Charts CI
``` Updated: crate/crate-operator: - 2.40.0 speedscale/speedscale-operator: - 2.2.169 ```pull/1058/head
parent
4dc126d2bd
commit
ed76f5a944
Binary file not shown.
Binary file not shown.
|
@ -0,0 +1,23 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
|
@ -0,0 +1,6 @@
|
||||||
|
dependencies:
|
||||||
|
- name: crate-operator-crds
|
||||||
|
repository: file://../crate-operator-crds
|
||||||
|
version: 2.40.0
|
||||||
|
digest: sha256:8720952f1eda53fa1d5041453257f90785367806e668eb80f83b5b2e3ea20d35
|
||||||
|
generated: "2024-07-17T09:02:45.497416786Z"
|
|
@ -0,0 +1,18 @@
|
||||||
|
annotations:
|
||||||
|
catalog.cattle.io/certified: partner
|
||||||
|
catalog.cattle.io/display-name: CrateDB Operator
|
||||||
|
catalog.cattle.io/release-name: crate-operator
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 2.40.0
|
||||||
|
dependencies:
|
||||||
|
- condition: crate-operator-crds.enabled
|
||||||
|
name: crate-operator-crds
|
||||||
|
repository: file://./charts/crate-operator-crds
|
||||||
|
version: 2.40.0
|
||||||
|
description: Crate Operator - Helm chart for installing and upgrading Crate Operator.
|
||||||
|
icon: file://assets/icons/crate-operator.svg
|
||||||
|
maintainers:
|
||||||
|
- name: Crate.io
|
||||||
|
name: crate-operator
|
||||||
|
type: application
|
||||||
|
version: 2.40.0
|
|
@ -0,0 +1,61 @@
|
||||||
|
# Crate Operator Helm Chart
|
||||||
|
|
||||||
|
A Helm chart for installing and upgrading the [Crate Operator](https://github.com/crate/crate-operator).
|
||||||
|
The **CrateDB Kubernetes Operator** provides convenient way to run [CrateDB](https://github.com/crate/crate)
|
||||||
|
clusters inside Kubernetes.
|
||||||
|
|
||||||
|
Helm must be installed to use the charts. Please refer to Helm's [documentation](https://helm.sh/docs/) to get started.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
The Crate Operator requires the CrateDB [CRD](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#customresourcedefinitions).
|
||||||
|
It can be installed separately by installing the [Helm Chart](../cratedb-crds/) or as a dependency of this Chart.
|
||||||
|
|
||||||
|
If the CRD is already installed (via the `crate-operator-crds` Helm chart or manually), you need to pass `--set crate-operator-crds.enabled=false` when installing the Operator.
|
||||||
|
|
||||||
|
If the RBAC resources are already installed, you need to pass `--set rbac.create=false` when installing the Operator.
|
||||||
|
|
||||||
|
## Usage
|
||||||
|
|
||||||
|
Once Helm is properly set up, install the chart.
|
||||||
|
|
||||||
|
### Install from local folder
|
||||||
|
|
||||||
|
```
|
||||||
|
helm install crate-operator crate-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
### Install from repo
|
||||||
|
|
||||||
|
```
|
||||||
|
helm repo add crate-operator https://crate.github.io/crate-operator
|
||||||
|
helm search repo crate-operator
|
||||||
|
helm install crate-operator crate-operator/crate-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Namespace
|
||||||
|
|
||||||
|
The operator is installed in the namespace `crate-operator`.
|
||||||
|
The namespace needs either to be created first:
|
||||||
|
|
||||||
|
```shell
|
||||||
|
kubectl create namespace crate-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
or it will be created automatically by adding `--namespace=crate-operator --create-namespace` to the Helm command:
|
||||||
|
|
||||||
|
```shell
|
||||||
|
helm upgrade --install --atomic crate-operator crate-operator \
|
||||||
|
--namespace=crate-operator \
|
||||||
|
--create-namespace
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Configuration
|
||||||
|
|
||||||
|
Please refer to the [configuration documentation](https://github.com/crate/crate-operator/blob/master/docs/source/configuration.rst) for further details.
|
||||||
|
|
||||||
|
### Upgrading the Operator
|
||||||
|
|
||||||
|
```
|
||||||
|
helm upgrade --atomic crate-operator crate-operator
|
||||||
|
```
|
|
@ -0,0 +1,23 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
|
@ -0,0 +1,9 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 2.40.0
|
||||||
|
description: Crate Operator CRDs - Helm chart for installing and upgrading Custom
|
||||||
|
Resource Definitions (CRDs) for the Crate Operator.
|
||||||
|
maintainers:
|
||||||
|
- name: Crate.io
|
||||||
|
name: crate-operator-crds
|
||||||
|
type: application
|
||||||
|
version: 2.40.0
|
|
@ -0,0 +1,30 @@
|
||||||
|
# Crate Operator CRDs Helm Chart
|
||||||
|
|
||||||
|
A Helm chart for installing and upgrading the CRDs for [Crate Operator](https://github.com/crate/crate-operator).
|
||||||
|
To be able to deploy the custom resource CrateDB to a Kubernetes cluster, the API needs to be extended with a Custom Resource Definition (CRD).
|
||||||
|
|
||||||
|
Helm must be installed to use the charts. Please refer to Helm's [documentation](https://helm.sh/docs/) to get started.
|
||||||
|
|
||||||
|
## Usage
|
||||||
|
|
||||||
|
Once Helm is properly set up, install the chart.
|
||||||
|
|
||||||
|
### Install from local folder
|
||||||
|
|
||||||
|
```
|
||||||
|
helm install crate-operator-crds crate-operator-crds
|
||||||
|
```
|
||||||
|
|
||||||
|
### Install from repo
|
||||||
|
|
||||||
|
```
|
||||||
|
helm repo add crate-operator https://crate.github.io/crate-operator
|
||||||
|
helm search repo crate-operator
|
||||||
|
helm install crate-operator-crds crate-operator/crate-operator-crds
|
||||||
|
```
|
||||||
|
|
||||||
|
### Upgrading the Operator
|
||||||
|
|
||||||
|
```
|
||||||
|
helm upgrade --atomic crate-operator-crds crate-operator-crds
|
||||||
|
```
|
|
@ -0,0 +1 @@
|
||||||
|
Thank you for installing {{ .Chart.Name }}.
|
|
@ -0,0 +1,691 @@
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
name: cratedbs.cloud.crate.io
|
||||||
|
spec:
|
||||||
|
conversion:
|
||||||
|
strategy: None
|
||||||
|
group: cloud.crate.io
|
||||||
|
names:
|
||||||
|
kind: CrateDB
|
||||||
|
listKind: CrateDBList
|
||||||
|
plural: cratedbs
|
||||||
|
singular: cratedb
|
||||||
|
scope: Namespaced
|
||||||
|
versions:
|
||||||
|
- additionalPrinterColumns:
|
||||||
|
- description: The CrateDB Cluster name
|
||||||
|
jsonPath: .spec.cluster.name
|
||||||
|
name: ClusterName
|
||||||
|
type: string
|
||||||
|
- description: The CrateDB Cluster version
|
||||||
|
jsonPath: .spec.cluster.version
|
||||||
|
name: Version
|
||||||
|
type: string
|
||||||
|
- description: Number of data nodes in this cluster
|
||||||
|
jsonPath: .spec.nodes.data[?(@.name == "hot")].replicas
|
||||||
|
name: Nodes
|
||||||
|
type: number
|
||||||
|
- description: CPU Requests
|
||||||
|
jsonPath: .spec.nodes.data[?(@.name == "hot")].resources.requests.cpu
|
||||||
|
name: CPU_REQ
|
||||||
|
type: number
|
||||||
|
- description: CPU Limits
|
||||||
|
jsonPath: .spec.nodes.data[?(@.name == "hot")].resources.limits.cpu
|
||||||
|
name: CPU_LIM
|
||||||
|
type: number
|
||||||
|
# Only shown in wide mode (-o wide)
|
||||||
|
priority: 1
|
||||||
|
- jsonPath: .metadata.creationTimestamp
|
||||||
|
name: Age
|
||||||
|
type: date
|
||||||
|
- jsonPath: .status.crateDBStatus.health
|
||||||
|
name: Health
|
||||||
|
type: string
|
||||||
|
name: v1
|
||||||
|
schema:
|
||||||
|
openAPIV3Schema:
|
||||||
|
properties:
|
||||||
|
spec:
|
||||||
|
properties:
|
||||||
|
backups:
|
||||||
|
properties:
|
||||||
|
aws:
|
||||||
|
properties:
|
||||||
|
accessKeyId:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the AWS Access Key ID.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the AWS Access Key ID to be used for backups.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
basePath:
|
||||||
|
description: The base path within the backup under which the
|
||||||
|
snapshots will be placed.
|
||||||
|
type: string
|
||||||
|
bucket:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the AWS S3 bucket name.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the AWS S3 bucket name to be used for backups.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
cron:
|
||||||
|
description: A crontab formatted string indicating when and
|
||||||
|
how often to perform backups.
|
||||||
|
pattern: ^(((\d+,)+\d+|(\d+(\/|-)\d+)|\d+|\*) ){4}(((\d+,)+\d+|(\d+(\/|-)\d+)|\d+|\*))$
|
||||||
|
type: string
|
||||||
|
endpointUrl:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the S3 endpoint.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the S3 endpoint-url to be used for backups.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
region:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the name of the AWS region to use.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the AWS region to be used for backups.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
secretAccessKey:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the AWS Secret Access Key.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the AWS Secret Access Key to be used for backups.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- accessKeyId
|
||||||
|
- bucket
|
||||||
|
- cron
|
||||||
|
- region
|
||||||
|
- secretAccessKey
|
||||||
|
type: object
|
||||||
|
type: object
|
||||||
|
cluster:
|
||||||
|
properties:
|
||||||
|
allowedCIDRs:
|
||||||
|
description: Whitelisted CIDRs
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
externalDNS:
|
||||||
|
description: The external DNS name record that should point to
|
||||||
|
the CrateDB cluster.
|
||||||
|
type: string
|
||||||
|
imageRegistry:
|
||||||
|
description: Point to a Docker registry. For the offical image
|
||||||
|
it's 'crate', testing and nightly releases are under 'crate/crate'.
|
||||||
|
Or others under 'https://example.com/path/to/registry'
|
||||||
|
type: string
|
||||||
|
license:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret that
|
||||||
|
holds the CrateDB license.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
a valid CrateDB license.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
description: Deprecated and no longer has any effect.
|
||||||
|
Only here for backwards-compatibility.
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
name:
|
||||||
|
description: Name of the cluster
|
||||||
|
pattern: ^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$
|
||||||
|
type: string
|
||||||
|
restoreSnapshot:
|
||||||
|
description: Restore data from a snapshot.
|
||||||
|
properties:
|
||||||
|
accessKeyId:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the Access Key ID.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the Access Key ID to be used for accessing the
|
||||||
|
backup of the source cluster.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
basePath:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the base path of the repository.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the base path to be used.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
bucket:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the snapshot's bucket name.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the snapshot's bucket name to be used for the restore.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
secretAccessKey:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret
|
||||||
|
that holds the Secret Access Key.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the Secret Access Key to be used for accessing the
|
||||||
|
backup of the source cluster..
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
snapshot:
|
||||||
|
description: The name of the snapshot to use.
|
||||||
|
type: string
|
||||||
|
type:
|
||||||
|
type: string
|
||||||
|
enum: ["all", "tables", "metadata", "partitions", "sections"]
|
||||||
|
tables:
|
||||||
|
description: The tables to restore from the backup.
|
||||||
|
Format '<schema_name>.<table_name>'.
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
sections:
|
||||||
|
description: Restore a single metadata group or only tables or views.
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
enum: ["tables", "views", "users", "privileges", "analyzers", "udfs"]
|
||||||
|
type: array
|
||||||
|
partitions:
|
||||||
|
description: Restore certain table partitions by their column and value.
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
table_ident:
|
||||||
|
type: string
|
||||||
|
columns:
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
name:
|
||||||
|
type: string
|
||||||
|
value:
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- name
|
||||||
|
- value
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
required:
|
||||||
|
- table_ident
|
||||||
|
- columns
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
required:
|
||||||
|
- snapshot
|
||||||
|
- bucket
|
||||||
|
- secretAccessKey
|
||||||
|
- basePath
|
||||||
|
- accessKeyId
|
||||||
|
type: object
|
||||||
|
settings:
|
||||||
|
description: Additional settings to apply to all nodes in the
|
||||||
|
cluster.
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
service:
|
||||||
|
description: Additional configuration for k8s services.
|
||||||
|
properties:
|
||||||
|
annotations:
|
||||||
|
description: Additional annotations to add to the k8s load balancer service.
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
type: object
|
||||||
|
ssl:
|
||||||
|
properties:
|
||||||
|
keystore:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: CrateDB SSL keystore
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Keystore name
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
keystoreKeyPassword:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: Keystore key password
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Keystore passwords
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
keystorePassword:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: Keystore password
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Keystore passwords
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- keystore
|
||||||
|
- keystoreKeyPassword
|
||||||
|
- keystorePassword
|
||||||
|
type: object
|
||||||
|
version:
|
||||||
|
description: CrateDB version
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- imageRegistry
|
||||||
|
- name
|
||||||
|
- version
|
||||||
|
type: object
|
||||||
|
grandCentral:
|
||||||
|
properties:
|
||||||
|
backendImage:
|
||||||
|
description: The image of the grand central backend.
|
||||||
|
type: string
|
||||||
|
backendEnabled:
|
||||||
|
description: Flag indicating whether grand central backend is
|
||||||
|
deployed for this cluster.
|
||||||
|
type: boolean
|
||||||
|
jwkUrl:
|
||||||
|
description: The endpoint to retrieve the list of JWK public keys
|
||||||
|
used for verifying JWT tokens.
|
||||||
|
type: string
|
||||||
|
apiUrl:
|
||||||
|
description: The CrateDB Cloud API URL.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- backendImage
|
||||||
|
- jwkUrl
|
||||||
|
- apiUrl
|
||||||
|
- backendEnabled
|
||||||
|
type: object
|
||||||
|
nodes:
|
||||||
|
properties:
|
||||||
|
data:
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
annotations:
|
||||||
|
description: Additional annotations to put on the corresponding
|
||||||
|
pods.
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
labels:
|
||||||
|
description: Additional labels to put on the corresponding
|
||||||
|
pods.
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
name:
|
||||||
|
description: Uniquely identifying name of this type of node.
|
||||||
|
pattern: ^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$
|
||||||
|
type: string
|
||||||
|
replicas:
|
||||||
|
description: Number of CrateDB nodes of this type.
|
||||||
|
type: number
|
||||||
|
nodepool:
|
||||||
|
description: Type of nodepool where the cluster should run.
|
||||||
|
type: string
|
||||||
|
resources:
|
||||||
|
properties:
|
||||||
|
cpus:
|
||||||
|
description: Deprecated - please use requests/d.
|
||||||
|
type: number
|
||||||
|
disk:
|
||||||
|
properties:
|
||||||
|
count:
|
||||||
|
description: Number of disks
|
||||||
|
type: number
|
||||||
|
size:
|
||||||
|
description: Size of the disk.
|
||||||
|
type: string
|
||||||
|
storageClass:
|
||||||
|
description: The name of a Kubernetes StorageClass
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- count
|
||||||
|
- size
|
||||||
|
- storageClass
|
||||||
|
type: object
|
||||||
|
heapRatio:
|
||||||
|
description: Allocated heap size relative to memory
|
||||||
|
format: float
|
||||||
|
type: number
|
||||||
|
limits:
|
||||||
|
properties:
|
||||||
|
cpu:
|
||||||
|
description: Limited CPUs for each CrateDB container.
|
||||||
|
Supports the syntax documented in https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/.
|
||||||
|
type: number
|
||||||
|
memory:
|
||||||
|
description: Limited memory for each CrateDB container.
|
||||||
|
Supports the syntax documented in https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
memory:
|
||||||
|
description: Deprecated - please use requests/limits.
|
||||||
|
type: string
|
||||||
|
requests:
|
||||||
|
properties:
|
||||||
|
cpu:
|
||||||
|
description: Requested CPUs for each CrateDB container.
|
||||||
|
Supports the syntax documented in https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/.
|
||||||
|
type: number
|
||||||
|
memory:
|
||||||
|
description: Requested memory for each CrateDB container.
|
||||||
|
Supports the syntax documented in https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- disk
|
||||||
|
- heapRatio
|
||||||
|
type: object
|
||||||
|
settings:
|
||||||
|
description: Additional settings to apply to all nodes of
|
||||||
|
that type in the cluster.
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
required:
|
||||||
|
- name
|
||||||
|
- replicas
|
||||||
|
- resources
|
||||||
|
type: object
|
||||||
|
minItems: 1
|
||||||
|
type: array
|
||||||
|
master:
|
||||||
|
properties:
|
||||||
|
annotations:
|
||||||
|
description: Additional annotations to put on the corresponding
|
||||||
|
pods.
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
labels:
|
||||||
|
description: Additional labels to put on the corresponding
|
||||||
|
pods.
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
replicas:
|
||||||
|
description: Number of master nodes. Should be an odd number.
|
||||||
|
minimum: 3
|
||||||
|
type: number
|
||||||
|
nodepool:
|
||||||
|
description: Type of nodepool where the cluster should run.
|
||||||
|
type: string
|
||||||
|
resources:
|
||||||
|
properties:
|
||||||
|
cpus:
|
||||||
|
description: Deprecated - please use requests/limits.
|
||||||
|
type: number
|
||||||
|
disk:
|
||||||
|
properties:
|
||||||
|
count:
|
||||||
|
description: Number of disks
|
||||||
|
type: number
|
||||||
|
size:
|
||||||
|
description: Size of the disk.
|
||||||
|
type: string
|
||||||
|
storageClass:
|
||||||
|
description: The name of a Kubernetes StorageClass
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- count
|
||||||
|
- size
|
||||||
|
- storageClass
|
||||||
|
type: object
|
||||||
|
heapRatio:
|
||||||
|
description: Allocated heap size relative to memory
|
||||||
|
format: float
|
||||||
|
type: number
|
||||||
|
limits:
|
||||||
|
properties:
|
||||||
|
cpu:
|
||||||
|
description: Limited CPUs for each CrateDB container.
|
||||||
|
Supports the syntax documented in https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/.
|
||||||
|
type: number
|
||||||
|
memory:
|
||||||
|
description: Limited memory for each CrateDB container.
|
||||||
|
Supports the syntax documented in https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
memory:
|
||||||
|
description: Deprecated - please use requests/limits.
|
||||||
|
type: string
|
||||||
|
requests:
|
||||||
|
properties:
|
||||||
|
cpu:
|
||||||
|
description: Requested CPUs for each CrateDB container.
|
||||||
|
Supports the syntax documented in https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/.
|
||||||
|
type: number
|
||||||
|
memory:
|
||||||
|
description: Requested memory for each CrateDB container.
|
||||||
|
Supports the syntax documented in https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- disk
|
||||||
|
- heapRatio
|
||||||
|
type: object
|
||||||
|
settings:
|
||||||
|
description: Additional settings to apply to all master nodes
|
||||||
|
in the cluster.
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
required:
|
||||||
|
- replicas
|
||||||
|
- resources
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- data
|
||||||
|
type: object
|
||||||
|
ports:
|
||||||
|
properties:
|
||||||
|
exporter:
|
||||||
|
description: SQL exporter port number
|
||||||
|
maximum: 65535
|
||||||
|
minimum: 1
|
||||||
|
type: number
|
||||||
|
http:
|
||||||
|
description: HTTP port number
|
||||||
|
maximum: 65535
|
||||||
|
minimum: 1
|
||||||
|
type: number
|
||||||
|
jmx:
|
||||||
|
description: JMX port number
|
||||||
|
maximum: 65535
|
||||||
|
minimum: 1
|
||||||
|
type: number
|
||||||
|
postgres:
|
||||||
|
description: PostgreSQL port number
|
||||||
|
maximum: 65535
|
||||||
|
minimum: 1
|
||||||
|
type: number
|
||||||
|
prometheus:
|
||||||
|
description: Prometheus port number
|
||||||
|
maximum: 65535
|
||||||
|
minimum: 1
|
||||||
|
type: number
|
||||||
|
required:
|
||||||
|
- exporter
|
||||||
|
- http
|
||||||
|
- jmx
|
||||||
|
- postgres
|
||||||
|
- prometheus
|
||||||
|
type: object
|
||||||
|
users:
|
||||||
|
items:
|
||||||
|
properties:
|
||||||
|
name:
|
||||||
|
description: The username for a CrateDB cluster user.
|
||||||
|
type: string
|
||||||
|
password:
|
||||||
|
properties:
|
||||||
|
secretKeyRef:
|
||||||
|
properties:
|
||||||
|
key:
|
||||||
|
description: The key within the Kubernetes Secret that
|
||||||
|
holds the user's password.
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of a Kubernetes Secret that contains
|
||||||
|
the password for the user.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- key
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- secretKeyRef
|
||||||
|
type: object
|
||||||
|
required:
|
||||||
|
- name
|
||||||
|
- password
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
required:
|
||||||
|
- cluster
|
||||||
|
- nodes
|
||||||
|
type: object
|
||||||
|
status:
|
||||||
|
type: object
|
||||||
|
x-kubernetes-preserve-unknown-fields: true
|
||||||
|
required:
|
||||||
|
- spec
|
||||||
|
type: object
|
||||||
|
served: true
|
||||||
|
storage: true
|
|
@ -0,0 +1,3 @@
|
||||||
|
# Default values for crate-operator-crds.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Declare variables to be passed into your templates.
|
|
@ -0,0 +1 @@
|
||||||
|
Thank you for installing {{ .Chart.Name }}.
|
|
@ -0,0 +1,63 @@
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "crate-operator.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
If release name contains chart name it will be used as a full name.
|
||||||
|
*/}}
|
||||||
|
{{- define "crate-operator.fullname" -}}
|
||||||
|
{{- if .Values.fullnameOverride }}
|
||||||
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- $name := default .Chart.Name .Values.nameOverride }}
|
||||||
|
{{- if contains $name .Release.Name }}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- else }}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create chart name and version as used by the chart label.
|
||||||
|
*/}}
|
||||||
|
{{- define "crate-operator.chart" -}}
|
||||||
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "crate-operator.labels" -}}
|
||||||
|
helm.sh/chart: {{ include "crate-operator.chart" . }}
|
||||||
|
{{ include "crate-operator.selectorLabels" . }}
|
||||||
|
{{- if .Chart.AppVersion }}
|
||||||
|
app.kubernetes.io/version: {{ .Values.image.tag | default .Chart.AppVersion | quote }}
|
||||||
|
{{- end }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
app.kubernetes.io/part-of: {{ .Values.partOf }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Selector labels
|
||||||
|
*/}}
|
||||||
|
{{- define "crate-operator.selectorLabels" -}}
|
||||||
|
app.kubernetes.io/name: {{ include "crate-operator.name" . }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the name of the service account to use
|
||||||
|
*/}}
|
||||||
|
{{- define "crate-operator.serviceAccountName" -}}
|
||||||
|
{{- if .Values.serviceAccount.create }}
|
||||||
|
{{- default (include "crate-operator.fullname" .) .Values.serviceAccount.name }}
|
||||||
|
{{- else }}
|
||||||
|
{{- default "default" .Values.serviceAccount.name }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
|
@ -0,0 +1,59 @@
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
{{- include "crate-operator.labels" . | nindent 4 }}
|
||||||
|
name: {{ include "crate-operator.fullname" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
spec:
|
||||||
|
replicas: {{ .Values.replicaCount }}
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
{{- include "crate-operator.selectorLabels" . | nindent 6 }}
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
{{- with .Values.podAnnotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
{{- include "crate-operator.labels" . | nindent 8 }}
|
||||||
|
spec:
|
||||||
|
{{- with .Values.imagePullSecrets }}
|
||||||
|
imagePullSecrets:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
serviceAccountName: {{ include "crate-operator.serviceAccountName" . }}
|
||||||
|
containers:
|
||||||
|
- name: {{ .Chart.Name }}
|
||||||
|
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
|
||||||
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||||
|
env:
|
||||||
|
{{- range $name, $value := .Values.envFromSecret }}
|
||||||
|
- name: {{ $name }}
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: {{ $value.name }}
|
||||||
|
key: {{ $value.key }}
|
||||||
|
{{- end }}
|
||||||
|
{{- range $name, $value := .Values.env }}
|
||||||
|
- name: {{ $name }}
|
||||||
|
value: "{{ $value }}"
|
||||||
|
{{- end }}
|
||||||
|
resources:
|
||||||
|
{{- toYaml .Values.resources | nindent 12 }}
|
||||||
|
{{- with .Values.nodeSelector }}
|
||||||
|
nodeSelector:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.affinity }}
|
||||||
|
affinity:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.tolerations }}
|
||||||
|
tolerations:
|
||||||
|
{{- toYaml . | nindent 8 }}
|
||||||
|
{{- end }}
|
|
@ -0,0 +1,87 @@
|
||||||
|
{{- if .Values.rbac.create -}}
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
{{- include "crate-operator.labels" . | nindent 4 }}
|
||||||
|
name: {{ template "crate-operator.fullname" . }}
|
||||||
|
rules:
|
||||||
|
# Framework: posting the events about the handlers progress/errors
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
- events.k8s.io
|
||||||
|
resources:
|
||||||
|
- events
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
# Application: watching & handling for the custom resources
|
||||||
|
- apiGroups:
|
||||||
|
- cloud.crate.io
|
||||||
|
resources:
|
||||||
|
- cratedbs
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- patch
|
||||||
|
# Application: other resources it produces and manipulates
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
- apps
|
||||||
|
- batch
|
||||||
|
- policy
|
||||||
|
- networking.k8s.io
|
||||||
|
resources:
|
||||||
|
- configmaps
|
||||||
|
- cronjobs
|
||||||
|
- jobs
|
||||||
|
- deployments
|
||||||
|
- ingresses
|
||||||
|
- namespaces
|
||||||
|
- persistentvolumeclaims
|
||||||
|
- persistentvolumes
|
||||||
|
- pods
|
||||||
|
- secrets
|
||||||
|
- services
|
||||||
|
- statefulsets
|
||||||
|
- poddisruptionbudgets
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods/exec
|
||||||
|
verbs:
|
||||||
|
- "*"
|
||||||
|
# Required by kopf to scan for CRD Changes.
|
||||||
|
- apiGroups:
|
||||||
|
- apiextensions.k8s.io
|
||||||
|
resources:
|
||||||
|
- customresourcedefinitions
|
||||||
|
verbs:
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
{{- include "crate-operator.labels" . | nindent 4 }}
|
||||||
|
name: {{ template "crate-operator.fullname" . }}
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: {{ template "crate-operator.fullname" . }}
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "crate-operator.serviceAccountName" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
{{- end -}}
|
|
@ -0,0 +1,18 @@
|
||||||
|
{{- if .Values.serviceAccount.create -}}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
{{- with .Values.serviceAccount.annotations }}
|
||||||
|
annotations:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
{{- include "crate-operator.labels" . | nindent 4 }}
|
||||||
|
name: {{ include "crate-operator.serviceAccountName" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
{{- with .Values.imagePullSecrets }}
|
||||||
|
imagePullSecrets:
|
||||||
|
{{- toYaml . | nindent 2 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
|
@ -0,0 +1,65 @@
|
||||||
|
---
|
||||||
|
# Default values for crate-operator.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Declare variables to be passed into your templates.
|
||||||
|
|
||||||
|
# If the `crate-operator-crds` is already installed, its installation
|
||||||
|
# can be disabled by changing this value to `false`.
|
||||||
|
crate-operator-crds:
|
||||||
|
# Make this disabled if you don't want to install
|
||||||
|
# the CRD dependency automatically.
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
replicaCount: 1
|
||||||
|
|
||||||
|
image:
|
||||||
|
repository: crate/crate-operator
|
||||||
|
pullPolicy: Always
|
||||||
|
# Overrides the image tag whose default is the chart appVersion.
|
||||||
|
# tag: latest
|
||||||
|
|
||||||
|
imagePullSecrets: []
|
||||||
|
nameOverride: "crate-operator"
|
||||||
|
fullnameOverride: "crate-operator"
|
||||||
|
|
||||||
|
partOf: cratedb
|
||||||
|
|
||||||
|
env:
|
||||||
|
CRATEDB_OPERATOR_BOOTSTRAP_TIMEOUT: "1800"
|
||||||
|
CRATEDB_OPERATOR_DEBUG_VOLUME_SIZE: "128GiB"
|
||||||
|
CRATEDB_OPERATOR_DEBUG_VOLUME_STORAGE_CLASS: "default"
|
||||||
|
CRATEDB_OPERATOR_JMX_EXPORTER_VERSION: "1.0.0"
|
||||||
|
CRATEDB_OPERATOR_LOG_LEVEL: "INFO"
|
||||||
|
CRATEDB_OPERATOR_ROLLING_RESTART_TIMEOUT: "3600"
|
||||||
|
CRATEDB_OPERATOR_SCALING_TIMEOUT: "3600"
|
||||||
|
|
||||||
|
envFromSecret: {}
|
||||||
|
|
||||||
|
serviceAccount:
|
||||||
|
# Specifies whether a service account should be created
|
||||||
|
create: true
|
||||||
|
# Annotations to add to the service account
|
||||||
|
annotations: {}
|
||||||
|
# The name of the service account to use.
|
||||||
|
# If not set and create is true, a name is generated using the fullname template
|
||||||
|
name: "crate-operator"
|
||||||
|
|
||||||
|
rbac:
|
||||||
|
# Specifies whether RBAC resources should be created
|
||||||
|
create: true
|
||||||
|
|
||||||
|
podAnnotations: {}
|
||||||
|
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: 250m
|
||||||
|
memory: 128Mi
|
||||||
|
requests:
|
||||||
|
cpu: 250m
|
||||||
|
memory: 128Mi
|
||||||
|
|
||||||
|
nodeSelector: {}
|
||||||
|
|
||||||
|
tolerations: []
|
||||||
|
|
||||||
|
affinity: {}
|
|
@ -0,0 +1,23 @@
|
||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
|
@ -0,0 +1,27 @@
|
||||||
|
annotations:
|
||||||
|
catalog.cattle.io/certified: partner
|
||||||
|
catalog.cattle.io/display-name: Speedscale Operator
|
||||||
|
catalog.cattle.io/kube-version: '>= 1.17.0-0'
|
||||||
|
catalog.cattle.io/release-name: speedscale-operator
|
||||||
|
apiVersion: v1
|
||||||
|
appVersion: 2.2.169
|
||||||
|
description: Stress test your APIs with real world scenarios. Collect and replay
|
||||||
|
traffic without scripting.
|
||||||
|
home: https://speedscale.com
|
||||||
|
icon: file://assets/icons/speedscale-operator.png
|
||||||
|
keywords:
|
||||||
|
- speedscale
|
||||||
|
- test
|
||||||
|
- testing
|
||||||
|
- regression
|
||||||
|
- reliability
|
||||||
|
- load
|
||||||
|
- replay
|
||||||
|
- network
|
||||||
|
- traffic
|
||||||
|
kubeVersion: '>= 1.17.0-0'
|
||||||
|
maintainers:
|
||||||
|
- email: support@speedscale.com
|
||||||
|
name: Speedscale Support
|
||||||
|
name: speedscale-operator
|
||||||
|
version: 2.2.169
|
|
@ -0,0 +1,201 @@
|
||||||
|
Apache License
|
||||||
|
Version 2.0, January 2004
|
||||||
|
http://www.apache.org/licenses/
|
||||||
|
|
||||||
|
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||||
|
|
||||||
|
1. Definitions.
|
||||||
|
|
||||||
|
"License" shall mean the terms and conditions for use, reproduction,
|
||||||
|
and distribution as defined by Sections 1 through 9 of this document.
|
||||||
|
|
||||||
|
"Licensor" shall mean the copyright owner or entity authorized by
|
||||||
|
the copyright owner that is granting the License.
|
||||||
|
|
||||||
|
"Legal Entity" shall mean the union of the acting entity and all
|
||||||
|
other entities that control, are controlled by, or are under common
|
||||||
|
control with that entity. For the purposes of this definition,
|
||||||
|
"control" means (i) the power, direct or indirect, to cause the
|
||||||
|
direction or management of such entity, whether by contract or
|
||||||
|
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||||
|
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||||
|
|
||||||
|
"You" (or "Your") shall mean an individual or Legal Entity
|
||||||
|
exercising permissions granted by this License.
|
||||||
|
|
||||||
|
"Source" form shall mean the preferred form for making modifications,
|
||||||
|
including but not limited to software source code, documentation
|
||||||
|
source, and configuration files.
|
||||||
|
|
||||||
|
"Object" form shall mean any form resulting from mechanical
|
||||||
|
transformation or translation of a Source form, including but
|
||||||
|
not limited to compiled object code, generated documentation,
|
||||||
|
and conversions to other media types.
|
||||||
|
|
||||||
|
"Work" shall mean the work of authorship, whether in Source or
|
||||||
|
Object form, made available under the License, as indicated by a
|
||||||
|
copyright notice that is included in or attached to the work
|
||||||
|
(an example is provided in the Appendix below).
|
||||||
|
|
||||||
|
"Derivative Works" shall mean any work, whether in Source or Object
|
||||||
|
form, that is based on (or derived from) the Work and for which the
|
||||||
|
editorial revisions, annotations, elaborations, or other modifications
|
||||||
|
represent, as a whole, an original work of authorship. For the purposes
|
||||||
|
of this License, Derivative Works shall not include works that remain
|
||||||
|
separable from, or merely link (or bind by name) to the interfaces of,
|
||||||
|
the Work and Derivative Works thereof.
|
||||||
|
|
||||||
|
"Contribution" shall mean any work of authorship, including
|
||||||
|
the original version of the Work and any modifications or additions
|
||||||
|
to that Work or Derivative Works thereof, that is intentionally
|
||||||
|
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||||
|
or by an individual or Legal Entity authorized to submit on behalf of
|
||||||
|
the copyright owner. For the purposes of this definition, "submitted"
|
||||||
|
means any form of electronic, verbal, or written communication sent
|
||||||
|
to the Licensor or its representatives, including but not limited to
|
||||||
|
communication on electronic mailing lists, source code control systems,
|
||||||
|
and issue tracking systems that are managed by, or on behalf of, the
|
||||||
|
Licensor for the purpose of discussing and improving the Work, but
|
||||||
|
excluding communication that is conspicuously marked or otherwise
|
||||||
|
designated in writing by the copyright owner as "Not a Contribution."
|
||||||
|
|
||||||
|
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||||
|
on behalf of whom a Contribution has been received by Licensor and
|
||||||
|
subsequently incorporated within the Work.
|
||||||
|
|
||||||
|
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
copyright license to reproduce, prepare Derivative Works of,
|
||||||
|
publicly display, publicly perform, sublicense, and distribute the
|
||||||
|
Work and such Derivative Works in Source or Object form.
|
||||||
|
|
||||||
|
3. Grant of Patent License. Subject to the terms and conditions of
|
||||||
|
this License, each Contributor hereby grants to You a perpetual,
|
||||||
|
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||||
|
(except as stated in this section) patent license to make, have made,
|
||||||
|
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||||
|
where such license applies only to those patent claims licensable
|
||||||
|
by such Contributor that are necessarily infringed by their
|
||||||
|
Contribution(s) alone or by combination of their Contribution(s)
|
||||||
|
with the Work to which such Contribution(s) was submitted. If You
|
||||||
|
institute patent litigation against any entity (including a
|
||||||
|
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||||
|
or a Contribution incorporated within the Work constitutes direct
|
||||||
|
or contributory patent infringement, then any patent licenses
|
||||||
|
granted to You under this License for that Work shall terminate
|
||||||
|
as of the date such litigation is filed.
|
||||||
|
|
||||||
|
4. Redistribution. You may reproduce and distribute copies of the
|
||||||
|
Work or Derivative Works thereof in any medium, with or without
|
||||||
|
modifications, and in Source or Object form, provided that You
|
||||||
|
meet the following conditions:
|
||||||
|
|
||||||
|
(a) You must give any other recipients of the Work or
|
||||||
|
Derivative Works a copy of this License; and
|
||||||
|
|
||||||
|
(b) You must cause any modified files to carry prominent notices
|
||||||
|
stating that You changed the files; and
|
||||||
|
|
||||||
|
(c) You must retain, in the Source form of any Derivative Works
|
||||||
|
that You distribute, all copyright, patent, trademark, and
|
||||||
|
attribution notices from the Source form of the Work,
|
||||||
|
excluding those notices that do not pertain to any part of
|
||||||
|
the Derivative Works; and
|
||||||
|
|
||||||
|
(d) If the Work includes a "NOTICE" text file as part of its
|
||||||
|
distribution, then any Derivative Works that You distribute must
|
||||||
|
include a readable copy of the attribution notices contained
|
||||||
|
within such NOTICE file, excluding those notices that do not
|
||||||
|
pertain to any part of the Derivative Works, in at least one
|
||||||
|
of the following places: within a NOTICE text file distributed
|
||||||
|
as part of the Derivative Works; within the Source form or
|
||||||
|
documentation, if provided along with the Derivative Works; or,
|
||||||
|
within a display generated by the Derivative Works, if and
|
||||||
|
wherever such third-party notices normally appear. The contents
|
||||||
|
of the NOTICE file are for informational purposes only and
|
||||||
|
do not modify the License. You may add Your own attribution
|
||||||
|
notices within Derivative Works that You distribute, alongside
|
||||||
|
or as an addendum to the NOTICE text from the Work, provided
|
||||||
|
that such additional attribution notices cannot be construed
|
||||||
|
as modifying the License.
|
||||||
|
|
||||||
|
You may add Your own copyright statement to Your modifications and
|
||||||
|
may provide additional or different license terms and conditions
|
||||||
|
for use, reproduction, or distribution of Your modifications, or
|
||||||
|
for any such Derivative Works as a whole, provided Your use,
|
||||||
|
reproduction, and distribution of the Work otherwise complies with
|
||||||
|
the conditions stated in this License.
|
||||||
|
|
||||||
|
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||||
|
any Contribution intentionally submitted for inclusion in the Work
|
||||||
|
by You to the Licensor shall be under the terms and conditions of
|
||||||
|
this License, without any additional terms or conditions.
|
||||||
|
Notwithstanding the above, nothing herein shall supersede or modify
|
||||||
|
the terms of any separate license agreement you may have executed
|
||||||
|
with Licensor regarding such Contributions.
|
||||||
|
|
||||||
|
6. Trademarks. This License does not grant permission to use the trade
|
||||||
|
names, trademarks, service marks, or product names of the Licensor,
|
||||||
|
except as required for reasonable and customary use in describing the
|
||||||
|
origin of the Work and reproducing the content of the NOTICE file.
|
||||||
|
|
||||||
|
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||||
|
agreed to in writing, Licensor provides the Work (and each
|
||||||
|
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||||
|
implied, including, without limitation, any warranties or conditions
|
||||||
|
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||||
|
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||||
|
appropriateness of using or redistributing the Work and assume any
|
||||||
|
risks associated with Your exercise of permissions under this License.
|
||||||
|
|
||||||
|
8. Limitation of Liability. In no event and under no legal theory,
|
||||||
|
whether in tort (including negligence), contract, or otherwise,
|
||||||
|
unless required by applicable law (such as deliberate and grossly
|
||||||
|
negligent acts) or agreed to in writing, shall any Contributor be
|
||||||
|
liable to You for damages, including any direct, indirect, special,
|
||||||
|
incidental, or consequential damages of any character arising as a
|
||||||
|
result of this License or out of the use or inability to use the
|
||||||
|
Work (including but not limited to damages for loss of goodwill,
|
||||||
|
work stoppage, computer failure or malfunction, or any and all
|
||||||
|
other commercial damages or losses), even if such Contributor
|
||||||
|
has been advised of the possibility of such damages.
|
||||||
|
|
||||||
|
9. Accepting Warranty or Additional Liability. While redistributing
|
||||||
|
the Work or Derivative Works thereof, You may choose to offer,
|
||||||
|
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||||
|
or other liability obligations and/or rights consistent with this
|
||||||
|
License. However, in accepting such obligations, You may act only
|
||||||
|
on Your own behalf and on Your sole responsibility, not on behalf
|
||||||
|
of any other Contributor, and only if You agree to indemnify,
|
||||||
|
defend, and hold each Contributor harmless for any liability
|
||||||
|
incurred by, or claims asserted against, such Contributor by reason
|
||||||
|
of your accepting any such warranty or additional liability.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
APPENDIX: How to apply the Apache License to your work.
|
||||||
|
|
||||||
|
To apply the Apache License to your work, attach the following
|
||||||
|
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||||
|
replaced with your own identifying information. (Don't include
|
||||||
|
the brackets!) The text should be enclosed in the appropriate
|
||||||
|
comment syntax for the file format. We also recommend that a
|
||||||
|
file or class name and description of purpose be included on the
|
||||||
|
same "printed page" as the copyright notice for easier
|
||||||
|
identification within third-party archives.
|
||||||
|
|
||||||
|
Copyright 2021 Speedscale
|
||||||
|
|
||||||
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
you may not use this file except in compliance with the License.
|
||||||
|
You may obtain a copy of the License at
|
||||||
|
|
||||||
|
http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
|
||||||
|
Unless required by applicable law or agreed to in writing, software
|
||||||
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
See the License for the specific language governing permissions and
|
||||||
|
limitations under the License.
|
|
@ -0,0 +1,108 @@
|
||||||
|
# Speedscale Operator
|
||||||
|
|
||||||
|
The [Speedscale](https://www.speedscale.com) Operator is a [Kubernetes operator](https://kubernetes.io/docs/concepts/extend-kubernetes/operator/)
|
||||||
|
that watches for deployments to be applied to the cluster and takes action based on annotations. The operator
|
||||||
|
can inject a proxy to capture traffic into or out of applications, or setup an isolation test environment around
|
||||||
|
a deployment for testing. The operator itself is a deployment that will be always present on the cluster once
|
||||||
|
the helm chart is installed.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
- Kubernetes 1.20+
|
||||||
|
- Helm 3+
|
||||||
|
- Appropriate [network and firewall configuration](https://docs.speedscale.com/reference/networking) for Speedscale cloud and webhook traffic
|
||||||
|
|
||||||
|
## Get Repo Info
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm repo add speedscale https://speedscale.github.io/operator-helm/
|
||||||
|
helm repo update
|
||||||
|
```
|
||||||
|
|
||||||
|
_See [helm repo](https://helm.sh/docs/helm/helm_repo/) for command documentation._
|
||||||
|
|
||||||
|
## Install Chart
|
||||||
|
|
||||||
|
An API key is required. Sign up for a [free Speedscale trial](https://speedscale.com/free-trial/) if you do not have one.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm install speedscale-operator speedscale/speedscale-operator \
|
||||||
|
-n speedscale \
|
||||||
|
--create-namespace \
|
||||||
|
--set apiKey=<YOUR-SPEEDSCALE-API-KEY> \
|
||||||
|
--set clusterName=<YOUR-CLUSTER-NAME>
|
||||||
|
```
|
||||||
|
|
||||||
|
_See [helm install](https://helm.sh/docs/helm/helm_install/) for command documentation._
|
||||||
|
|
||||||
|
### Pre-install job failure
|
||||||
|
|
||||||
|
We use pre-install job to check provided API key and provision some of the required resources.
|
||||||
|
|
||||||
|
If the job failed during the installation, you'll see the following error during install:
|
||||||
|
|
||||||
|
```
|
||||||
|
Error: INSTALLATION FAILED: failed pre-install: job failed: BackoffLimitExceeded
|
||||||
|
```
|
||||||
|
|
||||||
|
You can inspect the logs using this command:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
kubectl -n speedscale logs job/speedscale-operator-pre-install
|
||||||
|
```
|
||||||
|
|
||||||
|
After fixing the error, uninstall the helm release, delete the failed job
|
||||||
|
and try installing again:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm -n speedscale uninstall speedscale-operator
|
||||||
|
kubectl -n speedscale delete job speedscale-operator-pre-install
|
||||||
|
```
|
||||||
|
|
||||||
|
## Uninstall Chart
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm -n speedscale uninstall speedscale-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
This removes all the Kubernetes components associated with the chart and deletes the release.
|
||||||
|
|
||||||
|
_See [helm uninstall](https://helm.sh/docs/helm/helm_uninstall/) for command documentation._
|
||||||
|
|
||||||
|
CRDs created by this chart are not removed by default and should be manually cleaned up:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
kubectl delete crd trafficreplays.speedscale.com
|
||||||
|
```
|
||||||
|
|
||||||
|
## Upgrading Chart
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm repo update
|
||||||
|
helm -n speedscale upgrade speedscale-operator speedscale/speedscale-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
Resources capturing traffic will need to be rolled to pick up the latest
|
||||||
|
Speedscale sidecar. Use the rollout restart command for each namespace and
|
||||||
|
resource type:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
kubectl -n <namespace> rollout restart deployment
|
||||||
|
```
|
||||||
|
|
||||||
|
With Helm v3, CRDs created by this chart are not updated by default
|
||||||
|
and should be manually updated.
|
||||||
|
Consult also the [Helm Documentation on CRDs](https://helm.sh/docs/chart_best_practices/custom_resource_definitions).
|
||||||
|
|
||||||
|
_See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command documentation._
|
||||||
|
|
||||||
|
### Upgrading an existing Release to a new version
|
||||||
|
|
||||||
|
A major chart version change (like v1.2.3 -> v2.0.0) indicates that there is an
|
||||||
|
incompatible breaking change needing manual actions.
|
||||||
|
|
||||||
|
|
||||||
|
## Help
|
||||||
|
|
||||||
|
Speedscale docs information available at [docs.speedscale.com](https://docs.speedscale.com) or join us
|
||||||
|
on the [Speedscale community Slack](https://join.slack.com/t/speedscalecommunity/shared_invite/zt-x5rcrzn4-XHG1QqcHNXIM~4yozRrz8A)!
|
|
@ -0,0 +1,108 @@
|
||||||
|
# Speedscale Operator
|
||||||
|
|
||||||
|
The [Speedscale](https://www.speedscale.com) Operator is a [Kubernetes operator](https://kubernetes.io/docs/concepts/extend-kubernetes/operator/)
|
||||||
|
that watches for deployments to be applied to the cluster and takes action based on annotations. The operator
|
||||||
|
can inject a proxy to capture traffic into or out of applications, or setup an isolation test environment around
|
||||||
|
a deployment for testing. The operator itself is a deployment that will be always present on the cluster once
|
||||||
|
the helm chart is installed.
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
- Kubernetes 1.20+
|
||||||
|
- Helm 3+
|
||||||
|
- Appropriate [network and firewall configuration](https://docs.speedscale.com/reference/networking) for Speedscale cloud and webhook traffic
|
||||||
|
|
||||||
|
## Get Repo Info
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm repo add speedscale https://speedscale.github.io/operator-helm/
|
||||||
|
helm repo update
|
||||||
|
```
|
||||||
|
|
||||||
|
_See [helm repo](https://helm.sh/docs/helm/helm_repo/) for command documentation._
|
||||||
|
|
||||||
|
## Install Chart
|
||||||
|
|
||||||
|
An API key is required. Sign up for a [free Speedscale trial](https://speedscale.com/free-trial/) if you do not have one.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm install speedscale-operator speedscale/speedscale-operator \
|
||||||
|
-n speedscale \
|
||||||
|
--create-namespace \
|
||||||
|
--set apiKey=<YOUR-SPEEDSCALE-API-KEY> \
|
||||||
|
--set clusterName=<YOUR-CLUSTER-NAME>
|
||||||
|
```
|
||||||
|
|
||||||
|
_See [helm install](https://helm.sh/docs/helm/helm_install/) for command documentation._
|
||||||
|
|
||||||
|
### Pre-install job failure
|
||||||
|
|
||||||
|
We use pre-install job to check provided API key and provision some of the required resources.
|
||||||
|
|
||||||
|
If the job failed during the installation, you'll see the following error during install:
|
||||||
|
|
||||||
|
```
|
||||||
|
Error: INSTALLATION FAILED: failed pre-install: job failed: BackoffLimitExceeded
|
||||||
|
```
|
||||||
|
|
||||||
|
You can inspect the logs using this command:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
kubectl -n speedscale logs job/speedscale-operator-pre-install
|
||||||
|
```
|
||||||
|
|
||||||
|
After fixing the error, uninstall the helm release, delete the failed job
|
||||||
|
and try installing again:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm -n speedscale uninstall speedscale-operator
|
||||||
|
kubectl -n speedscale delete job speedscale-operator-pre-install
|
||||||
|
```
|
||||||
|
|
||||||
|
## Uninstall Chart
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm -n speedscale uninstall speedscale-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
This removes all the Kubernetes components associated with the chart and deletes the release.
|
||||||
|
|
||||||
|
_See [helm uninstall](https://helm.sh/docs/helm/helm_uninstall/) for command documentation._
|
||||||
|
|
||||||
|
CRDs created by this chart are not removed by default and should be manually cleaned up:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
kubectl delete crd trafficreplays.speedscale.com
|
||||||
|
```
|
||||||
|
|
||||||
|
## Upgrading Chart
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm repo update
|
||||||
|
helm -n speedscale upgrade speedscale-operator speedscale/speedscale-operator
|
||||||
|
```
|
||||||
|
|
||||||
|
Resources capturing traffic will need to be rolled to pick up the latest
|
||||||
|
Speedscale sidecar. Use the rollout restart command for each namespace and
|
||||||
|
resource type:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
kubectl -n <namespace> rollout restart deployment
|
||||||
|
```
|
||||||
|
|
||||||
|
With Helm v3, CRDs created by this chart are not updated by default
|
||||||
|
and should be manually updated.
|
||||||
|
Consult also the [Helm Documentation on CRDs](https://helm.sh/docs/chart_best_practices/custom_resource_definitions).
|
||||||
|
|
||||||
|
_See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command documentation._
|
||||||
|
|
||||||
|
### Upgrading an existing Release to a new version
|
||||||
|
|
||||||
|
A major chart version change (like v1.2.3 -> v2.0.0) indicates that there is an
|
||||||
|
incompatible breaking change needing manual actions.
|
||||||
|
|
||||||
|
|
||||||
|
## Help
|
||||||
|
|
||||||
|
Speedscale docs information available at [docs.speedscale.com](https://docs.speedscale.com) or join us
|
||||||
|
on the [Speedscale community Slack](https://join.slack.com/t/speedscalecommunity/shared_invite/zt-x5rcrzn4-XHG1QqcHNXIM~4yozRrz8A)!
|
|
@ -0,0 +1,9 @@
|
||||||
|
questions:
|
||||||
|
- variable: apiKey
|
||||||
|
default: "fffffffffffffffffffffffffffffffffffffffffffff"
|
||||||
|
description: "An API key is required to connect to the Speedscale cloud."
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
label: API Key
|
||||||
|
group: Authentication
|
||||||
|
|
|
@ -0,0 +1,12 @@
|
||||||
|
Thank you for installing the Speedscale Operator!
|
||||||
|
|
||||||
|
Next you'll need to add the Speedscale Proxy Sidecar to your deployments.
|
||||||
|
See https://docs.speedscale.com/setup/sidecar/install/
|
||||||
|
|
||||||
|
If upgrading use the rollout restart command for each namespace and resource
|
||||||
|
type to ensure Speedscale sidecars are updated:
|
||||||
|
|
||||||
|
kubectl -n <namespace> rollout restart deployment
|
||||||
|
|
||||||
|
Once your deployment is running the sidecar your service will show up on
|
||||||
|
https://app.speedscale.com/.
|
|
@ -0,0 +1,199 @@
|
||||||
|
{{- $cacrt := "" -}}
|
||||||
|
{{- $crt := "" -}}
|
||||||
|
{{- $key := "" -}}
|
||||||
|
{{- $s := (lookup "v1" "Secret" .Release.Namespace "speedscale-webhook-certs") -}}
|
||||||
|
{{- if $s -}}
|
||||||
|
{{- $cacrt = index $s.data "ca.crt" | default (index $s.data "tls.crt") | b64dec -}}
|
||||||
|
{{- $crt = index $s.data "tls.crt" | b64dec -}}
|
||||||
|
{{- $key = index $s.data "tls.key" | b64dec -}}
|
||||||
|
{{ else }}
|
||||||
|
{{- $altNames := list ( printf "speedscale-operator.%s" .Release.Namespace ) ( printf "speedscale-operator.%s.svc" .Release.Namespace ) -}}
|
||||||
|
{{- $ca := genCA "speedscale-operator" 3650 -}}
|
||||||
|
{{- $cert := genSignedCert "speedscale-operator" nil $altNames 3650 $ca -}}
|
||||||
|
{{- $cacrt = $ca.Cert -}}
|
||||||
|
{{- $crt = $cert.Cert -}}
|
||||||
|
{{- $key = $cert.Key -}}
|
||||||
|
{{- end -}}
|
||||||
|
---
|
||||||
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
|
kind: MutatingWebhookConfiguration
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-operator
|
||||||
|
annotations:
|
||||||
|
argocd.argoproj.io/hook: PreSync
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
webhooks:
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
caBundle: {{ $cacrt | b64enc }}
|
||||||
|
service:
|
||||||
|
name: speedscale-operator
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /mutate
|
||||||
|
failurePolicy: Ignore
|
||||||
|
name: sidecar.speedscale.com
|
||||||
|
namespaceSelector:
|
||||||
|
matchExpressions:
|
||||||
|
- key: kubernetes.io/metadata.name
|
||||||
|
operator: "NotIn"
|
||||||
|
values:
|
||||||
|
- kube-system
|
||||||
|
- kube-node-lease
|
||||||
|
{{- if .Values.namespaceSelector }}
|
||||||
|
- key: kubernetes.io/metadata.name
|
||||||
|
operator: "In"
|
||||||
|
values:
|
||||||
|
{{- range .Values.namespaceSelector }}
|
||||||
|
- {{ . | quote }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
reinvocationPolicy: IfNeeded
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
- batch
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
- DELETE
|
||||||
|
resources:
|
||||||
|
- deployments
|
||||||
|
- statefulsets
|
||||||
|
- daemonsets
|
||||||
|
- jobs
|
||||||
|
- replicasets
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
- DELETE
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
sideEffects: None
|
||||||
|
timeoutSeconds: 10
|
||||||
|
---
|
||||||
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
|
kind: MutatingWebhookConfiguration
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-operator-replay
|
||||||
|
annotations:
|
||||||
|
argocd.argoproj.io/hook: PreSync
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
webhooks:
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
caBundle: {{ $cacrt | b64enc }}
|
||||||
|
service:
|
||||||
|
name: speedscale-operator
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /mutate-speedscale-com-v1-trafficreplay
|
||||||
|
failurePolicy: Fail
|
||||||
|
name: replay.speedscale.com
|
||||||
|
namespaceSelector:
|
||||||
|
matchExpressions:
|
||||||
|
- key: kubernetes.io/metadata.name
|
||||||
|
operator: "NotIn"
|
||||||
|
values:
|
||||||
|
- kube-system
|
||||||
|
- kube-node-lease
|
||||||
|
{{- if .Values.namespaceSelector }}
|
||||||
|
- key: kubernetes.io/metadata.name
|
||||||
|
operator: "In"
|
||||||
|
values:
|
||||||
|
{{- range .Values.namespaceSelector }}
|
||||||
|
- {{ . | quote }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- speedscale.com
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
resources:
|
||||||
|
- trafficreplays
|
||||||
|
sideEffects: None
|
||||||
|
timeoutSeconds: 10
|
||||||
|
---
|
||||||
|
apiVersion: admissionregistration.k8s.io/v1
|
||||||
|
kind: ValidatingWebhookConfiguration
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-operator-replay
|
||||||
|
annotations:
|
||||||
|
argocd.argoproj.io/hook: PreSync
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
webhooks:
|
||||||
|
- admissionReviewVersions:
|
||||||
|
- v1
|
||||||
|
clientConfig:
|
||||||
|
caBundle: {{ $cacrt | b64enc }}
|
||||||
|
service:
|
||||||
|
name: speedscale-operator
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
path: /validate-speedscale-com-v1-trafficreplay
|
||||||
|
failurePolicy: Fail
|
||||||
|
name: replay.speedscale.com
|
||||||
|
namespaceSelector:
|
||||||
|
matchExpressions:
|
||||||
|
- key: kubernetes.io/metadata.name
|
||||||
|
operator: "NotIn"
|
||||||
|
values:
|
||||||
|
- kube-system
|
||||||
|
- kube-node-lease
|
||||||
|
{{- if .Values.namespaceSelector }}
|
||||||
|
- key: kubernetes.io/metadata.name
|
||||||
|
operator: "In"
|
||||||
|
values:
|
||||||
|
{{- range .Values.namespaceSelector }}
|
||||||
|
- {{ . | quote }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- speedscale.com
|
||||||
|
apiVersions:
|
||||||
|
- v1
|
||||||
|
operations:
|
||||||
|
- CREATE
|
||||||
|
- UPDATE
|
||||||
|
- DELETE
|
||||||
|
resources:
|
||||||
|
- trafficreplays
|
||||||
|
sideEffects: None
|
||||||
|
timeoutSeconds: 10
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
helm.sh/hook: pre-install
|
||||||
|
helm.sh/hook-delete-policy: before-hook-creation
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-webhook-certs
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
type: kubernetes.io/tls
|
||||||
|
data:
|
||||||
|
ca.crt: {{ $cacrt | b64enc }}
|
||||||
|
tls.crt: {{ $crt | b64enc }}
|
||||||
|
tls.key: {{ $key | b64enc }}
|
|
@ -0,0 +1,41 @@
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: speedscale-operator
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
annotations:
|
||||||
|
argocd.argoproj.io/hook: PreSync
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
data:
|
||||||
|
CLUSTER_NAME: {{ .Values.clusterName }}
|
||||||
|
IMAGE_PULL_POLICY: {{ .Values.image.pullPolicy }}
|
||||||
|
IMAGE_PULL_SECRETS: ""
|
||||||
|
IMAGE_REGISTRY: {{ .Values.image.registry }}
|
||||||
|
IMAGE_TAG: {{ .Values.image.tag }}
|
||||||
|
INSTANCE_ID: '{{- $cm := (lookup "v1" "ConfigMap" .Release.Namespace "speedscale-operator") -}}{{ if $cm }}{{ $cm.data.INSTANCE_ID }}{{ else }}{{ ( printf "%s-%s" .Values.clusterName uuidv4 ) }}{{ end }}'
|
||||||
|
LOG_LEVEL: {{ .Values.logLevel }}
|
||||||
|
SPEEDSCALE_DLP_CONFIG: {{ .Values.dlp.config }}
|
||||||
|
SPEEDSCALE_FILTER_RULE: {{ .Values.filterRule }}
|
||||||
|
TELEMETRY_INTERVAL: 1s
|
||||||
|
WITH_DLP: {{ .Values.dlp.enabled | quote }}
|
||||||
|
WITH_INSPECTOR: {{ .Values.dashboardAccess | quote }}
|
||||||
|
API_KEY_SECRET_NAME: {{ .Values.apiKeySecret | quote }}
|
||||||
|
DEPLOY_DEMO: {{ .Values.deployDemo | quote }}
|
||||||
|
GLOBAL_ANNOTATIONS: {{ .Values.globalAnnotations | toJson | quote }}
|
||||||
|
GLOBAL_LABELS: {{ .Values.globalLabels | toJson | quote }}
|
||||||
|
{{- if .Values.http_proxy }}
|
||||||
|
HTTP_PROXY: {{ .Values.http_proxy }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.https_proxy }}
|
||||||
|
HTTPS_PROXY: {{ .Values.https_proxy }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.no_proxy }}
|
||||||
|
NO_PROXY: {{ .Values.no_proxy }}
|
||||||
|
{{- end }}
|
||||||
|
PRIVILEGED_SIDECARS: {{ .Values.privilegedSidecars | quote }}
|
||||||
|
DISABLE_SMARTDNS: {{ .Values.disableSidecarSmartReverseDNS | quote }}
|
||||||
|
SIDECAR_CONFIG: {{ .Values.sidecar | toJson | quote }}
|
||||||
|
FORWARDER_CONFIG: {{ .Values.forwarder | toJson | quote }}
|
|
@ -0,0 +1,514 @@
|
||||||
|
apiVersion: apiextensions.k8s.io/v1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
controller-gen.kubebuilder.io/version: v0.15.0
|
||||||
|
creationTimestamp: null
|
||||||
|
name: trafficreplays.speedscale.com
|
||||||
|
spec:
|
||||||
|
group: speedscale.com
|
||||||
|
names:
|
||||||
|
kind: TrafficReplay
|
||||||
|
listKind: TrafficReplayList
|
||||||
|
plural: trafficreplays
|
||||||
|
shortNames:
|
||||||
|
- replay
|
||||||
|
singular: trafficreplay
|
||||||
|
scope: Namespaced
|
||||||
|
versions:
|
||||||
|
- additionalPrinterColumns:
|
||||||
|
- jsonPath: .status.active
|
||||||
|
name: Active
|
||||||
|
type: boolean
|
||||||
|
- jsonPath: .spec.mode
|
||||||
|
name: Mode
|
||||||
|
type: string
|
||||||
|
- jsonPath: .status.conditions[-1:].message
|
||||||
|
name: Status
|
||||||
|
type: string
|
||||||
|
- jsonPath: .metadata.creationTimestamp
|
||||||
|
name: Age
|
||||||
|
type: date
|
||||||
|
name: v1
|
||||||
|
schema:
|
||||||
|
openAPIV3Schema:
|
||||||
|
description: TrafficReplay is the Schema for the trafficreplays API
|
||||||
|
properties:
|
||||||
|
apiVersion:
|
||||||
|
description: |-
|
||||||
|
APIVersion defines the versioned schema of this representation of an object.
|
||||||
|
Servers should convert recognized schemas to the latest internal value, and
|
||||||
|
may reject unrecognized values.
|
||||||
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
||||||
|
type: string
|
||||||
|
kind:
|
||||||
|
description: |-
|
||||||
|
Kind is a string value representing the REST resource this object represents.
|
||||||
|
Servers may infer this from the endpoint the client submits requests to.
|
||||||
|
Cannot be updated.
|
||||||
|
In CamelCase.
|
||||||
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
||||||
|
type: string
|
||||||
|
metadata:
|
||||||
|
type: object
|
||||||
|
spec:
|
||||||
|
description: TrafficReplaySpec defines the desired state of TrafficReplay
|
||||||
|
properties:
|
||||||
|
buildTag:
|
||||||
|
description: |-
|
||||||
|
BuildTag links a unique tag, build hash, etc. to the generated
|
||||||
|
traffic replay report. That way you can connect the report results to the
|
||||||
|
version of the code that was tested.
|
||||||
|
type: string
|
||||||
|
cleanup:
|
||||||
|
description: |-
|
||||||
|
Cleanup is the name of cleanup mode used for this
|
||||||
|
TrafficReplay.
|
||||||
|
enum:
|
||||||
|
- inventory
|
||||||
|
- all
|
||||||
|
- none
|
||||||
|
type: string
|
||||||
|
collectLogs:
|
||||||
|
description: |-
|
||||||
|
CollectLogs enables or disables log collection from target
|
||||||
|
workload. Defaults to true.
|
||||||
|
DEPRECATED: use TestReport.ActualConfig.Cluster.CollectLogs
|
||||||
|
type: boolean
|
||||||
|
configChecksum:
|
||||||
|
description: |-
|
||||||
|
ConfigChecksum, managed my the operator, is the SHA1 checksum of the
|
||||||
|
configuration.
|
||||||
|
type: string
|
||||||
|
customURL:
|
||||||
|
description: CustomURL allows to specify custom URL to the SUT.
|
||||||
|
type: string
|
||||||
|
generatorLowData:
|
||||||
|
description: |-
|
||||||
|
GeneratorLowData forces the generator into a high
|
||||||
|
efficiency/low data output mode. This is ideal for high volume
|
||||||
|
performance tests. Defaults to false.
|
||||||
|
DEPRECATED
|
||||||
|
type: boolean
|
||||||
|
mode:
|
||||||
|
description: Mode is the name of replay mode used for this TrafficReplay.
|
||||||
|
enum:
|
||||||
|
- full-replay
|
||||||
|
- responder-only
|
||||||
|
- generator-only
|
||||||
|
type: string
|
||||||
|
needsReport:
|
||||||
|
description: Indicates whether a responder-only replay needs a report.
|
||||||
|
type: boolean
|
||||||
|
proxyMode:
|
||||||
|
description: |-
|
||||||
|
ProxyMode defines proxy operational mode used with injected sidecar.
|
||||||
|
DEPRECATED
|
||||||
|
type: string
|
||||||
|
responderLowData:
|
||||||
|
description: |-
|
||||||
|
ResponderLowData forces the responder into a high
|
||||||
|
efficiency/low data output mode. This is ideal for high volume
|
||||||
|
performance tests. Defaults to false.
|
||||||
|
DEPRECATED
|
||||||
|
type: boolean
|
||||||
|
secretRefs:
|
||||||
|
description: |-
|
||||||
|
SecretRefs hold the references to the secrets which contain
|
||||||
|
various secrets like (e.g. short-lived JWTs to be used by the generator
|
||||||
|
for authorization with HTTP calls).
|
||||||
|
items:
|
||||||
|
description: |-
|
||||||
|
LocalObjectReference contains enough information to locate the referenced
|
||||||
|
Kubernetes resource object.
|
||||||
|
properties:
|
||||||
|
name:
|
||||||
|
description: Name of the referent.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
sidecar:
|
||||||
|
description: |-
|
||||||
|
Sidecar defines sidecar specific configuration.
|
||||||
|
DEPRECATED: use Workloads
|
||||||
|
properties:
|
||||||
|
inject:
|
||||||
|
description: 'DEPRECATED: do not use'
|
||||||
|
type: boolean
|
||||||
|
patch:
|
||||||
|
description: Patch is .yaml file patch for the Workload
|
||||||
|
format: byte
|
||||||
|
type: string
|
||||||
|
tls:
|
||||||
|
properties:
|
||||||
|
in:
|
||||||
|
description: In provides configuration for sidecar inbound
|
||||||
|
TLS.
|
||||||
|
properties:
|
||||||
|
private:
|
||||||
|
description: Private is the filename of the TLS inbound
|
||||||
|
private key.
|
||||||
|
type: string
|
||||||
|
public:
|
||||||
|
description: Public is the filename of the TLS inbound
|
||||||
|
public key.
|
||||||
|
type: string
|
||||||
|
secret:
|
||||||
|
description: Secret is a secret with the TLS keys to use
|
||||||
|
for inbound traffic.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
mutual:
|
||||||
|
description: Mutual provides configuration for sidecar mutual
|
||||||
|
TLS.
|
||||||
|
properties:
|
||||||
|
private:
|
||||||
|
description: Private is the filename of the mutual TLS
|
||||||
|
private key.
|
||||||
|
type: string
|
||||||
|
public:
|
||||||
|
description: Public is the filename of the mutual TLS
|
||||||
|
public key.
|
||||||
|
type: string
|
||||||
|
secret:
|
||||||
|
description: Secret is a secret with the mutual TLS keys.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
out:
|
||||||
|
description: |-
|
||||||
|
Out enables or disables TLS out on the
|
||||||
|
sidecar during replay.
|
||||||
|
type: boolean
|
||||||
|
type: object
|
||||||
|
type: object
|
||||||
|
snapshotID:
|
||||||
|
description: |-
|
||||||
|
SnapshotID is the id of the traffic snapshot for this
|
||||||
|
TrafficReplay.
|
||||||
|
type: string
|
||||||
|
testConfigID:
|
||||||
|
description: |-
|
||||||
|
TestConfigID is the id of the replay configuration to be used
|
||||||
|
by the generator and responder for the TrafficReplay.
|
||||||
|
type: string
|
||||||
|
timeout:
|
||||||
|
description: |-
|
||||||
|
Timeout is the time to wait for replay test to finish. Defaults
|
||||||
|
to value of the `TIMEOUT` setting of the operator.
|
||||||
|
type: string
|
||||||
|
ttlAfterReady:
|
||||||
|
description: |-
|
||||||
|
TTLAfterReady provides a TTL (time to live) mechanism to limit
|
||||||
|
the lifetime of TrafficReplay object that have finished the execution and
|
||||||
|
reached its final state (either complete or failed).
|
||||||
|
type: string
|
||||||
|
workloadRef:
|
||||||
|
description: |-
|
||||||
|
WorkloadRef is the reference to the target workload (SUT) for
|
||||||
|
TrafficReplay. The operations will be performed in the namespace of the
|
||||||
|
target object.
|
||||||
|
DEPRECATED: use Workloads
|
||||||
|
properties:
|
||||||
|
apiVersion:
|
||||||
|
description: API version of the referenced object.
|
||||||
|
type: string
|
||||||
|
kind:
|
||||||
|
description: Kind of the referenced object. Defaults to "Deployment".
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of the referenced object.
|
||||||
|
type: string
|
||||||
|
namespace:
|
||||||
|
description: Namespace of the referenced object. Defaults to the
|
||||||
|
TrafficReplay namespace.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
workloads:
|
||||||
|
description: |-
|
||||||
|
Workloads define target workloads (SUT) for a TrafficReplay. Many
|
||||||
|
workloads may be provided, or none. Workloads may be modified and
|
||||||
|
restarted during replay to configure communication with a responder.
|
||||||
|
items:
|
||||||
|
description: |-
|
||||||
|
Workload represents a Kubernetes workload to be targeted during replay and
|
||||||
|
associated settings.
|
||||||
|
properties:
|
||||||
|
customURI:
|
||||||
|
description: CustomURI will be target of the traffic instead
|
||||||
|
of directly targeting workload
|
||||||
|
type: string
|
||||||
|
inTrafficKey:
|
||||||
|
description: 'DEPRECATED: use InTrafficKeys'
|
||||||
|
type: string
|
||||||
|
inTrafficKeys:
|
||||||
|
description: 'DEPRECATED: use Tests'
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
mocks:
|
||||||
|
description: |-
|
||||||
|
Mocks are strings used to identify slices of outbound snapshot traffic to
|
||||||
|
mock for this workload and maps directly to a snapshot's `OutTraffic`
|
||||||
|
field. Snapshot egress traffic can be split across multiple slices where
|
||||||
|
each slice contains part of the traffic. A workload may specify multiple
|
||||||
|
keys and multiple workloads may specify the same key.
|
||||||
|
|
||||||
|
|
||||||
|
Only the traffic slices defined here will be mocked. A workload with no
|
||||||
|
keys defined will not mock any traffic. Pass '*' to mock all traffic.
|
||||||
|
|
||||||
|
|
||||||
|
Mock strings may only match part of the snapshot's `OutTraffic` key if the
|
||||||
|
string matches exactly one key. For example, the test string
|
||||||
|
`foo.example.com` would match the `OutTraffic` key of
|
||||||
|
my-service:foo.example.com:8080, as long as no other keys would match
|
||||||
|
`foo.example.com`. Multiple mocks must be specified for multiple keys
|
||||||
|
unless using '*'.
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
outTrafficKeys:
|
||||||
|
description: 'DEPRECATED: use Mocks'
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
ref:
|
||||||
|
description: |-
|
||||||
|
Ref is a reference to a cluster workload, like a deployment or a
|
||||||
|
statefulset.
|
||||||
|
properties:
|
||||||
|
apiVersion:
|
||||||
|
description: API version of the referenced object.
|
||||||
|
type: string
|
||||||
|
kind:
|
||||||
|
description: Kind of the referenced object. Defaults to
|
||||||
|
"Deployment".
|
||||||
|
type: string
|
||||||
|
name:
|
||||||
|
description: Name of the referenced object.
|
||||||
|
type: string
|
||||||
|
namespace:
|
||||||
|
description: Namespace of the referenced object. Defaults
|
||||||
|
to the TrafficReplay namespace.
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- name
|
||||||
|
type: object
|
||||||
|
routing:
|
||||||
|
description: Routing configures how workloads route egress traffic
|
||||||
|
to responders
|
||||||
|
enum:
|
||||||
|
- hostalias
|
||||||
|
- nat
|
||||||
|
type: string
|
||||||
|
sidecar:
|
||||||
|
description: |-
|
||||||
|
TODO: this is not implemented, come back and replace deprecated Sidecar with workload specific settings
|
||||||
|
Sidecar defines sidecar specific configuration.
|
||||||
|
properties:
|
||||||
|
inject:
|
||||||
|
description: 'DEPRECATED: do not use'
|
||||||
|
type: boolean
|
||||||
|
patch:
|
||||||
|
description: Patch is .yaml file patch for the Workload
|
||||||
|
format: byte
|
||||||
|
type: string
|
||||||
|
tls:
|
||||||
|
properties:
|
||||||
|
in:
|
||||||
|
description: In provides configuration for sidecar inbound
|
||||||
|
TLS.
|
||||||
|
properties:
|
||||||
|
private:
|
||||||
|
description: Private is the filename of the TLS
|
||||||
|
inbound private key.
|
||||||
|
type: string
|
||||||
|
public:
|
||||||
|
description: Public is the filename of the TLS inbound
|
||||||
|
public key.
|
||||||
|
type: string
|
||||||
|
secret:
|
||||||
|
description: Secret is a secret with the TLS keys
|
||||||
|
to use for inbound traffic.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
mutual:
|
||||||
|
description: Mutual provides configuration for sidecar
|
||||||
|
mutual TLS.
|
||||||
|
properties:
|
||||||
|
private:
|
||||||
|
description: Private is the filename of the mutual
|
||||||
|
TLS private key.
|
||||||
|
type: string
|
||||||
|
public:
|
||||||
|
description: Public is the filename of the mutual
|
||||||
|
TLS public key.
|
||||||
|
type: string
|
||||||
|
secret:
|
||||||
|
description: Secret is a secret with the mutual
|
||||||
|
TLS keys.
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
out:
|
||||||
|
description: |-
|
||||||
|
Out enables or disables TLS out on the
|
||||||
|
sidecar during replay.
|
||||||
|
type: boolean
|
||||||
|
type: object
|
||||||
|
type: object
|
||||||
|
tests:
|
||||||
|
description: |-
|
||||||
|
Tests are strings used to identify slices of inbound snapshot traffic this
|
||||||
|
workload is targeting and maps directly to a snapshot's `InTraffic` field.
|
||||||
|
Snapshot ingress traffic can be split across multiple slices where each
|
||||||
|
slice contains part of the traffic. A key must only be specified once
|
||||||
|
across all workloads, but a workload may specify multiple keys.
|
||||||
|
|
||||||
|
|
||||||
|
Test strings may only match part of the snapshot's `InTraffic` key if the
|
||||||
|
string matches exactly one key. For example, the test string
|
||||||
|
`foo.example.com` would match the `InTraffic` key of
|
||||||
|
my-service:foo.example.com:8080, as long as no other keys would match
|
||||||
|
`foo.example.com`
|
||||||
|
|
||||||
|
|
||||||
|
This field is optional in the spec to provide support for single-workload
|
||||||
|
and legacy replays, but must be specified for multi-workload replays in
|
||||||
|
order to provide deterministic replay configuration.
|
||||||
|
items:
|
||||||
|
type: string
|
||||||
|
type: array
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
required:
|
||||||
|
- snapshotID
|
||||||
|
- testConfigID
|
||||||
|
type: object
|
||||||
|
status:
|
||||||
|
default:
|
||||||
|
observedGeneration: -1
|
||||||
|
description: TrafficReplayStatus defines the observed state of TrafficReplay
|
||||||
|
properties:
|
||||||
|
active:
|
||||||
|
description: Active indicates whether this traffic replay is currently
|
||||||
|
underway or not.
|
||||||
|
type: boolean
|
||||||
|
conditions:
|
||||||
|
items:
|
||||||
|
description: "Condition contains details for one aspect of the current
|
||||||
|
state of this API Resource.\n---\nThis struct is intended for
|
||||||
|
direct use as an array at the field path .status.conditions. For
|
||||||
|
example,\n\n\n\ttype FooStatus struct{\n\t // Represents the
|
||||||
|
observations of a foo's current state.\n\t // Known .status.conditions.type
|
||||||
|
are: \"Available\", \"Progressing\", and \"Degraded\"\n\t //
|
||||||
|
+patchMergeKey=type\n\t // +patchStrategy=merge\n\t // +listType=map\n\t
|
||||||
|
\ // +listMapKey=type\n\t Conditions []metav1.Condition `json:\"conditions,omitempty\"
|
||||||
|
patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t
|
||||||
|
\ // other fields\n\t}"
|
||||||
|
properties:
|
||||||
|
lastTransitionTime:
|
||||||
|
description: |-
|
||||||
|
lastTransitionTime is the last time the condition transitioned from one status to another.
|
||||||
|
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
|
||||||
|
format: date-time
|
||||||
|
type: string
|
||||||
|
message:
|
||||||
|
description: |-
|
||||||
|
message is a human readable message indicating details about the transition.
|
||||||
|
This may be an empty string.
|
||||||
|
maxLength: 32768
|
||||||
|
type: string
|
||||||
|
observedGeneration:
|
||||||
|
description: |-
|
||||||
|
observedGeneration represents the .metadata.generation that the condition was set based upon.
|
||||||
|
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
|
||||||
|
with respect to the current state of the instance.
|
||||||
|
format: int64
|
||||||
|
minimum: 0
|
||||||
|
type: integer
|
||||||
|
reason:
|
||||||
|
description: |-
|
||||||
|
reason contains a programmatic identifier indicating the reason for the condition's last transition.
|
||||||
|
Producers of specific condition types may define expected values and meanings for this field,
|
||||||
|
and whether the values are considered a guaranteed API.
|
||||||
|
The value should be a CamelCase string.
|
||||||
|
This field may not be empty.
|
||||||
|
maxLength: 1024
|
||||||
|
minLength: 1
|
||||||
|
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
|
||||||
|
type: string
|
||||||
|
status:
|
||||||
|
description: status of the condition, one of True, False, Unknown.
|
||||||
|
enum:
|
||||||
|
- "True"
|
||||||
|
- "False"
|
||||||
|
- Unknown
|
||||||
|
type: string
|
||||||
|
type:
|
||||||
|
description: |-
|
||||||
|
type of condition in CamelCase or in foo.example.com/CamelCase.
|
||||||
|
---
|
||||||
|
Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be
|
||||||
|
useful (see .node.status.conditions), the ability to deconflict is important.
|
||||||
|
The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
|
||||||
|
maxLength: 316
|
||||||
|
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
|
||||||
|
type: string
|
||||||
|
required:
|
||||||
|
- lastTransitionTime
|
||||||
|
- message
|
||||||
|
- reason
|
||||||
|
- status
|
||||||
|
- type
|
||||||
|
type: object
|
||||||
|
type: array
|
||||||
|
finishedTime:
|
||||||
|
description: Information when the traffic replay has finished.
|
||||||
|
format: date-time
|
||||||
|
type: string
|
||||||
|
initializedTime:
|
||||||
|
description: Information when the test environment was successfully
|
||||||
|
prepared.
|
||||||
|
format: date-time
|
||||||
|
type: string
|
||||||
|
lastHeartbeatTime:
|
||||||
|
description: 'DEPRECATED: will not be set'
|
||||||
|
format: date-time
|
||||||
|
type: string
|
||||||
|
observedGeneration:
|
||||||
|
description: ObservedGeneration is the last observed generation.
|
||||||
|
format: int64
|
||||||
|
type: integer
|
||||||
|
reconcileFailures:
|
||||||
|
description: |-
|
||||||
|
ReconcileFailures is the number of times the traffic replay controller
|
||||||
|
experienced an error during the reconciliation process. The traffic
|
||||||
|
replay will be deleted if too many errors occur.
|
||||||
|
format: int64
|
||||||
|
type: integer
|
||||||
|
reportID:
|
||||||
|
description: The id of the traffic replay report created.
|
||||||
|
type: string
|
||||||
|
reportURL:
|
||||||
|
description: The url to the traffic replay report.
|
||||||
|
type: string
|
||||||
|
startedTime:
|
||||||
|
description: Information when the traffic replay has started.
|
||||||
|
format: date-time
|
||||||
|
type: string
|
||||||
|
type: object
|
||||||
|
type: object
|
||||||
|
served: true
|
||||||
|
storage: true
|
||||||
|
subresources:
|
||||||
|
status: {}
|
||||||
|
status:
|
||||||
|
acceptedNames:
|
||||||
|
kind: ""
|
||||||
|
plural: ""
|
||||||
|
conditions: null
|
||||||
|
storedVersions: null
|
|
@ -0,0 +1,132 @@
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
operator.speedscale.com/ignore: "true"
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
app: speedscale-operator
|
||||||
|
controlplane.speedscale.com/component: operator
|
||||||
|
{{- if .Values.globalLabels }}
|
||||||
|
{{ toYaml .Values.globalLabels | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
name: speedscale-operator
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: speedscale-operator
|
||||||
|
controlplane.speedscale.com/component: operator
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 8}}
|
||||||
|
{{- end }}
|
||||||
|
labels:
|
||||||
|
app: speedscale-operator
|
||||||
|
controlplane.speedscale.com/component: operator
|
||||||
|
{{- if .Values.globalLabels }}
|
||||||
|
{{ toYaml .Values.globalLabels | indent 8}}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- command:
|
||||||
|
- /operator
|
||||||
|
env:
|
||||||
|
- name: POD_NAME
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
apiVersion: v1
|
||||||
|
fieldPath: metadata.name
|
||||||
|
- name: POD_NAMESPACE
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
apiVersion: v1
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
envFrom:
|
||||||
|
- configMapRef:
|
||||||
|
name: speedscale-operator
|
||||||
|
# https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#container-v1-core
|
||||||
|
# When a key exists in multiple sources, the value associated with the last source will take precedence.
|
||||||
|
# Values defined by an Env with a duplicate key will take precedence.
|
||||||
|
- configMapRef:
|
||||||
|
name: speedscale-operator-override
|
||||||
|
optional: true
|
||||||
|
- secretRef:
|
||||||
|
name: '{{ ne .Values.apiKeySecret "" | ternary .Values.apiKeySecret "speedscale-apikey" }}'
|
||||||
|
optional: false
|
||||||
|
image: '{{ .Values.image.registry }}/operator:{{ .Values.image.tag }}'
|
||||||
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||||
|
livenessProbe:
|
||||||
|
failureThreshold: 5
|
||||||
|
httpGet:
|
||||||
|
path: /healthz
|
||||||
|
port: health-check
|
||||||
|
scheme: HTTP
|
||||||
|
initialDelaySeconds: 30
|
||||||
|
periodSeconds: 30
|
||||||
|
successThreshold: 1
|
||||||
|
timeoutSeconds: 5
|
||||||
|
name: operator
|
||||||
|
ports:
|
||||||
|
- containerPort: 443
|
||||||
|
name: webhook-server
|
||||||
|
- containerPort: 8081
|
||||||
|
name: health-check
|
||||||
|
readinessProbe:
|
||||||
|
failureThreshold: 10
|
||||||
|
httpGet:
|
||||||
|
path: /readyz
|
||||||
|
port: health-check
|
||||||
|
scheme: HTTP
|
||||||
|
initialDelaySeconds: 5
|
||||||
|
periodSeconds: 5
|
||||||
|
successThreshold: 1
|
||||||
|
timeoutSeconds: 5
|
||||||
|
resources: {{- toYaml .Values.operator.resources | nindent 10 }}
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
|
privileged: false
|
||||||
|
readOnlyRootFilesystem: true
|
||||||
|
runAsNonRoot: false
|
||||||
|
# Run as root to bind 443 https://github.com/kubernetes/kubernetes/issues/56374
|
||||||
|
runAsUser: 0
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /tmp
|
||||||
|
name: tmp
|
||||||
|
- mountPath: /tmp/k8s-webhook-server/serving-certs
|
||||||
|
name: webhook-certs
|
||||||
|
readOnly: true
|
||||||
|
- mountPath: /etc/ssl/speedscale
|
||||||
|
name: speedscale-tls-out
|
||||||
|
readOnly: true
|
||||||
|
hostNetwork: {{ .Values.hostNetwork }}
|
||||||
|
securityContext:
|
||||||
|
runAsNonRoot: true
|
||||||
|
serviceAccountName: speedscale-operator
|
||||||
|
terminationGracePeriodSeconds: 10
|
||||||
|
volumes:
|
||||||
|
- emptyDir: {}
|
||||||
|
name: tmp
|
||||||
|
- name: webhook-certs
|
||||||
|
secret:
|
||||||
|
secretName: speedscale-webhook-certs
|
||||||
|
- name: speedscale-tls-out
|
||||||
|
secret:
|
||||||
|
secretName: speedscale-certs
|
||||||
|
{{- if .Values.affinity }}
|
||||||
|
affinity: {{ toYaml .Values.affinity | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.tolerations }}
|
||||||
|
tolerations: {{ toYaml .Values.tolerations | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.nodeSelector }}
|
||||||
|
nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
|
||||||
|
{{- end }}
|
|
@ -0,0 +1,73 @@
|
||||||
|
---
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
helm.sh/hook: pre-install
|
||||||
|
helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
|
||||||
|
helm.sh/hook-weight: "4"
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-operator-pre-install
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
{{- if .Values.globalLabels }}
|
||||||
|
{{ toYaml .Values.globalLabels | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
backoffLimit: 0
|
||||||
|
ttlSecondsAfterFinished: 30
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 8}}
|
||||||
|
{{- end }}
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
{{- if .Values.globalLabels }}
|
||||||
|
{{ toYaml .Values.globalLabels | indent 8}}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- args:
|
||||||
|
- |-
|
||||||
|
# ensure valid settings before the chart reports a successfull install
|
||||||
|
{{- if .Values.http_proxy }}
|
||||||
|
HTTP_PROXY={{ .Values.http_proxy | quote }} \
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.https_proxy }}
|
||||||
|
HTTPS_PROXY={{ .Values.https_proxy | quote }} \
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.no_proxy }}
|
||||||
|
NO_PROXY={{ .Values.no_proxy | quote }} \
|
||||||
|
{{- end }}
|
||||||
|
speedctl init --overwrite --no-rcfile-update \
|
||||||
|
--api-key $SPEEDSCALE_API_KEY \
|
||||||
|
--app-url $SPEEDSCALE_APP_URL
|
||||||
|
|
||||||
|
# in case we're in istio
|
||||||
|
curl -X POST http://127.0.0.1:15000/quitquitquit || true
|
||||||
|
command:
|
||||||
|
- sh
|
||||||
|
- -c
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: '{{ ne .Values.apiKeySecret "" | ternary .Values.apiKeySecret "speedscale-apikey" }}'
|
||||||
|
optional: false
|
||||||
|
image: '{{ .Values.image.registry }}/speedscale-cli:{{ .Values.image.tag }}'
|
||||||
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||||
|
name: speedscale-cli
|
||||||
|
resources: {}
|
||||||
|
restartPolicy: Never
|
||||||
|
{{- if .Values.affinity }}
|
||||||
|
affinity: {{ toYaml .Values.affinity | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.tolerations }}
|
||||||
|
tolerations: {{ toYaml .Values.tolerations | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.nodeSelector }}
|
||||||
|
nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
|
||||||
|
{{- end }}
|
|
@ -0,0 +1,244 @@
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-operator
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
annotations: {{ toYaml .Values.globalAnnotations | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- deployments
|
||||||
|
- statefulsets
|
||||||
|
- daemonsets
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- replicasets
|
||||||
|
verbs:
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- batch
|
||||||
|
resources:
|
||||||
|
- jobs
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- apiextensions.k8s.io
|
||||||
|
resources:
|
||||||
|
- customresourcedefinitions
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- apiGroups:
|
||||||
|
- admissionregistration.k8s.io
|
||||||
|
resources:
|
||||||
|
- mutatingwebhookconfigurations
|
||||||
|
- validatingwebhookconfigurations
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- apiGroups:
|
||||||
|
- rbac.authorization.k8s.io
|
||||||
|
resources:
|
||||||
|
- clusterrolebindings
|
||||||
|
- clusterroles
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- namespaces
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- configmaps
|
||||||
|
- secrets
|
||||||
|
- pods
|
||||||
|
- services
|
||||||
|
- serviceaccounts
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods/log
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- events
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- nodes
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- metrics.k8s.io
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- rbac.authorization.k8s.io
|
||||||
|
resources:
|
||||||
|
- rolebindings
|
||||||
|
- roles
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- networking.istio.io
|
||||||
|
resources:
|
||||||
|
- envoyfilters
|
||||||
|
- sidecars
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- security.istio.io
|
||||||
|
resources:
|
||||||
|
- peerauthentications
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- coordination.k8s.io
|
||||||
|
resources:
|
||||||
|
- leases
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- speedscale.com
|
||||||
|
resources:
|
||||||
|
- trafficreplays
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- speedscale.com
|
||||||
|
resources:
|
||||||
|
- trafficreplays/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- update
|
||||||
|
- patch
|
||||||
|
- apiGroups:
|
||||||
|
- argoproj.io
|
||||||
|
resources:
|
||||||
|
- rollouts
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: speedscale-operator
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
annotations: {{ toYaml .Values.globalAnnotations | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: speedscale-operator
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: speedscale-operator
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
automountServiceAccountToken: true
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: speedscale-operator
|
||||||
|
controlplane.speedscale.com/component: operator
|
||||||
|
name: speedscale-operator
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
annotations: {{ toYaml .Values.globalAnnotations | nindent 4 }}
|
||||||
|
{{- end }}
|
|
@ -0,0 +1,18 @@
|
||||||
|
---
|
||||||
|
{{ if .Values.apiKey }}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: speedscale-apikey
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
annotations:
|
||||||
|
helm.sh/hook: pre-install
|
||||||
|
helm.sh/hook-weight: "3"
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
SPEEDSCALE_API_KEY: {{ .Values.apiKey | b64enc }}
|
||||||
|
SPEEDSCALE_APP_URL: {{ .Values.appUrl | b64enc }}
|
||||||
|
{{ end }}
|
|
@ -0,0 +1,22 @@
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: speedscale-operator
|
||||||
|
controlplane.speedscale.com/component: operator
|
||||||
|
name: speedscale-operator
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
annotations: {{ toYaml .Values.globalAnnotations | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
ports:
|
||||||
|
- port: 443
|
||||||
|
protocol: TCP
|
||||||
|
selector:
|
||||||
|
app: speedscale-operator
|
||||||
|
controlplane.speedscale.com/component: operator
|
||||||
|
status:
|
||||||
|
loadBalancer: {}
|
|
@ -0,0 +1,183 @@
|
||||||
|
{{- $crt := "" -}}
|
||||||
|
{{- $key := "" -}}
|
||||||
|
{{- $s := (lookup "v1" "Secret" .Release.Namespace "speedscale-certs") -}}
|
||||||
|
{{- if $s -}}
|
||||||
|
{{- $crt = index $s.data "tls.crt" | b64dec -}}
|
||||||
|
{{- $key = index $s.data "tls.key" | b64dec -}}
|
||||||
|
{{ else }}
|
||||||
|
{{- $cert := genCA "Speedscale" 3650 -}}
|
||||||
|
{{- $crt = $cert.Cert -}}
|
||||||
|
{{- $key = $cert.Key -}}
|
||||||
|
{{- end -}}
|
||||||
|
---
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
helm.sh/hook: pre-install
|
||||||
|
helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
|
||||||
|
helm.sh/hook-weight: "5"
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-operator-create-jks
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
labels:
|
||||||
|
{{- if .Values.globalLabels }}
|
||||||
|
{{ toYaml .Values.globalLabels | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
backoffLimit: 0
|
||||||
|
ttlSecondsAfterFinished: 30
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 8}}
|
||||||
|
{{- end }}
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 8}}
|
||||||
|
{{- end }}
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- args:
|
||||||
|
- |-
|
||||||
|
keytool -keystore /usr/lib/jvm/jre/lib/security/cacerts -importcert -noprompt -trustcacerts -storepass changeit -alias speedscale -file /etc/ssl/speedscale/tls.crt
|
||||||
|
kubectl -n ${POD_NAMESPACE} delete secret speedscale-jks || true
|
||||||
|
kubectl -n ${POD_NAMESPACE} create secret generic speedscale-jks --from-file=cacerts.jks=/usr/lib/jvm/jre/lib/security/cacerts
|
||||||
|
|
||||||
|
# in case we're in istio
|
||||||
|
curl -X POST http://127.0.0.1:15000/quitquitquit || true
|
||||||
|
command:
|
||||||
|
- sh
|
||||||
|
- -c
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /etc/ssl/speedscale
|
||||||
|
name: speedscale-tls-out
|
||||||
|
readOnly: true
|
||||||
|
env:
|
||||||
|
- name: POD_NAMESPACE
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
apiVersion: v1
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: '{{ ne .Values.apiKeySecret "" | ternary .Values.apiKeySecret "speedscale-apikey" }}'
|
||||||
|
optional: false
|
||||||
|
image: '{{ .Values.image.registry }}/amazoncorretto'
|
||||||
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||||
|
name: create-jks
|
||||||
|
resources: {}
|
||||||
|
restartPolicy: Never
|
||||||
|
serviceAccountName: speedscale-operator-provisioning
|
||||||
|
volumes:
|
||||||
|
- name: speedscale-tls-out
|
||||||
|
secret:
|
||||||
|
secretName: speedscale-certs
|
||||||
|
{{- if .Values.affinity }}
|
||||||
|
affinity: {{ toYaml .Values.affinity | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.tolerations }}
|
||||||
|
tolerations: {{ toYaml .Values.tolerations | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.nodeSelector }}
|
||||||
|
nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
automountServiceAccountToken: true
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
helm.sh/hook: pre-install
|
||||||
|
helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
|
||||||
|
helm.sh/hook-weight: "1"
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: speedscale-operator
|
||||||
|
controlplane.speedscale.com/component: operator
|
||||||
|
name: speedscale-operator-provisioning
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
helm.sh/hook: pre-install
|
||||||
|
helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
|
||||||
|
helm.sh/hook-weight: "2"
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-operator-provisioning
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- secrets
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- admissionregistration.k8s.io
|
||||||
|
resources:
|
||||||
|
- mutatingwebhookconfigurations
|
||||||
|
- validatingwebhookconfigurations
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- deletecollection
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
helm.sh/hook: pre-install
|
||||||
|
helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
|
||||||
|
helm.sh/hook-weight: "3"
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-operator-provisioning
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: speedscale-operator-provisioning
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: speedscale-operator-provisioning
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
helm.sh/hook: pre-install
|
||||||
|
helm.sh/hook-delete-policy: before-hook-creation
|
||||||
|
{{- if .Values.globalAnnotations }}
|
||||||
|
{{ toYaml .Values.globalAnnotations | indent 4}}
|
||||||
|
{{- end }}
|
||||||
|
creationTimestamp: null
|
||||||
|
name: speedscale-certs
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
type: kubernetes.io/tls
|
||||||
|
data:
|
||||||
|
tls.crt: {{ $crt | b64enc }}
|
||||||
|
tls.key: {{ $key | b64enc }}
|
|
@ -0,0 +1,133 @@
|
||||||
|
# An API key is required to connect to the Speedscale cloud.
|
||||||
|
# If you need a key email support@speedscale.com.
|
||||||
|
apiKey: ""
|
||||||
|
|
||||||
|
# A secret name can be referenced instead of the api key itself.
|
||||||
|
# The secret must be of the format:
|
||||||
|
#
|
||||||
|
# type: Opaque
|
||||||
|
# data:
|
||||||
|
# SPEEDSCALE_API_KEY: <key>
|
||||||
|
# SPEEDSCALE_APP_URL: <appUrl>
|
||||||
|
apiKeySecret: ""
|
||||||
|
|
||||||
|
# Speedscale domain to use.
|
||||||
|
appUrl: "app.speedscale.com"
|
||||||
|
|
||||||
|
# The name of your cluster.
|
||||||
|
clusterName: "my-cluster"
|
||||||
|
|
||||||
|
# Speedscale components image settings.
|
||||||
|
image:
|
||||||
|
registry: gcr.io/speedscale
|
||||||
|
tag: v2.2.169
|
||||||
|
pullPolicy: Always
|
||||||
|
|
||||||
|
# Log level for Speedscale components.
|
||||||
|
logLevel: "info"
|
||||||
|
|
||||||
|
# Namespaces to be watched by Speedscale Operator as a list of names.
|
||||||
|
namespaceSelector: []
|
||||||
|
|
||||||
|
# Instructs operator to deploy resources necessary to interact with your cluster from the Speedscale dashboard.
|
||||||
|
dashboardAccess: true
|
||||||
|
|
||||||
|
# Filter Rule to apply to the Speedscale Forwarder
|
||||||
|
filterRule: "standard"
|
||||||
|
|
||||||
|
# Data Loss Prevention settings.
|
||||||
|
dlp:
|
||||||
|
# Instructs operator to enable data loss prevention features
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
# Configuration for data loss prevention
|
||||||
|
config: "standard"
|
||||||
|
|
||||||
|
# If the operator pod/webhooks need to be on the host network.
|
||||||
|
# This is only needed if the control plane cannot connect directly to a pod
|
||||||
|
# for eg. if Calico is used as EKS's default networking
|
||||||
|
# https://docs.tigera.io/calico/3.25/getting-started/kubernetes/managed-public-cloud/eks#install-eks-with-calico-networking
|
||||||
|
hostNetwork: false
|
||||||
|
|
||||||
|
# A set of annotations to be applied to all Speedscale related deployments,
|
||||||
|
# services, jobs, pods, etc.
|
||||||
|
#
|
||||||
|
# Example:
|
||||||
|
# annotation.first: value
|
||||||
|
# annotation.second: value
|
||||||
|
globalAnnotations: {}
|
||||||
|
|
||||||
|
# A set of labels to be applied to all Speedscale related deployments,
|
||||||
|
# services, jobs, pods, etc.
|
||||||
|
#
|
||||||
|
# Example:
|
||||||
|
# label1: value
|
||||||
|
# label2: value
|
||||||
|
globalLabels: {}
|
||||||
|
|
||||||
|
# A full affinity object as detailed: https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity
|
||||||
|
affinity: {}
|
||||||
|
|
||||||
|
# The list of tolerations as detailed: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
|
||||||
|
tolerations: []
|
||||||
|
|
||||||
|
# A nodeselector object as detailed: https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/
|
||||||
|
nodeSelector: {}
|
||||||
|
|
||||||
|
# Deploy a demo app at startup. Set this to an empty string to not deploy.
|
||||||
|
# Valid values: ["java", ""]
|
||||||
|
deployDemo: "java"
|
||||||
|
|
||||||
|
# Proxy connection settings if required by your network. These translate to standard proxy environment
|
||||||
|
# variables HTTP_PROXY, HTTPS_PROXY, and NO_PROXY
|
||||||
|
http_proxy: ""
|
||||||
|
https_proxy: ""
|
||||||
|
no_proxy: ""
|
||||||
|
|
||||||
|
# control if sidecar init containers should run with privileged set
|
||||||
|
privilegedSidecars: false
|
||||||
|
|
||||||
|
# control if the sidecar should enable/disable use of the smart dns lookup feature (requires NET_ADMIN)
|
||||||
|
disableSidecarSmartReverseDNS: false
|
||||||
|
|
||||||
|
# Operator settings. These limits are recommended unless you have a cluster
|
||||||
|
# with a very large number of workloads (for eg. 10k+ deployments, replicasets, etc.).
|
||||||
|
operator:
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: 500m
|
||||||
|
memory: 512Mi
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 128Mi
|
||||||
|
|
||||||
|
# Default sidecar settings. Example:
|
||||||
|
# sidecar:
|
||||||
|
# resources:
|
||||||
|
# limits:
|
||||||
|
# cpu: 500m
|
||||||
|
# memory: 512Mi
|
||||||
|
# ephemeral-storage: 100Mi
|
||||||
|
# requests:
|
||||||
|
# cpu: 10m
|
||||||
|
# memory: 32Mi
|
||||||
|
# ephemeral-storage: 100Mi
|
||||||
|
# ignore_src_hosts: example.com, example.org
|
||||||
|
# ignore_src_ips: 8.8.8.8, 1.1.1.1
|
||||||
|
# ignore_dst_hosts: example.com, example.org
|
||||||
|
# ignore_dst_ips: 8.8.8.8, 1.1.1.1
|
||||||
|
# insert_init_first: false
|
||||||
|
# tls_out: false
|
||||||
|
# reinitialize_iptables: false
|
||||||
|
sidecar: {}
|
||||||
|
|
||||||
|
# Forwarder settings
|
||||||
|
# forwarder:
|
||||||
|
# resources:
|
||||||
|
# limits:
|
||||||
|
# cpu: 500m
|
||||||
|
# memory: 500M
|
||||||
|
# requests:
|
||||||
|
# cpu: 300m
|
||||||
|
# memory: 250M
|
||||||
|
forwarder: {}
|
55
index.yaml
55
index.yaml
|
@ -6855,6 +6855,28 @@ entries:
|
||||||
- assets/kubecost/cost-analyzer-1.103.3.tgz
|
- assets/kubecost/cost-analyzer-1.103.3.tgz
|
||||||
version: 1.103.3
|
version: 1.103.3
|
||||||
crate-operator:
|
crate-operator:
|
||||||
|
- annotations:
|
||||||
|
catalog.cattle.io/certified: partner
|
||||||
|
catalog.cattle.io/display-name: CrateDB Operator
|
||||||
|
catalog.cattle.io/release-name: crate-operator
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: 2.40.0
|
||||||
|
created: "2024-07-18T00:45:48.956053121Z"
|
||||||
|
dependencies:
|
||||||
|
- condition: crate-operator-crds.enabled
|
||||||
|
name: crate-operator-crds
|
||||||
|
repository: file://./charts/crate-operator-crds
|
||||||
|
version: 2.40.0
|
||||||
|
description: Crate Operator - Helm chart for installing and upgrading Crate Operator.
|
||||||
|
digest: 0b8096d9e71885c6f1002db3c1e11c0a5bab95bb89eeb881dd6adf74cca684a4
|
||||||
|
icon: file://assets/icons/crate-operator.svg
|
||||||
|
maintainers:
|
||||||
|
- name: Crate.io
|
||||||
|
name: crate-operator
|
||||||
|
type: application
|
||||||
|
urls:
|
||||||
|
- assets/crate/crate-operator-2.40.0.tgz
|
||||||
|
version: 2.40.0
|
||||||
- annotations:
|
- annotations:
|
||||||
catalog.cattle.io/certified: partner
|
catalog.cattle.io/certified: partner
|
||||||
catalog.cattle.io/display-name: CrateDB Operator
|
catalog.cattle.io/display-name: CrateDB Operator
|
||||||
|
@ -30825,6 +30847,37 @@ entries:
|
||||||
- assets/btp/sextant-2.2.21.tgz
|
- assets/btp/sextant-2.2.21.tgz
|
||||||
version: 2.2.21
|
version: 2.2.21
|
||||||
speedscale-operator:
|
speedscale-operator:
|
||||||
|
- annotations:
|
||||||
|
catalog.cattle.io/certified: partner
|
||||||
|
catalog.cattle.io/display-name: Speedscale Operator
|
||||||
|
catalog.cattle.io/kube-version: '>= 1.17.0-0'
|
||||||
|
catalog.cattle.io/release-name: speedscale-operator
|
||||||
|
apiVersion: v1
|
||||||
|
appVersion: 2.2.169
|
||||||
|
created: "2024-07-18T00:45:52.228880431Z"
|
||||||
|
description: Stress test your APIs with real world scenarios. Collect and replay
|
||||||
|
traffic without scripting.
|
||||||
|
digest: 94f0c14a83cea034c012350ac8033924eeb42240912b255e2c1bb2f4271a8fbf
|
||||||
|
home: https://speedscale.com
|
||||||
|
icon: file://assets/icons/speedscale-operator.png
|
||||||
|
keywords:
|
||||||
|
- speedscale
|
||||||
|
- test
|
||||||
|
- testing
|
||||||
|
- regression
|
||||||
|
- reliability
|
||||||
|
- load
|
||||||
|
- replay
|
||||||
|
- network
|
||||||
|
- traffic
|
||||||
|
kubeVersion: '>= 1.17.0-0'
|
||||||
|
maintainers:
|
||||||
|
- email: support@speedscale.com
|
||||||
|
name: Speedscale Support
|
||||||
|
name: speedscale-operator
|
||||||
|
urls:
|
||||||
|
- assets/speedscale/speedscale-operator-2.2.169.tgz
|
||||||
|
version: 2.2.169
|
||||||
- annotations:
|
- annotations:
|
||||||
catalog.cattle.io/certified: partner
|
catalog.cattle.io/certified: partner
|
||||||
catalog.cattle.io/display-name: Speedscale Operator
|
catalog.cattle.io/display-name: Speedscale Operator
|
||||||
|
@ -36344,4 +36397,4 @@ entries:
|
||||||
urls:
|
urls:
|
||||||
- assets/netfoundry/ziti-host-1.5.1.tgz
|
- assets/netfoundry/ziti-host-1.5.1.tgz
|
||||||
version: 1.5.1
|
version: 1.5.1
|
||||||
generated: "2024-07-17T00:47:11.280144407Z"
|
generated: "2024-07-18T00:45:48.504920851Z"
|
||||||
|
|
Loading…
Reference in New Issue