .Values.agent.resources.limits.ephemeralStorage }}
|
||||||
|
resourceLimitEphemeralStorage: {{.}}
|
||||||
|
{{- end }}
|
||||||
|
resourceRequestCpu: {{.Values.agent.resources.requests.cpu}}
|
||||||
|
resourceRequestMemory: {{.Values.agent.resources.requests.memory}}
|
||||||
|
{{- with .Values.agent.resources.requests.ephemeralStorage }}
|
||||||
|
resourceRequestEphemeralStorage: {{.}}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.agent.runAsUser }}
|
||||||
|
runAsUser: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.agent.runAsGroup }}
|
||||||
|
runAsGroup: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
ttyEnabled: {{ .Values.agent.TTYEnabled }}
|
||||||
|
workingDir: {{ .Values.agent.workingDir }}
|
||||||
|
{{- range $additionalContainers := .Values.agent.additionalContainers }}
|
||||||
|
- name: "{{ $additionalContainers.sideContainerName }}"
|
||||||
|
alwaysPullImage: {{ $additionalContainers.alwaysPullImage | default $.Values.agent.alwaysPullImage }}
|
||||||
|
args: "{{ $additionalContainers.args | replace "$" "^$" }}"
|
||||||
|
{{- with $additionalContainers.command }}
|
||||||
|
command: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
envVars:
|
||||||
|
- envVar:
|
||||||
|
key: "JENKINS_URL"
|
||||||
|
{{- if $additionalContainers.jenkinsUrl }}
|
||||||
|
value: {{ tpl ($additionalContainers.jenkinsUrl) . }}
|
||||||
|
{{- else }}
|
||||||
|
value: "http://{{ template "jenkins.fullname" $ }}.{{ template "jenkins.namespace" $ }}.svc.{{ $.Values.clusterZone }}:{{ $.Values.controller.servicePort }}{{ default "/" $.Values.controller.jenkinsUriPrefix }}"
|
||||||
|
{{- end }}
|
||||||
|
image: "{{ $additionalContainers.image.repository }}:{{ $additionalContainers.image.tag }}"
|
||||||
|
{{- if $additionalContainers.livenessProbe }}
|
||||||
|
livenessProbe:
|
||||||
|
execArgs: {{$additionalContainers.livenessProbe.execArgs | quote}}
|
||||||
|
failureThreshold: {{$additionalContainers.livenessProbe.failureThreshold}}
|
||||||
|
initialDelaySeconds: {{$additionalContainers.livenessProbe.initialDelaySeconds}}
|
||||||
|
periodSeconds: {{$additionalContainers.livenessProbe.periodSeconds}}
|
||||||
|
successThreshold: {{$additionalContainers.livenessProbe.successThreshold}}
|
||||||
|
timeoutSeconds: {{$additionalContainers.livenessProbe.timeoutSeconds}}
|
||||||
|
{{- end }}
|
||||||
|
privileged: "{{- if $additionalContainers.privileged }}true{{- else }}false{{- end }}"
|
||||||
|
resourceLimitCpu: {{ if $additionalContainers.resources }}{{ $additionalContainers.resources.limits.cpu }}{{ else }}{{ $.Values.agent.resources.limits.cpu }}{{ end }}
|
||||||
|
resourceLimitMemory: {{ if $additionalContainers.resources }}{{ $additionalContainers.resources.limits.memory }}{{ else }}{{ $.Values.agent.resources.limits.memory }}{{ end }}
|
||||||
|
resourceRequestCpu: {{ if $additionalContainers.resources }}{{ $additionalContainers.resources.requests.cpu }}{{ else }}{{ $.Values.agent.resources.requests.cpu }}{{ end }}
|
||||||
|
resourceRequestMemory: {{ if $additionalContainers.resources }}{{ $additionalContainers.resources.requests.memory }}{{ else }}{{ $.Values.agent.resources.requests.memory }}{{ end }}
|
||||||
|
{{- if or $additionalContainers.runAsUser $.Values.agent.runAsUser }}
|
||||||
|
runAsUser: {{ $additionalContainers.runAsUser | default $.Values.agent.runAsUser }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if or $additionalContainers.runAsGroup $.Values.agent.runAsGroup }}
|
||||||
|
runAsGroup: {{ $additionalContainers.runAsGroup | default $.Values.agent.runAsGroup }}
|
||||||
|
{{- end }}
|
||||||
|
ttyEnabled: {{ $additionalContainers.TTYEnabled | default $.Values.agent.TTYEnabled }}
|
||||||
|
workingDir: {{ $additionalContainers.workingDir | default $.Values.agent.workingDir }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if or .Values.agent.envVars .Values.agent.secretEnvVars }}
|
||||||
|
envVars:
|
||||||
|
{{- range $index, $var := .Values.agent.envVars }}
|
||||||
|
- envVar:
|
||||||
|
key: {{ $var.name }}
|
||||||
|
value: {{ tpl $var.value $ }}
|
||||||
|
{{- end }}
|
||||||
|
{{- range $index, $var := .Values.agent.secretEnvVars }}
|
||||||
|
- secretEnvVar:
|
||||||
|
key: {{ $var.key }}
|
||||||
|
secretName: {{ $var.secretName }}
|
||||||
|
secretKey: {{ $var.secretKey }}
|
||||||
|
optional: {{ $var.optional | default false }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
idleMinutes: {{ .Values.agent.idleMinutes }}
|
||||||
|
instanceCap: 2147483647
|
||||||
|
{{- if .Values.agent.hostNetworking }}
|
||||||
|
hostNetwork: {{ .Values.agent.hostNetworking }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.agent.imagePullSecretName }}
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: {{ .Values.agent.imagePullSecretName }}
|
||||||
|
{{- end }}
|
||||||
|
label: "{{ .Release.Name }}-{{ .Values.agent.componentName }} {{ .Values.agent.customJenkinsLabels | join " " }}"
|
||||||
|
{{- if .Values.agent.nodeSelector }}
|
||||||
|
nodeSelector:
|
||||||
|
{{- $local := dict "first" true }}
|
||||||
|
{{- range $key, $value := .Values.agent.nodeSelector }}
|
||||||
|
{{- if $local.first }} {{ else }},{{ end }}
|
||||||
|
{{- $key }}={{ tpl $value $ }}
|
||||||
|
{{- $_ := set $local "first" false }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
nodeUsageMode: {{ quote .Values.agent.nodeUsageMode }}
|
||||||
|
podRetention: {{ .Values.agent.podRetention }}
|
||||||
|
showRawYaml: {{ .Values.agent.showRawYaml }}
|
||||||
|
serviceAccount: "{{ include "jenkins.serviceAccountAgentName" . }}"
|
||||||
|
slaveConnectTimeoutStr: "{{ .Values.agent.connectTimeout }}"
|
||||||
|
{{- if .Values.agent.volumes }}
|
||||||
|
volumes:
|
||||||
|
{{- range $index, $volume := .Values.agent.volumes }}
|
||||||
|
-{{- if (eq $volume.type "ConfigMap") }} configMapVolume:
|
||||||
|
{{- else if (eq $volume.type "EmptyDir") }} emptyDirVolume:
|
||||||
|
{{- else if (eq $volume.type "EphemeralVolume") }} genericEphemeralVolume:
|
||||||
|
{{- else if (eq $volume.type "HostPath") }} hostPathVolume:
|
||||||
|
{{- else if (eq $volume.type "Nfs") }} nfsVolume:
|
||||||
|
{{- else if (eq $volume.type "PVC") }} persistentVolumeClaim:
|
||||||
|
{{- else if (eq $volume.type "Secret") }} secretVolume:
|
||||||
|
{{- else }} {{ $volume.type }}:
|
||||||
|
{{- end }}
|
||||||
|
{{- range $key, $value := $volume }}
|
||||||
|
{{- if not (eq $key "type") }}
|
||||||
|
{{ $key }}: {{ if kindIs "string" $value }}{{ tpl $value $ | quote }}{{ else }}{{ $value }}{{ end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.agent.workspaceVolume }}
|
||||||
|
workspaceVolume:
|
||||||
|
{{- if (eq .Values.agent.workspaceVolume.type "DynamicPVC") }}
|
||||||
|
dynamicPVC:
|
||||||
|
{{- else if (eq .Values.agent.workspaceVolume.type "EmptyDir") }}
|
||||||
|
emptyDirWorkspaceVolume:
|
||||||
|
{{- else if (eq .Values.agent.workspaceVolume.type "EphemeralVolume") }}
|
||||||
|
genericEphemeralVolume:
|
||||||
|
{{- else if (eq .Values.agent.workspaceVolume.type "HostPath") }}
|
||||||
|
hostPathWorkspaceVolume:
|
||||||
|
{{- else if (eq .Values.agent.workspaceVolume.type "Nfs") }}
|
||||||
|
nfsWorkspaceVolume:
|
||||||
|
{{- else if (eq .Values.agent.workspaceVolume.type "PVC") }}
|
||||||
|
persistentVolumeClaimWorkspaceVolume:
|
||||||
|
{{- else }}
|
||||||
|
{{ .Values.agent.workspaceVolume.type }}:
|
||||||
|
{{- end }}
|
||||||
|
{{- range $key, $value := .Values.agent.workspaceVolume }}
|
||||||
|
{{- if not (eq $key "type") }}
|
||||||
|
{{ $key }}: {{ if kindIs "string" $value }}{{ tpl $value $ | quote }}{{ else }}{{ $value }}{{ end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.agent.yamlTemplate }}
|
||||||
|
yaml: |-
|
||||||
|
{{- tpl (trim .Values.agent.yamlTemplate) . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
yamlMergeStrategy: {{ .Values.agent.yamlMergeStrategy }}
|
||||||
|
inheritYamlMergeStrategy: {{ .Values.agent.inheritYamlMergeStrategy }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "jenkins.kubernetes-version" -}}
|
||||||
|
{{- if .Values.controller.installPlugins -}}
|
||||||
|
{{- range .Values.controller.installPlugins -}}
|
||||||
|
{{- if hasPrefix "kubernetes:" . }}
|
||||||
|
{{- $split := splitList ":" . }}
|
||||||
|
{{- printf "%s" (index $split 1 ) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "jenkins.casc.security" }}
|
||||||
|
security:
|
||||||
|
{{- with .Values.controller.JCasC }}
|
||||||
|
{{- if .security }}
|
||||||
|
{{- .security | toYaml | nindent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the name of the service account to use
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.serviceAccountName" -}}
|
||||||
|
{{- if .Values.serviceAccount.create -}}
|
||||||
|
{{ default (include "jenkins.fullname" .) .Values.serviceAccount.name }}
|
||||||
|
{{- else -}}
|
||||||
|
{{ default "default" .Values.serviceAccount.name }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the name of the service account for Jenkins agents to use
|
||||||
|
*/}}
|
||||||
|
{{- define "jenkins.serviceAccountAgentName" -}}
|
||||||
|
{{- if .Values.serviceAccountAgent.create -}}
|
||||||
|
{{ default (printf "%s-%s" (include "jenkins.fullname" .) "agent") .Values.serviceAccountAgent.name }}
|
||||||
|
{{- else -}}
|
||||||
|
{{ default "default" .Values.serviceAccountAgent.name }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a full tag name for controller image
|
||||||
|
*/}}
|
||||||
|
{{- define "controller.image.tag" -}}
|
||||||
|
{{- if .Values.controller.image.tagLabel -}}
|
||||||
|
{{- default (printf "%s-%s" .Chart.AppVersion .Values.controller.image.tagLabel) .Values.controller.image.tag -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- default .Chart.AppVersion .Values.controller.image.tag -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the HTTP port for interacting with the controller
|
||||||
|
*/}}
|
||||||
|
{{- define "controller.httpPort" -}}
|
||||||
|
{{- if .Values.controller.httpsKeyStore.enable -}}
|
||||||
|
{{- .Values.controller.httpsKeyStore.httpPort -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- .Values.controller.targetPort -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "jenkins.configReloadContainer" -}}
|
||||||
|
{{- $root := index . 0 -}}
|
||||||
|
{{- $containerName := index . 1 -}}
|
||||||
|
{{- $containerType := index . 2 -}}
|
||||||
|
- name: {{ $containerName }}
|
||||||
|
image: "{{ $root.Values.controller.sidecars.configAutoReload.image.registry }}/{{ $root.Values.controller.sidecars.configAutoReload.image.repository }}:{{ $root.Values.controller.sidecars.configAutoReload.image.tag }}"
|
||||||
|
imagePullPolicy: {{ $root.Values.controller.sidecars.configAutoReload.imagePullPolicy }}
|
||||||
|
{{- if $root.Values.controller.sidecars.configAutoReload.containerSecurityContext }}
|
||||||
|
securityContext: {{- toYaml $root.Values.controller.sidecars.configAutoReload.containerSecurityContext | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $root.Values.controller.sidecars.configAutoReload.envFrom }}
|
||||||
|
envFrom:
|
||||||
|
{{ (tpl (toYaml $root.Values.controller.sidecars.configAutoReload.envFrom) $root) | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
env:
|
||||||
|
- name: POD_NAME
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.name
|
||||||
|
- name: LABEL
|
||||||
|
value: "{{ template "jenkins.fullname" $root }}-jenkins-config"
|
||||||
|
- name: FOLDER
|
||||||
|
value: "{{ $root.Values.controller.sidecars.configAutoReload.folder }}"
|
||||||
|
- name: NAMESPACE
|
||||||
|
value: '{{ $root.Values.controller.sidecars.configAutoReload.searchNamespace | default (include "jenkins.namespace" $root) }}'
|
||||||
|
{{- if eq $containerType "init" }}
|
||||||
|
- name: METHOD
|
||||||
|
value: "LIST"
|
||||||
|
{{- else if $root.Values.controller.sidecars.configAutoReload.sleepTime }}
|
||||||
|
- name: METHOD
|
||||||
|
value: "SLEEP"
|
||||||
|
- name: SLEEP_TIME
|
||||||
|
value: "{{ $root.Values.controller.sidecars.configAutoReload.sleepTime }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- if eq $containerType "sidecar" }}
|
||||||
|
- name: REQ_URL
|
||||||
|
value: "{{- default "http" $root.Values.controller.sidecars.configAutoReload.scheme }}://localhost:{{- include "controller.httpPort" $root -}}{{- $root.Values.controller.jenkinsUriPrefix -}}/reload-configuration-as-code/?casc-reload-token=$(POD_NAME)"
|
||||||
|
- name: REQ_METHOD
|
||||||
|
value: "POST"
|
||||||
|
- name: REQ_RETRY_CONNECT
|
||||||
|
value: "{{ $root.Values.controller.sidecars.configAutoReload.reqRetryConnect }}"
|
||||||
|
{{- if $root.Values.controller.sidecars.configAutoReload.skipTlsVerify }}
|
||||||
|
- name: REQ_SKIP_TLS_VERIFY
|
||||||
|
value: "true"
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if $root.Values.controller.sidecars.configAutoReload.env }}
|
||||||
|
{{- range $envVarItem := $root.Values.controller.sidecars.configAutoReload.env -}}
|
||||||
|
{{- if or (ne $containerType "init") (ne .name "METHOD") }}
|
||||||
|
{{- (tpl (toYaml (list $envVarItem)) $root) | nindent 4 }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $root.Values.controller.sidecars.configAutoReload.logging.configuration.override }}
|
||||||
|
- name: LOG_CONFIG
|
||||||
|
value: "{{ $root.Values.controller.jenkinsHome }}/auto-reload/auto-reload-config.yaml"
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
resources:
|
||||||
|
{{ toYaml $root.Values.controller.sidecars.configAutoReload.resources | indent 4 }}
|
||||||
|
volumeMounts:
|
||||||
|
- name: sc-config-volume
|
||||||
|
mountPath: {{ $root.Values.controller.sidecars.configAutoReload.folder | quote }}
|
||||||
|
- name: jenkins-home
|
||||||
|
mountPath: {{ $root.Values.controller.jenkinsHome }}
|
||||||
|
{{- if $root.Values.persistence.subPath }}
|
||||||
|
subPath: {{ $root.Values.persistence.subPath }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $root.Values.controller.sidecars.configAutoReload.logging.configuration.override }}
|
||||||
|
- name: auto-reload-config
|
||||||
|
mountPath: {{ $root.Values.controller.jenkinsHome }}/auto-reload
|
||||||
|
- name: auto-reload-config-logs
|
||||||
|
mountPath: {{ $root.Values.controller.jenkinsHome }}/auto-reload-logs
|
||||||
|
{{- end }}
|
||||||
|
{{- if $root.Values.controller.sidecars.configAutoReload.additionalVolumeMounts }}
|
||||||
|
{{ (tpl (toYaml $root.Values.controller.sidecars.configAutoReload.additionalVolumeMounts) $root) | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- end -}}
|
||||||
|
|
@ -0,0 +1,60 @@
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.logging.configuration.override }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-auto-reload-config
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": {{ template "jenkins.name" . }}
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ .Chart.Name }}-{{ .Chart.Version }}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ $.Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ $.Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ $.Values.controller.componentName }}"
|
||||||
|
data:
|
||||||
|
auto-reload-config.yaml: |-
|
||||||
|
version: 1
|
||||||
|
disable_existing_loggers: false
|
||||||
|
root:
|
||||||
|
level: {{ .Values.controller.sidecars.configAutoReload.logging.configuration.logLevel }}
|
||||||
|
handlers:
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.logging.configuration.logToConsole}}
|
||||||
|
- console
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.logging.configuration.logToFile }}
|
||||||
|
- file
|
||||||
|
{{- end }}
|
||||||
|
handlers:
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.logging.configuration.logToConsole}}
|
||||||
|
console:
|
||||||
|
class: logging.StreamHandler
|
||||||
|
level: {{ .Values.controller.sidecars.configAutoReload.logging.configuration.logLevel }}
|
||||||
|
formatter: {{ .Values.controller.sidecars.configAutoReload.logging.configuration.formatter }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.logging.configuration.logToFile }}
|
||||||
|
file:
|
||||||
|
class : logging.handlers.RotatingFileHandler
|
||||||
|
formatter: {{ .Values.controller.sidecars.configAutoReload.logging.configuration.formatter }}
|
||||||
|
filename: {{ .Values.controller.jenkinsHome }}/auto-reload-logs/file.log
|
||||||
|
maxBytes: {{ .Values.controller.sidecars.configAutoReload.logging.configuration.maxBytes }}
|
||||||
|
backupCount: {{ .Values.controller.sidecars.configAutoReload.logging.configuration.backupCount }}
|
||||||
|
{{- end }}
|
||||||
|
formatters:
|
||||||
|
JSON:
|
||||||
|
"()": logger.JsonFormatter
|
||||||
|
format: "%(levelname)s %(message)s"
|
||||||
|
rename_fields:
|
||||||
|
message: msg
|
||||||
|
levelname: level
|
||||||
|
LOGFMT:
|
||||||
|
"()": logger.LogfmtFormatter
|
||||||
|
keys:
|
||||||
|
- time
|
||||||
|
- level
|
||||||
|
- msg
|
||||||
|
mapping:
|
||||||
|
time: asctime
|
||||||
|
level: levelname
|
||||||
|
msg: message
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,18 @@
|
||||||
|
{{- if .Values.controller.initScripts -}}
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-init-scripts
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
data:
|
||||||
|
{{- range $key, $val := .Values.controller.initScripts }}
|
||||||
|
init{{ $key }}.groovy: |-
|
||||||
|
{{ tpl $val $ | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,92 @@
|
||||||
|
{{- $jenkinsHome := .Values.controller.jenkinsHome -}}
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
data:
|
||||||
|
apply_config.sh: |-
|
||||||
|
set -e
|
||||||
|
{{- if .Values.controller.initializeOnce }}
|
||||||
|
if [ -f {{ .Values.controller.jenkinsHome }}/initialization-completed ]; then
|
||||||
|
echo "controller was previously initialized, refusing to re-initialize"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
{{- end }}
|
||||||
|
echo "disable Setup Wizard"
|
||||||
|
# Prevent Setup Wizard when JCasC is enabled
|
||||||
|
echo $JENKINS_VERSION > {{ .Values.controller.jenkinsHome }}/jenkins.install.UpgradeWizard.state
|
||||||
|
echo $JENKINS_VERSION > {{ .Values.controller.jenkinsHome }}/jenkins.install.InstallUtil.lastExecVersion
|
||||||
|
{{- if .Values.controller.overwritePlugins }}
|
||||||
|
echo "remove all plugins from shared volume"
|
||||||
|
# remove all plugins from shared volume
|
||||||
|
rm -rf {{ .Values.controller.jenkinsHome }}/plugins/*
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.JCasC.overwriteConfiguration }}
|
||||||
|
echo "deleting all XML config files"
|
||||||
|
rm -f {{ .Values.controller.jenkinsHome }}/config.xml
|
||||||
|
rm -f {{ .Values.controller.jenkinsHome }}/*plugins*.xml
|
||||||
|
find {{ .Values.controller.jenkinsHome }} -maxdepth 1 -type f -iname '*configuration*.xml' -exec rm -f {} \;
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.installPlugins }}
|
||||||
|
echo "download plugins"
|
||||||
|
# Install missing plugins
|
||||||
|
cp /var/jenkins_config/plugins.txt {{ .Values.controller.jenkinsHome }};
|
||||||
|
rm -rf {{ .Values.controller.jenkinsRef }}/plugins/*.lock
|
||||||
|
version () { echo "$@" | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }'; }
|
||||||
|
if [ -f "{{ .Values.controller.jenkinsWar }}" ] && [ -n "$(command -v jenkins-plugin-cli)" 2>/dev/null ] && [ $(version $(jenkins-plugin-cli --version)) -ge $(version "2.1.1") ]; then
|
||||||
|
jenkins-plugin-cli --verbose --war "{{ .Values.controller.jenkinsWar }}" --plugin-file "{{ .Values.controller.jenkinsHome }}/plugins.txt" --latest {{ .Values.controller.installLatestPlugins }}{{- if .Values.controller.installLatestSpecifiedPlugins }} --latest-specified{{- end }};
|
||||||
|
else
|
||||||
|
/usr/local/bin/install-plugins.sh `echo $(cat {{ .Values.controller.jenkinsHome }}/plugins.txt)`;
|
||||||
|
fi
|
||||||
|
echo "copy plugins to shared volume"
|
||||||
|
# Copy plugins to shared volume
|
||||||
|
yes n | cp -i {{ .Values.controller.jenkinsRef }}/plugins/* /var/jenkins_plugins/;
|
||||||
|
{{- end }}
|
||||||
|
{{- if not .Values.controller.sidecars.configAutoReload.enabled }}
|
||||||
|
echo "copy configuration as code files"
|
||||||
|
mkdir -p {{ .Values.controller.jenkinsHome }}/casc_configs;
|
||||||
|
rm -rf {{ .Values.controller.jenkinsHome }}/casc_configs/*
|
||||||
|
{{- if or .Values.controller.JCasC.defaultConfig .Values.controller.JCasC.configScripts }}
|
||||||
|
cp -v /var/jenkins_config/*.yaml {{ .Values.controller.jenkinsHome }}/casc_configs
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
echo "finished initialization"
|
||||||
|
{{- if .Values.controller.initializeOnce }}
|
||||||
|
touch {{ .Values.controller.jenkinsHome }}/initialization-completed
|
||||||
|
{{- end }}
|
||||||
|
{{- if not .Values.controller.sidecars.configAutoReload.enabled }}
|
||||||
|
# Only add config to this script if we aren't auto-reloading otherwise the pod will restart upon each config change:
|
||||||
|
{{- if .Values.controller.JCasC.defaultConfig }}
|
||||||
|
jcasc-default-config.yaml: |-
|
||||||
|
{{- include "jenkins.casc.defaults" . |nindent 4}}
|
||||||
|
{{- end }}
|
||||||
|
{{- range $key, $val := .Values.controller.JCasC.configScripts }}
|
||||||
|
{{ $key }}.yaml: |-
|
||||||
|
{{ tpl $val $| indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
plugins.txt: |-
|
||||||
|
{{- if .Values.controller.installPlugins }}
|
||||||
|
{{- range $installPlugin := .Values.controller.installPlugins }}
|
||||||
|
{{- $installPlugin | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- range $addlPlugin := .Values.controller.additionalPlugins }}
|
||||||
|
{{- /* duplicate plugin check */}}
|
||||||
|
{{- range $installPlugin := $.Values.controller.installPlugins }}
|
||||||
|
{{- if eq (splitList ":" $addlPlugin | first) (splitList ":" $installPlugin | first) }}
|
||||||
|
{{- $message := print "[PLUGIN CONFLICT] controller.additionalPlugins contains '" $addlPlugin "'" }}
|
||||||
|
{{- $message := print $message " but controller.installPlugins already contains '" $installPlugin "'." }}
|
||||||
|
{{- $message := print $message " Override controller.installPlugins to use '" $addlPlugin "' plugin." }}
|
||||||
|
{{- fail $message }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- $addlPlugin | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,151 @@
|
||||||
|
{{- if .Values.checkDeprecation }}
|
||||||
|
{{- if .Values.master }}
|
||||||
|
{{ fail "`master` does no longer exist. It has been renamed to `controller`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.imageTag }}
|
||||||
|
{{ fail "`controller.imageTag` does no longer exist. Please use `controller.image.tag` instead" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveListenerPort }}
|
||||||
|
{{ fail "`controller.slaveListenerPort` does no longer exist. It has been renamed to `controller.agentListenerPort`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveHostPort }}
|
||||||
|
{{ fail "`controller.slaveHostPort` does no longer exist. It has been renamed to `controller.agentListenerHostPort`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveKubernetesNamespace }}
|
||||||
|
{{ fail "`controller.slaveKubernetesNamespace` does no longer exist. It has been renamed to `agent.namespace`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveDefaultsProviderTemplate }}
|
||||||
|
{{ fail "`controller.slaveDefaultsProviderTemplate` does no longer exist. It has been renamed to `agent.defaultsProviderTemplate`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.useSecurity }}
|
||||||
|
{{ fail "`controller.useSecurity` does no longer exist. It has been renamed to `controller.adminSecret`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveJenkinsUrl }}
|
||||||
|
{{ fail "`controller.slaveJenkinsUrl` does no longer exist. It has been renamed to `agent.jenkinsUrl`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveJenkinsTunnel }}
|
||||||
|
{{ fail "`controller.slaveJenkinsTunnel` does no longer exist. It has been renamed to `agent.jenkinsTunnel`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveConnectTimeout }}
|
||||||
|
{{ fail "`controller.slaveConnectTimeout` does no longer exist. It has been renamed to `agent.kubernetesConnectTimeout`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveReadTimeout }}
|
||||||
|
{{ fail "`controller.slaveReadTimeout` does no longer exist. It has been renamed to `agent.kubernetesReadTimeout`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveListenerServiceType }}
|
||||||
|
{{ fail "`controller.slaveListenerServiceType` does no longer exist. It has been renamed to `controller.agentListenerServiceType`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveListenerLoadBalancerIP }}
|
||||||
|
{{ fail "`controller.slaveListenerLoadBalancerIP` does no longer exist. It has been renamed to `controller.agentListenerLoadBalancerIP`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.slaveListenerServiceAnnotations }}
|
||||||
|
{{ fail "`controller.slaveListenerServiceAnnotations` does no longer exist. It has been renamed to `controller.agentListenerServiceAnnotations`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.agent.slaveConnectTimeout }}
|
||||||
|
{{ fail "`agent.slaveConnectTimeout` does no longer exist. It has been renamed to `agent.connectTimeout`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.NetworkPolicy }}
|
||||||
|
|
||||||
|
{{- if .Values.NetworkPolicy.Enabled }}
|
||||||
|
{{ fail "`NetworkPolicy.Enabled` does no longer exist. It has been renamed to `networkPolicy.enabled`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.NetworkPolicy.ApiVersion }}
|
||||||
|
{{ fail "`NetworkPolicy.ApiVersion` does no longer exist. It has been renamed to `networkPolicy.apiVersion`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{ fail "NetworkPolicy.* values have been renamed, please check the documentation" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{- if .Values.rbac.install }}
|
||||||
|
{{ fail "`rbac.install` does no longer exist. It has been renamed to `rbac.create` and is enabled by default!" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.rbac.serviceAccountName }}
|
||||||
|
{{ fail "`rbac.serviceAccountName` does no longer exist. It has been renamed to `serviceAccount.name`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.rbac.serviceAccountAnnotations }}
|
||||||
|
{{ fail "`rbac.serviceAccountAnnotations` does no longer exist. It has been renamed to `serviceAccount.annotations`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.rbac.roleRef }}
|
||||||
|
{{ fail "`rbac.roleRef` does no longer exist. RBAC roles are now generated, please check the documentation" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.rbac.roleKind }}
|
||||||
|
{{ fail "`rbac.roleKind` does no longer exist. RBAC roles are now generated, please check the documentation" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.rbac.roleBindingKind }}
|
||||||
|
{{ fail "`rbac.roleBindingKind` does no longer exist. RBAC roles are now generated, please check the documentation" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.JCasC.pluginVersion }}
|
||||||
|
{{ fail "controller.JCasC.pluginVersion has been deprecated, please use controller.installPlugins instead" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.deploymentLabels }}
|
||||||
|
{{ fail "`controller.deploymentLabels` does no longer exist. It has been renamed to `controller.statefulSetLabels`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.deploymentAnnotations }}
|
||||||
|
{{ fail "`controller.deploymentAnnotations` does no longer exist. It has been renamed to `controller.statefulSetAnnotations`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.rollingUpdate }}
|
||||||
|
{{ fail "`controller.rollingUpdate` does no longer exist. It is no longer relevant, since a StatefulSet is used for the Jenkins controller" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.tag }}
|
||||||
|
{{ fail "`controller.tag` no longer exists. It has been renamed to `controller.image.tag'" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.tagLabel }}
|
||||||
|
{{ fail "`controller.tagLabel` no longer exists. It has been renamed to `controller.image.tagLabel`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.adminSecret }}
|
||||||
|
{{ fail "`controller.adminSecret` no longer exists. It has been renamed to `controller.admin.createSecret`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.adminUser }}
|
||||||
|
{{ fail "`controller.adminUser` no longer exists. It has been renamed to `controller.admin.username`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.adminPassword }}
|
||||||
|
{{ fail "`controller.adminPassword` no longer exists. It has been renamed to `controller.admin.password`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.sidecars.other }}
|
||||||
|
{{ fail "`controller.sidecars.other` no longer exists. It has been renamed to `controller.sidecars.additionalSidecarContainers`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.agent.tag }}
|
||||||
|
{{ fail "`controller.agent.tag` no longer exists. It has been renamed to `controller.agent.image.tag`" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.backup }}
|
||||||
|
{{ fail "`controller.backup` no longer exists." }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.helmtest.bats.tag }}
|
||||||
|
{{ fail "`helmtest.bats.tag` no longer exists. It has been renamed to `helmtest.bats.image.tag`" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,41 @@
|
||||||
|
{{- if not (contains "jenkins-home" (quote .Values.persistence.volumes)) }}
|
||||||
|
{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) -}}
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
apiVersion: v1
|
||||||
|
metadata:
|
||||||
|
{{- if .Values.persistence.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{ toYaml .Values.persistence.annotations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.persistence.labels }}
|
||||||
|
{{ toYaml .Values.persistence.labels | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{- if .Values.persistence.dataSource }}
|
||||||
|
dataSource:
|
||||||
|
{{ toYaml .Values.persistence.dataSource | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
accessModes:
|
||||||
|
- {{ .Values.persistence.accessMode | quote }}
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: {{ .Values.persistence.size | quote }}
|
||||||
|
{{- if .Values.persistence.storageClass }}
|
||||||
|
{{- if (eq "-" .Values.persistence.storageClass) }}
|
||||||
|
storageClassName: ""
|
||||||
|
{{- else }}
|
||||||
|
storageClassName: "{{ .Values.persistence.storageClass }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,53 @@
|
||||||
|
{{- $root := . }}
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.enabled }}
|
||||||
|
{{- range $key, $val := .Values.controller.JCasC.configScripts }}
|
||||||
|
{{- if $val }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.casc.configName" (list (printf "config-%s" $key) $ )}}
|
||||||
|
namespace: {{ template "jenkins.namespace" $root }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": {{ template "jenkins.name" $root}}
|
||||||
|
{{- if $root.Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ $root.Chart.Name }}-{{ $root.Chart.Version }}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ $.Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ $.Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ $.Values.controller.componentName }}"
|
||||||
|
{{ template "jenkins.fullname" $root }}-jenkins-config: "true"
|
||||||
|
{{- if $root.Values.controller.JCasC.configMapAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{ toYaml $root.Values.controller.JCasC.configMapAnnotations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
data:
|
||||||
|
{{ $key }}.yaml: |-
|
||||||
|
{{ tpl $val $| indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.JCasC.defaultConfig }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.casc.configName" (list "jcasc-config" $ )}}
|
||||||
|
namespace: {{ template "jenkins.namespace" $root }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": {{ template "jenkins.name" $root}}
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ $root.Chart.Name }}-{{ $root.Chart.Version }}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ $.Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ $.Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ $.Values.controller.componentName }}"
|
||||||
|
{{ template "jenkins.fullname" $root }}-jenkins-config: "true"
|
||||||
|
{{- if $root.Values.controller.JCasC.configMapAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{ toYaml $root.Values.controller.JCasC.configMapAnnotations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
data:
|
||||||
|
jcasc-default-config.yaml: |-
|
||||||
|
{{- include "jenkins.casc.defaults" . | nindent 4 }}
|
||||||
|
{{- end}}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,43 @@
|
||||||
|
{{- if .Values.controller.agentListenerEnabled }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-agent
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.controller.agentListenerServiceAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml .Values.controller.agentListenerServiceAnnotations | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{- if .Values.controller.agentListenerExternalTrafficPolicy }}
|
||||||
|
externalTrafficPolicy: {{.Values.controller.agentListenerExternalTrafficPolicy}}
|
||||||
|
{{- end }}
|
||||||
|
ports:
|
||||||
|
- port: {{ .Values.controller.agentListenerPort }}
|
||||||
|
targetPort: {{ .Values.controller.agentListenerPort }}
|
||||||
|
{{- if (and (eq .Values.controller.agentListenerServiceType "NodePort") (not (empty .Values.controller.agentListenerNodePort))) }}
|
||||||
|
nodePort: {{ .Values.controller.agentListenerNodePort }}
|
||||||
|
{{- end }}
|
||||||
|
name: agent-listener
|
||||||
|
selector:
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
type: {{ .Values.controller.agentListenerServiceType }}
|
||||||
|
{{if eq .Values.controller.agentListenerServiceType "LoadBalancer"}}
|
||||||
|
{{- if .Values.controller.agentListenerLoadBalancerSourceRanges }}
|
||||||
|
loadBalancerSourceRanges:
|
||||||
|
{{ toYaml .Values.controller.agentListenerLoadBalancerSourceRanges | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if and (eq .Values.controller.agentListenerServiceType "LoadBalancer") (.Values.controller.agentListenerLoadBalancerIP) }}
|
||||||
|
loadBalancerIP: {{ .Values.controller.agentListenerLoadBalancerIP }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,16 @@
|
||||||
|
{{- if .Values.awsSecurityGroupPolicies.enabled -}}
|
||||||
|
{{- range .Values.awsSecurityGroupPolicies.policies -}}
|
||||||
|
apiVersion: vpcresources.k8s.aws/v1beta1
|
||||||
|
kind: SecurityGroupPolicy
|
||||||
|
metadata:
|
||||||
|
name: {{ .name }}
|
||||||
|
namespace: {{ template "jenkins.namespace" $ }}
|
||||||
|
spec:
|
||||||
|
podSelector:
|
||||||
|
{{- toYaml .podSelector | nindent 6}}
|
||||||
|
securityGroups:
|
||||||
|
groupIds:
|
||||||
|
{{- toYaml .securityGroupIds | nindent 6}}
|
||||||
|
---
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
{{- if and .Values.controller.prometheus.enabled .Values.controller.prometheus.alertingrules }}
|
||||||
|
---
|
||||||
|
apiVersion: monitoring.coreos.com/v1
|
||||||
|
kind: PrometheusRule
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
{{- if .Values.controller.prometheus.prometheusRuleNamespace }}
|
||||||
|
namespace: {{ .Values.controller.prometheus.prometheusRuleNamespace }}
|
||||||
|
{{- else }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- range $key, $val := .Values.controller.prometheus.alertingRulesAdditionalLabels }}
|
||||||
|
{{ $key }}: {{ $val | quote }}
|
||||||
|
{{- end}}
|
||||||
|
spec:
|
||||||
|
groups:
|
||||||
|
{{ toYaml .Values.controller.prometheus.alertingrules | indent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,24 @@
|
||||||
|
{{- if .Values.controller.backendconfig.enabled }}
|
||||||
|
apiVersion: {{ .Values.controller.backendconfig.apiVersion }}
|
||||||
|
kind: BackendConfig
|
||||||
|
metadata:
|
||||||
|
name: {{ .Values.controller.backendconfig.name }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.controller.backendconfig.labels }}
|
||||||
|
{{ toYaml .Values.controller.backendconfig.labels | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.backendconfig.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{ toYaml .Values.controller.backendconfig.annotations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{ toYaml .Values.controller.backendconfig.spec | indent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,77 @@
|
||||||
|
{{- $kubeTargetVersion := default .Capabilities.KubeVersion.GitVersion .Values.kubeTargetVersionOverride }}
|
||||||
|
{{- if .Values.controller.ingress.enabled }}
|
||||||
|
{{- if semverCompare ">=1.19-0" $kubeTargetVersion -}}
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
{{- else if semverCompare ">=1.14-0" $kubeTargetVersion -}}
|
||||||
|
apiVersion: networking.k8s.io/v1beta1
|
||||||
|
{{- else -}}
|
||||||
|
apiVersion: {{ .Values.controller.ingress.apiVersion }}
|
||||||
|
{{- end }}
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.controller.ingress.labels }}
|
||||||
|
{{ toYaml .Values.controller.ingress.labels | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.ingress.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{ toYaml .Values.controller.ingress.annotations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
spec:
|
||||||
|
{{- if .Values.controller.ingress.ingressClassName }}
|
||||||
|
ingressClassName: {{ .Values.controller.ingress.ingressClassName | quote }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
- http:
|
||||||
|
paths:
|
||||||
|
{{- if empty (.Values.controller.ingress.paths) }}
|
||||||
|
- backend:
|
||||||
|
{{- if semverCompare ">=1.19-0" $kubeTargetVersion }}
|
||||||
|
service:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
port:
|
||||||
|
number: {{ .Values.controller.servicePort }}
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
{{- else }}
|
||||||
|
serviceName: {{ template "jenkins.fullname" . }}
|
||||||
|
servicePort: {{ .Values.controller.servicePort }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.ingress.path }}
|
||||||
|
path: {{ .Values.controller.ingress.path }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- else }}
|
||||||
|
{{ tpl (toYaml .Values.controller.ingress.paths | indent 6) . }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- if .Values.controller.ingress.hostName }}
|
||||||
|
host: {{ tpl .Values.controller.ingress.hostName . | quote }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.ingress.resourceRootUrl }}
|
||||||
|
- http:
|
||||||
|
paths:
|
||||||
|
- backend:
|
||||||
|
{{- if semverCompare ">=1.19-0" $kubeTargetVersion }}
|
||||||
|
service:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
port:
|
||||||
|
number: {{ .Values.controller.servicePort }}
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
{{- else }}
|
||||||
|
serviceName: {{ template "jenkins.fullname" . }}
|
||||||
|
servicePort: {{ .Values.controller.servicePort }}
|
||||||
|
{{- end }}
|
||||||
|
host: {{ tpl .Values.controller.ingress.resourceRootUrl . | quote }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.ingress.tls }}
|
||||||
|
tls:
|
||||||
|
{{ tpl (toYaml .Values.controller.ingress.tls ) . | indent 4 }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,76 @@
|
||||||
|
{{- if .Values.networkPolicy.enabled }}
|
||||||
|
kind: NetworkPolicy
|
||||||
|
apiVersion: {{ .Values.networkPolicy.apiVersion }}
|
||||||
|
metadata:
|
||||||
|
name: "{{ .Release.Name }}-{{ .Values.controller.componentName }}"
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
spec:
|
||||||
|
podSelector:
|
||||||
|
matchLabels:
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
ingress:
|
||||||
|
# Allow web access to the UI
|
||||||
|
- ports:
|
||||||
|
- port: {{ .Values.controller.targetPort }}
|
||||||
|
{{- if .Values.controller.agentListenerEnabled }}
|
||||||
|
# Allow inbound connections from agents
|
||||||
|
- from:
|
||||||
|
{{- if .Values.networkPolicy.internalAgents.allowed }}
|
||||||
|
- podSelector:
|
||||||
|
matchLabels:
|
||||||
|
"jenkins/{{ .Release.Name }}-{{ .Values.agent.componentName }}": "true"
|
||||||
|
{{- range $k,$v:= .Values.networkPolicy.internalAgents.podLabels }}
|
||||||
|
{{ $k }}: {{ $v }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.networkPolicy.internalAgents.namespaceLabels }}
|
||||||
|
namespaceSelector:
|
||||||
|
matchLabels:
|
||||||
|
{{- range $k,$v:= .Values.networkPolicy.internalAgents.namespaceLabels }}
|
||||||
|
{{ $k }}: {{ $v }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if or .Values.networkPolicy.externalAgents.ipCIDR .Values.networkPolicy.externalAgents.except }}
|
||||||
|
- ipBlock:
|
||||||
|
cidr: {{ required "ipCIDR is required if you wish to allow external agents to connect to Jenkins Controller." .Values.networkPolicy.externalAgents.ipCIDR }}
|
||||||
|
{{- if .Values.networkPolicy.externalAgents.except }}
|
||||||
|
except:
|
||||||
|
{{- range .Values.networkPolicy.externalAgents.except }}
|
||||||
|
- {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
ports:
|
||||||
|
- port: {{ .Values.controller.agentListenerPort }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.agent.enabled }}
|
||||||
|
---
|
||||||
|
kind: NetworkPolicy
|
||||||
|
apiVersion: {{ .Values.networkPolicy.apiVersion }}
|
||||||
|
metadata:
|
||||||
|
name: "{{ .Release.Name }}-{{ .Values.agent.componentName }}"
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
spec:
|
||||||
|
podSelector:
|
||||||
|
matchLabels:
|
||||||
|
# DefaultDeny
|
||||||
|
"jenkins/{{ .Release.Name }}-{{ .Values.agent.componentName }}": "true"
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,34 @@
|
||||||
|
{{- if .Values.controller.podDisruptionBudget.enabled }}
|
||||||
|
{{- $kubeTargetVersion := default .Capabilities.KubeVersion.GitVersion .Values.kubeTargetVersionOverride }}
|
||||||
|
{{- if semverCompare ">=1.21-0" $kubeTargetVersion -}}
|
||||||
|
apiVersion: policy/v1
|
||||||
|
{{- else if semverCompare ">=1.5-0" $kubeTargetVersion -}}
|
||||||
|
apiVersion: policy/v1beta1
|
||||||
|
{{- else -}}
|
||||||
|
apiVersion: {{ .Values.controller.podDisruptionBudget.apiVersion }}
|
||||||
|
{{- end }}
|
||||||
|
kind: PodDisruptionBudget
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-pdb
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.controller.podDisruptionBudget.labels -}}
|
||||||
|
{{ toYaml .Values.controller.podDisruptionBudget.labels | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.podDisruptionBudget.annotations }}
|
||||||
|
annotations: {{ toYaml .Values.controller.podDisruptionBudget.annotations | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
maxUnavailable: {{ .Values.controller.podDisruptionBudget.maxUnavailable }}
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,30 @@
|
||||||
|
{{- if .Values.controller.googlePodMonitor.enabled }}
|
||||||
|
apiVersion: monitoring.googleapis.com/v1
|
||||||
|
kind: PodMonitoring
|
||||||
|
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
{{- if .Values.controller.googlePodMonitor.serviceMonitorNamespace }}
|
||||||
|
namespace: {{ .Values.controller.googlePodMonitor.serviceMonitorNamespace }}
|
||||||
|
{{- else }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
|
||||||
|
spec:
|
||||||
|
endpoints:
|
||||||
|
- interval: {{ .Values.controller.googlePodMonitor.scrapeInterval }}
|
||||||
|
port: http
|
||||||
|
path: {{ .Values.controller.jenkinsUriPrefix }}{{ .Values.controller.googlePodMonitor.scrapeEndpoint }}
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,34 @@
|
||||||
|
{{- if .Values.controller.route.enabled }}
|
||||||
|
apiVersion: route.openshift.io/v1
|
||||||
|
kind: Route
|
||||||
|
metadata:
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
app: {{ template "jenkins.fullname" . }}
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
release: "{{ .Release.Name }}"
|
||||||
|
heritage: "{{ .Release.Service }}"
|
||||||
|
component: "{{ .Release.Name }}-{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.controller.route.labels }}
|
||||||
|
{{ toYaml .Values.controller.route.labels | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.route.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{ toYaml .Values.controller.route.annotations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
spec:
|
||||||
|
host: {{ .Values.controller.route.path }}
|
||||||
|
port:
|
||||||
|
targetPort: http
|
||||||
|
tls:
|
||||||
|
insecureEdgeTerminationPolicy: Redirect
|
||||||
|
termination: edge
|
||||||
|
to:
|
||||||
|
kind: Service
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
weight: 100
|
||||||
|
wildcardPolicy: None
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,56 @@
|
||||||
|
{{- if .Values.controller.secondaryingress.enabled }}
|
||||||
|
{{- $kubeTargetVersion := default .Capabilities.KubeVersion.GitVersion .Values.kubeTargetVersionOverride }}
|
||||||
|
{{- $serviceName := include "jenkins.fullname" . -}}
|
||||||
|
{{- $servicePort := .Values.controller.servicePort -}}
|
||||||
|
{{- if semverCompare ">=1.19-0" $kubeTargetVersion -}}
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
{{- else if semverCompare ">=1.14-0" $kubeTargetVersion -}}
|
||||||
|
apiVersion: networking.k8s.io/v1beta1
|
||||||
|
{{- else -}}
|
||||||
|
apiVersion: {{ .Values.controller.secondaryingress.apiVersion }}
|
||||||
|
{{- end }}
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.controller.secondaryingress.labels -}}
|
||||||
|
{{ toYaml .Values.controller.secondaryingress.labels | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.secondaryingress.annotations }}
|
||||||
|
annotations: {{ toYaml .Values.controller.secondaryingress.annotations | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
name: {{ template "jenkins.fullname" . }}-secondary
|
||||||
|
spec:
|
||||||
|
{{- if .Values.controller.secondaryingress.ingressClassName }}
|
||||||
|
ingressClassName: {{ .Values.controller.secondaryingress.ingressClassName | quote }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
- host: {{ .Values.controller.secondaryingress.hostName }}
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
{{- range .Values.controller.secondaryingress.paths }}
|
||||||
|
- path: {{ . | quote }}
|
||||||
|
backend:
|
||||||
|
{{ if semverCompare ">=1.19-0" $kubeTargetVersion }}
|
||||||
|
service:
|
||||||
|
name: {{ $serviceName }}
|
||||||
|
port:
|
||||||
|
number: {{ $servicePort }}
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
{{ else }}
|
||||||
|
serviceName: {{ $serviceName }}
|
||||||
|
servicePort: {{ $servicePort }}
|
||||||
|
{{ end }}
|
||||||
|
{{- end}}
|
||||||
|
{{- if .Values.controller.secondaryingress.tls }}
|
||||||
|
tls:
|
||||||
|
{{ toYaml .Values.controller.secondaryingress.tls | indent 4 }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,45 @@
|
||||||
|
{{- if and .Values.controller.prometheus.enabled }}
|
||||||
|
apiVersion: monitoring.coreos.com/v1
|
||||||
|
kind: ServiceMonitor
|
||||||
|
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
{{- if .Values.controller.prometheus.serviceMonitorNamespace }}
|
||||||
|
namespace: {{ .Values.controller.prometheus.serviceMonitorNamespace }}
|
||||||
|
{{- else }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- range $key, $val := .Values.controller.prometheus.serviceMonitorAdditionalLabels }}
|
||||||
|
{{ $key }}: {{ $val | quote }}
|
||||||
|
{{- end}}
|
||||||
|
|
||||||
|
spec:
|
||||||
|
endpoints:
|
||||||
|
- interval: {{ .Values.controller.prometheus.scrapeInterval }}
|
||||||
|
port: http
|
||||||
|
path: {{ .Values.controller.jenkinsUriPrefix }}{{ .Values.controller.prometheus.scrapeEndpoint }}
|
||||||
|
{{- with .Values.controller.prometheus.relabelings }}
|
||||||
|
relabelings:
|
||||||
|
{{- toYaml . | nindent 6 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.controller.prometheus.metricRelabelings }}
|
||||||
|
metricRelabelings:
|
||||||
|
{{- toYaml . | nindent 6 }}
|
||||||
|
{{- end }}
|
||||||
|
jobLabel: {{ template "jenkins.fullname" . }}
|
||||||
|
namespaceSelector:
|
||||||
|
matchNames:
|
||||||
|
- "{{ template "jenkins.namespace" $ }}"
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,424 @@
|
||||||
|
{{- if .Capabilities.APIVersions.Has "apps/v1" }}
|
||||||
|
apiVersion: apps/v1
|
||||||
|
{{- else }}
|
||||||
|
apiVersion: apps/v1beta1
|
||||||
|
{{- end }}
|
||||||
|
kind: StatefulSet
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- range $key, $val := .Values.controller.statefulSetLabels }}
|
||||||
|
{{ $key }}: {{ $val | quote }}
|
||||||
|
{{- end}}
|
||||||
|
{{- if .Values.controller.statefulSetAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{ toYaml .Values.controller.statefulSetAnnotations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
serviceName: {{ template "jenkins.fullname" . }}
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
{{- if .Values.controller.updateStrategy }}
|
||||||
|
updateStrategy:
|
||||||
|
{{ toYaml .Values.controller.updateStrategy | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- range $key, $val := .Values.controller.podLabels }}
|
||||||
|
{{ $key }}: {{ $val | quote }}
|
||||||
|
{{- end}}
|
||||||
|
annotations:
|
||||||
|
checksum/config: {{ include (print $.Template.BasePath "/config.yaml") . | sha256sum }}
|
||||||
|
{{- if .Values.controller.initScripts }}
|
||||||
|
checksum/config-init-scripts: {{ include (print $.Template.BasePath "/config-init-scripts.yaml") . | sha256sum }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.podAnnotations }}
|
||||||
|
{{ tpl (toYaml .Values.controller.podAnnotations | indent 8) . }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{- if .Values.controller.schedulerName }}
|
||||||
|
schedulerName: {{ .Values.controller.schedulerName }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.nodeSelector }}
|
||||||
|
nodeSelector:
|
||||||
|
{{ toYaml .Values.controller.nodeSelector | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.tolerations }}
|
||||||
|
tolerations:
|
||||||
|
{{ toYaml .Values.controller.tolerations | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.affinity }}
|
||||||
|
affinity:
|
||||||
|
{{ toYaml .Values.controller.affinity | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.topologySpreadConstraints }}
|
||||||
|
topologySpreadConstraints:
|
||||||
|
{{ toYaml .Values.controller.topologySpreadConstraints | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if quote .Values.controller.terminationGracePeriodSeconds }}
|
||||||
|
terminationGracePeriodSeconds: {{ .Values.controller.terminationGracePeriodSeconds }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.priorityClassName }}
|
||||||
|
priorityClassName: {{ .Values.controller.priorityClassName }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.shareProcessNamespace }}
|
||||||
|
shareProcessNamespace: true
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.usePodSecurityContext }}
|
||||||
|
securityContext:
|
||||||
|
{{- if kindIs "map" .Values.controller.podSecurityContextOverride }}
|
||||||
|
{{- tpl (toYaml .Values.controller.podSecurityContextOverride | nindent 8) . -}}
|
||||||
|
{{- else }}
|
||||||
|
{{/* The rest of this section should be replaced with the contents of this comment one the runAsUser, fsGroup, and securityContextCapabilities Helm chart values have been removed:
|
||||||
|
runAsUser: 1000
|
||||||
|
fsGroup: 1000
|
||||||
|
runAsNonRoot: true
|
||||||
|
*/}}
|
||||||
|
runAsUser: {{ default 0 .Values.controller.runAsUser }}
|
||||||
|
{{- if and (.Values.controller.runAsUser) (.Values.controller.fsGroup) }}
|
||||||
|
{{- if not (eq (int .Values.controller.runAsUser) 0) }}
|
||||||
|
fsGroup: {{ .Values.controller.fsGroup }}
|
||||||
|
runAsNonRoot: true
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.securityContextCapabilities }}
|
||||||
|
capabilities:
|
||||||
|
{{- toYaml .Values.controller.securityContextCapabilities | nindent 10 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
serviceAccountName: "{{ template "jenkins.serviceAccountName" . }}"
|
||||||
|
{{- if .Values.controller.hostNetworking }}
|
||||||
|
hostNetwork: true
|
||||||
|
dnsPolicy: ClusterFirstWithHostNet
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.hostAliases }}
|
||||||
|
hostAliases:
|
||||||
|
{{- toYaml .Values.controller.hostAliases | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
initContainers:
|
||||||
|
{{- if .Values.controller.customInitContainers }}
|
||||||
|
{{ tpl (toYaml .Values.controller.customInitContainers) . | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.enabled }}
|
||||||
|
{{- include "jenkins.configReloadContainer" (list $ "config-reload-init" "init") | nindent 8 }}
|
||||||
|
{{- end}}
|
||||||
|
|
||||||
|
- name: "init"
|
||||||
|
image: "{{ .Values.controller.image.registry }}/{{ .Values.controller.image.repository }}:{{- include "controller.image.tag" . -}}"
|
||||||
|
imagePullPolicy: "{{ .Values.controller.image.pullPolicy }}"
|
||||||
|
{{- if .Values.controller.containerSecurityContext }}
|
||||||
|
securityContext: {{- toYaml .Values.controller.containerSecurityContext | nindent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
command: [ "sh", "/var/jenkins_config/apply_config.sh" ]
|
||||||
|
{{- if .Values.controller.initContainerEnvFrom }}
|
||||||
|
envFrom:
|
||||||
|
{{ (tpl (toYaml .Values.controller.initContainerEnvFrom) .) | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.initContainerEnv }}
|
||||||
|
env:
|
||||||
|
{{ (tpl (toYaml .Values.controller.initContainerEnv) .) | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
resources:
|
||||||
|
{{- if .Values.controller.initContainerResources }}
|
||||||
|
{{ toYaml .Values.controller.initContainerResources | indent 12 }}
|
||||||
|
{{- else }}
|
||||||
|
{{ toYaml .Values.controller.resources | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
volumeMounts:
|
||||||
|
{{- if .Values.persistence.mounts }}
|
||||||
|
{{ toYaml .Values.persistence.mounts | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
- mountPath: {{ .Values.controller.jenkinsHome }}
|
||||||
|
name: jenkins-home
|
||||||
|
{{- if .Values.persistence.subPath }}
|
||||||
|
subPath: {{ .Values.persistence.subPath }}
|
||||||
|
{{- end }}
|
||||||
|
- mountPath: /var/jenkins_config
|
||||||
|
name: jenkins-config
|
||||||
|
{{- if .Values.controller.installPlugins }}
|
||||||
|
{{- if .Values.controller.overwritePluginsFromImage }}
|
||||||
|
- mountPath: {{ .Values.controller.jenkinsRef }}/plugins
|
||||||
|
name: plugins
|
||||||
|
{{- end }}
|
||||||
|
- mountPath: /var/jenkins_plugins
|
||||||
|
name: plugin-dir
|
||||||
|
- mountPath: /tmp
|
||||||
|
name: tmp-volume
|
||||||
|
{{- end }}
|
||||||
|
{{- if or .Values.controller.initScripts .Values.controller.initConfigMap }}
|
||||||
|
- mountPath: {{ .Values.controller.jenkinsHome }}/init.groovy.d
|
||||||
|
name: init-scripts
|
||||||
|
{{- end }}
|
||||||
|
{{- if and .Values.controller.httpsKeyStore.enable (not .Values.controller.httpsKeyStore.disableSecretMount) }}
|
||||||
|
{{- $httpsJKSDirPath := printf "%s" .Values.controller.httpsKeyStore.path }}
|
||||||
|
- mountPath: {{ $httpsJKSDirPath }}
|
||||||
|
name: jenkins-https-keystore
|
||||||
|
{{- end }}
|
||||||
|
containers:
|
||||||
|
- name: jenkins
|
||||||
|
image: "{{ .Values.controller.image.registry }}/{{ .Values.controller.image.repository }}:{{- include "controller.image.tag" . -}}"
|
||||||
|
imagePullPolicy: "{{ .Values.controller.image.pullPolicy }}"
|
||||||
|
{{- if .Values.controller.containerSecurityContext }}
|
||||||
|
securityContext: {{- toYaml .Values.controller.containerSecurityContext | nindent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.overrideArgs }}
|
||||||
|
args: [
|
||||||
|
{{- range $overrideArg := .Values.controller.overrideArgs }}
|
||||||
|
"{{- tpl $overrideArg $ }}",
|
||||||
|
{{- end }}
|
||||||
|
]
|
||||||
|
{{- else if .Values.controller.httpsKeyStore.enable }}
|
||||||
|
{{- $httpsJKSFilePath := printf "%s/%s" .Values.controller.httpsKeyStore.path .Values.controller.httpsKeyStore.fileName }}
|
||||||
|
args: [ "--httpPort={{.Values.controller.httpsKeyStore.httpPort}}", "--httpsPort={{.Values.controller.targetPort}}", '--httpsKeyStore={{ $httpsJKSFilePath }}', "--httpsKeyStorePassword=$(JENKINS_HTTPS_KEYSTORE_PASSWORD)" ]
|
||||||
|
{{- else }}
|
||||||
|
args: [ "--httpPort={{.Values.controller.targetPort}}"]
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.lifecycle }}
|
||||||
|
lifecycle:
|
||||||
|
{{ toYaml .Values.controller.lifecycle | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.terminationMessagePath }}
|
||||||
|
terminationMessagePath: {{ .Values.controller.terminationMessagePath }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.terminationMessagePolicy }}
|
||||||
|
terminationMessagePolicy: {{ .Values.controller.terminationMessagePolicy }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.containerEnvFrom }}
|
||||||
|
envFrom:
|
||||||
|
{{ (tpl ( toYaml .Values.controller.containerEnvFrom) .) | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
env:
|
||||||
|
{{- if .Values.controller.containerEnv }}
|
||||||
|
{{ (tpl ( toYaml .Values.controller.containerEnv) .) | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if or .Values.controller.additionalSecrets .Values.controller.existingSecret .Values.controller.additionalExistingSecrets .Values.controller.admin.createSecret }}
|
||||||
|
- name: SECRETS
|
||||||
|
value: /run/secrets/additional
|
||||||
|
{{- end }}
|
||||||
|
- name: POD_NAME
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.name
|
||||||
|
- name: JAVA_OPTS
|
||||||
|
value: >-
|
||||||
|
{{ if .Values.controller.sidecars.configAutoReload.enabled }} -Dcasc.reload.token=$(POD_NAME) {{ end }}{{ default "" .Values.controller.javaOpts }}
|
||||||
|
- name: JENKINS_OPTS
|
||||||
|
value: >-
|
||||||
|
{{ if .Values.controller.jenkinsUriPrefix }}--prefix={{ .Values.controller.jenkinsUriPrefix }} {{ end }} --webroot=/var/jenkins_cache/war {{ default "" .Values.controller.jenkinsOpts}}
|
||||||
|
- name: JENKINS_SLAVE_AGENT_PORT
|
||||||
|
value: "{{ .Values.controller.agentListenerPort }}"
|
||||||
|
{{- if .Values.controller.httpsKeyStore.enable }}
|
||||||
|
- name: JENKINS_HTTPS_KEYSTORE_PASSWORD
|
||||||
|
{{- if not .Values.controller.httpsKeyStore.disableSecretMount }}
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: {{ if .Values.controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretName }} {{ .Values.controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretName }} {{ else if .Values.controller.httpsKeyStore.jenkinsHttpsJksSecretName }} {{ .Values.controller.httpsKeyStore.jenkinsHttpsJksSecretName }} {{ else }} {{ template "jenkins.fullname" . }}-https-jks {{ end }}
|
||||||
|
key: "{{ .Values.controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretKey }}"
|
||||||
|
{{- else }}
|
||||||
|
value: {{ .Values.controller.httpsKeyStore.password }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
- name: CASC_JENKINS_CONFIG
|
||||||
|
value: {{ .Values.controller.sidecars.configAutoReload.folder | default (printf "%s/casc_configs" (.Values.controller.jenkinsRef)) }}{{- if .Values.controller.JCasC.configUrls }},{{ join "," .Values.controller.JCasC.configUrls }}{{- end }}
|
||||||
|
ports:
|
||||||
|
{{- if .Values.controller.httpsKeyStore.enable }}
|
||||||
|
- containerPort: {{.Values.controller.httpsKeyStore.httpPort}}
|
||||||
|
{{- else }}
|
||||||
|
- containerPort: {{.Values.controller.targetPort}}
|
||||||
|
{{- end }}
|
||||||
|
name: http
|
||||||
|
- containerPort: {{ .Values.controller.agentListenerPort }}
|
||||||
|
name: agent-listener
|
||||||
|
{{- if .Values.controller.agentListenerHostPort }}
|
||||||
|
hostPort: {{ .Values.controller.agentListenerHostPort }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.jmxPort }}
|
||||||
|
- containerPort: {{ .Values.controller.jmxPort }}
|
||||||
|
name: jmx
|
||||||
|
{{- end }}
|
||||||
|
{{- range $index, $port := .Values.controller.extraPorts }}
|
||||||
|
- containerPort: {{ $port.port }}
|
||||||
|
name: {{ $port.name }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if and .Values.controller.healthProbes .Values.controller.probes}}
|
||||||
|
{{- if semverCompare ">=1.16-0" .Capabilities.KubeVersion.GitVersion }}
|
||||||
|
startupProbe:
|
||||||
|
{{ tpl (toYaml .Values.controller.probes.startupProbe | indent 12) .}}
|
||||||
|
{{- end }}
|
||||||
|
livenessProbe:
|
||||||
|
{{ tpl (toYaml .Values.controller.probes.livenessProbe | indent 12) .}}
|
||||||
|
readinessProbe:
|
||||||
|
{{ tpl (toYaml .Values.controller.probes.readinessProbe | indent 12) .}}
|
||||||
|
{{- end }}
|
||||||
|
resources:
|
||||||
|
{{ toYaml .Values.controller.resources | indent 12 }}
|
||||||
|
volumeMounts:
|
||||||
|
{{- if .Values.persistence.mounts }}
|
||||||
|
{{ toYaml .Values.persistence.mounts | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if and .Values.controller.httpsKeyStore.enable (not .Values.controller.httpsKeyStore.disableSecretMount) }}
|
||||||
|
{{- $httpsJKSDirPath := printf "%s" .Values.controller.httpsKeyStore.path }}
|
||||||
|
- mountPath: {{ $httpsJKSDirPath }}
|
||||||
|
name: jenkins-https-keystore
|
||||||
|
{{- end }}
|
||||||
|
- mountPath: {{ .Values.controller.jenkinsHome }}
|
||||||
|
name: jenkins-home
|
||||||
|
readOnly: false
|
||||||
|
{{- if .Values.persistence.subPath }}
|
||||||
|
subPath: {{ .Values.persistence.subPath }}
|
||||||
|
{{- end }}
|
||||||
|
- mountPath: /var/jenkins_config
|
||||||
|
name: jenkins-config
|
||||||
|
readOnly: true
|
||||||
|
{{- if .Values.controller.installPlugins }}
|
||||||
|
- mountPath: {{ .Values.controller.jenkinsRef }}/plugins/
|
||||||
|
name: plugin-dir
|
||||||
|
readOnly: false
|
||||||
|
{{- end }}
|
||||||
|
{{- if or .Values.controller.initScripts .Values.controller.initConfigMap }}
|
||||||
|
- mountPath: {{ .Values.controller.jenkinsHome }}/init.groovy.d
|
||||||
|
name: init-scripts
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.enabled }}
|
||||||
|
- name: sc-config-volume
|
||||||
|
mountPath: {{ .Values.controller.sidecars.configAutoReload.folder | default (printf "%s/casc_configs" (.Values.controller.jenkinsRef)) }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if or .Values.controller.additionalSecrets .Values.controller.existingSecret .Values.controller.additionalExistingSecrets .Values.controller.admin.createSecret }}
|
||||||
|
- name: jenkins-secrets
|
||||||
|
mountPath: /run/secrets/additional
|
||||||
|
readOnly: true
|
||||||
|
{{- end }}
|
||||||
|
- name: jenkins-cache
|
||||||
|
mountPath: /var/jenkins_cache
|
||||||
|
- mountPath: /tmp
|
||||||
|
name: tmp-volume
|
||||||
|
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.enabled }}
|
||||||
|
{{- include "jenkins.configReloadContainer" (list $ "config-reload" "sidecar") | nindent 8 }}
|
||||||
|
{{- end}}
|
||||||
|
|
||||||
|
|
||||||
|
{{- if .Values.controller.sidecars.additionalSidecarContainers}}
|
||||||
|
{{ tpl (toYaml .Values.controller.sidecars.additionalSidecarContainers | indent 8) .}}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
{{- if .Values.persistence.volumes }}
|
||||||
|
{{ tpl (toYaml .Values.persistence.volumes | indent 6) . }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.logging.configuration.override }}
|
||||||
|
- name: auto-reload-config
|
||||||
|
configMap:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-auto-reload-config
|
||||||
|
- name: auto-reload-config-logs
|
||||||
|
emptyDir: {}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.installPlugins }}
|
||||||
|
{{- if .Values.controller.overwritePluginsFromImage }}
|
||||||
|
- name: plugins
|
||||||
|
emptyDir: {}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if and .Values.controller.initScripts .Values.controller.initConfigMap }}
|
||||||
|
- name: init-scripts
|
||||||
|
projected:
|
||||||
|
sources:
|
||||||
|
- configMap:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-init-scripts
|
||||||
|
- configMap:
|
||||||
|
name: {{ .Values.controller.initConfigMap }}
|
||||||
|
{{- else if .Values.controller.initConfigMap }}
|
||||||
|
- name: init-scripts
|
||||||
|
configMap:
|
||||||
|
name: {{ .Values.controller.initConfigMap }}
|
||||||
|
{{- else if .Values.controller.initScripts }}
|
||||||
|
- name: init-scripts
|
||||||
|
configMap:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-init-scripts
|
||||||
|
{{- end }}
|
||||||
|
- name: jenkins-config
|
||||||
|
configMap:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
{{- if .Values.controller.installPlugins }}
|
||||||
|
- name: plugin-dir
|
||||||
|
emptyDir: {}
|
||||||
|
{{- end }}
|
||||||
|
{{- if or .Values.controller.additionalSecrets .Values.controller.existingSecret .Values.controller.additionalExistingSecrets .Values.controller.admin.createSecret }}
|
||||||
|
- name: jenkins-secrets
|
||||||
|
projected:
|
||||||
|
sources:
|
||||||
|
{{- if .Values.controller.additionalSecrets }}
|
||||||
|
- secret:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-additional-secrets
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.additionalExistingSecrets }}
|
||||||
|
{{- range $key, $value := .Values.controller.additionalExistingSecrets }}
|
||||||
|
- secret:
|
||||||
|
name: {{ tpl $value.name $ }}
|
||||||
|
items:
|
||||||
|
- key: {{ tpl $value.keyName $ }}
|
||||||
|
path: {{ tpl $value.name $ }}-{{ tpl $value.keyName $ }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.admin.createSecret }}
|
||||||
|
- secret:
|
||||||
|
name: {{ .Values.controller.admin.existingSecret | default (include "jenkins.fullname" .) }}
|
||||||
|
items:
|
||||||
|
- key: {{ .Values.controller.admin.userKey | default "jenkins-admin-user" }}
|
||||||
|
path: chart-admin-username
|
||||||
|
- key: {{ .Values.controller.admin.passwordKey | default "jenkins-admin-password" }}
|
||||||
|
path: chart-admin-password
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.existingSecret }}
|
||||||
|
- secret:
|
||||||
|
name: {{ .Values.controller.existingSecret }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
- name: jenkins-cache
|
||||||
|
emptyDir: {}
|
||||||
|
{{- if not (contains "jenkins-home" (quote .Values.persistence.volumes)) }}
|
||||||
|
- name: jenkins-home
|
||||||
|
{{- if .Values.persistence.enabled }}
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: {{ .Values.persistence.existingClaim | default (include "jenkins.fullname" .) }}
|
||||||
|
{{- else }}
|
||||||
|
emptyDir: {}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end }}
|
||||||
|
- name: sc-config-volume
|
||||||
|
emptyDir: {}
|
||||||
|
- name: tmp-volume
|
||||||
|
emptyDir: {}
|
||||||
|
|
||||||
|
{{- if and .Values.controller.httpsKeyStore.enable (not .Values.controller.httpsKeyStore.disableSecretMount) }}
|
||||||
|
- name: jenkins-https-keystore
|
||||||
|
secret:
|
||||||
|
secretName: {{ if .Values.controller.httpsKeyStore.jenkinsHttpsJksSecretName }} {{ .Values.controller.httpsKeyStore.jenkinsHttpsJksSecretName }} {{ else }} {{ template "jenkins.fullname" . }}-https-jks {{ end }}
|
||||||
|
items:
|
||||||
|
- key: {{ .Values.controller.httpsKeyStore.jenkinsHttpsJksSecretKey }}
|
||||||
|
path: {{ .Values.controller.httpsKeyStore.fileName }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.controller.imagePullSecretName }}
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: {{ .Values.controller.imagePullSecretName }}
|
||||||
|
{{- end -}}
|
||||||
|
|
@ -0,0 +1,56 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: {{template "jenkins.fullname" . }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.controller.serviceLabels }}
|
||||||
|
{{ toYaml .Values.controller.serviceLabels | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.serviceAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{ toYaml .Values.controller.serviceAnnotations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{- if .Values.controller.serviceExternalTrafficPolicy }}
|
||||||
|
externalTrafficPolicy: {{.Values.controller.serviceExternalTrafficPolicy}}
|
||||||
|
{{- end }}
|
||||||
|
{{- if (and (eq .Values.controller.serviceType "ClusterIP") (not (empty .Values.controller.clusterIP))) }}
|
||||||
|
clusterIP: {{.Values.controller.clusterIP}}
|
||||||
|
{{- end }}
|
||||||
|
ports:
|
||||||
|
- port: {{.Values.controller.servicePort}}
|
||||||
|
name: http
|
||||||
|
targetPort: {{ .Values.controller.targetPort }}
|
||||||
|
{{- if (and (eq .Values.controller.serviceType "NodePort") (not (empty .Values.controller.nodePort))) }}
|
||||||
|
nodePort: {{.Values.controller.nodePort}}
|
||||||
|
{{- end }}
|
||||||
|
{{- range $index, $port := .Values.controller.extraPorts }}
|
||||||
|
- port: {{ $port.port }}
|
||||||
|
name: {{ $port.name }}
|
||||||
|
{{- if $port.targetPort }}
|
||||||
|
targetPort: {{ $port.targetPort }}
|
||||||
|
{{- else }}
|
||||||
|
targetPort: {{ $port.port }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end }}
|
||||||
|
selector:
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
type: {{.Values.controller.serviceType}}
|
||||||
|
{{if eq .Values.controller.serviceType "LoadBalancer"}}
|
||||||
|
{{- if .Values.controller.loadBalancerSourceRanges }}
|
||||||
|
loadBalancerSourceRanges:
|
||||||
|
{{ toYaml .Values.controller.loadBalancerSourceRanges | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{if .Values.controller.loadBalancerIP}}
|
||||||
|
loadBalancerIP: {{.Values.controller.loadBalancerIP}}
|
||||||
|
{{end}}
|
||||||
|
{{end}}
|
||||||
|
|
@ -0,0 +1,149 @@
|
||||||
|
{{ if .Values.rbac.create }}
|
||||||
|
{{- $serviceName := include "jenkins.fullname" . -}}
|
||||||
|
|
||||||
|
# This role is used to allow Jenkins scheduling of agents via Kubernetes plugin.
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: {{ $serviceName }}-schedule-agents
|
||||||
|
namespace: {{ template "jenkins.agent.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["pods", "pods/exec", "pods/log", "persistentvolumeclaims", "events"]
|
||||||
|
verbs: ["get", "list", "watch"]
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["pods", "pods/exec", "persistentvolumeclaims"]
|
||||||
|
verbs: ["create", "delete", "deletecollection", "patch", "update"]
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
# We bind the role to the Jenkins service account. The role binding is created in the namespace
|
||||||
|
# where the agents are supposed to run.
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ $serviceName }}-schedule-agents
|
||||||
|
namespace: {{ template "jenkins.agent.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: Role
|
||||||
|
name: {{ $serviceName }}-schedule-agents
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "jenkins.serviceAccountName" .}}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
{{- if .Values.rbac.readSecrets }}
|
||||||
|
# This is needed if you want to use https://jenkinsci.github.io/kubernetes-credentials-provider-plugin/
|
||||||
|
# as it needs permissions to get/watch/list Secrets
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-read-secrets
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["secrets"]
|
||||||
|
verbs: ["get", "watch", "list"]
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ $serviceName }}-read-secrets
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: Role
|
||||||
|
name: {{ template "jenkins.fullname" . }}-read-secrets
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "jenkins.serviceAccountName" . }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
|
||||||
|
---
|
||||||
|
{{- end}}
|
||||||
|
|
||||||
|
{{- if .Values.controller.sidecars.configAutoReload.enabled }}
|
||||||
|
# The sidecar container which is responsible for reloading configuration changes
|
||||||
|
# needs permissions to watch ConfigMaps
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-casc-reload
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["configmaps"]
|
||||||
|
verbs: ["get", "watch", "list"]
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ $serviceName }}-watch-configmaps
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: Role
|
||||||
|
name: {{ template "jenkins.fullname" . }}-casc-reload
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "jenkins.serviceAccountName" . }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
|
||||||
|
{{- end}}
|
||||||
|
|
||||||
|
{{ end }}
|
||||||
|
|
@ -0,0 +1,21 @@
|
||||||
|
{{- if .Values.controller.additionalSecrets -}}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-additional-secrets
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
{{- range .Values.controller.additionalSecrets }}
|
||||||
|
{{ .name }}: {{ .value | b64enc }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,29 @@
|
||||||
|
{{- if .Values.controller.secretClaims -}}
|
||||||
|
{{- $r := .Release -}}
|
||||||
|
{{- $v := .Values -}}
|
||||||
|
{{- $chart := printf "%s-%s" .Chart.Name .Chart.Version -}}
|
||||||
|
{{- $namespace := include "jenkins.namespace" . -}}
|
||||||
|
{{- $serviceName := include "jenkins.fullname" . -}}
|
||||||
|
{{ range .Values.controller.secretClaims }}
|
||||||
|
---
|
||||||
|
kind: SecretClaim
|
||||||
|
apiVersion: vaultproject.io/v1
|
||||||
|
metadata:
|
||||||
|
name: {{ $serviceName }}-{{ .name | default .path | lower }}
|
||||||
|
namespace: {{ $namespace }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ $serviceName }}'
|
||||||
|
{{- if $v.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ $chart }}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ $r.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ $r.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ $v.controller.componentName }}"
|
||||||
|
spec:
|
||||||
|
type: {{ .type | default "Opaque" }}
|
||||||
|
path: {{ .path }}
|
||||||
|
{{- if .renew }}
|
||||||
|
renew: {{ .renew }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,20 @@
|
||||||
|
{{- if and .Values.controller.httpsKeyStore.enable ( not .Values.controller.httpsKeyStore.jenkinsHttpsJksSecretName ) (not .Values.controller.httpsKeyStore.disableSecretMount) -}}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-https-jks
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
jenkins-jks-file: |
|
||||||
|
{{ .Values.controller.httpsKeyStore.jenkinsKeyStoreBase64Encoded | indent 4 }}
|
||||||
|
https-jks-password: {{ .Values.controller.httpsKeyStore.password | b64enc }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,20 @@
|
||||||
|
{{- if and (not .Values.controller.admin.existingSecret) (.Values.controller.admin.createSecret) -}}
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
jenkins-admin-password: {{ template "jenkins.password" . }}
|
||||||
|
jenkins-admin-user: {{ .Values.controller.admin.username | b64enc | quote }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
{{ if .Values.serviceAccountAgent.create }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: {{ include "jenkins.serviceAccountAgentName" . }}
|
||||||
|
namespace: {{ template "jenkins.agent.namespace" . }}
|
||||||
|
{{- if .Values.serviceAccountAgent.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{ tpl (toYaml .Values.serviceAccountAgent.annotations) . | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.serviceAccountAgent.extraLabels }}
|
||||||
|
{{ tpl (toYaml .Values.serviceAccountAgent.extraLabels) . | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.serviceAccountAgent.imagePullSecretName }}
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: {{ .Values.serviceAccountAgent.imagePullSecretName }}
|
||||||
|
{{- end -}}
|
||||||
|
{{ end }}
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
{{ if .Values.serviceAccount.create }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: {{ include "jenkins.serviceAccountName" . }}
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
{{- if .Values.serviceAccount.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{ tpl (toYaml .Values.serviceAccount.annotations) . | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
"app.kubernetes.io/name": '{{ template "jenkins.name" .}}'
|
||||||
|
{{- if .Values.renderHelmLabels }}
|
||||||
|
"helm.sh/chart": "{{ template "jenkins.label" .}}"
|
||||||
|
{{- end }}
|
||||||
|
"app.kubernetes.io/managed-by": "{{ .Release.Service }}"
|
||||||
|
"app.kubernetes.io/instance": "{{ .Release.Name }}"
|
||||||
|
"app.kubernetes.io/component": "{{ .Values.controller.componentName }}"
|
||||||
|
{{- if .Values.serviceAccount.extraLabels }}
|
||||||
|
{{ tpl (toYaml .Values.serviceAccount.extraLabels) . | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.serviceAccount.imagePullSecretName }}
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: {{ .Values.serviceAccount.imagePullSecretName }}
|
||||||
|
{{- end -}}
|
||||||
|
{{ end }}
|
||||||
|
|
@ -0,0 +1,49 @@
|
||||||
|
{{- if .Values.controller.testEnabled }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Pod
|
||||||
|
metadata:
|
||||||
|
name: "{{ .Release.Name }}-ui-test-{{ randAlphaNum 5 | lower }}"
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": test-success
|
||||||
|
spec:
|
||||||
|
{{- if .Values.controller.nodeSelector }}
|
||||||
|
nodeSelector:
|
||||||
|
{{ toYaml .Values.controller.nodeSelector | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.tolerations }}
|
||||||
|
tolerations:
|
||||||
|
{{ toYaml .Values.controller.tolerations | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
initContainers:
|
||||||
|
- name: "test-framework"
|
||||||
|
image: "{{ .Values.helmtest.bats.image.registry }}/{{ .Values.helmtest.bats.image.repository }}:{{ .Values.helmtest.bats.image.tag }}"
|
||||||
|
command:
|
||||||
|
- "bash"
|
||||||
|
- "-c"
|
||||||
|
args:
|
||||||
|
- |
|
||||||
|
# copy bats to tools dir
|
||||||
|
set -ex
|
||||||
|
cp -R /opt/bats /tools/bats/
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /tools
|
||||||
|
name: tools
|
||||||
|
containers:
|
||||||
|
- name: {{ .Release.Name }}-ui-test
|
||||||
|
image: "{{ .Values.controller.image.registry }}/{{ .Values.controller.image.repository }}:{{- include "controller.image.tag" . -}}"
|
||||||
|
command: ["/tools/bats/bin/bats", "-t", "/tests/run.sh"]
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /tests
|
||||||
|
name: tests
|
||||||
|
readOnly: true
|
||||||
|
- mountPath: /tools
|
||||||
|
name: tools
|
||||||
|
volumes:
|
||||||
|
- name: tests
|
||||||
|
configMap:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-tests
|
||||||
|
- name: tools
|
||||||
|
emptyDir: {}
|
||||||
|
restartPolicy: Never
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,14 @@
|
||||||
|
{{- if .Values.controller.testEnabled }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ template "jenkins.fullname" . }}-tests
|
||||||
|
namespace: {{ template "jenkins.namespace" . }}
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": test
|
||||||
|
data:
|
||||||
|
run.sh: |-
|
||||||
|
@test "Testing Jenkins UI is accessible" {
|
||||||
|
curl --retry 48 --retry-delay 10 {{ template "jenkins.fullname" . }}:{{ .Values.controller.servicePort }}{{ default "" .Values.controller.jenkinsUriPrefix }}/login
|
||||||
|
}
|
||||||
|
{{- end }}
|
||||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,23 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
annotations:
|
||||||
|
catalog.cattle.io/auto-install: ezd-crd=match
|
||||||
|
catalog.cattle.io/certified: partner
|
||||||
|
catalog.cattle.io/display-name: LP Backend for EZD RP
|
||||||
|
catalog.cattle.io/kube-version: '>=1.19-0'
|
||||||
|
catalog.cattle.io/os: linux
|
||||||
|
catalog.cattle.io/release-name: ezd-backend
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 1.2024-19.7.45
|
||||||
|
description: Services necessary to run EZD RP app
|
||||||
|
home: https://linuxpolska.com
|
||||||
|
icon: file://assets/icons/ezd-backend.png
|
||||||
|
keywords:
|
||||||
|
- config
|
||||||
|
kubeVersion: '>=1.19-0'
|
||||||
|
maintainers:
|
||||||
|
- email: biuro@linuxpolska.com
|
||||||
|
name: Linux Polska
|
||||||
|
- email: support@linuxpolska.com
|
||||||
|
name: Linux Polska
|
||||||
|
url: https://linuxpolska.com/en/
|
||||||
|
name: ezd-backend
|
||||||
|
sources:
|
||||||
|
- https://github.com/linuxpolska/ezd-rp.git
|
||||||
|
type: application
|
||||||
|
version: 1.5.1
|
||||||
|
|
@ -0,0 +1,75 @@
|
||||||
|
<!--- app-name: ezd-backend -->
|
||||||
|
# LP backend for EZD RP
|
||||||
|
|
||||||
|
Services necessary to run EZD RP application provided by NASK.
|
||||||
|
For more detailed information for EZD-BACKEND chart please check [README](https://github.com/linuxpolska/ezd-rp/blob/main/README.md)
|
||||||
|
|
||||||
|
## TL;DR
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm repo add lp-ezd https://linuxpolska.github.io/ezd-rp
|
||||||
|
helm upgrade --install --create-namespace ezd-backend -n ezd-rp lp-ezd/ezd-backend
|
||||||
|
```
|
||||||
|
|
||||||
|
## Introduction
|
||||||
|
|
||||||
|
This chart bootstraps a set of operatos and CRDs on a [Kubernetes](https://kubernetes.io) cluster using the [Helm](https://helm.sh) package manager.
|
||||||
|
|
||||||
|
Linux Polska charts can be served by [Rancher Apps & Marketplace](https://ranchermanager.docs.rancher.com/pages-for-subheaders/helm-charts-in-rancher) for deployment and management of Helm Charts in clusters.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
- Kubernetes 1.19+
|
||||||
|
- Helm 3.2.0+
|
||||||
|
- PV provisioner support in the underlying infrastructure
|
||||||
|
|
||||||
|
## Installing the Chart
|
||||||
|
|
||||||
|
Add repository necessary for installation:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm repo add lp-ezd https://github.com/linuxpolska/ezd-rp
|
||||||
|
helm repo update
|
||||||
|
```
|
||||||
|
|
||||||
|
To install the chart with the release name `my-release`:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm upgrade --install --create-namespace ezd-backend -n ezd-rp le-ezd/ezd-backend
|
||||||
|
```
|
||||||
|
|
||||||
|
The command deploys postgresql, rabbitmq, redis on the Kubernetes cluster in the default configuration. For more detailed information regarding parameters please check our [README](https://github.com/linuxpolska/ezd-rp/blob/main/README.md).
|
||||||
|
|
||||||
|
> **Tip**: List all releases using `helm list`
|
||||||
|
|
||||||
|
## Uninstalling the Chart
|
||||||
|
|
||||||
|
To uninstall/delete the `ezd-backend` deployment:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm -n default uninstall ezd-backed
|
||||||
|
```
|
||||||
|
|
||||||
|
> **Note**: Deleting the helm chart will delete all data as well. Please be cautious before doing it.
|
||||||
|
|
||||||
|
> **Note**: Remove helm chart before remove CRDs for LP Backend.
|
||||||
|
|
||||||
|
For more detailed information regarding installation of ezd-backend please refer to [INSTALLATION](https://github.com/linuxpolska/ezd-rp/blob/main/INSTALLATION.md)
|
||||||
|
|
||||||
|
## Compability with NASK ezdrp version
|
||||||
|
|
||||||
|
Chart ezd-crd was tested with chart version up to 19.7.45 (application version up to 1.2024-19.7.45).
|
||||||
|
|
||||||
|
## Configuration and parameters
|
||||||
|
|
||||||
|
See [Customizing the Chart Before Installing](https://helm.sh/docs/intro/using_helm/#customizing-the-chart-before-installing). To see all configurable options with detailed comments:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm search repo lp-ezd
|
||||||
|
helm show values lp-ezd/ezd-backend
|
||||||
|
```
|
||||||
|
|
||||||
|
## Components version
|
||||||
|
- redis: 7.0.13-alpine-3.15-r1
|
||||||
|
- rabbitmq: 3.13.16-management-rabbitmq-3.13-r1
|
||||||
|
- postgresql: 16.3-postgres-16.3-bullseye-r1
|
||||||
|
|
@ -0,0 +1,17 @@
|
||||||
|
## LP Backend for EZD RP
|
||||||
|
|
||||||
|
|
||||||
|
This chart is based off of the some upstream charts postgresql, rabbitmq, redis. The chart deploys set of operators and CRDs, which necessary to configure postgresql, rabbitmq, redis.
|
||||||
|
|
||||||
|
For more information on how to use the feature, refer to our [docs](https://github.com/linuxpolska/ezd-rp).
|
||||||
|
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
- Kubernetes 1.19+
|
||||||
|
- Helm 3.2.0+
|
||||||
|
- PV provisioner support in the underlying infrastructure
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
For more information on how to configure the Helm chart, refer to the Helm Chart README.
|
||||||
|
|
@ -0,0 +1,279 @@
|
||||||
|
categories:
|
||||||
|
- database
|
||||||
|
questions:
|
||||||
|
- variable: global.rabbitmq.deploy
|
||||||
|
default: "true"
|
||||||
|
label: Deploy RabbitMQ
|
||||||
|
type: boolean
|
||||||
|
group: "Components"
|
||||||
|
show_subquestion_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: rabbitmqConfig.auth.username
|
||||||
|
label: Username
|
||||||
|
description: "RabbitMQ Username"
|
||||||
|
group: "RabbitMQ Settings"
|
||||||
|
type: string
|
||||||
|
min: 6
|
||||||
|
required: true
|
||||||
|
- variable: rabbitmqConfig.auth.password
|
||||||
|
label: Password
|
||||||
|
description: "RabbitMQ Password"
|
||||||
|
group: "RabbitMQ Settings"
|
||||||
|
type: password
|
||||||
|
min: 8
|
||||||
|
required: true
|
||||||
|
- variable: rabbitmqConfig.customConfig.replicas
|
||||||
|
label: Replicas
|
||||||
|
description: "Amount of replicas rabbitmq. Min 3 replicas for ha"
|
||||||
|
group: "RabbitMQ Settings"
|
||||||
|
type: int
|
||||||
|
default: 1
|
||||||
|
- variable: rabbitmqConfig.customConfig.persistence.storageClassName
|
||||||
|
label: Storage Class for database data
|
||||||
|
description: "Select storage class for database data"
|
||||||
|
group: "RabbitMQ Settings"
|
||||||
|
type: storageclass
|
||||||
|
- variable: rabbitmqConfig.customConfig.persistence.storage
|
||||||
|
label: Database size
|
||||||
|
description: "Size database data"
|
||||||
|
group: "RabbitMQ Settings"
|
||||||
|
type: string
|
||||||
|
default: "2Gi"
|
||||||
|
- variable: global.rabbitmq.custom.consumption
|
||||||
|
default: "false"
|
||||||
|
label: Modify resource consumption
|
||||||
|
group: "RabbitMQ Settings"
|
||||||
|
type: boolean
|
||||||
|
show_subquestion_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: rabbitmqConfig.customConfig.resources.limits.cpu
|
||||||
|
label: Milicore limit for rabbitmq instance
|
||||||
|
description: "1000 milicores = 1vCPU"
|
||||||
|
type: string
|
||||||
|
default: "2000m"
|
||||||
|
- variable: rabbitmqConfig.customConfig.resources.requests.cpu
|
||||||
|
label: Milicore request for rabbitmq instance
|
||||||
|
description: "1000 milicores = 1vCPU, value must be <= milicore limit"
|
||||||
|
type: string
|
||||||
|
default: "2000m"
|
||||||
|
- variable: rabbitmqConfig.customConfig.resources.limits.memory
|
||||||
|
label: Memory limit for rabbitmq instance
|
||||||
|
description: "Memory limit"
|
||||||
|
type: string
|
||||||
|
default: "2Gi"
|
||||||
|
- variable: rabbitmqConfig.customConfig.resources.requests.memory
|
||||||
|
label: Memory request for rabbitmq instance
|
||||||
|
description: "Memory request, value must be <= memory limit"
|
||||||
|
type: string
|
||||||
|
default: "2Gi"
|
||||||
|
- variable: rabbitmqConfig.ingress.enabled
|
||||||
|
default: "false"
|
||||||
|
label: Enable web console for RabbitMQ
|
||||||
|
group: "RabbitMQ Settings"
|
||||||
|
type: boolean
|
||||||
|
show_subquestion_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: rabbitmqConfig.ingress.hosts.host
|
||||||
|
label: URL
|
||||||
|
description: "Configure url for rabbitmq web-ui"
|
||||||
|
type: string
|
||||||
|
default: "rabbitmq.my.domain.internal"
|
||||||
|
|
||||||
|
- variable: global.postgresql.deploy
|
||||||
|
default: "true"
|
||||||
|
label: Deploy Postgresql
|
||||||
|
type: boolean
|
||||||
|
group: "Components"
|
||||||
|
show_subquestion_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: postgresqlConfig.auth.admPassword
|
||||||
|
label: SuperUser Password
|
||||||
|
description: "Password for SuperUser role"
|
||||||
|
group: "Postgresql Settings"
|
||||||
|
type: password
|
||||||
|
min: 8
|
||||||
|
required: true
|
||||||
|
- variable: postgresqlConfig.auth.appPassword
|
||||||
|
label: Application Password
|
||||||
|
description: "Password for application role"
|
||||||
|
group: "Postgresql Settings"
|
||||||
|
type: password
|
||||||
|
min: 8
|
||||||
|
required: true
|
||||||
|
- variable: postgresqlConfig.customConfig.instances
|
||||||
|
label: Replicas
|
||||||
|
description: "Amount of replicas postgresql. Min 3 replicas for ha"
|
||||||
|
group: "Postgresql Settings"
|
||||||
|
type: int
|
||||||
|
default: 1
|
||||||
|
- variable: postgresqlConfig.customConfig.storage.storageClass
|
||||||
|
label: Storage Class for database data
|
||||||
|
description: "Select storage class for database data"
|
||||||
|
group: "Postgresql Settings"
|
||||||
|
type: storageclass
|
||||||
|
- variable: postgresqlConfig.customConfig.storage.size
|
||||||
|
label: Database size
|
||||||
|
description: "Size database data"
|
||||||
|
group: "Postgresql Settings"
|
||||||
|
type: string
|
||||||
|
default: "2Gi"
|
||||||
|
- variable: postgresqlConfig.customConfig.walStorage.storageClass
|
||||||
|
label: Storage Class for database WAL
|
||||||
|
description: "Select storage class for database WAL"
|
||||||
|
group: "Postgresql Settings"
|
||||||
|
type: storageclass
|
||||||
|
- variable: postgresqlConfig.customConfig.walStorage.size
|
||||||
|
label: WAL Size
|
||||||
|
description: "Size database WAL"
|
||||||
|
group: "Postgresql Settings"
|
||||||
|
type: string
|
||||||
|
default: "2Gi"
|
||||||
|
- variable: global.postgresql.custom.consumption
|
||||||
|
default: "false"
|
||||||
|
label: Modify resource consumption
|
||||||
|
group: "Postgresql Settings"
|
||||||
|
type: boolean
|
||||||
|
show_subquestion_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: postgresqlConfig.customConfig.postgresql.parameters.resources.limits.cpu
|
||||||
|
label: Milicore limit for postgresql instance
|
||||||
|
description: "1000 milicores = 1vCPU"
|
||||||
|
type: string
|
||||||
|
default: "2000m"
|
||||||
|
- variable: postgresqlConfig.customConfig.postgresql.parameters.resources.requests.cpu
|
||||||
|
label: Milicore request for postgresql instance
|
||||||
|
description: "1000 milicores = 1vCPU, value must be <= milicore limit"
|
||||||
|
type: string
|
||||||
|
default: "2000m"
|
||||||
|
- variable: postgresqlConfig.customConfig.postgresql.parameters.resources.limits.memory
|
||||||
|
label: Memory limit for postgresql instance
|
||||||
|
description: "Memory limit"
|
||||||
|
type: string
|
||||||
|
default: "2Gi"
|
||||||
|
- variable: postgresqlConfig.customConfig.postgresql.parameters.resources.requests.memory
|
||||||
|
label: Memory request for postgresql instance
|
||||||
|
description: "Memory request, value must be <= memory limit"
|
||||||
|
type: string
|
||||||
|
default: "2Gi"
|
||||||
|
- variable: global.redis.deploy
|
||||||
|
default: "true"
|
||||||
|
label: Deploy Redis
|
||||||
|
type: boolean
|
||||||
|
group: "Components"
|
||||||
|
show_subquestion_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: redisConfig.auth.password
|
||||||
|
label: Password
|
||||||
|
description: "Redis Password"
|
||||||
|
group: "Redis Settings"
|
||||||
|
type: password
|
||||||
|
min: 8
|
||||||
|
required: true
|
||||||
|
# - variable: redisConfig.customConfig.setit
|
||||||
|
# label: Replicas
|
||||||
|
# description: "Amount of replicas redis. Min 3 replicas for ha"
|
||||||
|
# group: "Redis Settings"
|
||||||
|
# type: int
|
||||||
|
# default: 1
|
||||||
|
- variable: redisConfig.customConfig.storage.volumeClaimTemplate.spec.storageClassName
|
||||||
|
label: Storage Class for database data
|
||||||
|
description: "Select storage class for database data"
|
||||||
|
group: "Redis Settings"
|
||||||
|
type: storageclass
|
||||||
|
- variable: redisConfig.customConfig.storage.volumeClaimTemplate.spec.resources.requests.storage
|
||||||
|
label: Database size
|
||||||
|
description: "Size database data"
|
||||||
|
group: "Redis Settings"
|
||||||
|
type: string
|
||||||
|
default: "2Gi"
|
||||||
|
- variable: global.redis.custom.consumption
|
||||||
|
default: "false"
|
||||||
|
label: Modify resource consumption
|
||||||
|
group: "Redis Settings"
|
||||||
|
type: boolean
|
||||||
|
show_subquestion_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: redisConfig.customConfig.kubernetesConfig.resources.limits.cpu
|
||||||
|
label: Milicore limit for redis instance
|
||||||
|
description: "1000 milicores = 1vCPU"
|
||||||
|
type: string
|
||||||
|
default: "128m"
|
||||||
|
- variable: redisConfig.customConfig.kubernetesConfig.resources.requests.cpu
|
||||||
|
label: Milicore request for redis instance
|
||||||
|
description: "1000 milicores = 1vCPU, value must be <= milicore limit"
|
||||||
|
type: string
|
||||||
|
default: "128m"
|
||||||
|
- variable: redisConfig.customConfig.kubernetesConfig.resources.limits.memory
|
||||||
|
label: Memory limit for redis instance
|
||||||
|
description: "Memory limit"
|
||||||
|
type: string
|
||||||
|
default: "128Mi"
|
||||||
|
- variable: redisConfig.customConfig.kubernetesConfig.resources.requests.memory
|
||||||
|
label: Memory request for redis instance
|
||||||
|
description: "Memory request, value must be <= memory limit"
|
||||||
|
type: string
|
||||||
|
default: "128Mi"
|
||||||
|
|
||||||
|
- variable: global.privateRegistry.createSecret
|
||||||
|
default: "false"
|
||||||
|
description: "Check if you want authenticate to image registry "
|
||||||
|
type: boolean
|
||||||
|
group: "Private Registry Settings"
|
||||||
|
label: Modify Secret for Private Registry Settings
|
||||||
|
show_subquestion_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: global.imageCredentials.registry
|
||||||
|
label: Private registry URL
|
||||||
|
description: "URL of private registry. For instance: docker.io, ghcr.io"
|
||||||
|
group: "Private Registry Settings"
|
||||||
|
type: string
|
||||||
|
default: "https://index.docker.io/v1/"
|
||||||
|
- variable: global.imageCredentials.username
|
||||||
|
label: Private registry user
|
||||||
|
description: "User used to authenticate to private registry."
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
|
- variable: global.imageCredentials.password
|
||||||
|
label: Private registry password
|
||||||
|
description: "Password used to authenticate to private registry."
|
||||||
|
type: password
|
||||||
|
default: ""
|
||||||
|
- variable: global.imageCredentials.email
|
||||||
|
label: Private registry email
|
||||||
|
description: "Email used to authenticate to private registry"
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
|
|
||||||
|
|
||||||
|
- variable: global.defaultImage
|
||||||
|
default: false
|
||||||
|
description: "Check if you have images in a private registry"
|
||||||
|
label: "Change default image source"
|
||||||
|
type: boolean
|
||||||
|
show_subquestion_if: true
|
||||||
|
group: "Private Registry Settings"
|
||||||
|
subquestions:
|
||||||
|
- variable: postgresqlConfig.customConfig.imageName
|
||||||
|
label: Postgresql Image Name
|
||||||
|
description: "Postgresql image name."
|
||||||
|
type: string
|
||||||
|
default: "quay.io/linuxpolska/ezd-backend_postgresql:16.3-postgres-16.3-bullseye-r1"
|
||||||
|
show_if: "global.postgresql.deploy=true"
|
||||||
|
- variable: rabbitmqConfig.customConfig.image
|
||||||
|
label: RabbitMQ Image Name
|
||||||
|
description: "RabbitMQ image name."
|
||||||
|
type: string
|
||||||
|
default: "quay.io/linuxpolska/ezd-backend_rabbitmq:3.13.16-management-rabbitmq-3.13-r1"
|
||||||
|
show_if: "global.rabbitmq.deploy=true"
|
||||||
|
- variable: redisConfig.customConfig.kubernetesConfig.image
|
||||||
|
label: Redis Image Name
|
||||||
|
description: "Redis Image Name."
|
||||||
|
type: string
|
||||||
|
default: "quay.io/linuxpolska/ezd-backend_redis:7.0.13-alpine-3.15-r1"
|
||||||
|
show_if: "global.redis.deploy=true"
|
||||||
|
- variable: redisConfig.customConfig.kubernetesConfig.redisExporter.image
|
||||||
|
label: Redis Exporter Image Name
|
||||||
|
description: "Redis Exporter Image Name."
|
||||||
|
type: string
|
||||||
|
default: "quay.io/linuxpolska/ezd-backend_redis-exporter:1.44.0"
|
||||||
|
show_if: "global.redis.deploy=true"
|
||||||
|
|
@ -0,0 +1,41 @@
|
||||||
|
|
||||||
|
Congratulation!!!
|
||||||
|
|
||||||
|
Copy it and configure EZDRP app.
|
||||||
|
|
||||||
|
{{- if ( .Values.global.postgresql.deploy ) }}
|
||||||
|
|
||||||
|
Database configuration:
|
||||||
|
Select database type: POSTGRESQL
|
||||||
|
External DB connectionstring: Host={{ include "ezd-backend.postgresqlConfig.fullname" . }}-rw;Port=5432;Database=ezdrp;Username={{ default ( "postgres" ) }};Password='{{ include "ezd-backend.password" .Values.postgresqlConfig.auth.admPassword }}'
|
||||||
|
Select ARCHIWUM database type: POSTGRESQL
|
||||||
|
External DB connectionstring: Host={{ include "ezd-backend.postgresqlConfig.fullname" . }}-rw;Port=5432;Database=archiwum;Username={{ default ( "postgres" ) }};Password='{{ include "ezd-backend.password" .Values.postgresqlConfig.auth.admPassword }}'
|
||||||
|
Select KUIP database type: POSTGRESQL
|
||||||
|
External DB connectionstring: Host={{ include "ezd-backend.postgresqlConfig.fullname" . }}-rw;Port=5432;Database=ezdrp;Username={{ default ( "postgres" ) }};Password='{{ include "ezd-backend.password" .Values.postgresqlConfig.auth.admPassword }}'
|
||||||
|
Select EZDRP_ODCZYT database type: POSTGRESQL
|
||||||
|
External DB connectionstring: Host={{ include "ezd-backend.postgresqlConfig.fullname" . }}-rw;Port=5432;Database=ezdrp_odczyt;Username={{ default ( "postgres" ) }};Password='{{ include "ezd-backend.password" .Values.postgresqlConfig.auth.admPassword }}'
|
||||||
|
|
||||||
|
|
||||||
|
{{- end }}
|
||||||
|
{{- if ( .Values.global.redis.deploy ) }}
|
||||||
|
|
||||||
|
Redis Database Configuration:
|
||||||
|
External RedisDB hostname: {{ include "ezd-backend.redisConfig.fullname" . }}
|
||||||
|
External RedisDB port: {{ "6379" }}
|
||||||
|
External RedisDB password: {{ include "ezd-backend.password" .Values.redisConfig.auth.password }}
|
||||||
|
|
||||||
|
Redis-append Database Configuration:
|
||||||
|
External hostname for RedisDB - append mode: {{ list (include "ezd-backend.redisConfig.fullname" .) "append" | join "-" }}
|
||||||
|
External port for RedisDB - append mode: {{ "6379" }}
|
||||||
|
External RedisDB - append mode password: {{ include "ezd-backend.password" .Values.redisConfig.auth.password }}
|
||||||
|
|
||||||
|
{{- end }}
|
||||||
|
{{- if ( .Values.global.rabbitmq.deploy ) }}
|
||||||
|
|
||||||
|
Rabbit Database Configuration:
|
||||||
|
Hostname for external RabbitMQ: {{ include "ezd-backend.rabbitmqConfig.fullname" . }}
|
||||||
|
Port for external RabbitMQ: {{ "5672" }}
|
||||||
|
Username for external RabbitMQ: {{ include "ezd-backend.username" .Values.rabbitmqConfig.auth.username }}
|
||||||
|
Password for external RabbitMQ: {{ include "ezd-backend.password" .Values.rabbitmqConfig.auth.password }}
|
||||||
|
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,163 @@
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
If release name contains chart name it will be used as a full name.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.fullname" -}}
|
||||||
|
{{- if .Values.fullnameOverride }}
|
||||||
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- $name := default .Chart.Name .Values.nameOverride }}
|
||||||
|
{{- if contains $name .Release.Name }}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create chart name and version as used by the chart label.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.chart" -}}
|
||||||
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.labels" -}}
|
||||||
|
helm.sh/chart: {{ include "ezd-backend.chart" . }}
|
||||||
|
{{ include "ezd-backend.selectorLabels" . }}
|
||||||
|
{{- if .Chart.AppVersion }}
|
||||||
|
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||||
|
{{- end }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/name: {{ include "ezd-backend.name" . }}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the name of the service account to use
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.serviceAccountName" -}}
|
||||||
|
{{- if .Values.serviceAccount.create }}
|
||||||
|
{{- default (include "ezd-backend.fullname" .) .Values.serviceAccount.name }}
|
||||||
|
{{- else }}
|
||||||
|
{{- default "default" .Values.serviceAccount.name }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{- define "ezd-backend.imagePullSecret" }}
|
||||||
|
{{- with .Values.global.imageCredentials }}
|
||||||
|
{{- printf "{\"auths\":{\"%s\":{\"username\":\"%s\",\"password\":\"%s\",\"email\":\"%s\",\"auth\":\"%s\"}}}" .registry .username .password .email (printf "%s:%s" .username .password | b64enc) | b64enc }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Settings for username and password.
|
||||||
|
*/}}
|
||||||
|
|
||||||
|
{{- define "ezd-backend.username" -}}
|
||||||
|
{{- $reqInfo := . | required "Username is required." -}}
|
||||||
|
{{- $reqInfo -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "ezd-backend.password" -}}
|
||||||
|
{{- $reqInfo := . | required "Password is required." -}}
|
||||||
|
{{- $reqInfo -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.rabbitmqConfig.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.rabbitmqConfig.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
If release name contains chart name it will be used as a full name.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.rabbitmqConfig.fullname" -}}
|
||||||
|
{{- if .Values.rabbitmqConfig.fullnameOverride }}
|
||||||
|
{{- .Values.rabbitmqConfig.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- $name := default .Chart.Name .Values.rabbitmqConfig.nameOverride }}
|
||||||
|
{{- if contains $name .Release.Name }}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.postgresqlConfig.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.postgresqlConfig.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
If release name contains chart name it will be used as a full name.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.postgresqlConfig.fullname" -}}
|
||||||
|
{{- if .Values.postgresqlConfig.fullnameOverride }}
|
||||||
|
{{- .Values.postgresqlConfig.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- $name := default .Chart.Name .Values.postgresqlConfig.nameOverride }}
|
||||||
|
{{- if contains $name .Release.Name }}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.redisConfig.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.redisConfig.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
If release name contains chart name it will be used as a full name.
|
||||||
|
*/}}
|
||||||
|
{{- define "ezd-backend.redisConfig.fullname" -}}
|
||||||
|
{{- if .Values.redisConfig.fullnameOverride }}
|
||||||
|
{{- .Values.redisConfig.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- $name := default .Chart.Name .Values.redisConfig.nameOverride }}
|
||||||
|
{{- if contains $name .Release.Name }}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,17 @@
|
||||||
|
{{ if ( .Values.global.rabbitmq.deploy ) }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: rabbit-config
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
EZD_INTERNAL_RABBIT_USER: {{ include "ezd-backend.username" .Values.rabbitmqConfig.auth.username | b64enc }}
|
||||||
|
EZD_INTERNAL_RABBIT_PASSWORD: {{ include "ezd-backend.password" .Values.rabbitmqConfig.auth.password | b64enc }}
|
||||||
|
EZD_INTERNAL_RABBIT_HOST: {{ include "ezd-backend.rabbitmqConfig.fullname" . | b64enc }}
|
||||||
|
EZD_INTERNAL_RABBIT_PORT: {{ default ( "5672" ) | b64enc }}
|
||||||
|
|
||||||
|
{{ end }}
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,16 @@
|
||||||
|
{{ if ( .Values.global.redis.deploy ) }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: redis-append-config
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
EZD_REDIS_APPEND_HOST: {{ list (include "ezd-backend.redisConfig.fullname" .) "append" | join "-" | b64enc }}
|
||||||
|
EZD_REDIS_APPEND_PASSWORD: {{ include "ezd-backend.password" .Values.redisConfig.auth.password | b64enc }}
|
||||||
|
EZD_REDIS_APPEND_PORT: {{ default ( "6379" ) | b64enc }}
|
||||||
|
EZD_REDIS_APPEND_SERVICENAME: ""
|
||||||
|
|
||||||
|
{{ end }}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,16 @@
|
||||||
|
{{ if ( .Values.global.redis.deploy ) }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: redis-config
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
EZD_REDIS_HOST: {{ include "ezd-backend.redisConfig.fullname" . | b64enc }}
|
||||||
|
EZD_REDIS_PASSWORD: {{ include "ezd-backend.password" .Values.redisConfig.auth.password | b64enc }}
|
||||||
|
EZD_REDIS_PORT: {{ default ( "6379" ) | b64enc }}
|
||||||
|
EZD_REDIS_SERVICENAME: ""
|
||||||
|
|
||||||
|
{{ end }}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,14 @@
|
||||||
|
{{- if ( .Values.global.postgresql.deploy ) }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: relationaldb-config
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
EZD_INTERNAL_POSTGRES_USER: {{ default ( "postgres" ) | b64enc }}
|
||||||
|
EZD_INTERNAL_POSTGRES_PASSWORD: {{ include "ezd-backend.password" .Values.postgresqlConfig.auth.admPassword | b64enc }}
|
||||||
|
EZD_INTERNAL_POSTGRES_HOST: {{ list (include "ezd-backend.postgresqlConfig.fullname" .) "rw" | join "-" | b64enc }}
|
||||||
|
EZD_INTERNAL_POSTGRES_PORT: {{ default ( "5432" ) | b64enc }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,13 @@
|
||||||
|
{{ if .Values.global.imageCredentials }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
name: {{ .Values.global.imageCredentials.name }}
|
||||||
|
type: kubernetes.io/dockerconfigjson
|
||||||
|
data:
|
||||||
|
.dockerconfigjson: {{ include "ezd-backend.imagePullSecret" . }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,42 @@
|
||||||
|
{{- if .Values.global.postgresql.deploy }}
|
||||||
|
apiVersion: postgresql.cnpg.io/v1
|
||||||
|
kind: Cluster
|
||||||
|
metadata:
|
||||||
|
name: {{ include "ezd-backend.postgresqlConfig.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: {{ .Values.global.imageCredentials.name }}
|
||||||
|
superuserSecret:
|
||||||
|
name: credentials-{{ include "ezd-backend.postgresqlConfig.fullname" . }}-adm
|
||||||
|
bootstrap:
|
||||||
|
initdb:
|
||||||
|
database: {{ default ( "ezdrp" ) }}
|
||||||
|
owner: {{ default ( "ezdrp" ) }}
|
||||||
|
dataChecksums: true
|
||||||
|
localeCollate: "en_US.utf8"
|
||||||
|
localeCType: "en_US.utf8"
|
||||||
|
secret:
|
||||||
|
name: credentials-{{ include "ezd-backend.postgresqlConfig.fullname" . }}-app
|
||||||
|
{{- if (eq "custom" .Values.global.deployment.type) }}
|
||||||
|
{{- with .Values.postgresqlConfig.customConfig }}
|
||||||
|
{{- toYaml . | nindent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- /*
|
||||||
|
bootstrap:
|
||||||
|
initdb:
|
||||||
|
database: ezdrp
|
||||||
|
dataChecksums: true
|
||||||
|
localeCollate: "en_US.utf8"
|
||||||
|
localeCType: "en_US.utf8"
|
||||||
|
secret:
|
||||||
|
name: credentials-{{ include "ezd-backend.postgresqlConfig.fullname" . }}-app
|
||||||
|
|
||||||
|
*/}}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,25 @@
|
||||||
|
{{- if ( .Values.global.postgresql.deploy ) }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: credentials-{{ include "ezd-backend.postgresqlConfig.fullname" . }}-adm
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
type: kubernetes.io/basic-auth
|
||||||
|
data:
|
||||||
|
username: {{ default ( "postgres" ) | b64enc }}
|
||||||
|
password: {{ include "ezd-backend.password" .Values.postgresqlConfig.auth.admPassword | b64enc }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: credentials-{{ include "ezd-backend.postgresqlConfig.fullname" . }}-app
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
type: kubernetes.io/basic-auth
|
||||||
|
data:
|
||||||
|
username: {{ default ( "ezdrp" ) | b64enc }}
|
||||||
|
password: {{ include "ezd-backend.password" .Values.postgresqlConfig.auth.appPassword | b64enc }}
|
||||||
|
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,67 @@
|
||||||
|
{{- if .Values.global.rabbitmq.deploy -}}
|
||||||
|
{{- if .Values.rabbitmqConfig.ingress.enabled -}}
|
||||||
|
{{- $fullName := include "ezd-backend.rabbitmqConfig.fullname" . -}}
|
||||||
|
{{- $svcPort := 15672 -}}
|
||||||
|
{{- if and .Values.rabbitmqConfig.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }}
|
||||||
|
{{- if not (hasKey .Values.rabbitmqConfig.ingress.annotations "kubernetes.io/ingress.class") }}
|
||||||
|
{{- $_ := set .Values.rabbitmqConfig.ingress.annotations "kubernetes.io/ingress.class" .Values.rabbitmqConfig.ingress.className}}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}}
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}}
|
||||||
|
apiVersion: networking.k8s.io/v1beta1
|
||||||
|
{{- else -}}
|
||||||
|
apiVersion: extensions/v1beta1
|
||||||
|
{{- end }}
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: {{ $fullName }}
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.rabbitmqConfig.ingress.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{- if and .Values.rabbitmqConfig.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }}
|
||||||
|
ingressClassName: {{ .Values.rabbitmqConfig.ingress.className }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.rabbitmqConfig.ingress.tls }}
|
||||||
|
tls:
|
||||||
|
{{- range .Values.rabbitmqConfig.ingress.tls }}
|
||||||
|
- hosts:
|
||||||
|
{{- range .hosts }}
|
||||||
|
- {{ . | quote }}
|
||||||
|
{{- end }}
|
||||||
|
secretName: {{ .secretName }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
{{- with .Values.rabbitmqConfig.ingress.hosts }}
|
||||||
|
{{/*
|
||||||
|
{{- range .Values.rabbitmqConfig.ingress.hosts }}
|
||||||
|
- host: {{ .host | quote }}
|
||||||
|
*/}}
|
||||||
|
- host: {{ .host | quote }}
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
{{- range .paths }}
|
||||||
|
- path: {{ .path }}
|
||||||
|
{{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }}
|
||||||
|
pathType: {{ .pathType }}
|
||||||
|
{{- end }}
|
||||||
|
backend:
|
||||||
|
{{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }}
|
||||||
|
service:
|
||||||
|
name: {{ $fullName }}
|
||||||
|
port:
|
||||||
|
number: {{ $svcPort }}
|
||||||
|
{{- else }}
|
||||||
|
serviceName: {{ $fullName }}
|
||||||
|
servicePort: {{ $svcPort }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,27 @@
|
||||||
|
{{- if .Values.global.rabbitmq.deploy }}
|
||||||
|
apiVersion: rabbitmq.com/v1beta1
|
||||||
|
kind: RabbitmqCluster
|
||||||
|
metadata:
|
||||||
|
name: {{ include "ezd-backend.rabbitmqConfig.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: {{ .Values.global.imageCredentials.name }}
|
||||||
|
secretBackend:
|
||||||
|
externalSecret:
|
||||||
|
name: "credentials-{{ include "ezd-backend.rabbitmqConfig.fullname" . }}"
|
||||||
|
{{- if (eq "custom" .Values.global.deployment.type) }}
|
||||||
|
{{- with .Values.rabbitmqConfig.customConfig }}
|
||||||
|
{{- toYaml . | nindent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- /*
|
||||||
|
|
||||||
|
*/}}
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,19 @@
|
||||||
|
{{ if ( .Values.global.rabbitmq.deploy ) }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: "credentials-{{ include "ezd-backend.rabbitmqConfig.fullname" . }}"
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
type: Opaque
|
||||||
|
stringData:
|
||||||
|
default_user.conf: |
|
||||||
|
default_user = {{ include "ezd-backend.username" .Values.rabbitmqConfig.auth.username }}
|
||||||
|
default_pass = {{ include "ezd-backend.password" .Values.rabbitmqConfig.auth.password }}
|
||||||
|
username: {{ include "ezd-backend.username" .Values.rabbitmqConfig.auth.username }}
|
||||||
|
password: {{ include "ezd-backend.password" .Values.rabbitmqConfig.auth.password }}
|
||||||
|
port: {{ default ( "5672" ) | quote }}
|
||||||
|
provider: {{ default ( "rabbitmq" ) }}
|
||||||
|
type: {{ default ( "rabbitmq" ) }}
|
||||||
|
host: {{ printf "%s.%s.%s" ( include "ezd-backend.rabbitmqConfig.fullname" . ) .Release.Namespace "svc" }}
|
||||||
|
{{ end }}
|
||||||
|
|
@ -0,0 +1,47 @@
|
||||||
|
{{- if .Values.global.redis.deploy }}
|
||||||
|
apiVersion: redis.redis.opstreelabs.in/v1beta1
|
||||||
|
kind: Redis
|
||||||
|
metadata:
|
||||||
|
name: {{ include "ezd-backend.redisConfig.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
kubernetesConfig:
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: {{ .Values.global.imageCredentials.name }}
|
||||||
|
redisSecret:
|
||||||
|
name: credentials-{{ include "ezd-backend.redisConfig.fullname" . }}
|
||||||
|
key: password
|
||||||
|
{{- if (eq "custom" .Values.global.deployment.type) }}
|
||||||
|
{{- with .Values.redisConfig.customConfig }}
|
||||||
|
{{- toYaml . | nindent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
---
|
||||||
|
apiVersion: redis.redis.opstreelabs.in/v1beta1
|
||||||
|
kind: Redis
|
||||||
|
metadata:
|
||||||
|
name: {{ include "ezd-backend.redisConfig.fullname" . }}-append
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
kubernetesConfig:
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: {{ .Values.global.imageCredentials.name }}
|
||||||
|
redisSecret:
|
||||||
|
name: credentials-{{ include "ezd-backend.redisConfig.fullname" . }}
|
||||||
|
key: password
|
||||||
|
{{- if (eq "custom" .Values.global.deployment.type) }}
|
||||||
|
{{- with .Values.redisConfig.customConfig }}
|
||||||
|
{{- toYaml . | nindent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- /*
|
||||||
|
|
||||||
|
*/}}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,13 @@
|
||||||
|
{{- if ( .Values.global.redis.deploy ) }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: credentials-{{ include "ezd-backend.redisConfig.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "ezd-backend.labels" . | nindent 4 }}
|
||||||
|
type: kubernetes.io/basic-auth
|
||||||
|
data:
|
||||||
|
password: {{ include "ezd-backend.password" .Values.redisConfig.auth.password | b64enc }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,205 @@
|
||||||
|
# Default values for ezd-backend.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Declare variables to be passed into your templates.
|
||||||
|
|
||||||
|
|
||||||
|
global:
|
||||||
|
imageCredentials:
|
||||||
|
name: credentials-registry-app
|
||||||
|
registry: "https://index.docker.io/v1/"
|
||||||
|
username: ""
|
||||||
|
password: ""
|
||||||
|
email: ""
|
||||||
|
deployment:
|
||||||
|
platform: 'kubernetes'
|
||||||
|
type: 'custom'
|
||||||
|
rabbitmq:
|
||||||
|
deploy: true
|
||||||
|
custom:
|
||||||
|
consumpion: false
|
||||||
|
postgresql:
|
||||||
|
deploy: true
|
||||||
|
custom:
|
||||||
|
consumpion: false
|
||||||
|
redis:
|
||||||
|
deploy: true
|
||||||
|
custom:
|
||||||
|
consumpion: false
|
||||||
|
|
||||||
|
rabbitmqConfig:
|
||||||
|
fullnameOverride: "lp-backend-rabbitmq"
|
||||||
|
nameOverride: ""
|
||||||
|
auth:
|
||||||
|
username: ""
|
||||||
|
password: ""
|
||||||
|
ingress:
|
||||||
|
enabled: false
|
||||||
|
className: ""
|
||||||
|
annotations: {}
|
||||||
|
# kubernetes.io/ingress.class: nginx
|
||||||
|
# kubernetes.io/tls-acme: "true"
|
||||||
|
hosts:
|
||||||
|
host: ""
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: ImplementationSpecific
|
||||||
|
tls: []
|
||||||
|
# - secretName: chart-example-tls
|
||||||
|
# hosts:
|
||||||
|
# - chart-example.local
|
||||||
|
customConfig:
|
||||||
|
image: quay.io/linuxpolska/ezd-backend_rabbitmq:3.13.16-management-rabbitmq-3.13-r1
|
||||||
|
replicas: 2
|
||||||
|
rabbitmq:
|
||||||
|
additionalConfig: |
|
||||||
|
cluster_partition_handling = pause_minority
|
||||||
|
vm_memory_high_watermark_paging_ratio = 0.99
|
||||||
|
disk_free_limit.relative = 1.0
|
||||||
|
collect_statistics_interval = 10000
|
||||||
|
persistence:
|
||||||
|
storage: "10Gi"
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 1000m
|
||||||
|
memory: 2Gi
|
||||||
|
limits:
|
||||||
|
cpu: 2000m
|
||||||
|
memory: 2Gi
|
||||||
|
override:
|
||||||
|
statefulSet:
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: rabbitmq
|
||||||
|
imagePullPolicy: Always
|
||||||
|
initContainers:
|
||||||
|
- name: setup-container
|
||||||
|
imagePullPolicy: Always
|
||||||
|
|
||||||
|
postgresqlConfig:
|
||||||
|
fullnameOverride: "lp-backend-postgresql"
|
||||||
|
nameOverride: ""
|
||||||
|
auth:
|
||||||
|
admPassword: ""
|
||||||
|
appPassword: ""
|
||||||
|
customConfig:
|
||||||
|
instances: 3
|
||||||
|
minSyncReplicas: 1
|
||||||
|
maxSyncReplicas: 2
|
||||||
|
replicationSlots:
|
||||||
|
highAvailability:
|
||||||
|
enabled: true
|
||||||
|
env:
|
||||||
|
- name: TZ
|
||||||
|
value: Europe/Warsaw
|
||||||
|
primaryUpdateStrategy: unsupervised
|
||||||
|
storage:
|
||||||
|
size: 2Gi
|
||||||
|
resizeInUseVolumes: True
|
||||||
|
walStorage:
|
||||||
|
size: 2Gi
|
||||||
|
resizeInUseVolumes: True
|
||||||
|
imageName: quay.io/linuxpolska/ezd-backend_postgresql:16.3-postgres-16.3-bullseye-r1
|
||||||
|
postgresql:
|
||||||
|
parameters:
|
||||||
|
pg_stat_statements.max: "10000"
|
||||||
|
pg_stat_statements.track: all
|
||||||
|
pgaudit.log: "all, -misc"
|
||||||
|
pgaudit.log_catalog: "off"
|
||||||
|
pgaudit.log_parameter: "on"
|
||||||
|
pgaudit.log_relation: "on"
|
||||||
|
|
||||||
|
max_connections: "100"
|
||||||
|
superuser_reserved_connections: "3"
|
||||||
|
|
||||||
|
shared_buffers: "512 MB"
|
||||||
|
work_mem: "32 MB"
|
||||||
|
maintenance_work_mem: "320 MB"
|
||||||
|
huge_pages: "off"
|
||||||
|
effective_cache_size: "1 GB"
|
||||||
|
effective_io_concurrency: "100" # concurrent IO only really activated if OS supports posix_fadvise function
|
||||||
|
random_page_cost: "1.25" # speed of random disk access relative to sequential access (1.0)
|
||||||
|
|
||||||
|
# Monitoring
|
||||||
|
track_io_timing: "on" # measure exact block IO times
|
||||||
|
track_functions: "pl" # track execution times of pl-language procedures if any
|
||||||
|
|
||||||
|
# Checkpointing:
|
||||||
|
checkpoint_timeout : "15 min "
|
||||||
|
checkpoint_completion_target: "0.9"
|
||||||
|
max_wal_size: "1024 MB"
|
||||||
|
min_wal_size: "512 MB"
|
||||||
|
|
||||||
|
# WAL writing
|
||||||
|
wal_compression: "on"
|
||||||
|
wal_buffers: "-1" # auto-tuned by Postgres till maximum of segment size (16MB by default)
|
||||||
|
wal_writer_delay: "200ms"
|
||||||
|
wal_writer_flush_after: "1MB"
|
||||||
|
wal_keep_size: "3650 MB"
|
||||||
|
|
||||||
|
|
||||||
|
# Background writer
|
||||||
|
bgwriter_delay: "200ms"
|
||||||
|
bgwriter_lru_maxpages: "100"
|
||||||
|
bgwriter_lru_multiplier: "2.0"
|
||||||
|
bgwriter_flush_after: "0"
|
||||||
|
|
||||||
|
# Parallel queries:
|
||||||
|
max_worker_processes: "2"
|
||||||
|
max_parallel_workers_per_gather: "1"
|
||||||
|
max_parallel_maintenance_workers: "1"
|
||||||
|
max_parallel_workers: "2"
|
||||||
|
parallel_leader_participation: "on"
|
||||||
|
|
||||||
|
# Advanced features
|
||||||
|
enable_partitionwise_join: "on"
|
||||||
|
enable_partitionwise_aggregate: "on"
|
||||||
|
jit: "on"
|
||||||
|
max_slot_wal_keep_size: "1000 MB"
|
||||||
|
track_wal_io_timing: "on"
|
||||||
|
|
||||||
|
pg_hba:
|
||||||
|
- host all all all trust
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: "2Gi"
|
||||||
|
cpu: "2"
|
||||||
|
limits:
|
||||||
|
memory: "2Gi"
|
||||||
|
cpu: "2"
|
||||||
|
|
||||||
|
redisConfig:
|
||||||
|
fullnameOverride: "lp-backend-redis"
|
||||||
|
nameOverride: ""
|
||||||
|
auth:
|
||||||
|
password: ""
|
||||||
|
customConfig:
|
||||||
|
kubernetesConfig:
|
||||||
|
image: quay.io/linuxpolska/ezd-backend_redis:7.0.13-alpine-3.15-r1
|
||||||
|
imagePullPolicy: Always
|
||||||
|
imagePullSecrets:
|
||||||
|
- name: credentials-registry-app
|
||||||
|
redisSecret:
|
||||||
|
name: credentials-lp-backend-redis
|
||||||
|
key: password
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 101m
|
||||||
|
memory: 128Mi
|
||||||
|
limits:
|
||||||
|
cpu: 101m
|
||||||
|
memory: 128Mi
|
||||||
|
storage:
|
||||||
|
volumeClaimTemplate:
|
||||||
|
spec:
|
||||||
|
accessModes: ["ReadWriteOnce"]
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 1Gi
|
||||||
|
redisExporter:
|
||||||
|
enabled: false
|
||||||
|
image: quay.io/linuxpolska/ezd-backend_redis-exporter:1.44.0
|
||||||
|
securityContext:
|
||||||
|
runAsUser: 0
|
||||||
|
fsGroup: 1001
|
||||||
|
|
@ -0,0 +1,23 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
||||||
|
|
@ -0,0 +1,12 @@
|
||||||
|
dependencies:
|
||||||
|
- name: rabbitmq-cluster-operator
|
||||||
|
repository: https://charts.bitnami.com/bitnami
|
||||||
|
version: 4.3.16
|
||||||
|
- name: cloudnative-pg
|
||||||
|
repository: https://cloudnative-pg.github.io/charts
|
||||||
|
version: 0.21.5
|
||||||
|
- name: redis-operator
|
||||||
|
repository: https://ot-container-kit.github.io/helm-charts
|
||||||
|
version: 0.18.0
|
||||||
|
digest: sha256:452d86d0d29ecfd1b417895649d33ba60b28d113d578739730afab0df59bb9af
|
||||||
|
generated: "2024-07-30T11:30:06.54299445+02:00"
|
||||||
|
|
@ -0,0 +1,45 @@
|
||||||
|
annotations:
|
||||||
|
catalog.cattle.io/certified: partner
|
||||||
|
catalog.cattle.io/display-name: CRDs for LP Backend
|
||||||
|
catalog.cattle.io/hidden: "true"
|
||||||
|
catalog.cattle.io/kube-version: '>=1.19-0'
|
||||||
|
catalog.cattle.io/namespace: default
|
||||||
|
catalog.cattle.io/os: linux
|
||||||
|
catalog.cattle.io/release-name: ezd-crd
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 1.2024-19.7.45
|
||||||
|
dependencies:
|
||||||
|
- alias: rabbitmq-operator
|
||||||
|
condition: global.rabbitmq.deploy
|
||||||
|
name: rabbitmq-cluster-operator
|
||||||
|
repository: file://./charts/rabbitmq-cluster-operator
|
||||||
|
version: 4.3.16
|
||||||
|
- condition: global.postgresql.deploy
|
||||||
|
name: cloudnative-pg
|
||||||
|
repository: file://./charts/cloudnative-pg
|
||||||
|
version: 0.21.5
|
||||||
|
- condition: global.redis.deploy
|
||||||
|
name: redis-operator
|
||||||
|
repository: file://./charts/redis-operator
|
||||||
|
version: 0.18.0
|
||||||
|
description: Set of operators and CRDs for LP Backend
|
||||||
|
home: https://linuxpolska.com
|
||||||
|
icon: file://assets/icons/ezd-crd.png
|
||||||
|
keywords:
|
||||||
|
- ezd
|
||||||
|
- ezdrp
|
||||||
|
- ezd-rp
|
||||||
|
- backend
|
||||||
|
- databases
|
||||||
|
kubeVersion: '>=1.19-0'
|
||||||
|
maintainers:
|
||||||
|
- email: biuro@linuxpolska.com
|
||||||
|
name: Linux Polska
|
||||||
|
- email: support@linuxpolska.com
|
||||||
|
name: Linux Polska
|
||||||
|
url: https://linuxpolska.com/en/
|
||||||
|
name: ezd-crd
|
||||||
|
sources:
|
||||||
|
- https://github.com/linuxpolska/ezd-rp.git
|
||||||
|
type: application
|
||||||
|
version: 1.5.1
|
||||||
|
|
@ -0,0 +1,84 @@
|
||||||
|
<!--- app-name: ezd-crd -->
|
||||||
|
# CRDs for EZD backend Helm Chart
|
||||||
|
|
||||||
|
Helm chart necessary for installtion of EZD backend chart.
|
||||||
|
For more detailed information for EZD-CRD chart please check [README](https://github.com/linuxpolska/ezd-rp/blob/main/README.md)
|
||||||
|
|
||||||
|
## TL;DR
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm repo add lp-ezd https://linuxpolska.github.io/ezd-rp
|
||||||
|
helm upgrade --install --create-namespace ezd-crd -n default lp-ezd/ezd-crd
|
||||||
|
```
|
||||||
|
|
||||||
|
## Introduction
|
||||||
|
|
||||||
|
This chart bootstraps a set of operatos and CRDs on a [Kubernetes](https://kubernetes.io) cluster using the [Helm](https://helm.sh) package manager.
|
||||||
|
|
||||||
|
Linux Polska charts can be served by [Rancher Apps & Marketplace](https://ranchermanager.docs.rancher.com/pages-for-subheaders/helm-charts-in-rancher) for deployment and management of Helm Charts in clusters.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
- Kubernetes 1.19+
|
||||||
|
- Helm 3.2.0+
|
||||||
|
- PV provisioner support in the underlying infrastructure
|
||||||
|
|
||||||
|
## Installing the Chart
|
||||||
|
|
||||||
|
Add repository necessary for installation:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm repo add lp-ezd https://linuxpolska.github.io/ezd-rp
|
||||||
|
helm repo update
|
||||||
|
```
|
||||||
|
|
||||||
|
To install the chart with the release name `my-release`:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm upgrade --install --create-namespace ezd-crd -n default lp-ezd/ezd-crd
|
||||||
|
```
|
||||||
|
|
||||||
|
The command deploys operators on the Kubernetes cluster in the default configuration. For more detailed information regarding parameters please check our [README](https://github.com/linuxpolska/ezd-rp/blob/main/README.md).
|
||||||
|
|
||||||
|
> **Tip**: List all releases using `helm list`
|
||||||
|
|
||||||
|
## Uninstalling the Chart
|
||||||
|
|
||||||
|
To uninstall/delete the `my-release` deployment:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm uninstall ezd-crd
|
||||||
|
```
|
||||||
|
|
||||||
|
The command removes all the Kubernetes components but no CRDs
|
||||||
|
|
||||||
|
To delete the CRDs associated with `my-release`:
|
||||||
|
|
||||||
|
```console
|
||||||
|
|
||||||
|
kubectl get crd -o name | grep -E "(postgresql.cnpg.io|rabbitmqclusters.rabbitmq.com)" | xargs kubectl delete
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
> **Note**: Deleting the CRDs will delete all data as well. Please be cautious before doing it.
|
||||||
|
|
||||||
|
For more detailed information regarding installation of ezd-crd please refer to [INSTALLATION](https://github.com/linuxpolska/ezd-rp/blob/main/INSTALLATION.md)
|
||||||
|
|
||||||
|
## Compability with NASK ezdrp version
|
||||||
|
|
||||||
|
Chart ezd-crd was tested with chart version up to 19.7.45 (application version up to 1.2024-19.7.45).
|
||||||
|
|
||||||
|
## Configuration and parameters
|
||||||
|
|
||||||
|
See [Customizing the Chart Before Installing](https://helm.sh/docs/intro/using_helm/#customizing-the-chart-before-installing). To see all configurable options with detailed comments:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm search repo lp-ezd
|
||||||
|
helm show values lp-ezd/ezd-crd
|
||||||
|
```
|
||||||
|
|
||||||
|
## Components version
|
||||||
|
- redis_operator: 0.18.0-golang-1.21-r1
|
||||||
|
- cluster_operator: 2.9.0-golang-1.22-r1
|
||||||
|
- cloudnative-pg: 1.23.0-debian-12-r1
|
||||||
|
|
||||||
|
|
@ -0,0 +1,22 @@
|
||||||
|
## CRDs for LP Backend
|
||||||
|
|
||||||
|
The chart deploys set of operators and CRDs, which necessary to configure postgresql, rabbitmq, redis.
|
||||||
|
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
- Kubernetes 1.19+
|
||||||
|
- Helm 3.2.0+
|
||||||
|
- PV provisioner support in the underlying infrastructure
|
||||||
|
|
||||||
|
## CRDs
|
||||||
|
This Chart create following crds, and do not remove them after operator remove by defult
|
||||||
|
|
||||||
|
- `backups.postgresql.cnpg.io`
|
||||||
|
- `clusters.postgresql.cnpg.io`
|
||||||
|
- `poolers.postgresql.cnpg.io`
|
||||||
|
- `rabbitmqclusters.rabbitmq.com`
|
||||||
|
- `scheduledbackups.postgresql.cnpg.io`
|
||||||
|
|
||||||
|
For more information on how to configure the Helm chart, refer to the Helm README.
|
||||||
|
|
||||||
|
|
@ -0,0 +1,23 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
||||||
|
|
@ -0,0 +1,6 @@
|
||||||
|
dependencies:
|
||||||
|
- name: cluster
|
||||||
|
repository: https://cloudnative-pg.github.io/grafana-dashboards
|
||||||
|
version: 0.0.2
|
||||||
|
digest: sha256:fcf16ad357c17be3dd79c138723e78e9e101fecc5d07d9371299c32b9f85dbd9
|
||||||
|
generated: "2024-04-25T12:32:36.61779032-04:00"
|
||||||
|
|
@ -0,0 +1,25 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 1.23.2
|
||||||
|
dependencies:
|
||||||
|
- alias: monitoring
|
||||||
|
condition: monitoring.grafanaDashboard.create
|
||||||
|
name: cluster
|
||||||
|
repository: https://cloudnative-pg.github.io/grafana-dashboards
|
||||||
|
version: "0.0"
|
||||||
|
description: CloudNativePG Operator Helm Chart
|
||||||
|
home: https://cloudnative-pg.io
|
||||||
|
icon: https://raw.githubusercontent.com/cloudnative-pg/artwork/main/cloudnativepg-logo.svg
|
||||||
|
keywords:
|
||||||
|
- operator
|
||||||
|
- controller
|
||||||
|
- postgresql
|
||||||
|
- postgres
|
||||||
|
- database
|
||||||
|
maintainers:
|
||||||
|
- email: p.scorsolini@gmail.com
|
||||||
|
name: phisco
|
||||||
|
name: cloudnative-pg
|
||||||
|
sources:
|
||||||
|
- https://github.com/cloudnative-pg/charts
|
||||||
|
type: application
|
||||||
|
version: 0.21.5
|
||||||
|
|
@ -0,0 +1,202 @@
|
||||||
|
|
||||||
|
Apache License
|
||||||
|
Version 2.0, January 2004
|
||||||
|
http://www.apache.org/licenses/
|
||||||
|
|
||||||
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
|
1. Definitions.
|
||||||
|
|
||||||
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
|
|
||||||
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
|
the copyright owner that is granting the License.
|
||||||
|
|
||||||
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
|
other entities that control, are controlled by, or are under common
|
||||||
|
control with that entity. For the purposes of this definition,
|
||||||
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
|
exercising permissions granted by this License.
|
||||||
|
|
||||||
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
|
including but not limited to software source code, documentation
|
||||||
|
source, and configuration files.
|
||||||
|
|
||||||
|
"Object" form shall mean any form resulting from mechanical
|
||||||
|
transformation or translation of a Source form, including but
|
||||||
|
not limited to compiled object code, generated documentation,
|
||||||
|
and conversions to other media types.
|
||||||
|
|
||||||
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
|
"Contribution" shall mean any work of authorship, including
|
||||||
|
the original version of the Work and any modifications or additions
|
||||||
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
|
means any form of electronic, verbal, or written communication sent
|
||||||
|
to the Licensor or its representatives, including but not limited to
|
||||||
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
|
subsequently incorporated within the Work.
|
||||||
|
|
||||||
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
|
Work and such Derivative Works in Source or Object form.
|
||||||
|
|
||||||
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
|
modifications, and in Source or Object form, provided that You
|
||||||
|
meet the following conditions:
|
||||||
|
|
||||||
|
(a) You must give any other recipients of the Work or
|
||||||
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
|
(b) You must cause any modified files to carry prominent notices
|
||||||
|
stating that You changed the files; and
|
||||||
|
|
||||||
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
|
that You distribute, all copyright, patent, trademark, and
|
||||||
|
attribution notices from the Source form of the Work,
|
||||||
|
excluding those notices that do not pertain to any part of
|
||||||
|
the Derivative Works; and
|
||||||
|
|
||||||
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
|
distribution, then any Derivative Works that You distribute must
|
||||||
|
include a readable copy of the attribution notices contained
|
||||||
|
within such NOTICE file, excluding those notices that do not
|
||||||
|
pertain to any part of the Derivative Works, in at least one
|
||||||
|
of the following places: within a NOTICE text file distributed
|
||||||
|
as part of the Derivative Works; within the Source form or
|
||||||
|
documentation, if provided along with the Derivative Works; or,
|
||||||
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
|
You may add Your own copyright statement to Your modifications and
|
||||||
|
may provide additional or different license terms and conditions
|
||||||
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
|
unless required by applicable law (such as deliberate and grossly
|
||||||
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
|
liable to You for damages, including any direct, indirect, special,
|
||||||
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
|
or other liability obligations and/or rights consistent with this
|
||||||
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
|
|
||||||
|
To apply the Apache License to your work, attach the following
|
||||||
|
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||||
|
replaced with your own identifying information. (Don't include
|
||||||
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
|
comment syntax for the file format. We also recommend that a
|
||||||
|
file or class name and description of purpose be included on the
|
||||||
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
|
Copyright [yyyy] [name of copyright owner]
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
File diff suppressed because one or more lines are too long
|
|
@ -0,0 +1,23 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
||||||
|
|
@ -0,0 +1,6 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 1.16.0
|
||||||
|
description: CloudNativePG Grafana Cluster Dashboard.
|
||||||
|
name: cluster
|
||||||
|
type: application
|
||||||
|
version: 0.0.2
|
||||||
|
|
@ -0,0 +1,59 @@
|
||||||
|
<!-- THIS FILE IS AUTOMATICALLY GENERATED. Make changes to README.md.gotmpl instead. -->
|
||||||
|
|
||||||
|
# cluster
|
||||||
|
|
||||||
|
  
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Getting Started
|
||||||
|
---------------
|
||||||
|
|
||||||
|
_**Note,** this dashboard is already included in the [CloudNativePG Operator Helm Chart][operator]._
|
||||||
|
|
||||||
|
There are 4 ways to use the CloudNativePG Grafana Cluster Dashboard:
|
||||||
|
|
||||||
|
0. Install the [CloudNativePG Operator Helm Chart][operator]
|
||||||
|
|
||||||
|
1. Install manually via [Grafana.com](https://grafana.com/grafana/dashboards/20417-cloudnativepg/).
|
||||||
|
|
||||||
|
2. Install manually via the [Grafana JSON](https://github.com/cloudnative-pg/grafana-dashboards/blob/main/charts/cluster/grafana-dashboard.json):
|
||||||
|
|
||||||
|
```
|
||||||
|
https://raw.githubusercontent.com/cloudnative-pg/grafana-dashboards/main/charts/cluster/grafana-dashboard.json
|
||||||
|
```
|
||||||
|
|
||||||
|
3. Install directly in your cluster as a Helm Chart:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm repo add cnpg-grafana https://cloudnative-pg.github.io/grafana-dashboards
|
||||||
|
helm upgrade
|
||||||
|
--install \
|
||||||
|
--namespace monitoring \
|
||||||
|
cnpg-grafana-cluster cnpg-grafana/cluster
|
||||||
|
```
|
||||||
|
|
||||||
|
2. As as a dependency to an existing chart:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
dependencies:
|
||||||
|
- name: cluster
|
||||||
|
alias: cnpg-grafana-cluster-dashboard
|
||||||
|
version: "0.0"
|
||||||
|
repository: https://cloudnative-pg.github.io/grafana-dashboards
|
||||||
|
```
|
||||||
|
|
||||||
|
## Values
|
||||||
|
|
||||||
|
| Key | Type | Default | Description |
|
||||||
|
|-----|------|---------|-------------|
|
||||||
|
| fullnameOverride | string | `""` | |
|
||||||
|
| grafanaDashboard.annotations | object | `{}` | Annotations that ConfigMaps can have to get configured in Grafana. |
|
||||||
|
| grafanaDashboard.configMapName | string | `"cnpg-grafana-dashboard"` | The name of the ConfigMap containing the dashboard. |
|
||||||
|
| grafanaDashboard.labels | object | `{}` | Labels that ConfigMaps should have to get configured in Grafana. |
|
||||||
|
| grafanaDashboard.namespace | string | `""` | Allows overriding the namespace where the ConfigMap will be created, defaulting to the same one as the Release. |
|
||||||
|
| grafanaDashboard.sidecarLabel | string | `"grafana_dashboard"` | Label that ConfigMaps should have to be loaded as dashboards. DEPRECATED: Use labels instead. |
|
||||||
|
| grafanaDashboard.sidecarLabelValue | string | `"1"` | Label value that ConfigMaps should have to be loaded as dashboards. DEPRECATED: Use labels instead. |
|
||||||
|
| nameOverride | string | `""` | |
|
||||||
|
|
||||||
|
[operator]: https://github.com/cloudnative-pg/charts/tree/main/charts/cloudnative-pg
|
||||||
|
|
@ -0,0 +1,59 @@
|
||||||
|
<!-- THIS FILE IS AUTOMATICALLY GENERATED. Make changes to README.md.gotmpl instead. -->
|
||||||
|
|
||||||
|
{{ template "chart.header" . }}
|
||||||
|
|
||||||
|
{{ template "chart.deprecationWarning" . }}
|
||||||
|
|
||||||
|
{{ template "chart.badgesSection" . }}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Getting Started
|
||||||
|
---------------
|
||||||
|
|
||||||
|
_**Note,** this dashboard is already included in the [CloudNativePG Operator Helm Chart][operator]._
|
||||||
|
|
||||||
|
There are 4 ways to use the CloudNativePG Grafana Cluster Dashboard:
|
||||||
|
|
||||||
|
0. Install the [CloudNativePG Operator Helm Chart][operator]
|
||||||
|
|
||||||
|
1. Install manually via [Grafana.com](https://grafana.com/grafana/dashboards/20417-cloudnativepg/).
|
||||||
|
|
||||||
|
2. Install manually via the [Grafana JSON](https://github.com/cloudnative-pg/grafana-dashboards/blob/main/charts/cluster/grafana-dashboard.json):
|
||||||
|
|
||||||
|
```
|
||||||
|
https://raw.githubusercontent.com/cloudnative-pg/grafana-dashboards/main/charts/cluster/grafana-dashboard.json
|
||||||
|
```
|
||||||
|
|
||||||
|
3. Install directly in your cluster as a Helm Chart:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm repo add cnpg-grafana https://cloudnative-pg.github.io/grafana-dashboards
|
||||||
|
helm upgrade
|
||||||
|
--install \
|
||||||
|
--namespace monitoring \
|
||||||
|
cnpg-grafana-cluster cnpg-grafana/cluster
|
||||||
|
```
|
||||||
|
|
||||||
|
2. As as a dependency to an existing chart:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
dependencies:
|
||||||
|
- name: cluster
|
||||||
|
alias: cnpg-grafana-cluster-dashboard
|
||||||
|
version: "0.0"
|
||||||
|
repository: https://cloudnative-pg.github.io/grafana-dashboards
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
{{ template "chart.requirementsSection" . }}
|
||||||
|
|
||||||
|
|
||||||
|
{{ template "chart.valuesSection" . }}
|
||||||
|
|
||||||
|
|
||||||
|
{{ template "chart.maintainersSection" . }}
|
||||||
|
|
||||||
|
{{ template "helm-docs.versionFooter" . }}
|
||||||
|
|
||||||
|
[operator]: https://github.com/cloudnative-pg/charts/tree/main/charts/cloudnative-pg
|
||||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,5 @@
|
||||||
|
CloudNativePG Grafana Dashboard installed successfully.
|
||||||
|
|
||||||
|
{{- if (or .Values.grafanaDashboard.sidecarLabel .Values.grafanaDashboard.sidecarLabelValue) }}
|
||||||
|
DEPRECATION NOTICE: The grafanaDashboard.sidecarLabel is deprecated and will be removed in a future release. Use the grafanaDashboard.labels instead.
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,21 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ .Values.grafanaDashboard.configMapName }}
|
||||||
|
namespace: {{ default .Release.Namespace .Values.grafanaDashboard.namespace }}
|
||||||
|
{{- if (or .Values.grafanaDashboard.labels .Values.grafanaDashboard.sidecarLabel) }}
|
||||||
|
labels:
|
||||||
|
{{- if .Values.grafanaDashboard.sidecarLabel }}
|
||||||
|
{{ .Values.grafanaDashboard.sidecarLabel }}: {{ .Values.grafanaDashboard.sidecarLabelValue | quote }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.grafanaDashboard.labels }}
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.grafanaDashboard.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
data:
|
||||||
|
cnp.json: |-
|
||||||
|
{{ .Files.Get "grafana-dashboard.json" | indent 6 }}
|
||||||
|
|
@ -0,0 +1,35 @@
|
||||||
|
{
|
||||||
|
"$schema": "http://json-schema.org/schema#",
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"fullnameOverride": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"grafanaDashboard": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"annotations": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"configMapName": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"labels": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"namespace": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"sidecarLabel": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"sidecarLabelValue": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"nameOverride": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,20 @@
|
||||||
|
# Default values for cluster.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Declare variables to be passed into your templates.
|
||||||
|
|
||||||
|
nameOverride: ""
|
||||||
|
fullnameOverride: ""
|
||||||
|
|
||||||
|
grafanaDashboard:
|
||||||
|
# -- Allows overriding the namespace where the ConfigMap will be created, defaulting to the same one as the Release.
|
||||||
|
namespace: ""
|
||||||
|
# -- The name of the ConfigMap containing the dashboard.
|
||||||
|
configMapName: "cnpg-grafana-dashboard"
|
||||||
|
# -- Label that ConfigMaps should have to be loaded as dashboards. DEPRECATED: Use labels instead.
|
||||||
|
sidecarLabel: "grafana_dashboard"
|
||||||
|
# -- Label value that ConfigMaps should have to be loaded as dashboards. DEPRECATED: Use labels instead.
|
||||||
|
sidecarLabelValue: "1"
|
||||||
|
# -- Labels that ConfigMaps should have to get configured in Grafana.
|
||||||
|
labels: {}
|
||||||
|
# -- Annotations that ConfigMaps can have to get configured in Grafana.
|
||||||
|
annotations: {}
|
||||||
|
|
@ -0,0 +1,3 @@
|
||||||
|
The JSON file has been moved to a dedicated repository for CloudNativePG dashboards located at:
|
||||||
|
|
||||||
|
https://github.com/cloudnative-pg/grafana-dashboards/blob/main/charts/cluster/grafana-dashboard.json
|
||||||
|
|
@ -0,0 +1,18 @@
|
||||||
|
|
||||||
|
CloudNativePG operator should be installed in namespace "{{ .Release.Namespace }}".
|
||||||
|
You can now create a PostgreSQL cluster with 3 nodes in the current namespace as follows:
|
||||||
|
|
||||||
|
cat <<EOF | kubectl apply -f -
|
||||||
|
# Example of PostgreSQL cluster
|
||||||
|
apiVersion: postgresql.cnpg.io/v1
|
||||||
|
kind: Cluster
|
||||||
|
metadata:
|
||||||
|
name: cluster-example
|
||||||
|
spec:
|
||||||
|
instances: 3
|
||||||
|
storage:
|
||||||
|
size: 1Gi
|
||||||
|
EOF
|
||||||
|
|
||||||
|
kubectl get cluster
|
||||||
|
|
||||||
|
|
@ -0,0 +1,62 @@
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "cloudnative-pg.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
If release name contains chart name it will be used as a full name.
|
||||||
|
*/}}
|
||||||
|
{{- define "cloudnative-pg.fullname" -}}
|
||||||
|
{{- if .Values.fullnameOverride }}
|
||||||
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- $name := default .Chart.Name .Values.nameOverride }}
|
||||||
|
{{- if contains $name .Release.Name }}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create chart name and version as used by the chart label.
|
||||||
|
*/}}
|
||||||
|
{{- define "cloudnative-pg.chart" -}}
|
||||||
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "cloudnative-pg.labels" -}}
|
||||||
|
helm.sh/chart: {{ include "cloudnative-pg.chart" . }}
|
||||||
|
{{ include "cloudnative-pg.selectorLabels" . }}
|
||||||
|
{{- if .Chart.AppVersion }}
|
||||||
|
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||||
|
{{- end }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "cloudnative-pg.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/name: {{ include "cloudnative-pg.name" . }}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the name of the service account to use
|
||||||
|
*/}}
|
||||||
|
{{- define "cloudnative-pg.serviceAccountName" -}}
|
||||||
|
{{- if .Values.serviceAccount.create }}
|
||||||
|
{{- default (include "cloudnative-pg.fullname" .) .Values.serviceAccount.name }}
|
||||||
|
{{- else }}
|
||||||
|
{{- default "default" .Values.serviceAccount.name }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,45 @@
|
||||||
|
#
|
||||||
|
# Copyright The CloudNativePG Contributors
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
{{- if .Values.config.create }}
|
||||||
|
{{- if not .Values.config.secret }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ .Values.config.name }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
data:
|
||||||
|
{{- toYaml .Values.config.data | nindent 2 }}
|
||||||
|
{{- else }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
type: Opaque
|
||||||
|
metadata:
|
||||||
|
name: {{ .Values.config.name }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
stringData:
|
||||||
|
{{- toYaml .Values.config.data | nindent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,141 @@
|
||||||
|
#
|
||||||
|
# Copyright The CloudNativePG Contributors
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: {{ include "cloudnative-pg.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
replicas: {{ .Values.replicaCount }}
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
{{- include "cloudnative-pg.selectorLabels" . | nindent 6 }}
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
checksum/config: {{ include (print $.Template.BasePath "/config.yaml") . | sha256sum }}
|
||||||
|
{{- with .Values.podAnnotations }}
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.selectorLabels" . | nindent 8 }}
|
||||||
|
{{- with .Values.podLabels }}
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
{{- with .Values.imagePullSecrets }}
|
||||||
|
imagePullSecrets:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
containers:
|
||||||
|
- args:
|
||||||
|
- controller
|
||||||
|
- --leader-elect
|
||||||
|
{{- if .Values.config.name }}
|
||||||
|
{{- if not .Values.config.secret }}
|
||||||
|
- --config-map-name={{ .Values.config.name }}
|
||||||
|
{{- else }}
|
||||||
|
- --secret-name={{ .Values.config.name }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
- --webhook-port={{ .Values.webhook.port }}
|
||||||
|
{{- range .Values.additionalArgs }}
|
||||||
|
- {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
command:
|
||||||
|
- /manager
|
||||||
|
env:
|
||||||
|
- name: OPERATOR_IMAGE_NAME
|
||||||
|
value: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
|
||||||
|
- name: OPERATOR_NAMESPACE
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
- name: MONITORING_QUERIES_CONFIGMAP
|
||||||
|
value: "{{ .Values.monitoringQueriesConfigMap.name }}"
|
||||||
|
{{- if .Values.additionalEnv }}
|
||||||
|
{{- tpl (.Values.additionalEnv | toYaml) . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
|
||||||
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||||
|
livenessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /readyz
|
||||||
|
port: {{ .Values.webhook.port }}
|
||||||
|
scheme: HTTPS
|
||||||
|
{{- if .Values.webhook.livenessProbe.initialDelaySeconds }}
|
||||||
|
initialDelaySeconds: {{ .Values.webhook.livenessProbe.initialDelaySeconds }}
|
||||||
|
{{- end }}
|
||||||
|
name: manager
|
||||||
|
ports:
|
||||||
|
- containerPort: 8080
|
||||||
|
name: metrics
|
||||||
|
protocol: TCP
|
||||||
|
- containerPort: {{ .Values.webhook.port }}
|
||||||
|
name: webhook-server
|
||||||
|
protocol: TCP
|
||||||
|
readinessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /readyz
|
||||||
|
port: {{ .Values.webhook.port }}
|
||||||
|
scheme: HTTPS
|
||||||
|
{{- if .Values.webhook.readinessProbe.initialDelaySeconds }}
|
||||||
|
initialDelaySeconds: {{ .Values.webhook.readinessProbe.initialDelaySeconds }}
|
||||||
|
{{- end }}
|
||||||
|
resources:
|
||||||
|
{{- toYaml .Values.resources | nindent 10 }}
|
||||||
|
securityContext:
|
||||||
|
{{- toYaml .Values.containerSecurityContext | nindent 10 }}
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /controller
|
||||||
|
name: scratch-data
|
||||||
|
- mountPath: /run/secrets/cnpg.io/webhook
|
||||||
|
name: webhook-certificates
|
||||||
|
{{- if .Values.priorityClassName }}
|
||||||
|
priorityClassName: {{ .Values.priorityClassName }}
|
||||||
|
{{- end }}
|
||||||
|
securityContext:
|
||||||
|
{{- toYaml .Values.podSecurityContext | nindent 8 }}
|
||||||
|
serviceAccountName: {{ include "cloudnative-pg.serviceAccountName" . }}
|
||||||
|
terminationGracePeriodSeconds: 10
|
||||||
|
{{- with .Values.nodeSelector }}
|
||||||
|
nodeSelector:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.affinity }}
|
||||||
|
affinity:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.tolerations }}
|
||||||
|
tolerations:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
volumes:
|
||||||
|
- emptyDir: {}
|
||||||
|
name: scratch-data
|
||||||
|
- name: webhook-certificates
|
||||||
|
secret:
|
||||||
|
defaultMode: 420
|
||||||
|
optional: true
|
||||||
|
secretName: cnpg-webhook-cert
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,29 @@
|
||||||
|
#
|
||||||
|
# Copyright The CloudNativePG Contributors
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ .Values.monitoringQueriesConfigMap.name }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
cnpg.io/reload: ""
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
data:
|
||||||
|
queries: {{- toYaml .Values.monitoringQueriesConfigMap.queries | nindent 4 }}
|
||||||
|
|
@ -0,0 +1,92 @@
|
||||||
|
#
|
||||||
|
# Copyright The CloudNativePG Contributors
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
{{- if .Values.webhook.mutating.create }}
|
||||||
|
---
|
||||||
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
|
kind: MutatingWebhookConfiguration
|
||||||
|
metadata:
|
||||||
|
name: cnpg-mutating-webhook-configuration
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
webhooks:
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
service:
|
||||||
|
name: {{ .Values.service.name }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /mutate-postgresql-cnpg-io-v1-backup
|
||||||
|
port: {{ .Values.service.port }}
|
||||||
|
failurePolicy: {{ .Values.webhook.mutating.failurePolicy }}
|
||||||
|
name: mbackup.cnpg.io
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
resources:
|
||||||
|
- backups
|
||||||
|
sideEffects: None
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
service:
|
||||||
|
name: {{ .Values.service.name }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /mutate-postgresql-cnpg-io-v1-cluster
|
||||||
|
port: {{ .Values.service.port }}
|
||||||
|
failurePolicy: {{ .Values.webhook.mutating.failurePolicy }}
|
||||||
|
name: mcluster.cnpg.io
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
resources:
|
||||||
|
- clusters
|
||||||
|
sideEffects: None
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
service:
|
||||||
|
name: {{ .Values.service.name }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /mutate-postgresql-cnpg-io-v1-scheduledbackup
|
||||||
|
port: {{ .Values.service.port }}
|
||||||
|
failurePolicy: {{ .Values.webhook.mutating.failurePolicy }}
|
||||||
|
name: mscheduledbackup.cnpg.io
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
resources:
|
||||||
|
- scheduledbackups
|
||||||
|
sideEffects: None
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,21 @@
|
||||||
|
{{- if .Values.monitoring.podMonitorEnabled }}
|
||||||
|
apiVersion: monitoring.coreos.com/v1
|
||||||
|
kind: PodMonitor
|
||||||
|
metadata:
|
||||||
|
name: {{ include "cloudnative-pg.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.monitoring.podMonitorAdditionalLabels }}
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end}}
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
{{- include "cloudnative-pg.selectorLabels" . | nindent 6 }}
|
||||||
|
podMetricsEndpoints:
|
||||||
|
- port: metrics
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,451 @@
|
||||||
|
#
|
||||||
|
# Copyright The CloudNativePG Contributors
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
{{- if .Values.serviceAccount.create }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: {{ include "cloudnative-pg.serviceAccountName" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.rbac.create }}
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
name: {{ include "cloudnative-pg.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- configmaps
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- configmaps/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- events
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- patch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- nodes
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- persistentvolumeclaims
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods/exec
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- secrets
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- secrets/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- serviceaccounts
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- services
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- admissionregistration.k8s.io
|
||||||
|
resources:
|
||||||
|
- mutatingwebhookconfigurations
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- admissionregistration.k8s.io
|
||||||
|
resources:
|
||||||
|
- validatingwebhookconfigurations
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- apiextensions.k8s.io
|
||||||
|
resources:
|
||||||
|
- customresourcedefinitions
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- deployments
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- batch
|
||||||
|
resources:
|
||||||
|
- jobs
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- coordination.k8s.io
|
||||||
|
resources:
|
||||||
|
- leases
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- get
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- monitoring.coreos.com
|
||||||
|
resources:
|
||||||
|
- podmonitors
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- policy
|
||||||
|
resources:
|
||||||
|
- poddisruptionbudgets
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- backups
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- backups/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- clusterimagecatalogs
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- clusters
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- clusters/finalizers
|
||||||
|
verbs:
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- clusters/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- imagecatalogs
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- poolers
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- poolers/finalizers
|
||||||
|
verbs:
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- poolers/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- scheduledbackups
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- scheduledbackups/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- rbac.authorization.k8s.io
|
||||||
|
resources:
|
||||||
|
- rolebindings
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- rbac.authorization.k8s.io
|
||||||
|
resources:
|
||||||
|
- roles
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- snapshot.storage.k8s.io
|
||||||
|
resources:
|
||||||
|
- volumesnapshots
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- watch
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ include "cloudnative-pg.fullname" . }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.commonAnnotations.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: {{ include "cloudnative-pg.fullname" . }}
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ include "cloudnative-pg.serviceAccountName" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
name: {{ include "cloudnative-pg.fullname" . }}-view
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- if .Values.rbac.aggregateClusterRoles }}
|
||||||
|
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
||||||
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
||||||
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- backups
|
||||||
|
- clusters
|
||||||
|
- poolers
|
||||||
|
- scheduledbackups
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
name: {{ include "cloudnative-pg.fullname" . }}-edit
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- if .Values.rbac.aggregateClusterRoles }}
|
||||||
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
||||||
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
resources:
|
||||||
|
- backups
|
||||||
|
- clusters
|
||||||
|
- poolers
|
||||||
|
- scheduledbackups
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
---
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,34 @@
|
||||||
|
#
|
||||||
|
# Copyright The CloudNativePG Contributors
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: {{ .Values.service.name }}
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.commonAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
type: {{ .Values.service.type }}
|
||||||
|
ports:
|
||||||
|
- port: {{ .Values.service.port }}
|
||||||
|
targetPort: webhook-server
|
||||||
|
name: webhook-server
|
||||||
|
selector:
|
||||||
|
{{- include "cloudnative-pg.selectorLabels" . | nindent 4 }}
|
||||||
|
|
@ -0,0 +1,113 @@
|
||||||
|
#
|
||||||
|
# Copyright The CloudNativePG Contributors
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
{{- if .Values.webhook.validating.create }}
|
||||||
|
---
|
||||||
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
|
kind: ValidatingWebhookConfiguration
|
||||||
|
metadata:
|
||||||
|
name: cnpg-validating-webhook-configuration
|
||||||
|
labels:
|
||||||
|
{{- include "cloudnative-pg.labels" . | nindent 4 }}
|
||||||
|
{{- with .Values.rbac.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
webhooks:
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
service:
|
||||||
|
name: {{ .Values.service.name }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /validate-postgresql-cnpg-io-v1-backup
|
||||||
|
port: {{ .Values.service.port }}
|
||||||
|
failurePolicy: {{ .Values.webhook.validating.failurePolicy }}
|
||||||
|
name: vbackup.cnpg.io
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
resources:
|
||||||
|
- backups
|
||||||
|
sideEffects: None
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
service:
|
||||||
|
name: {{ .Values.service.name }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /validate-postgresql-cnpg-io-v1-cluster
|
||||||
|
port: {{ .Values.service.port }}
|
||||||
|
failurePolicy: {{ .Values.webhook.validating.failurePolicy }}
|
||||||
|
name: vcluster.cnpg.io
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
resources:
|
||||||
|
- clusters
|
||||||
|
sideEffects: None
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
service:
|
||||||
|
name: {{ .Values.service.name }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /validate-postgresql-cnpg-io-v1-scheduledbackup
|
||||||
|
port: {{ .Values.service.port }}
|
||||||
|
failurePolicy: {{ .Values.webhook.validating.failurePolicy }}
|
||||||
|
name: vscheduledbackup.cnpg.io
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
resources:
|
||||||
|
- scheduledbackups
|
||||||
|
sideEffects: None
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
service:
|
||||||
|
name: {{ .Values.service.name }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /validate-postgresql-cnpg-io-v1-pooler
|
||||||
|
port: {{ .Values.service.port }}
|
||||||
|
failurePolicy: {{ .Values.webhook.validating.failurePolicy }}
|
||||||
|
name: vpooler.cnpg.io
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- postgresql.cnpg.io
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
resources:
|
||||||
|
- poolers
|
||||||
|
sideEffects: None
|
||||||
|
{{- end }}
|
||||||
|
|
@ -0,0 +1,269 @@
|
||||||
|
{
|
||||||
|
"$schema": "http://json-schema.org/schema#",
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"additionalArgs": {
|
||||||
|
"type": "array"
|
||||||
|
},
|
||||||
|
"additionalEnv": {
|
||||||
|
"type": "array"
|
||||||
|
},
|
||||||
|
"affinity": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"commonAnnotations": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"config": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"create": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"data": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"name": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"secret": {
|
||||||
|
"type": "boolean"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"containerSecurityContext": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"allowPrivilegeEscalation": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"capabilities": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"drop": {
|
||||||
|
"type": "array",
|
||||||
|
"items": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"readOnlyRootFilesystem": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"runAsGroup": {
|
||||||
|
"type": "integer"
|
||||||
|
},
|
||||||
|
"runAsUser": {
|
||||||
|
"type": "integer"
|
||||||
|
},
|
||||||
|
"seccompProfile": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"type": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"crds": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"create": {
|
||||||
|
"type": "boolean"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"fullnameOverride": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"image": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"pullPolicy": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"repository": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"tag": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"imagePullSecrets": {
|
||||||
|
"type": "array"
|
||||||
|
},
|
||||||
|
"monitoring": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"grafanaDashboard": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"annotations": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"configMapName": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"create": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"labels": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"namespace": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"sidecarLabel": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"sidecarLabelValue": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"podMonitorAdditionalLabels": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"podMonitorEnabled": {
|
||||||
|
"type": "boolean"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"monitoringQueriesConfigMap": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"name": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"queries": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"nameOverride": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"nodeSelector": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"podAnnotations": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"podLabels": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"podSecurityContext": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"runAsNonRoot": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"seccompProfile": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"type": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"priorityClassName": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"rbac": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"aggregateClusterRoles": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"create": {
|
||||||
|
"type": "boolean"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"replicaCount": {
|
||||||
|
"type": "integer"
|
||||||
|
},
|
||||||
|
"resources": {
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
"service": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"name": {
|
||||||
|
"type": "string"
|
||||||
|
},
|
||||||
|
"port": {
|
||||||
|
"type": "integer"
|
||||||
|
},
|
||||||
|
"type": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"serviceAccount": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"create": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"name": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"tolerations": {
|
||||||
|
"type": "array"
|
||||||
|
},
|
||||||
|
"webhook": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"livenessProbe": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"initialDelaySeconds": {
|
||||||
|
"type": "integer"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"mutating": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"create": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"failurePolicy": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"port": {
|
||||||
|
"type": "integer"
|
||||||
|
},
|
||||||
|
"readinessProbe": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"initialDelaySeconds": {
|
||||||
|
"type": "integer"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"validating": {
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"create": {
|
||||||
|
"type": "boolean"
|
||||||
|
},
|
||||||
|
"failurePolicy": {
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,555 @@
|
||||||
|
#
|
||||||
|
# Copyright The CloudNativePG Contributors
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
#
|
||||||
|
# Default values for CloudNativePG.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Please declare variables to be passed to your templates.
|
||||||
|
|
||||||
|
replicaCount: 1
|
||||||
|
|
||||||
|
image:
|
||||||
|
repository: ghcr.io/cloudnative-pg/cloudnative-pg
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
# -- Overrides the image tag whose default is the chart appVersion.
|
||||||
|
tag: ""
|
||||||
|
|
||||||
|
imagePullSecrets: []
|
||||||
|
nameOverride: ""
|
||||||
|
fullnameOverride: ""
|
||||||
|
|
||||||
|
crds:
|
||||||
|
# -- Specifies whether the CRDs should be created when installing the chart.
|
||||||
|
create: true
|
||||||
|
|
||||||
|
# -- The webhook configuration.
|
||||||
|
webhook:
|
||||||
|
port: 9443
|
||||||
|
mutating:
|
||||||
|
create: true
|
||||||
|
failurePolicy: Fail
|
||||||
|
validating:
|
||||||
|
create: true
|
||||||
|
failurePolicy: Fail
|
||||||
|
livenessProbe:
|
||||||
|
initialDelaySeconds: 3
|
||||||
|
readinessProbe:
|
||||||
|
initialDelaySeconds: 3
|
||||||
|
|
||||||
|
# -- Operator configuration.
|
||||||
|
config:
|
||||||
|
# -- Specifies whether the secret should be created.
|
||||||
|
create: true
|
||||||
|
# -- The name of the configmap/secret to use.
|
||||||
|
name: cnpg-controller-manager-config
|
||||||
|
# -- Specifies whether it should be stored in a secret, instead of a configmap.
|
||||||
|
secret: false
|
||||||
|
# -- The content of the configmap/secret, see
|
||||||
|
# https://cloudnative-pg.io/documentation/current/operator_conf/#available-options
|
||||||
|
# for all the available options.
|
||||||
|
data: {}
|
||||||
|
# INHERITED_ANNOTATIONS: categories
|
||||||
|
# INHERITED_LABELS: environment, workload, app
|
||||||
|
# WATCH_NAMESPACE: namespace-a,namespace-b
|
||||||
|
|
||||||
|
# -- Additinal arguments to be added to the operator's args list.
|
||||||
|
additionalArgs: []
|
||||||
|
|
||||||
|
# -- Array containing extra environment variables which can be templated.
|
||||||
|
# For example:
|
||||||
|
# - name: RELEASE_NAME
|
||||||
|
# value: "{{ .Release.Name }}"
|
||||||
|
# - name: MY_VAR
|
||||||
|
# value: "mySpecialKey"
|
||||||
|
additionalEnv: []
|
||||||
|
|
||||||
|
serviceAccount:
|
||||||
|
# -- Specifies whether the service account should be created.
|
||||||
|
create: true
|
||||||
|
# -- The name of the service account to use.
|
||||||
|
# If not set and create is true, a name is generated using the fullname template.
|
||||||
|
name: ""
|
||||||
|
|
||||||
|
rbac:
|
||||||
|
# -- Specifies whether ClusterRole and ClusterRoleBinding should be created.
|
||||||
|
create: true
|
||||||
|
# -- Aggregate ClusterRoles to Kubernetes default user-facing roles.
|
||||||
|
# Ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
|
||||||
|
aggregateClusterRoles: false
|
||||||
|
|
||||||
|
# -- Annotations to be added to all other resources.
|
||||||
|
commonAnnotations: {}
|
||||||
|
# -- Annotations to be added to the pod.
|
||||||
|
podAnnotations: {}
|
||||||
|
# -- Labels to be added to the pod.
|
||||||
|
podLabels: {}
|
||||||
|
|
||||||
|
# -- Container Security Context.
|
||||||
|
containerSecurityContext:
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
|
readOnlyRootFilesystem: true
|
||||||
|
runAsUser: 10001
|
||||||
|
runAsGroup: 10001
|
||||||
|
seccompProfile:
|
||||||
|
type: RuntimeDefault
|
||||||
|
capabilities:
|
||||||
|
drop:
|
||||||
|
- "ALL"
|
||||||
|
|
||||||
|
# -- Security Context for the whole pod.
|
||||||
|
podSecurityContext:
|
||||||
|
runAsNonRoot: true
|
||||||
|
seccompProfile:
|
||||||
|
type: RuntimeDefault
|
||||||
|
# fsGroup: 2000
|
||||||
|
|
||||||
|
# -- Priority indicates the importance of a Pod relative to other Pods.
|
||||||
|
priorityClassName: ""
|
||||||
|
|
||||||
|
service:
|
||||||
|
type: ClusterIP
|
||||||
|
# -- DO NOT CHANGE THE SERVICE NAME as it is currently used to generate the certificate
|
||||||
|
# and can not be configured
|
||||||
|
name: cnpg-webhook-service
|
||||||
|
port: 443
|
||||||
|
|
||||||
|
resources: {}
|
||||||
|
# If you want to specify resources, uncomment the following
|
||||||
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
||||||
|
#
|
||||||
|
# limits:
|
||||||
|
# cpu: 100m
|
||||||
|
# memory: 200Mi
|
||||||
|
# requests:
|
||||||
|
# cpu: 100m
|
||||||
|
# memory: 100Mi
|
||||||
|
|
||||||
|
# -- Nodeselector for the operator to be installed.
|
||||||
|
nodeSelector: {}
|
||||||
|
|
||||||
|
# -- Tolerations for the operator to be installed.
|
||||||
|
tolerations: []
|
||||||
|
|
||||||
|
# -- Affinity for the operator to be installed.
|
||||||
|
affinity: {}
|
||||||
|
|
||||||
|
monitoring:
|
||||||
|
|
||||||
|
# -- Specifies whether the monitoring should be enabled. Requires Prometheus Operator CRDs.
|
||||||
|
podMonitorEnabled: false
|
||||||
|
# -- Additional labels for the podMonitor
|
||||||
|
podMonitorAdditionalLabels: {}
|
||||||
|
|
||||||
|
grafanaDashboard:
|
||||||
|
create: false
|
||||||
|
# -- Allows overriding the namespace where the ConfigMap will be created, defaulting to the same one as the Release.
|
||||||
|
namespace: ""
|
||||||
|
# -- The name of the ConfigMap containing the dashboard.
|
||||||
|
configMapName: "cnpg-grafana-dashboard"
|
||||||
|
# -- Label that ConfigMaps should have to be loaded as dashboards. DEPRECATED: Use labels instead.
|
||||||
|
sidecarLabel: "grafana_dashboard"
|
||||||
|
# -- Label value that ConfigMaps should have to be loaded as dashboards. DEPRECATED: Use labels instead.
|
||||||
|
sidecarLabelValue: "1"
|
||||||
|
# -- Labels that ConfigMaps should have to get configured in Grafana.
|
||||||
|
labels: {}
|
||||||
|
# -- Annotations that ConfigMaps can have to get configured in Grafana.
|
||||||
|
annotations: {}
|
||||||
|
|
||||||
|
# Default monitoring queries
|
||||||
|
monitoringQueriesConfigMap:
|
||||||
|
# -- The name of the default monitoring configmap.
|
||||||
|
name: cnpg-default-monitoring
|
||||||
|
# -- A string representation of a YAML defining monitoring queries.
|
||||||
|
queries: |
|
||||||
|
backends:
|
||||||
|
query: |
|
||||||
|
SELECT sa.datname
|
||||||
|
, sa.usename
|
||||||
|
, sa.application_name
|
||||||
|
, states.state
|
||||||
|
, COALESCE(sa.count, 0) AS total
|
||||||
|
, COALESCE(sa.max_tx_secs, 0) AS max_tx_duration_seconds
|
||||||
|
FROM ( VALUES ('active')
|
||||||
|
, ('idle')
|
||||||
|
, ('idle in transaction')
|
||||||
|
, ('idle in transaction (aborted)')
|
||||||
|
, ('fastpath function call')
|
||||||
|
, ('disabled')
|
||||||
|
) AS states(state)
|
||||||
|
LEFT JOIN (
|
||||||
|
SELECT datname
|
||||||
|
, state
|
||||||
|
, usename
|
||||||
|
, COALESCE(application_name, '') AS application_name
|
||||||
|
, COUNT(*)
|
||||||
|
, COALESCE(EXTRACT (EPOCH FROM (max(now() - xact_start))), 0) AS max_tx_secs
|
||||||
|
FROM pg_catalog.pg_stat_activity
|
||||||
|
GROUP BY datname, state, usename, application_name
|
||||||
|
) sa ON states.state = sa.state
|
||||||
|
WHERE sa.usename IS NOT NULL
|
||||||
|
metrics:
|
||||||
|
- datname:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the database"
|
||||||
|
- usename:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the user"
|
||||||
|
- application_name:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the application"
|
||||||
|
- state:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "State of the backend"
|
||||||
|
- total:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Number of backends"
|
||||||
|
- max_tx_duration_seconds:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Maximum duration of a transaction in seconds"
|
||||||
|
|
||||||
|
backends_waiting:
|
||||||
|
query: |
|
||||||
|
SELECT count(*) AS total
|
||||||
|
FROM pg_catalog.pg_locks blocked_locks
|
||||||
|
JOIN pg_catalog.pg_locks blocking_locks
|
||||||
|
ON blocking_locks.locktype = blocked_locks.locktype
|
||||||
|
AND blocking_locks.database IS NOT DISTINCT FROM blocked_locks.database
|
||||||
|
AND blocking_locks.relation IS NOT DISTINCT FROM blocked_locks.relation
|
||||||
|
AND blocking_locks.page IS NOT DISTINCT FROM blocked_locks.page
|
||||||
|
AND blocking_locks.tuple IS NOT DISTINCT FROM blocked_locks.tuple
|
||||||
|
AND blocking_locks.virtualxid IS NOT DISTINCT FROM blocked_locks.virtualxid
|
||||||
|
AND blocking_locks.transactionid IS NOT DISTINCT FROM blocked_locks.transactionid
|
||||||
|
AND blocking_locks.classid IS NOT DISTINCT FROM blocked_locks.classid
|
||||||
|
AND blocking_locks.objid IS NOT DISTINCT FROM blocked_locks.objid
|
||||||
|
AND blocking_locks.objsubid IS NOT DISTINCT FROM blocked_locks.objsubid
|
||||||
|
AND blocking_locks.pid != blocked_locks.pid
|
||||||
|
JOIN pg_catalog.pg_stat_activity blocking_activity ON blocking_activity.pid = blocking_locks.pid
|
||||||
|
WHERE NOT blocked_locks.granted
|
||||||
|
metrics:
|
||||||
|
- total:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Total number of backends that are currently waiting on other queries"
|
||||||
|
|
||||||
|
pg_database:
|
||||||
|
query: |
|
||||||
|
SELECT datname
|
||||||
|
, pg_catalog.pg_database_size(datname) AS size_bytes
|
||||||
|
, pg_catalog.age(datfrozenxid) AS xid_age
|
||||||
|
, pg_catalog.mxid_age(datminmxid) AS mxid_age
|
||||||
|
FROM pg_catalog.pg_database
|
||||||
|
metrics:
|
||||||
|
- datname:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the database"
|
||||||
|
- size_bytes:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Disk space used by the database"
|
||||||
|
- xid_age:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Number of transactions from the frozen XID to the current one"
|
||||||
|
- mxid_age:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Number of multiple transactions (Multixact) from the frozen XID to the current one"
|
||||||
|
|
||||||
|
pg_postmaster:
|
||||||
|
query: |
|
||||||
|
SELECT EXTRACT(EPOCH FROM pg_postmaster_start_time) AS start_time
|
||||||
|
FROM pg_catalog.pg_postmaster_start_time()
|
||||||
|
metrics:
|
||||||
|
- start_time:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Time at which postgres started (based on epoch)"
|
||||||
|
|
||||||
|
pg_replication:
|
||||||
|
query: "SELECT CASE WHEN (
|
||||||
|
NOT pg_catalog.pg_is_in_recovery()
|
||||||
|
OR pg_catalog.pg_last_wal_receive_lsn() = pg_catalog.pg_last_wal_replay_lsn())
|
||||||
|
THEN 0
|
||||||
|
ELSE GREATEST (0,
|
||||||
|
EXTRACT(EPOCH FROM (now() - pg_catalog.pg_last_xact_replay_timestamp())))
|
||||||
|
END AS lag,
|
||||||
|
pg_catalog.pg_is_in_recovery() AS in_recovery,
|
||||||
|
EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up,
|
||||||
|
(SELECT count(*) FROM pg_catalog.pg_stat_replication) AS streaming_replicas"
|
||||||
|
metrics:
|
||||||
|
- lag:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Replication lag behind primary in seconds"
|
||||||
|
- in_recovery:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Whether the instance is in recovery"
|
||||||
|
- is_wal_receiver_up:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Whether the instance wal_receiver is up"
|
||||||
|
- streaming_replicas:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Number of streaming replicas connected to the instance"
|
||||||
|
|
||||||
|
pg_replication_slots:
|
||||||
|
query: |
|
||||||
|
SELECT slot_name,
|
||||||
|
slot_type,
|
||||||
|
database,
|
||||||
|
active,
|
||||||
|
(CASE pg_catalog.pg_is_in_recovery()
|
||||||
|
WHEN TRUE THEN pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_last_wal_receive_lsn(), restart_lsn)
|
||||||
|
ELSE pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), restart_lsn)
|
||||||
|
END) as pg_wal_lsn_diff
|
||||||
|
FROM pg_catalog.pg_replication_slots
|
||||||
|
WHERE NOT temporary
|
||||||
|
metrics:
|
||||||
|
- slot_name:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the replication slot"
|
||||||
|
- slot_type:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Type of the replication slot"
|
||||||
|
- database:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the database"
|
||||||
|
- active:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Flag indicating whether the slot is active"
|
||||||
|
- pg_wal_lsn_diff:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Replication lag in bytes"
|
||||||
|
|
||||||
|
pg_stat_archiver:
|
||||||
|
query: |
|
||||||
|
SELECT archived_count
|
||||||
|
, failed_count
|
||||||
|
, COALESCE(EXTRACT(EPOCH FROM (now() - last_archived_time)), -1) AS seconds_since_last_archival
|
||||||
|
, COALESCE(EXTRACT(EPOCH FROM (now() - last_failed_time)), -1) AS seconds_since_last_failure
|
||||||
|
, COALESCE(EXTRACT(EPOCH FROM last_archived_time), -1) AS last_archived_time
|
||||||
|
, COALESCE(EXTRACT(EPOCH FROM last_failed_time), -1) AS last_failed_time
|
||||||
|
, COALESCE(CAST(CAST('x'||pg_catalog.right(pg_catalog.split_part(last_archived_wal, '.', 1), 16) AS pg_catalog.bit(64)) AS pg_catalog.int8), -1) AS last_archived_wal_start_lsn
|
||||||
|
, COALESCE(CAST(CAST('x'||pg_catalog.right(pg_catalog.split_part(last_failed_wal, '.', 1), 16) AS pg_catalog.bit(64)) AS pg_catalog.int8), -1) AS last_failed_wal_start_lsn
|
||||||
|
, EXTRACT(EPOCH FROM stats_reset) AS stats_reset_time
|
||||||
|
FROM pg_catalog.pg_stat_archiver
|
||||||
|
metrics:
|
||||||
|
- archived_count:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of WAL files that have been successfully archived"
|
||||||
|
- failed_count:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of failed attempts for archiving WAL files"
|
||||||
|
- seconds_since_last_archival:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Seconds since the last successful archival operation"
|
||||||
|
- seconds_since_last_failure:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Seconds since the last failed archival operation"
|
||||||
|
- last_archived_time:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Epoch of the last time WAL archiving succeeded"
|
||||||
|
- last_failed_time:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Epoch of the last time WAL archiving failed"
|
||||||
|
- last_archived_wal_start_lsn:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Archived WAL start LSN"
|
||||||
|
- last_failed_wal_start_lsn:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Last failed WAL LSN"
|
||||||
|
- stats_reset_time:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Time at which these statistics were last reset"
|
||||||
|
|
||||||
|
pg_stat_bgwriter:
|
||||||
|
runonserver: "<17.0.0"
|
||||||
|
query: |
|
||||||
|
SELECT checkpoints_timed
|
||||||
|
, checkpoints_req
|
||||||
|
, checkpoint_write_time
|
||||||
|
, checkpoint_sync_time
|
||||||
|
, buffers_checkpoint
|
||||||
|
, buffers_clean
|
||||||
|
, maxwritten_clean
|
||||||
|
, buffers_backend
|
||||||
|
, buffers_backend_fsync
|
||||||
|
, buffers_alloc
|
||||||
|
FROM pg_catalog.pg_stat_bgwriter
|
||||||
|
metrics:
|
||||||
|
- checkpoints_timed:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of scheduled checkpoints that have been performed"
|
||||||
|
- checkpoints_req:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of requested checkpoints that have been performed"
|
||||||
|
- checkpoint_write_time:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Total amount of time that has been spent in the portion of checkpoint processing where files are written to disk, in milliseconds"
|
||||||
|
- checkpoint_sync_time:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Total amount of time that has been spent in the portion of checkpoint processing where files are synchronized to disk, in milliseconds"
|
||||||
|
- buffers_checkpoint:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of buffers written during checkpoints"
|
||||||
|
- buffers_clean:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of buffers written by the background writer"
|
||||||
|
- maxwritten_clean:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of times the background writer stopped a cleaning scan because it had written too many buffers"
|
||||||
|
- buffers_backend:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of buffers written directly by a backend"
|
||||||
|
- buffers_backend_fsync:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of times a backend had to execute its own fsync call (normally the background writer handles those even when the backend does its own write)"
|
||||||
|
- buffers_alloc:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of buffers allocated"
|
||||||
|
|
||||||
|
pg_stat_database:
|
||||||
|
query: |
|
||||||
|
SELECT datname
|
||||||
|
, xact_commit
|
||||||
|
, xact_rollback
|
||||||
|
, blks_read
|
||||||
|
, blks_hit
|
||||||
|
, tup_returned
|
||||||
|
, tup_fetched
|
||||||
|
, tup_inserted
|
||||||
|
, tup_updated
|
||||||
|
, tup_deleted
|
||||||
|
, conflicts
|
||||||
|
, temp_files
|
||||||
|
, temp_bytes
|
||||||
|
, deadlocks
|
||||||
|
, blk_read_time
|
||||||
|
, blk_write_time
|
||||||
|
FROM pg_catalog.pg_stat_database
|
||||||
|
metrics:
|
||||||
|
- datname:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of this database"
|
||||||
|
- xact_commit:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of transactions in this database that have been committed"
|
||||||
|
- xact_rollback:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of transactions in this database that have been rolled back"
|
||||||
|
- blks_read:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of disk blocks read in this database"
|
||||||
|
- blks_hit:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of times disk blocks were found already in the buffer cache, so that a read was not necessary (this only includes hits in the PostgreSQL buffer cache, not the operating system's file system cache)"
|
||||||
|
- tup_returned:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of rows returned by queries in this database"
|
||||||
|
- tup_fetched:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of rows fetched by queries in this database"
|
||||||
|
- tup_inserted:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of rows inserted by queries in this database"
|
||||||
|
- tup_updated:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of rows updated by queries in this database"
|
||||||
|
- tup_deleted:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of rows deleted by queries in this database"
|
||||||
|
- conflicts:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of queries canceled due to conflicts with recovery in this database"
|
||||||
|
- temp_files:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of temporary files created by queries in this database"
|
||||||
|
- temp_bytes:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Total amount of data written to temporary files by queries in this database"
|
||||||
|
- deadlocks:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Number of deadlocks detected in this database"
|
||||||
|
- blk_read_time:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Time spent reading data file blocks by backends in this database, in milliseconds"
|
||||||
|
- blk_write_time:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Time spent writing data file blocks by backends in this database, in milliseconds"
|
||||||
|
|
||||||
|
pg_stat_replication:
|
||||||
|
primary: true
|
||||||
|
query: |
|
||||||
|
SELECT usename
|
||||||
|
, COALESCE(application_name, '') AS application_name
|
||||||
|
, COALESCE(client_addr::text, '') AS client_addr
|
||||||
|
, COALESCE(client_port::text, '') AS client_port
|
||||||
|
, EXTRACT(EPOCH FROM backend_start) AS backend_start
|
||||||
|
, COALESCE(pg_catalog.age(backend_xmin), 0) AS backend_xmin_age
|
||||||
|
, pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), sent_lsn) AS sent_diff_bytes
|
||||||
|
, pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), write_lsn) AS write_diff_bytes
|
||||||
|
, pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), flush_lsn) AS flush_diff_bytes
|
||||||
|
, COALESCE(pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), replay_lsn),0) AS replay_diff_bytes
|
||||||
|
, COALESCE((EXTRACT(EPOCH FROM write_lag)),0)::float AS write_lag_seconds
|
||||||
|
, COALESCE((EXTRACT(EPOCH FROM flush_lag)),0)::float AS flush_lag_seconds
|
||||||
|
, COALESCE((EXTRACT(EPOCH FROM replay_lag)),0)::float AS replay_lag_seconds
|
||||||
|
FROM pg_catalog.pg_stat_replication
|
||||||
|
metrics:
|
||||||
|
- usename:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the replication user"
|
||||||
|
- application_name:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the application"
|
||||||
|
- client_addr:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Client IP address"
|
||||||
|
- client_port:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Client TCP port"
|
||||||
|
- backend_start:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "Time when this process was started"
|
||||||
|
- backend_xmin_age:
|
||||||
|
usage: "COUNTER"
|
||||||
|
description: "The age of this standby's xmin horizon"
|
||||||
|
- sent_diff_bytes:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Difference in bytes from the last write-ahead log location sent on this connection"
|
||||||
|
- write_diff_bytes:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Difference in bytes from the last write-ahead log location written to disk by this standby server"
|
||||||
|
- flush_diff_bytes:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Difference in bytes from the last write-ahead log location flushed to disk by this standby server"
|
||||||
|
- replay_diff_bytes:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Difference in bytes from the last write-ahead log location replayed into the database on this standby server"
|
||||||
|
- write_lag_seconds:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Time elapsed between flushing recent WAL locally and receiving notification that this standby server has written it"
|
||||||
|
- flush_lag_seconds:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Time elapsed between flushing recent WAL locally and receiving notification that this standby server has written and flushed it"
|
||||||
|
- replay_lag_seconds:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Time elapsed between flushing recent WAL locally and receiving notification that this standby server has written, flushed and applied it"
|
||||||
|
|
||||||
|
pg_settings:
|
||||||
|
query: |
|
||||||
|
SELECT name,
|
||||||
|
CASE setting WHEN 'on' THEN '1' WHEN 'off' THEN '0' ELSE setting END AS setting
|
||||||
|
FROM pg_catalog.pg_settings
|
||||||
|
WHERE vartype IN ('integer', 'real', 'bool')
|
||||||
|
ORDER BY 1
|
||||||
|
metrics:
|
||||||
|
- name:
|
||||||
|
usage: "LABEL"
|
||||||
|
description: "Name of the setting"
|
||||||
|
- setting:
|
||||||
|
usage: "GAUGE"
|
||||||
|
description: "Setting value"
|
||||||
|
|
@ -0,0 +1,25 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
# img folder
|
||||||
|
img/
|
||||||
|
# Changelog
|
||||||
|
CHANGELOG.md
|
||||||
|
|
@ -0,0 +1,6 @@
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
repository: oci://registry-1.docker.io/bitnamicharts
|
||||||
|
version: 2.20.5
|
||||||
|
digest: sha256:5b98791747a148b9d4956b81bb8635f49a0ae831869d700d52e514b8fd1a2445
|
||||||
|
generated: "2024-07-16T12:17:30.845825+02:00"
|
||||||
|
|
@ -0,0 +1,38 @@
|
||||||
|
annotations:
|
||||||
|
category: Infrastructure
|
||||||
|
images: |
|
||||||
|
- name: rabbitmq
|
||||||
|
image: docker.io/bitnami/rabbitmq:3.13.6-debian-12-r0
|
||||||
|
- name: rabbitmq-cluster-operator
|
||||||
|
image: docker.io/bitnami/rabbitmq-cluster-operator:2.9.0-debian-12-r6
|
||||||
|
- name: rmq-default-credential-updater
|
||||||
|
image: docker.io/bitnami/rmq-default-credential-updater:1.0.4-debian-12-r24
|
||||||
|
- name: rmq-messaging-topology-operator
|
||||||
|
image: docker.io/bitnami/rmq-messaging-topology-operator:1.14.2-debian-12-r3
|
||||||
|
licenses: Apache-2.0
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 2.9.0
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
repository: oci://registry-1.docker.io/bitnamicharts
|
||||||
|
tags:
|
||||||
|
- bitnami-common
|
||||||
|
version: 2.x.x
|
||||||
|
description: The RabbitMQ Cluster Kubernetes Operator automates provisioning, management,
|
||||||
|
and operations of RabbitMQ clusters running on Kubernetes.
|
||||||
|
home: https://bitnami.com
|
||||||
|
icon: https://bitnami.com/assets/stacks/rabbitmq-cluster-operator/img/rabbitmq-cluster-operator-stack-220x234.png
|
||||||
|
keywords:
|
||||||
|
- rabbitmq
|
||||||
|
- operator
|
||||||
|
- infrastructure
|
||||||
|
- message queue
|
||||||
|
- AMQP
|
||||||
|
kubeVersion: '>= 1.19.0-0'
|
||||||
|
maintainers:
|
||||||
|
- name: Broadcom, Inc. All Rights Reserved.
|
||||||
|
url: https://github.com/bitnami/charts
|
||||||
|
name: rabbitmq-cluster-operator
|
||||||
|
sources:
|
||||||
|
- https://github.com/bitnami/charts/tree/main/bitnami/rabbitmq-cluster-operator
|
||||||
|
version: 4.3.16
|
||||||
|
|
@ -0,0 +1,634 @@
|
||||||
|
<!--- app-name: RabbitMQ Cluster Operator -->
|
||||||
|
|
||||||
|
# Bitnami package for RabbitMQ Cluster Operator
|
||||||
|
|
||||||
|
The RabbitMQ Cluster Kubernetes Operator automates provisioning, management, and operations of RabbitMQ clusters running on Kubernetes.
|
||||||
|
|
||||||
|
[Overview of RabbitMQ Cluster Operator](https://github.com/rabbitmq/cluster-operator)
|
||||||
|
|
||||||
|
Trademarks: This software listing is packaged by Bitnami. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
|
||||||
|
|
||||||
|
## TL;DR
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm install my-release oci://registry-1.docker.io/bitnamicharts/rabbitmq-cluster-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
Looking to use RabbitMQ Cluster Operator in production? Try [VMware Tanzu Application Catalog](https://bitnami.com/enterprise), the commercial edition of the Bitnami catalog.
|
||||||
|
|
||||||
|
## Introduction
|
||||||
|
|
||||||
|
Bitnami charts for Helm are carefully engineered, actively maintained and are the quickest and easiest way to deploy containers on a Kubernetes cluster that are ready to handle production workloads.
|
||||||
|
|
||||||
|
This chart bootstraps a [RabbitMQ Cluster Operator](https://www.rabbitmq.com/kubernetes/operator/operator-overview.html) Deployment in a [Kubernetes](https://kubernetes.io) cluster using the [Helm](https://helm.sh) package manager.
|
||||||
|
|
||||||
|
Bitnami charts can be used with [Kubeapps](https://kubeapps.dev/) for deployment and management of Helm Charts in clusters.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
- Kubernetes 1.23+
|
||||||
|
- Helm 3.8.0+
|
||||||
|
- PV provisioner support in the underlying infrastructure
|
||||||
|
|
||||||
|
## Installing the Chart
|
||||||
|
|
||||||
|
To install the chart with the release name `my-release`:
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm install my-release oci://REGISTRY_NAME/REPOSITORY_NAME/rabbitmq-cluster-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
> Note: You need to substitute the placeholders `REGISTRY_NAME` and `REPOSITORY_NAME` with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use `REGISTRY_NAME=registry-1.docker.io` and `REPOSITORY_NAME=bitnamicharts`.
|
||||||
|
|
||||||
|
The command deploy the RabbitMQ Cluster Kubernetes Operator on the Kubernetes cluster in the default configuration. The [Parameters](#parameters) section lists the parameters that can be configured during installation.
|
||||||
|
|
||||||
|
> **Tip**: List all releases using `helm list`
|
||||||
|
|
||||||
|
## Differences between the Bitnami RabbitMQ chart and the Bitnami RabbitMQ Operator chart
|
||||||
|
|
||||||
|
In the Bitnami catalog we offer both the *bitnami/rabbitmq* and *bitnami/rabbitmq-operator* charts. Each solution covers different needs and use cases.
|
||||||
|
|
||||||
|
The *bitnami/rabbitmq* chart deploys a single RabbitMQ installation using a Kubernetes StatefulSet object (together with Services, PVCs, ConfigMaps, etc.). The figure below shows the deployed objects in the cluster after executing *helm install*:
|
||||||
|
|
||||||
|
```text
|
||||||
|
+--------------+ +-----+
|
||||||
|
| | | |
|
||||||
|
Service | RabbitMQ +<------------+ PVC |
|
||||||
|
<-------------------+ | | |
|
||||||
|
| StatefulSet | +-----+
|
||||||
|
| |
|
||||||
|
+-----------+--+
|
||||||
|
^ +------------+
|
||||||
|
| | |
|
||||||
|
+----------------+ Configmaps |
|
||||||
|
| Secrets |
|
||||||
|
+------------+
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
Its lifecycle is managed using Helm and, at the RabbitMQ container level, the following operations are automated: persistence management, configuration based on environment variables and plugin initialization. The StatefulSet do not require any ServiceAccounts with special RBAC privileges so this solution would fit better in more restricted Kubernetes installations.
|
||||||
|
|
||||||
|
The *bitnami/rabbitmq-operator* chart deploys a RabbitMQ Operator installation using a Kubernetes Deployment. The figure below shows the RabbitMQ operator deployment after executing *helm install*:
|
||||||
|
|
||||||
|
```text
|
||||||
|
+--------------------+
|
||||||
|
| | +---------------+
|
||||||
|
| RabbitMQ Operator | | |
|
||||||
|
| | | RBAC |
|
||||||
|
| Deployment | | Privileges |
|
||||||
|
+-------+------------+ +-------+-------+
|
||||||
|
^ |
|
||||||
|
| +-----------------+ |
|
||||||
|
+---+ Service Account +<----+
|
||||||
|
+-----------------+
|
||||||
|
```
|
||||||
|
|
||||||
|
The operator will extend the Kubernetes API with the following object: *RabbitmqCluster*. From that moment, the user will be able to deploy objects of these kinds and the previously deployed Operator will take care of deploying all the required StatefulSets, ConfigMaps and Services for running a RabbitMQ instance. Its lifecycle is managed using *kubectl* on the RabbitmqCluster objects. The following figure shows the deployed objects after deploying a *RabbitmqCluster* object using *kubectl*:
|
||||||
|
|
||||||
|
```text
|
||||||
|
+--------------------+
|
||||||
|
| | +---------------+
|
||||||
|
| RabbitMQ Operator | | |
|
||||||
|
| | | RBAC |
|
||||||
|
| Deployment | | Privileges |
|
||||||
|
+-------+------------+ +-------+-------+
|
||||||
|
| ^ |
|
||||||
|
| | +-----------------+ |
|
||||||
|
| +---+ Service Account +<----+
|
||||||
|
| +-----------------+
|
||||||
|
|
|
||||||
|
|
|
||||||
|
|
|
||||||
|
|
|
||||||
|
| -------------------------------------------------------------------------
|
||||||
|
| | |
|
||||||
|
| | +--------------+ +-----+ |
|
||||||
|
| | | | | | |
|
||||||
|
|--->| Service | RabbitMQ +<------------+ PVC | |
|
||||||
|
| <-------------------+ | | | |
|
||||||
|
| | StatefulSet | +-----+ |
|
||||||
|
| | | |
|
||||||
|
| +-----------+--+ |
|
||||||
|
| ^ +------------+ |
|
||||||
|
| | | | |
|
||||||
|
| +----------------+ Configmaps | |
|
||||||
|
| | Secrets | |
|
||||||
|
| +------------+ |
|
||||||
|
| |
|
||||||
|
| |
|
||||||
|
-------------------------------------------------------------------------
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
This solution allows to easily deploy multiple RabbitMQ instances compared to the *bitnami/rabbitmq* chart. As the operator automatically deploys RabbitMQ installations, the RabbitMQ Operator pods will require a ServiceAccount with privileges to create and destroy multiple Kubernetes objects. This may be problematic for Kubernetes clusters with strict role-based access policies.
|
||||||
|
|
||||||
|
## Configuration and installation details
|
||||||
|
|
||||||
|
### Resource requests and limits
|
||||||
|
|
||||||
|
Bitnami charts allow setting resource requests and limits for all containers inside the chart deployment. These are inside the `resources` value (check parameter table). Setting requests is essential for production workloads and these should be adapted to your specific use case.
|
||||||
|
|
||||||
|
To make this process easier, the chart contains the `resourcesPreset` values, which automatically sets the `resources` section according to different presets. Check these presets in [the bitnami/common chart](https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15). However, in production workloads using `resourcePreset` is discouraged as it may not fully adapt to your specific needs. Find more information on container resource management in the [official Kubernetes documentation](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/).
|
||||||
|
|
||||||
|
### [Rolling VS Immutable tags](https://docs.vmware.com/en/VMware-Tanzu-Application-Catalog/services/tutorials/GUID-understand-rolling-tags-containers-index.html)
|
||||||
|
|
||||||
|
It is strongly recommended to use immutable tags in a production environment. This ensures your deployment does not change automatically if the same tag is updated with a different image.
|
||||||
|
|
||||||
|
Bitnami will release a new chart updating its containers if a new version of the main container, significant changes, or critical vulnerabilities exist.
|
||||||
|
|
||||||
|
### Additional environment variables
|
||||||
|
|
||||||
|
In case you want to add extra environment variables (useful for advanced operations like custom init scripts), you can use the `extraEnvVars` property.
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
rabbitmq-cluster-operator:
|
||||||
|
extraEnvVars:
|
||||||
|
- name: LOG_LEVEL
|
||||||
|
value: error
|
||||||
|
```
|
||||||
|
|
||||||
|
Alternatively, you can use a ConfigMap or a Secret with the environment variables. To do so, use the `extraEnvVarsCM` or the `extraEnvVarsSecret` values.
|
||||||
|
|
||||||
|
### Sidecars
|
||||||
|
|
||||||
|
If additional containers are needed in the same pod as rabbitmq-cluster-operator (such as additional metrics or logging exporters), they can be defined using the `sidecars` parameter.
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
sidecars:
|
||||||
|
- name: your-image-name
|
||||||
|
image: your-image
|
||||||
|
imagePullPolicy: Always
|
||||||
|
ports:
|
||||||
|
- name: portname
|
||||||
|
containerPort: 1234
|
||||||
|
```
|
||||||
|
|
||||||
|
If these sidecars export extra ports, extra port definitions can be added using the `service.extraPorts` parameter (where available), as shown in the example below:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
service:
|
||||||
|
extraPorts:
|
||||||
|
- name: extraPort
|
||||||
|
port: 11311
|
||||||
|
targetPort: 11311
|
||||||
|
```
|
||||||
|
|
||||||
|
> NOTE: This Helm chart already includes sidecar containers for the Prometheus exporters (where applicable). These can be activated by adding the `--enable-metrics=true` parameter at deployment time. The `sidecars` parameter should therefore only be used for any extra sidecar containers.
|
||||||
|
|
||||||
|
If additional init containers are needed in the same pod, they can be defined using the `initContainers` parameter. Here is an example:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
initContainers:
|
||||||
|
- name: your-image-name
|
||||||
|
image: your-image
|
||||||
|
imagePullPolicy: Always
|
||||||
|
ports:
|
||||||
|
- name: portname
|
||||||
|
containerPort: 1234
|
||||||
|
```
|
||||||
|
|
||||||
|
Learn more about [sidecar containers](https://kubernetes.io/docs/concepts/workloads/pods/) and [init containers](https://kubernetes.io/docs/concepts/workloads/pods/init-containers/).
|
||||||
|
|
||||||
|
### Pod affinity
|
||||||
|
|
||||||
|
This chart allows you to set your custom affinity using the `affinity` parameter. Find more information about Pod affinity in the [kubernetes documentation](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity).
|
||||||
|
|
||||||
|
As an alternative, use one of the preset configurations for pod affinity, pod anti-affinity, and node affinity available at the [bitnami/common](https://github.com/bitnami/charts/tree/main/bitnami/common#affinities) chart. To do so, set the `podAffinityPreset`, `podAntiAffinityPreset`, or `nodeAffinityPreset` parameters.
|
||||||
|
|
||||||
|
### Deploying extra resources
|
||||||
|
|
||||||
|
There are cases where you may want to deploy extra objects, such your custom *RabbitmqCluster* objects. For covering this case, the chart allows adding the full specification of other objects using the `extraDeploy` parameter.
|
||||||
|
|
||||||
|
For instance, to deploy your custom *RabbitmqCluster* definition, you can install the RabbitMQ Cluster Operator using the values below:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
extraDeploy:
|
||||||
|
- apiVersion: rabbitmq.com/v1beta1
|
||||||
|
kind: RabbitmqCluster
|
||||||
|
metadata:
|
||||||
|
name: rabbitmq-custom-configuration
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
rabbitmq:
|
||||||
|
additionalConfig: |
|
||||||
|
log.console.level = debug
|
||||||
|
```
|
||||||
|
|
||||||
|
## Parameters
|
||||||
|
|
||||||
|
### Global parameters
|
||||||
|
|
||||||
|
| Name | Description | Value |
|
||||||
|
| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
|
||||||
|
| `global.imageRegistry` | Global Docker image registry | `""` |
|
||||||
|
| `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` |
|
||||||
|
| `global.defaultStorageClass` | Global default StorageClass for Persistent Volume(s) | `""` |
|
||||||
|
| `global.storageClass` | DEPRECATED: use global.defaultStorageClass instead | `""` |
|
||||||
|
| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
|
||||||
|
|
||||||
|
### Common parameters
|
||||||
|
|
||||||
|
| Name | Description | Value |
|
||||||
|
| ------------------------ | ---------------------------------------------------- | --------------- |
|
||||||
|
| `kubeVersion` | Override Kubernetes version | `""` |
|
||||||
|
| `nameOverride` | String to partially override common.names.fullname | `""` |
|
||||||
|
| `fullnameOverride` | String to fully override common.names.fullname | `""` |
|
||||||
|
| `commonLabels` | Labels to add to all deployed objects | `{}` |
|
||||||
|
| `commonAnnotations` | Annotations to add to all deployed objects | `{}` |
|
||||||
|
| `clusterDomain` | Kubernetes cluster domain name | `cluster.local` |
|
||||||
|
| `extraDeploy` | Array of extra objects to deploy with the release | `[]` |
|
||||||
|
| `diagnosticMode.enabled` | Enable diagnostic mode (all probes will be disabled) | `false` |
|
||||||
|
|
||||||
|
### RabbitMQ Cluster Operator Parameters
|
||||||
|
|
||||||
|
| Name | Description | Value |
|
||||||
|
| ------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------ |
|
||||||
|
| `rabbitmqImage.registry` | RabbitMQ Image registry | `REGISTRY_NAME` |
|
||||||
|
| `rabbitmqImage.repository` | RabbitMQ Image repository | `REPOSITORY_NAME/rabbitmq` |
|
||||||
|
| `rabbitmqImage.digest` | RabbitMQ image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||||
|
| `rabbitmqImage.pullSecrets` | RabbitMQ Image pull secrets | `[]` |
|
||||||
|
| `credentialUpdaterImage.registry` | RabbitMQ Default User Credential Updater image registry | `REGISTRY_NAME` |
|
||||||
|
| `credentialUpdaterImage.repository` | RabbitMQ Default User Credential Updater image repository | `REPOSITORY_NAME/rmq-default-credential-updater` |
|
||||||
|
| `credentialUpdaterImage.digest` | RabbitMQ Default User Credential Updater image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||||
|
| `credentialUpdaterImage.pullSecrets` | RabbitMQ Default User Credential Updater image pull secrets | `[]` |
|
||||||
|
| `clusterOperator.image.registry` | RabbitMQ Cluster Operator image registry | `REGISTRY_NAME` |
|
||||||
|
| `clusterOperator.image.repository` | RabbitMQ Cluster Operator image repository | `REPOSITORY_NAME/rabbitmq-cluster-operator` |
|
||||||
|
| `clusterOperator.image.digest` | RabbitMQ Cluster Operator image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||||
|
| `clusterOperator.image.pullPolicy` | RabbitMQ Cluster Operator image pull policy | `IfNotPresent` |
|
||||||
|
| `clusterOperator.image.pullSecrets` | RabbitMQ Cluster Operator image pull secrets | `[]` |
|
||||||
|
| `clusterOperator.revisionHistoryLimit` | sets number of replicaset to keep in k8s | `10` |
|
||||||
|
| `clusterOperator.watchAllNamespaces` | Watch for resources in all namespaces | `true` |
|
||||||
|
| `clusterOperator.watchNamespaces` | Watch for resources in the given namespaces (ignored if watchAllNamespaces=true) | `[]` |
|
||||||
|
| `clusterOperator.replicaCount` | Number of RabbitMQ Cluster Operator replicas to deploy | `1` |
|
||||||
|
| `clusterOperator.schedulerName` | Alternative scheduler | `""` |
|
||||||
|
| `clusterOperator.topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` |
|
||||||
|
| `clusterOperator.terminationGracePeriodSeconds` | In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully | `""` |
|
||||||
|
| `clusterOperator.livenessProbe.enabled` | Enable livenessProbe on RabbitMQ Cluster Operator nodes | `true` |
|
||||||
|
| `clusterOperator.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `5` |
|
||||||
|
| `clusterOperator.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `30` |
|
||||||
|
| `clusterOperator.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
||||||
|
| `clusterOperator.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `5` |
|
||||||
|
| `clusterOperator.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
||||||
|
| `clusterOperator.readinessProbe.enabled` | Enable readinessProbe on RabbitMQ Cluster Operator nodes | `true` |
|
||||||
|
| `clusterOperator.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
|
||||||
|
| `clusterOperator.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `30` |
|
||||||
|
| `clusterOperator.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
||||||
|
| `clusterOperator.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `5` |
|
||||||
|
| `clusterOperator.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
||||||
|
| `clusterOperator.startupProbe.enabled` | Enable startupProbe on RabbitMQ Cluster Operator nodes | `false` |
|
||||||
|
| `clusterOperator.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
||||||
|
| `clusterOperator.startupProbe.periodSeconds` | Period seconds for startupProbe | `30` |
|
||||||
|
| `clusterOperator.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
|
||||||
|
| `clusterOperator.startupProbe.failureThreshold` | Failure threshold for startupProbe | `5` |
|
||||||
|
| `clusterOperator.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
||||||
|
| `clusterOperator.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
||||||
|
| `clusterOperator.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
||||||
|
| `clusterOperator.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
||||||
|
| `clusterOperator.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if clusterOperator.resources is set (clusterOperator.resources is recommended for production). | `nano` |
|
||||||
|
| `clusterOperator.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
|
||||||
|
| `clusterOperator.podSecurityContext.enabled` | Enabled RabbitMQ Cluster Operator pods' Security Context | `true` |
|
||||||
|
| `clusterOperator.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
|
||||||
|
| `clusterOperator.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
|
||||||
|
| `clusterOperator.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
|
||||||
|
| `clusterOperator.podSecurityContext.fsGroup` | Set RabbitMQ Cluster Operator pod's Security Context fsGroup | `1001` |
|
||||||
|
| `clusterOperator.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||||
|
| `clusterOperator.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||||
|
| `clusterOperator.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||||
|
| `clusterOperator.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||||
|
| `clusterOperator.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||||
|
| `clusterOperator.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||||
|
| `clusterOperator.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||||
|
| `clusterOperator.containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
|
||||||
|
| `clusterOperator.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
|
||||||
|
| `clusterOperator.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
|
||||||
|
| `clusterOperator.command` | Override default container command (useful when using custom images) | `[]` |
|
||||||
|
| `clusterOperator.args` | Override default container args (useful when using custom images) | `[]` |
|
||||||
|
| `clusterOperator.automountServiceAccountToken` | Mount Service Account token in pod | `true` |
|
||||||
|
| `clusterOperator.hostAliases` | RabbitMQ Cluster Operator pods host aliases | `[]` |
|
||||||
|
| `clusterOperator.podLabels` | Extra labels for RabbitMQ Cluster Operator pods | `{}` |
|
||||||
|
| `clusterOperator.podAnnotations` | Annotations for RabbitMQ Cluster Operator pods | `{}` |
|
||||||
|
| `clusterOperator.podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||||
|
| `clusterOperator.podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
||||||
|
| `clusterOperator.nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||||
|
| `clusterOperator.nodeAffinityPreset.key` | Node label key to match. Ignored if `affinity` is set | `""` |
|
||||||
|
| `clusterOperator.nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set | `[]` |
|
||||||
|
| `clusterOperator.affinity` | Affinity for RabbitMQ Cluster Operator pods assignment | `{}` |
|
||||||
|
| `clusterOperator.nodeSelector` | Node labels for RabbitMQ Cluster Operator pods assignment | `{}` |
|
||||||
|
| `clusterOperator.tolerations` | Tolerations for RabbitMQ Cluster Operator pods assignment | `[]` |
|
||||||
|
| `clusterOperator.updateStrategy.type` | RabbitMQ Cluster Operator statefulset strategy type | `RollingUpdate` |
|
||||||
|
| `clusterOperator.priorityClassName` | RabbitMQ Cluster Operator pods' priorityClassName | `""` |
|
||||||
|
| `clusterOperator.lifecycleHooks` | for the RabbitMQ Cluster Operator container(s) to automate configuration before or after startup | `{}` |
|
||||||
|
| `clusterOperator.containerPorts.metrics` | RabbitMQ Cluster Operator container port (used for metrics) | `9782` |
|
||||||
|
| `clusterOperator.extraEnvVars` | Array with extra environment variables to add to RabbitMQ Cluster Operator nodes | `[]` |
|
||||||
|
| `clusterOperator.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for RabbitMQ Cluster Operator nodes | `""` |
|
||||||
|
| `clusterOperator.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for RabbitMQ Cluster Operator nodes | `""` |
|
||||||
|
| `clusterOperator.extraVolumes` | Optionally specify extra list of additional volumes for the RabbitMQ Cluster Operator pod(s) | `[]` |
|
||||||
|
| `clusterOperator.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the RabbitMQ Cluster Operator container(s) | `[]` |
|
||||||
|
| `clusterOperator.sidecars` | Add additional sidecar containers to the RabbitMQ Cluster Operator pod(s) | `[]` |
|
||||||
|
| `clusterOperator.initContainers` | Add additional init containers to the RabbitMQ Cluster Operator pod(s) | `[]` |
|
||||||
|
| `clusterOperator.networkPolicy.enabled` | Specifies whether a NetworkPolicy should be created | `true` |
|
||||||
|
| `clusterOperator.networkPolicy.kubeAPIServerPorts` | List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security) | `[]` |
|
||||||
|
| `clusterOperator.networkPolicy.allowExternal` | Don't require injector label for connections | `true` |
|
||||||
|
| `clusterOperator.networkPolicy.allowExternalEgress` | Allow the pod to access any range of port and all destinations. | `true` |
|
||||||
|
| `clusterOperator.networkPolicy.extraIngress` | Add extra ingress rules to the NetworkPolicy | `[]` |
|
||||||
|
| `clusterOperator.networkPolicy.extraEgress` | Add extra ingress rules to the NetworkPolicy | `[]` |
|
||||||
|
| `clusterOperator.networkPolicy.ingressNSMatchLabels` | Labels to match to allow traffic from other namespaces | `{}` |
|
||||||
|
| `clusterOperator.networkPolicy.ingressNSPodMatchLabels` | Pod labels to match to allow traffic from other namespaces | `{}` |
|
||||||
|
| `clusterOperator.rbac.create` | Specifies whether RBAC resources should be created | `true` |
|
||||||
|
| `clusterOperator.rbac.clusterRole.customRules` | Define custom access rules for the ClusterRole | `[]` |
|
||||||
|
| `clusterOperator.rbac.clusterRole.extraRules` | Define extra access rules for the ClusterRole. This has no effect if customerRules is a non-empty array. | `[]` |
|
||||||
|
| `clusterOperator.serviceAccount.create` | Specifies whether a ServiceAccount should be created | `true` |
|
||||||
|
| `clusterOperator.serviceAccount.name` | The name of the ServiceAccount to use. | `""` |
|
||||||
|
| `clusterOperator.serviceAccount.annotations` | Add annotations | `{}` |
|
||||||
|
| `clusterOperator.serviceAccount.automountServiceAccountToken` | Automount API credentials for a service account. | `false` |
|
||||||
|
|
||||||
|
### RabbitMQ Cluster Operator Metrics parameters
|
||||||
|
|
||||||
|
| Name | Description | Value |
|
||||||
|
| ---------------------------------------------------------- | ---------------------------------------------------------------------------------- | ------------------------ |
|
||||||
|
| `clusterOperator.metrics.service.enabled` | Create a service for accessing the metrics endpoint | `false` |
|
||||||
|
| `clusterOperator.metrics.service.type` | RabbitMQ Cluster Operator metrics service type | `ClusterIP` |
|
||||||
|
| `clusterOperator.metrics.service.ports.http` | RabbitMQ Cluster Operator metrics service HTTP port | `80` |
|
||||||
|
| `clusterOperator.metrics.service.nodePorts.http` | Node port for HTTP | `""` |
|
||||||
|
| `clusterOperator.metrics.service.clusterIP` | RabbitMQ Cluster Operator metrics service Cluster IP | `""` |
|
||||||
|
| `clusterOperator.metrics.service.extraPorts` | Extra ports to expose (normally used with the `sidecar` value) | `[]` |
|
||||||
|
| `clusterOperator.metrics.service.loadBalancerIP` | RabbitMQ Cluster Operator metrics service Load Balancer IP | `""` |
|
||||||
|
| `clusterOperator.metrics.service.loadBalancerSourceRanges` | RabbitMQ Cluster Operator metrics service Load Balancer sources | `[]` |
|
||||||
|
| `clusterOperator.metrics.service.externalTrafficPolicy` | RabbitMQ Cluster Operator metrics service external traffic policy | `Cluster` |
|
||||||
|
| `clusterOperator.metrics.service.annotations` | Additional custom annotations for RabbitMQ Cluster Operator metrics service | `{}` |
|
||||||
|
| `clusterOperator.metrics.service.sessionAffinity` | Session Affinity for Kubernetes service, can be "None" or "ClientIP" | `None` |
|
||||||
|
| `clusterOperator.metrics.service.sessionAffinityConfig` | Additional settings for the sessionAffinity | `{}` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.enabled` | Specify if a servicemonitor will be deployed for prometheus-operator | `false` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.namespace` | Namespace which Prometheus is running in | `""` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.jobLabel` | Specify the jobLabel to use for the prometheus-operator | `app.kubernetes.io/name` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.honorLabels` | Honor metrics labels | `false` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.selector` | Prometheus instance selector labels | `{}` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.scrapeTimeout` | Timeout after which the scrape is ended | `""` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.interval` | Scrape interval. If not set, the Prometheus default scrape interval is used | `""` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.metricRelabelings` | Specify additional relabeling of metrics | `[]` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.relabelings` | Specify general relabeling | `[]` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.labels` | Extra labels for the ServiceMonitor | `{}` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.path` | Define the path used by ServiceMonitor to scrap metrics | `""` |
|
||||||
|
| `clusterOperator.metrics.serviceMonitor.params` | Define the HTTP URL parameters used by ServiceMonitor | `{}` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.enabled` | Create PodMonitor Resource for scraping metrics using PrometheusOperator | `false` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.jobLabel` | Specify the jobLabel to use for the prometheus-operator | `app.kubernetes.io/name` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.namespace` | Namespace which Prometheus is running in | `""` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.honorLabels` | Honor metrics labels | `false` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.selector` | Prometheus instance selector labels | `{}` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.interval` | Specify the interval at which metrics should be scraped | `30s` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.scrapeTimeout` | Specify the timeout after which the scrape is ended | `30s` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.additionalLabels` | Additional labels that can be used so PodMonitors will be discovered by Prometheus | `{}` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.path` | Define HTTP path to scrape for metrics. | `""` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.relabelings` | Specify general relabeling | `[]` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.metricRelabelings` | Specify additional relabeling of metrics | `[]` |
|
||||||
|
| `clusterOperator.metrics.podMonitor.params` | Define the HTTP URL parameters used by PodMonitor | `{}` |
|
||||||
|
|
||||||
|
### RabbitMQ Messaging Topology Operator Parameters
|
||||||
|
|
||||||
|
| Name | Description | Value |
|
||||||
|
| ----------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------- |
|
||||||
|
| `msgTopologyOperator.enabled` | Deploy RabbitMQ Messaging Topology Operator as part of the installation | `true` |
|
||||||
|
| `msgTopologyOperator.image.registry` | RabbitMQ Messaging Topology Operator image registry | `REGISTRY_NAME` |
|
||||||
|
| `msgTopologyOperator.image.repository` | RabbitMQ Messaging Topology Operator image repository | `REPOSITORY_NAME/rmq-messaging-topology-operator` |
|
||||||
|
| `msgTopologyOperator.image.digest` | RabbitMQ Messaging Topology Operator image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||||
|
| `msgTopologyOperator.image.pullPolicy` | RabbitMQ Messaging Topology Operator image pull policy | `IfNotPresent` |
|
||||||
|
| `msgTopologyOperator.image.pullSecrets` | RabbitMQ Messaging Topology Operator image pull secrets | `[]` |
|
||||||
|
| `msgTopologyOperator.revisionHistoryLimit` | sets number of replicaset to keep in k8s | `10` |
|
||||||
|
| `msgTopologyOperator.watchAllNamespaces` | Watch for resources in all namespaces | `true` |
|
||||||
|
| `msgTopologyOperator.watchNamespaces` | Watch for resources in the given namespaces ## @param clusterOperator.watchNamespaces [array] Watch for resources in the given namespaces (ignored if watchAllNamespaces=true) | `[]` |
|
||||||
|
| `msgTopologyOperator.replicaCount` | Number of RabbitMQ Messaging Topology Operator replicas to deploy | `1` |
|
||||||
|
| `msgTopologyOperator.topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` |
|
||||||
|
| `msgTopologyOperator.schedulerName` | Alternative scheduler | `""` |
|
||||||
|
| `msgTopologyOperator.terminationGracePeriodSeconds` | In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully | `""` |
|
||||||
|
| `msgTopologyOperator.hostNetwork` | Boolean | `false` |
|
||||||
|
| `msgTopologyOperator.dnsPolicy` | Alternative DNS policy | `ClusterFirst` |
|
||||||
|
| `msgTopologyOperator.livenessProbe.enabled` | Enable livenessProbe on RabbitMQ Messaging Topology Operator nodes | `true` |
|
||||||
|
| `msgTopologyOperator.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `5` |
|
||||||
|
| `msgTopologyOperator.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `30` |
|
||||||
|
| `msgTopologyOperator.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
||||||
|
| `msgTopologyOperator.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `5` |
|
||||||
|
| `msgTopologyOperator.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
||||||
|
| `msgTopologyOperator.readinessProbe.enabled` | Enable readinessProbe on RabbitMQ Messaging Topology Operator nodes | `true` |
|
||||||
|
| `msgTopologyOperator.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
|
||||||
|
| `msgTopologyOperator.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `30` |
|
||||||
|
| `msgTopologyOperator.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
||||||
|
| `msgTopologyOperator.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `5` |
|
||||||
|
| `msgTopologyOperator.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
||||||
|
| `msgTopologyOperator.startupProbe.enabled` | Enable startupProbe on RabbitMQ Messaging Topology Operator nodes | `false` |
|
||||||
|
| `msgTopologyOperator.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
||||||
|
| `msgTopologyOperator.startupProbe.periodSeconds` | Period seconds for startupProbe | `30` |
|
||||||
|
| `msgTopologyOperator.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
|
||||||
|
| `msgTopologyOperator.startupProbe.failureThreshold` | Failure threshold for startupProbe | `5` |
|
||||||
|
| `msgTopologyOperator.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
||||||
|
| `msgTopologyOperator.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
||||||
|
| `msgTopologyOperator.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
||||||
|
| `msgTopologyOperator.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
||||||
|
| `msgTopologyOperator.existingWebhookCertSecret` | name of a secret containing the certificates (use it to avoid certManager creating one) | `""` |
|
||||||
|
| `msgTopologyOperator.existingWebhookCertCABundle` | PEM-encoded CA Bundle of the existing secret provided in existingWebhookCertSecret (only if useCertManager=false) | `""` |
|
||||||
|
| `msgTopologyOperator.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if msgTopologyOperator.resources is set (msgTopologyOperator.resources is recommended for production). | `nano` |
|
||||||
|
| `msgTopologyOperator.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
|
||||||
|
| `msgTopologyOperator.podSecurityContext.enabled` | Enabled RabbitMQ Messaging Topology Operator pods' Security Context | `true` |
|
||||||
|
| `msgTopologyOperator.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
|
||||||
|
| `msgTopologyOperator.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
|
||||||
|
| `msgTopologyOperator.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
|
||||||
|
| `msgTopologyOperator.podSecurityContext.fsGroup` | Set RabbitMQ Messaging Topology Operator pod's Security Context fsGroup | `1001` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
|
||||||
|
| `msgTopologyOperator.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
|
||||||
|
| `msgTopologyOperator.fullnameOverride` | String to fully override rmqco.msgTopologyOperator.fullname template | `""` |
|
||||||
|
| `msgTopologyOperator.command` | Override default container command (useful when using custom images) | `[]` |
|
||||||
|
| `msgTopologyOperator.args` | Override default container args (useful when using custom images) | `[]` |
|
||||||
|
| `msgTopologyOperator.automountServiceAccountToken` | Mount Service Account token in pod | `true` |
|
||||||
|
| `msgTopologyOperator.hostAliases` | RabbitMQ Messaging Topology Operator pods host aliases | `[]` |
|
||||||
|
| `msgTopologyOperator.podLabels` | Extra labels for RabbitMQ Messaging Topology Operator pods | `{}` |
|
||||||
|
| `msgTopologyOperator.podAnnotations` | Annotations for RabbitMQ Messaging Topology Operator pods | `{}` |
|
||||||
|
| `msgTopologyOperator.podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||||
|
| `msgTopologyOperator.podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
||||||
|
| `msgTopologyOperator.nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||||
|
| `msgTopologyOperator.nodeAffinityPreset.key` | Node label key to match. Ignored if `affinity` is set | `""` |
|
||||||
|
| `msgTopologyOperator.nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set | `[]` |
|
||||||
|
| `msgTopologyOperator.affinity` | Affinity for RabbitMQ Messaging Topology Operator pods assignment | `{}` |
|
||||||
|
| `msgTopologyOperator.nodeSelector` | Node labels for RabbitMQ Messaging Topology Operator pods assignment | `{}` |
|
||||||
|
| `msgTopologyOperator.tolerations` | Tolerations for RabbitMQ Messaging Topology Operator pods assignment | `[]` |
|
||||||
|
| `msgTopologyOperator.updateStrategy.type` | RabbitMQ Messaging Topology Operator statefulset strategy type | `RollingUpdate` |
|
||||||
|
| `msgTopologyOperator.priorityClassName` | RabbitMQ Messaging Topology Operator pods' priorityClassName | `""` |
|
||||||
|
| `msgTopologyOperator.lifecycleHooks` | for the RabbitMQ Messaging Topology Operator container(s) to automate configuration before or after startup | `{}` |
|
||||||
|
| `msgTopologyOperator.containerPorts.metrics` | RabbitMQ Messaging Topology Operator container port (used for metrics) | `8080` |
|
||||||
|
| `msgTopologyOperator.extraEnvVars` | Array with extra environment variables to add to RabbitMQ Messaging Topology Operator nodes | `[]` |
|
||||||
|
| `msgTopologyOperator.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for RabbitMQ Messaging Topology Operator nodes | `""` |
|
||||||
|
| `msgTopologyOperator.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for RabbitMQ Messaging Topology Operator nodes | `""` |
|
||||||
|
| `msgTopologyOperator.extraVolumes` | Optionally specify extra list of additional volumes for the RabbitMQ Messaging Topology Operator pod(s) | `[]` |
|
||||||
|
| `msgTopologyOperator.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the RabbitMQ Messaging Topology Operator container(s) | `[]` |
|
||||||
|
| `msgTopologyOperator.sidecars` | Add additional sidecar containers to the RabbitMQ Messaging Topology Operator pod(s) | `[]` |
|
||||||
|
| `msgTopologyOperator.initContainers` | Add additional init containers to the RabbitMQ Messaging Topology Operator pod(s) | `[]` |
|
||||||
|
| `msgTopologyOperator.service.type` | RabbitMQ Messaging Topology Operator webhook service type | `ClusterIP` |
|
||||||
|
| `msgTopologyOperator.service.ports.webhook` | RabbitMQ Messaging Topology Operator webhook service HTTP port | `443` |
|
||||||
|
| `msgTopologyOperator.service.nodePorts.http` | Node port for HTTP | `""` |
|
||||||
|
| `msgTopologyOperator.service.clusterIP` | RabbitMQ Messaging Topology Operator webhook service Cluster IP | `""` |
|
||||||
|
| `msgTopologyOperator.service.loadBalancerIP` | RabbitMQ Messaging Topology Operator webhook service Load Balancer IP | `""` |
|
||||||
|
| `msgTopologyOperator.service.extraPorts` | Extra ports to expose (normally used with the `sidecar` value) | `[]` |
|
||||||
|
| `msgTopologyOperator.service.loadBalancerSourceRanges` | RabbitMQ Messaging Topology Operator webhook service Load Balancer sources | `[]` |
|
||||||
|
| `msgTopologyOperator.service.externalTrafficPolicy` | RabbitMQ Messaging Topology Operator webhook service external traffic policy | `Cluster` |
|
||||||
|
| `msgTopologyOperator.service.annotations` | Additional custom annotations for RabbitMQ Messaging Topology Operator webhook service | `{}` |
|
||||||
|
| `msgTopologyOperator.service.sessionAffinity` | Session Affinity for Kubernetes service, can be "None" or "ClientIP" | `None` |
|
||||||
|
| `msgTopologyOperator.service.sessionAffinityConfig` | Additional settings for the sessionAffinity | `{}` |
|
||||||
|
| `msgTopologyOperator.networkPolicy.enabled` | Specifies whether a NetworkPolicy should be created | `true` |
|
||||||
|
| `msgTopologyOperator.networkPolicy.kubeAPIServerPorts` | List of possible endpoints to kube-apiserver (limit to your cluster settings to increase security) | `[]` |
|
||||||
|
| `msgTopologyOperator.networkPolicy.allowExternal` | Don't require injector label for connections | `true` |
|
||||||
|
| `msgTopologyOperator.networkPolicy.allowExternalEgress` | Allow the pod to access any range of port and all destinations. | `true` |
|
||||||
|
| `msgTopologyOperator.networkPolicy.extraIngress` | Add extra ingress rules to the NetworkPolicy | `[]` |
|
||||||
|
| `msgTopologyOperator.networkPolicy.extraEgress` | Add extra ingress rules to the NetworkPolicy | `[]` |
|
||||||
|
| `msgTopologyOperator.networkPolicy.ingressNSMatchLabels` | Labels to match to allow traffic from other namespaces | `{}` |
|
||||||
|
| `msgTopologyOperator.networkPolicy.ingressNSPodMatchLabels` | Pod labels to match to allow traffic from other namespaces | `{}` |
|
||||||
|
| `msgTopologyOperator.rbac.create` | Specifies whether RBAC resources should be created | `true` |
|
||||||
|
| `msgTopologyOperator.rbac.clusterRole.customRules` | Define custom access rules for the ClusterRole | `[]` |
|
||||||
|
| `msgTopologyOperator.rbac.clusterRole.extraRules` | Define extra access rules for the ClusterRole. This has no effect if customerRules is a non-empty array. | `[]` |
|
||||||
|
| `msgTopologyOperator.serviceAccount.create` | Specifies whether a ServiceAccount should be created | `true` |
|
||||||
|
| `msgTopologyOperator.serviceAccount.name` | The name of the ServiceAccount to use. | `""` |
|
||||||
|
| `msgTopologyOperator.serviceAccount.annotations` | Add annotations | `{}` |
|
||||||
|
| `msgTopologyOperator.serviceAccount.automountServiceAccountToken` | Automount API credentials for a service account. | `false` |
|
||||||
|
|
||||||
|
### RabbitMQ Messaging Topology Operator parameters
|
||||||
|
|
||||||
|
| Name | Description | Value |
|
||||||
|
| -------------------------------------------------------------- | ---------------------------------------------------------------------------------- | ------------------------ |
|
||||||
|
| `msgTopologyOperator.metrics.service.enabled` | Create a service for accessing the metrics endpoint | `false` |
|
||||||
|
| `msgTopologyOperator.metrics.service.type` | RabbitMQ Cluster Operator metrics service type | `ClusterIP` |
|
||||||
|
| `msgTopologyOperator.metrics.service.ports.http` | RabbitMQ Cluster Operator metrics service HTTP port | `80` |
|
||||||
|
| `msgTopologyOperator.metrics.service.nodePorts.http` | Node port for HTTP | `""` |
|
||||||
|
| `msgTopologyOperator.metrics.service.clusterIP` | RabbitMQ Cluster Operator metrics service Cluster IP | `""` |
|
||||||
|
| `msgTopologyOperator.metrics.service.extraPorts` | Extra ports to expose (normally used with the `sidecar` value) | `[]` |
|
||||||
|
| `msgTopologyOperator.metrics.service.loadBalancerIP` | RabbitMQ Cluster Operator metrics service Load Balancer IP | `""` |
|
||||||
|
| `msgTopologyOperator.metrics.service.loadBalancerSourceRanges` | RabbitMQ Cluster Operator metrics service Load Balancer sources | `[]` |
|
||||||
|
| `msgTopologyOperator.metrics.service.externalTrafficPolicy` | RabbitMQ Cluster Operator metrics service external traffic policy | `Cluster` |
|
||||||
|
| `msgTopologyOperator.metrics.service.annotations` | Additional custom annotations for RabbitMQ Cluster Operator metrics service | `{}` |
|
||||||
|
| `msgTopologyOperator.metrics.service.sessionAffinity` | Session Affinity for Kubernetes service, can be "None" or "ClientIP" | `None` |
|
||||||
|
| `msgTopologyOperator.metrics.service.sessionAffinityConfig` | Additional settings for the sessionAffinity | `{}` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.enabled` | Specify if a servicemonitor will be deployed for prometheus-operator | `false` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.namespace` | Namespace which Prometheus is running in | `""` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.jobLabel` | Specify the jobLabel to use for the prometheus-operator | `app.kubernetes.io/name` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.selector` | Prometheus instance selector labels | `{}` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.honorLabels` | Honor metrics labels | `false` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.scrapeTimeout` | Timeout after which the scrape is ended | `""` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.interval` | Scrape interval. If not set, the Prometheus default scrape interval is used | `""` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.metricRelabelings` | Specify additional relabeling of metrics | `[]` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.relabelings` | Specify general relabeling | `[]` |
|
||||||
|
| `msgTopologyOperator.metrics.serviceMonitor.labels` | Extra labels for the ServiceMonitor | `{}` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.enabled` | Create PodMonitor Resource for scraping metrics using PrometheusOperator | `false` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.jobLabel` | Specify the jobLabel to use for the prometheus-operator | `app.kubernetes.io/name` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.namespace` | Namespace which Prometheus is running in | `""` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.honorLabels` | Honor metrics labels | `false` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.selector` | Prometheus instance selector labels | `{}` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.interval` | Specify the interval at which metrics should be scraped | `30s` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.scrapeTimeout` | Specify the timeout after which the scrape is ended | `30s` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.additionalLabels` | Additional labels that can be used so PodMonitors will be discovered by Prometheus | `{}` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.relabelings` | Specify general relabeling | `[]` |
|
||||||
|
| `msgTopologyOperator.metrics.podMonitor.metricRelabelings` | Specify additional relabeling of metrics | `[]` |
|
||||||
|
|
||||||
|
### cert-manager parameters
|
||||||
|
|
||||||
|
| Name | Description | Value |
|
||||||
|
| ---------------- | ----------------------------------------------------------------- | ------- |
|
||||||
|
| `useCertManager` | Deploy cert-manager objects (Issuer and Certificate) for webhooks | `false` |
|
||||||
|
|
||||||
|
The above parameters map to the env variables defined in [bitnami/rabbitmq-cluster-operator](https://github.com/bitnami/containers/tree/main/bitnami/rabbitmq-cluster-operator). For more information please refer to the [bitnami/rabbitmq-cluster-operator](https://github.com/bitnami/containers/tree/main/bitnami/rabbitmq-cluster-operator) image documentation.
|
||||||
|
|
||||||
|
Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm install my-release \
|
||||||
|
--set livenessProbe.enabled=false \
|
||||||
|
oci://REGISTRY_NAME/REPOSITORY_NAME/rabbitmq-cluster-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
> Note: You need to substitute the placeholders `REGISTRY_NAME` and `REPOSITORY_NAME` with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use `REGISTRY_NAME=registry-1.docker.io` and `REPOSITORY_NAME=bitnamicharts`.
|
||||||
|
|
||||||
|
The above command disables the Operator liveness probes.
|
||||||
|
|
||||||
|
Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm install my-release -f values.yaml oci://REGISTRY_NAME/REPOSITORY_NAME/rabbitmq-cluster-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
> Note: You need to substitute the placeholders `REGISTRY_NAME` and `REPOSITORY_NAME` with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use `REGISTRY_NAME=registry-1.docker.io` and `REPOSITORY_NAME=bitnamicharts`.
|
||||||
|
> **Tip**: You can use the default [values.yaml](https://github.com/bitnami/charts/tree/main/bitnami/rabbitmq-cluster-operator/values.yaml)
|
||||||
|
|
||||||
|
## Troubleshooting
|
||||||
|
|
||||||
|
Find more information about how to deal with common errors related to Bitnami's Helm charts in [this troubleshooting guide](https://docs.bitnami.com/general/how-to/troubleshoot-helm-chart-issues).
|
||||||
|
|
||||||
|
## Upgrading
|
||||||
|
|
||||||
|
### Upgrading CRDs
|
||||||
|
|
||||||
|
By design, the `helm upgrade` command will not upgrade the `CustomResourceDefinition` objects, as stated in their [official documentation](https://helm.sh/docs/chart_best_practices/custom_resource_definitions/#some-caveats-and-explanations). This is done to avoid the potential risks of upgrading CRD objects, such as data loss.
|
||||||
|
|
||||||
|
In order to upgrade the CRD objects, perform the following steps:
|
||||||
|
|
||||||
|
- Perform a backup of your running RabbitMQ instances following the [official documentation](https://www.rabbitmq.com/backup.html).
|
||||||
|
|
||||||
|
- Execute the following commands (replace the VERSION placeholder):
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm fetch bitnami/rabbitmq-cluster-operator --version VERSION
|
||||||
|
tar xf rabbitmq-cluster-operator-VERSION.tar.gz
|
||||||
|
kubectl apply -f rabbitmq-cluster-operator/crds
|
||||||
|
```
|
||||||
|
|
||||||
|
### To 4.0.0
|
||||||
|
|
||||||
|
This major bump changes the following security defaults:
|
||||||
|
|
||||||
|
- `resourcesPreset` is changed from `none` to the minimum size working in our test suites (NOTE: `resourcesPreset` is not meant for production usage, but `resources` adapted to your use case).
|
||||||
|
- `global.compatibility.openshift.adaptSecurityContext` is changed from `disabled` to `auto`.
|
||||||
|
|
||||||
|
This could potentially break any customization or init scripts used in your deployment. If this is the case, change the default values to the previous ones.
|
||||||
|
|
||||||
|
### To 2.0.0
|
||||||
|
|
||||||
|
This new version adds the following components:
|
||||||
|
|
||||||
|
- RabbitMQ Messaging Topology Operator: all the settings are inside the `msgTopologyOperator` section.
|
||||||
|
- RabbitMQ Default User Credential Updater sidecar: this enables Hashicorp Vault integration for all `RabbitMQCluster` instances.
|
||||||
|
- `cert-manager` subchart: this is necessary for the RabbitMQ Messaging Topology Webhooks to work.
|
||||||
|
|
||||||
|
As a breaking change, all `rabbitmq-cluster-operator` deployment values were moved to the `clusterOperator` section.
|
||||||
|
|
||||||
|
No issues are expected during upgrades.
|
||||||
|
|
||||||
|
### To 1.0.0
|
||||||
|
|
||||||
|
The CRD was updated according to the latest changes in the upstream project. Thanks to the improvements in the latest changes, the CRD is not templated anymore and can be placed under the `crds` directory following [Helm best practices for CRDS](https://helm.sh/docs/chart_best_practices/custom_resource_definitions/).
|
||||||
|
|
||||||
|
You need to manually delete the old CRD before upgrading the release.
|
||||||
|
|
||||||
|
```console
|
||||||
|
kubectl delete crd rabbitmqclusters.rabbitmq.com
|
||||||
|
helm upgrade my-release oci://REGISTRY_NAME/REPOSITORY_NAME/rabbitmq-cluster-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
> Note: You need to substitute the placeholders `REGISTRY_NAME` and `REPOSITORY_NAME` with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use `REGISTRY_NAME=registry-1.docker.io` and `REPOSITORY_NAME=bitnamicharts`.
|
||||||
|
|
||||||
|
## License
|
||||||
|
|
||||||
|
Copyright © 2024 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
<http://www.apache.org/licenses/LICENSE-2.0>
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
||||||
|
# img folder
|
||||||
|
img/
|
||||||
|
# Changelog
|
||||||
|
CHANGELOG.md
|
||||||
|
|
@ -0,0 +1,23 @@
|
||||||
|
annotations:
|
||||||
|
category: Infrastructure
|
||||||
|
licenses: Apache-2.0
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 2.20.5
|
||||||
|
description: A Library Helm Chart for grouping common logic between bitnami charts.
|
||||||
|
This chart is not deployable by itself.
|
||||||
|
home: https://bitnami.com
|
||||||
|
icon: https://bitnami.com/downloads/logos/bitnami-mark.png
|
||||||
|
keywords:
|
||||||
|
- common
|
||||||
|
- helper
|
||||||
|
- template
|
||||||
|
- function
|
||||||
|
- bitnami
|
||||||
|
maintainers:
|
||||||
|
- name: Broadcom, Inc. All Rights Reserved.
|
||||||
|
url: https://github.com/bitnami/charts
|
||||||
|
name: common
|
||||||
|
sources:
|
||||||
|
- https://github.com/bitnami/charts/tree/main/bitnami/common
|
||||||
|
type: library
|
||||||
|
version: 2.20.5
|
||||||
|
|
@ -0,0 +1,235 @@
|
||||||
|
# Bitnami Common Library Chart
|
||||||
|
|
||||||
|
A [Helm Library Chart](https://helm.sh/docs/topics/library_charts/#helm) for grouping common logic between Bitnami charts.
|
||||||
|
|
||||||
|
## TL;DR
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
version: 2.x.x
|
||||||
|
repository: oci://registry-1.docker.io/bitnamicharts
|
||||||
|
```
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm dependency update
|
||||||
|
```
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ include "common.names.fullname" . }}
|
||||||
|
data:
|
||||||
|
myvalue: "Hello World"
|
||||||
|
```
|
||||||
|
|
||||||
|
Looking to use our applications in production? Try [VMware Tanzu Application Catalog](https://bitnami.com/enterprise), the commercial edition of the Bitnami catalog.
|
||||||
|
|
||||||
|
## Introduction
|
||||||
|
|
||||||
|
This chart provides a common template helpers which can be used to develop new charts using [Helm](https://helm.sh) package manager.
|
||||||
|
|
||||||
|
Bitnami charts can be used with [Kubeapps](https://kubeapps.dev/) for deployment and management of Helm Charts in clusters.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
- Kubernetes 1.23+
|
||||||
|
- Helm 3.8.0+
|
||||||
|
|
||||||
|
## Parameters
|
||||||
|
|
||||||
|
## Special input schemas
|
||||||
|
|
||||||
|
### ImageRoot
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
registry:
|
||||||
|
type: string
|
||||||
|
description: Docker registry where the image is located
|
||||||
|
example: docker.io
|
||||||
|
|
||||||
|
repository:
|
||||||
|
type: string
|
||||||
|
description: Repository and image name
|
||||||
|
example: bitnami/nginx
|
||||||
|
|
||||||
|
tag:
|
||||||
|
type: string
|
||||||
|
description: image tag
|
||||||
|
example: 1.16.1-debian-10-r63
|
||||||
|
|
||||||
|
pullPolicy:
|
||||||
|
type: string
|
||||||
|
description: Specify a imagePullPolicy. Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||||
|
|
||||||
|
pullSecrets:
|
||||||
|
type: array
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
description: Optionally specify an array of imagePullSecrets (evaluated as templates).
|
||||||
|
|
||||||
|
debug:
|
||||||
|
type: boolean
|
||||||
|
description: Set to true if you would like to see extra information on logs
|
||||||
|
example: false
|
||||||
|
|
||||||
|
## An instance would be:
|
||||||
|
# registry: docker.io
|
||||||
|
# repository: bitnami/nginx
|
||||||
|
# tag: 1.16.1-debian-10-r63
|
||||||
|
# pullPolicy: IfNotPresent
|
||||||
|
# debug: false
|
||||||
|
```
|
||||||
|
|
||||||
|
### Persistence
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
enabled:
|
||||||
|
type: boolean
|
||||||
|
description: Whether enable persistence.
|
||||||
|
example: true
|
||||||
|
|
||||||
|
storageClass:
|
||||||
|
type: string
|
||||||
|
description: Ghost data Persistent Volume Storage Class, If set to "-", storageClassName: "" which disables dynamic provisioning.
|
||||||
|
example: "-"
|
||||||
|
|
||||||
|
accessMode:
|
||||||
|
type: string
|
||||||
|
description: Access mode for the Persistent Volume Storage.
|
||||||
|
example: ReadWriteOnce
|
||||||
|
|
||||||
|
size:
|
||||||
|
type: string
|
||||||
|
description: Size the Persistent Volume Storage.
|
||||||
|
example: 8Gi
|
||||||
|
|
||||||
|
path:
|
||||||
|
type: string
|
||||||
|
description: Path to be persisted.
|
||||||
|
example: /bitnami
|
||||||
|
|
||||||
|
## An instance would be:
|
||||||
|
# enabled: true
|
||||||
|
# storageClass: "-"
|
||||||
|
# accessMode: ReadWriteOnce
|
||||||
|
# size: 8Gi
|
||||||
|
# path: /bitnami
|
||||||
|
```
|
||||||
|
|
||||||
|
### ExistingSecret
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
name:
|
||||||
|
type: string
|
||||||
|
description: Name of the existing secret.
|
||||||
|
example: mySecret
|
||||||
|
keyMapping:
|
||||||
|
description: Mapping between the expected key name and the name of the key in the existing secret.
|
||||||
|
type: object
|
||||||
|
|
||||||
|
## An instance would be:
|
||||||
|
# name: mySecret
|
||||||
|
# keyMapping:
|
||||||
|
# password: myPasswordKey
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Example of use
|
||||||
|
|
||||||
|
When we store sensitive data for a deployment in a secret, some times we want to give to users the possibility of using theirs existing secrets.
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
# templates/secret.yaml
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ include "common.names.fullname" . }}
|
||||||
|
labels:
|
||||||
|
app: {{ include "common.names.fullname" . }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
password: {{ .Values.password | b64enc | quote }}
|
||||||
|
|
||||||
|
# templates/dpl.yaml
|
||||||
|
---
|
||||||
|
...
|
||||||
|
env:
|
||||||
|
- name: PASSWORD
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: {{ include "common.secrets.name" (dict "existingSecret" .Values.existingSecret "context" $) }}
|
||||||
|
key: {{ include "common.secrets.key" (dict "existingSecret" .Values.existingSecret "key" "password") }}
|
||||||
|
...
|
||||||
|
|
||||||
|
# values.yaml
|
||||||
|
---
|
||||||
|
name: mySecret
|
||||||
|
keyMapping:
|
||||||
|
password: myPasswordKey
|
||||||
|
```
|
||||||
|
|
||||||
|
### ValidateValue
|
||||||
|
|
||||||
|
#### NOTES.txt
|
||||||
|
|
||||||
|
```console
|
||||||
|
{{- $validateValueConf00 := (dict "valueKey" "path.to.value00" "secret" "secretName" "field" "password-00") -}}
|
||||||
|
{{- $validateValueConf01 := (dict "valueKey" "path.to.value01" "secret" "secretName" "field" "password-01") -}}
|
||||||
|
|
||||||
|
{{ include "common.validations.values.multiple.empty" (dict "required" (list $validateValueConf00 $validateValueConf01) "context" $) }}
|
||||||
|
```
|
||||||
|
|
||||||
|
If we force those values to be empty we will see some alerts
|
||||||
|
|
||||||
|
```console
|
||||||
|
helm install test mychart --set path.to.value00="",path.to.value01=""
|
||||||
|
'path.to.value00' must not be empty, please add '--set path.to.value00=$PASSWORD_00' to the command. To get the current value:
|
||||||
|
|
||||||
|
export PASSWORD_00=$(kubectl get secret --namespace default secretName -o jsonpath="{.data.password-00}" | base64 -d)
|
||||||
|
|
||||||
|
'path.to.value01' must not be empty, please add '--set path.to.value01=$PASSWORD_01' to the command. To get the current value:
|
||||||
|
|
||||||
|
export PASSWORD_01=$(kubectl get secret --namespace default secretName -o jsonpath="{.data.password-01}" | base64 -d)
|
||||||
|
```
|
||||||
|
|
||||||
|
## Upgrading
|
||||||
|
|
||||||
|
### To 1.0.0
|
||||||
|
|
||||||
|
[On November 13, 2020, Helm v2 support was formally finished](https://github.com/helm/charts#status-of-the-project), this major version is the result of the required changes applied to the Helm Chart to be able to incorporate the different features added in Helm v3 and to be consistent with the Helm project itself regarding the Helm v2 EOL.
|
||||||
|
|
||||||
|
#### What changes were introduced in this major version?
|
||||||
|
|
||||||
|
- Previous versions of this Helm Chart use `apiVersion: v1` (installable by both Helm 2 and 3), this Helm Chart was updated to `apiVersion: v2` (installable by Helm 3 only). [Here](https://helm.sh/docs/topics/charts/#the-apiversion-field) you can find more information about the `apiVersion` field.
|
||||||
|
- Use `type: library`. [Here](https://v3.helm.sh/docs/faq/#library-chart-support) you can find more information.
|
||||||
|
- The different fields present in the *Chart.yaml* file has been ordered alphabetically in a homogeneous way for all the Bitnami Helm Charts
|
||||||
|
|
||||||
|
#### Considerations when upgrading to this version
|
||||||
|
|
||||||
|
- If you want to upgrade to this version from a previous one installed with Helm v3, you shouldn't face any issues
|
||||||
|
- If you want to upgrade to this version using Helm v2, this scenario is not supported as this version doesn't support Helm v2 anymore
|
||||||
|
- If you installed the previous version with Helm v2 and wants to upgrade to this version with Helm v3, please refer to the [official Helm documentation](https://helm.sh/docs/topics/v2_v3_migration/#migration-use-cases) about migrating from Helm v2 to v3
|
||||||
|
|
||||||
|
#### Useful links
|
||||||
|
|
||||||
|
- <https://docs.vmware.com/en/VMware-Tanzu-Application-Catalog/services/tutorials/GUID-resolve-helm2-helm3-post-migration-issues-index.html>
|
||||||
|
- <https://helm.sh/docs/topics/v2_v3_migration/>
|
||||||
|
- <https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/>
|
||||||
|
|
||||||
|
## License
|
||||||
|
|
||||||
|
Copyright © 2024 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
<http://www.apache.org/licenses/LICENSE-2.0>
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue