From 0c8d524f09cabc5b87efb309863100a1013e4b5d Mon Sep 17 00:00:00 2001 From: actions Date: Fri, 1 Oct 2021 19:07:35 +0000 Subject: [PATCH] Merge pull request #153 from dereknola/metric_122 Update rke2-metrics-server to v0.5.0 --- ...etrics-server-2.11.100-build2021091503.tgz | Bin 0 -> 5388 bytes .../2.11.100-build2021091503/.helmignore | 22 ++++ .../2.11.100-build2021091503/Chart.yaml | 15 +++ .../2.11.100-build2021091503/README.md | 39 ++++++ .../ci/ci-values.yaml | 5 + .../templates/NOTES.txt | 11 ++ .../templates/_helpers.tpl | 59 +++++++++ ...ggregated-metrics-reader-cluster-role.yaml | 18 +++ .../templates/auth-delegator-crb.yaml | 19 +++ .../templates/cluster-role.yaml | 34 ++++++ .../templates/metric-server-service.yaml | 25 ++++ .../templates/metrics-api-service.yaml | 20 +++ .../templates/metrics-server-crb.yaml | 19 +++ .../templates/metrics-server-deployment.yaml | 88 ++++++++++++++ .../metrics-server-serviceaccount.yaml | 12 ++ .../templates/pdb.yaml | 23 ++++ .../templates/psp.yaml | 26 ++++ .../templates/role-binding.yaml | 20 +++ .../templates/tests/test-version.yaml | 21 ++++ .../2.11.100-build2021091503/values.yaml | 114 ++++++++++++++++++ index.yaml | 19 +++ 21 files changed, 609 insertions(+) create mode 100755 assets/rke2-metrics-server/rke2-metrics-server-2.11.100-build2021091503.tgz create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/.helmignore create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/Chart.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/README.md create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/ci/ci-values.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/NOTES.txt create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/_helpers.tpl create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/aggregated-metrics-reader-cluster-role.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/auth-delegator-crb.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/cluster-role.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metric-server-service.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-api-service.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-crb.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-deployment.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-serviceaccount.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/pdb.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/psp.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/role-binding.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/tests/test-version.yaml create mode 100755 charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/values.yaml diff --git a/assets/rke2-metrics-server/rke2-metrics-server-2.11.100-build2021091503.tgz b/assets/rke2-metrics-server/rke2-metrics-server-2.11.100-build2021091503.tgz new file mode 100755 index 0000000000000000000000000000000000000000..2c70e693150514164eab650003f1de43555a0922 GIT binary patch literal 5388 zcmV+n74zyJiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PKD1a@;nuaDMYCdPmvv>ur<6s5 z-k{(6|NZ^mu6Hl(zi9lQ6PBX7KLN02{O=DAo;Sz;;9!3{{vRUAF$sqrzz&=w7}5zv z1s5~aGnDY|`@^GR3@cDGk+KNJ2%$uxG4de$H3ThF^Z*i-yy9fcFdD*yFom9H`VS#Lek5Q9;kd3k6>^l`u0f(bw z$XL^^t0mc@`=>}j&l4IF#^!KAOs!^A0Xi=K&D3iyQi!NBFKTElGAg(Qn2~b?EiBTQ za3hYX29auI#J1%hRS=q)A0|Qq22+>`N&ggF69$QhfTUWekTA;?hv`DdGcW?yWtYg1 zIF8ra%9{zL-=H?&3)oZ_KNWVEp=nxza;RW{SVUN7(S^++@sE^BtZ~TTH}y{y0$~~@ zH|;LYQ8F?I?l77fnMx-jQl@)Yyg4gTLTYiD{uGKhPB{$?5?k*&?ExGb1b~+$P8dFO zq*%^a(j4XrNx!0Lmy8S$9A5o&;z3S)F^FhPrnZAgOoXCZ$oUW?;o%HrcSdA{93%hi zJJpsh&GL5)(#4qK44-JiOGB9En0pvG9qAekNmN zS;2{j4mlS(M|pK)DryAXL@*{UOjji(08CRN3D=0A!Wl*>%lmRDsWxH*NEG>k+rAwb zTmUDC5DSSwbjkgC4I>e%t|sbCbx9OcPOXZUse0X_(8w=K_45)9mj(Atfn8Hz27)pm zESZs@UQ&@O5z!DHJ@UMr9XK&!+6tXSQX#3HA2Fho?QX3%Lr`<2G4@TP6;x#G{vcQy z<7+b?7OK`4^xyKo~GRd*LZ0QAf`u;Bt54Lr})ZDF2pS~oZJHlNkYby zQB939ZOV(JNQUsSLm2D)=9TU7P6+)E%Fy+NLP?M*KU66+%6zZ%#?O&nmyF4SV2)f5vLAa zV~k_~IYrPhM0XZ}x{lX*T`Sc!yo)qV5!{i~BeU+PaPW3ByXuets^*dH8h*MAR@jAr4Q zKUa2VM8O!5Lxc$vbBqG;uC9zi7kqGrfpX0gWb3G#8}FC{feBui@ttZ^R{bkg`CNf! zROwtMR##ZLa^o2doA7ApWm=aJkW~}R$+m6b>#!{2>hFy&nNFzkN@9i$P$z)(8(v5g4T@x-TgtoG5(+L_50iL{}Acw zs{0hqX*{&1kqKpJl!F(sVM{o}Aw2Eg+;|4cdv%!*?uJg)=#ur;49%oK1dvyM@}S> zqKrw(*c|>y38NE=5s)OY6$rdv(P6jn+LU1`W5i!b%<5c;7~!Wv^>NjnP-Kw;A`uvk zsW#F?xY7G~Jhv=)`R2sH8sVlA44(wv@uZLs7D?zV=6K`|5z|Khgk}+5$BDV%^$wCwHUtGym2dZ77TG%f_IttwV4ZAYj1B& zU?M5k6X^V1`F~fP1~ymjZMxgC-?eU7Xe;EpTUPt*T6S zzq1`3xCV&{BOyZP|8=1Ad*@R|S3ZL|yXcJQyxHy2=Sz&Sb$rVxUNBDb&Y43r#=)Zg zyoxzZ37NBs)a=rm(wkYc-z*#1b+B9`Gk|8fe05cj|CsWSrO_(E5j`Fn17T*w2rWDFLr7Z(haZs&G6Yf_}MS`vKe3H_F7wf>iH z=VDaANF-5d3iPF5xNfI#jsDjk^cwo#V1M_Zx7Gh1A~gn*9FwprLe40U3QN&D!O*KZ z3|MHAYP(Tn*H7h&%!^Tzh-fk__RcfY+|^aFkG4ch4B+O*uk=0F=Sr)a6+9$KhOikf z3vZ{*)j6`6waAjGY&KI}TgU)rD5)mX21K?vF0d@+Qc*=;3;&$rMa8nWaXyTwzDqu9 z*Do^4lsOBl4X{!Qb1pr8D93m43Rx%r`@07X`QP6g>}}=$L!>qGe`9Ii znkc@fJfeKMU>aB@fh(#g+}sSa8Kd3}zs7mMs7dc|V)v3V@w$Sc9zc8IZOoz#o~U&E zFAQ}i!d>pVJB%fCeG4pFbrg&+*;PWq1+1{Io67x{?%mt8F0GdTx6$&Kr*-mwcfaBP zJLv5`-^%|7NuN#r-%bCo%m1%Z(l1h^ZB`#Tore1CIbRUpdgl}mR+X+lb(JQ%@-7#+ zs-kZfU#F;x-$wN=9<2WD0W50t(sk2SbpiQ!sgaw$puC)FM#K4{I=LEU9v>ErX0+yj zcFrh(b03h%zg6$3Ro%B%HCMa8fMw=k(rWqdK4kB6_mf*s1Z(X-&-WVge=z86&wo5f zYMlS5DUP3{yL+2yi(jFHcUEuTZT&a54l?hrigjFzf0CF%0N21NkC1EFtD-UD$v#${ z%!;ph?nW_H7f`oz(?qWlw2u9Wkh&t2Gj=ucnGZQp0ErY@gn|v>{n03Ur-_`R9@V`6 zRK-K~_KmluC7hGm0$R-n1F{w9_mDP`|H>x`y|eURFaLY{E&I>G;Q3bmKSXM%f^FBX z<|=?BG~0?>yaYHL9WS3g79WQB8Yh8VyjGlq?=(klI!jKS$*9G+^K$aGthFB4?j*#? z8BN~*eDVP$oy-eAXNzc*`Ov?noW^NvU7ky1`B(RPt3v;k(`NENTL646`+v*+)8Bi( z-T!@%^abqy{~2bWdpG#sf?wOsfNk0^-Aewu69F;u+eHUiBmejJdrkd+x8L8&{|8BR z)jmD=Q}TWE%>AD=D(TedZqR}wx&`1TCv&){1d z_5_A6>ealuvftt6#?~~0x`sbep|MU$i?qs%ytA}f(mc*wHN&+|I(I4!z9?s>ZB}fR z*gV@`7T7xV-(uBz9Oda}L+Vm~wD{FlHSVaIG-_K391&o3gUgQbN?Z!JKyJ|$mgn`C z_3FmC{$`JT3_4-(xY5@enVvuZPbxOt)&0I?ax30Lo?OU?It!P&R2#-sdX~)_l(8mE z=Wl)1WLhPt(tGld60Iy{yoq|w;>;gZk`K*@5B0CUAEMNLMCFUFj+53`CZ<{_9ieRJ z%tA#ZLh2XaxiisaYWH>`r>ah|K~wMFOIxaDg3t37y~-KXTQs=FEl=6I)QSsGFSyae zYS8Ung8raRWjhqWO6+y;P0%+sy;oq)BMz-ax*(>&O4JSb^#z<)!$;Iw(6vyr<5i@(xl!qM>%Vt#j2?(1)TR^9(*H{2%|QFnppVi#_VUacop`e4Vs`DGs%@ui=tFrX>FE0 zmqg{$Itpr0nlc*dk(<_1u>eJ#j(fGFRfO%A9%TQ$>*2H8&LyOc6Nu4KBN(6$kDfmA047<0KPT~1BZ}Uo{7@b8 zxd)Y^7sUEooJHZ!l&6==zNSgSFh;Hkt2)TH04vMWoYa|6dUX7|ju77@|^zf?D4s&i5fM@`IS!UhFtk^Rc*e)yuX#;p3z3nDVZgJ#w*ATrhpNo#BVs zk4G0a1nM7e%j;yWu3&?BUX7jG#&MtSc@Y_IDlq~7AMHI`x6S*=dY#z&81miSH)vy( zf9VdqO`nt&$^XD~c{=4n;=PoycK>Iv*Sh~_d;izNq#YO$tx<9tw$U{@T+EPzy)15@4se{hK+BI4 zi4%H>k=u*?+mis^ayAFSZB9cHBq)JVj)C{~*Eg@;op`~^liyFYkm&8ek%(i#;lt4h zL{us-m{Q%fe_buSVEm`-+Q0dW*|cl^2|LuKldKVKa~_*E`xL>lx_zz7N+>{Pj*N zcA-s z-ryR!vYrckUMqZWUZqxLcGL6I^4Ywr+&pIBP4UxEn!(fX5h8JPuvcKxWLlyyONnbZ zJ?{m(!Jq&sokB}U^Dgfa*Kk_Bn=H>)aXxP3%WhpV89)AJSSzO%wTIY{)G9DJuWnAg(~7&A$@?=^+Q>I&Gq}`DE_je2QI{VL{-?aZ640gBiA0H&` zz|pb2pf=^)=%|9j4?n$n1{X6L&VVp8AI(9{Xrfwo-CARiy~V@Zv3FfD8fs-wn3<#0 qXbTl8Xx^8c-xBQZ2K>^z*rsjTrfvF9O8*xC0RR6TL>nyth5!H~7?Ujk literal 0 HcmV?d00001 diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/.helmignore b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/.helmignore new file mode 100755 index 0000000..37ea1d7 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/.helmignore @@ -0,0 +1,22 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +OWNERS +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*~ +# Various IDEs +.project +.idea/ +*.tmproj diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/Chart.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/Chart.yaml new file mode 100755 index 0000000..0b219c7 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/Chart.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +appVersion: 0.5.0 +description: Metrics Server is a cluster-wide aggregator of resource usage data. +home: https://github.com/kubernetes-incubator/metrics-server +keywords: +- metrics-server +maintainers: +- email: o.with@sportradar.com + name: olemarkus +- email: k.aasan@sportradar.com + name: kennethaasan +name: rke2-metrics-server +sources: +- https://github.com/kubernetes-incubator/metrics-server +version: 2.11.100-build2021091503 diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/README.md b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/README.md new file mode 100755 index 0000000..678f084 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/README.md @@ -0,0 +1,39 @@ +# metrics-server + +[Metrics Server](https://github.com/kubernetes-incubator/metrics-server) is a cluster-wide aggregator of resource usage data. Resource metrics are used by components like `kubectl top` and the [Horizontal Pod Autoscaler](https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale) to scale workloads. To autoscale based upon a custom metric, see the [Prometheus Adapter chart](https://github.com/helm/charts/blob/master/stable/prometheus-adapter). + +## Configuration + +Parameter | Description | Default +--- | --- | --- +`rbac.create` | Enable Role-based authentication | `true` +`rbac.pspEnabled` | Enable pod security policy support | `false` +`serviceAccount.create` | If `true`, create a new service account | `true` +`serviceAccount.name` | Service account to be used. If not set and `serviceAccount.create` is `true`, a name is generated using the fullname template | `` +`apiService.create` | Create the v1beta1.metrics.k8s.io API service | `true` +`hostNetwork.enabled` | Enable hostNetwork mode | `false` +`image.repository` | Image repository | `k8s.gcr.io/metrics-server-amd64` +`image.tag` | Image tag | `v0.3.2` +`image.pullPolicy` | Image pull policy | `IfNotPresent` +`imagePullSecrets` | Image pull secrets | `[]` +`args` | Command line arguments | `[]` +`resources` | CPU/Memory resource requests/limits. | `{}` +`tolerations` | List of node taints to tolerate (requires Kubernetes >=1.6) | `[]` +`nodeSelector` | Node labels for pod assignment | `{}` +`affinity` | Node affinity | `{}` +`replicas` | Number of replicas | `1` +`extraVolumeMounts` | Ability to provide volume mounts to the pod | `[]` +`extraVolumes` | Ability to provide volumes to the pod | `[]` +`livenessProbe` | Container liveness probe | See values.yaml +`podLabels` | Labels to be added to pods | `{}` +`podAnnotations` | Annotations to be added to pods | `{}` +`priorityClassName` | Pod priority class | `""` +`readinessProbe` | Container readiness probe | See values.yaml +`service.annotations` | Annotations to add to the service | `{}` +`service.labels` | Labels to be added to the metrics-server service | `{}` +`service.port` | Service port to expose | `443` +`service.type` | Type of service to create | `ClusterIP` +`podDisruptionBudget.enabled` | Create a PodDisruptionBudget | `false` +`podDisruptionBudget.minAvailable` | Minimum available instances; ignored if there is no PodDisruptionBudget | +`podDisruptionBudget.maxUnavailable` | Maximum unavailable instances; ignored if there is no PodDisruptionBudget | +`extraContainers` | Add additional containers | `[]` diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/ci/ci-values.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/ci/ci-values.yaml new file mode 100755 index 0000000..a9d81b4 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/ci/ci-values.yaml @@ -0,0 +1,5 @@ +# CI is running on GKE, which already ships metrics-server. This cause +# conflicts on the apiService resource. + +apiService: + create: false diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/NOTES.txt b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/NOTES.txt new file mode 100755 index 0000000..1034c12 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/NOTES.txt @@ -0,0 +1,11 @@ +The metric server has been deployed. +{{ if .Values.apiService.create }} +In a few minutes you should be able to list metrics using the following +command: + + kubectl get --raw "/apis/metrics.k8s.io/v1beta1/nodes" +{{ else }} +NOTE: You have disabled the API service creation for this release. The metrics +API will not work with this release unless you configure the metrics API +service outside of this Helm chart. +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/_helpers.tpl b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/_helpers.tpl new file mode 100755 index 0000000..b59ca03 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/_helpers.tpl @@ -0,0 +1,59 @@ +{{/* vim: set filetype=mustache: */}} +{{/* +Expand the name of the chart. +*/}} +{{- define "metrics-server.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "metrics-server.fullname" -}} +{{- if .Values.fullnameOverride -}} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- $name := default .Chart.Name .Values.nameOverride -}} +{{- if contains $name .Release.Name -}} +{{- .Release.Name | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} +{{- end -}} +{{- end -}} +{{- end -}} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "metrics-server.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create a service name that defaults to app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +*/}} +{{- define "metrics-server.service.fullname" -}} +{{- .Values.service.nameOverride | default .Chart.Name }} +{{- end -}} + +{{/* +Create the name of the service account to use +*/}} +{{- define "metrics-server.serviceAccountName" -}} +{{- if .Values.serviceAccount.create -}} + {{ default (include "metrics-server.fullname" .) .Values.serviceAccount.name }} +{{- else -}} + {{ default "default" .Values.serviceAccount.name }} +{{- end -}} +{{- end -}} + +{{- define "system_default_registry" -}} +{{- if .Values.global.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/aggregated-metrics-reader-cluster-role.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/aggregated-metrics-reader-cluster-role.yaml new file mode 100755 index 0000000..e91a3d8 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/aggregated-metrics-reader-cluster-role.yaml @@ -0,0 +1,18 @@ +{{- if .Values.rbac.create -}} +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: system:{{ template "metrics-server.name" . }}-aggregated-reader + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} + rbac.authorization.k8s.io/aggregate-to-view: "true" + rbac.authorization.k8s.io/aggregate-to-edit: "true" + rbac.authorization.k8s.io/aggregate-to-admin: "true" +rules: + - apiGroups: ["metrics.k8s.io"] + resources: ["pods","nodes"] + verbs: ["get", "list", "watch"] +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/auth-delegator-crb.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/auth-delegator-crb.yaml new file mode 100755 index 0000000..e82fca0 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/auth-delegator-crb.yaml @@ -0,0 +1,19 @@ +{{- if .Values.rbac.create -}} +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ template "metrics-server.fullname" . }}:system:auth-delegator + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: system:auth-delegator +subjects: + - kind: ServiceAccount + name: {{ template "metrics-server.serviceAccountName" . }} + namespace: {{ .Release.Namespace }} +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/cluster-role.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/cluster-role.yaml new file mode 100755 index 0000000..8763acd --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/cluster-role.yaml @@ -0,0 +1,34 @@ +{{- if .Values.rbac.create -}} +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: system:{{ template "metrics-server.fullname" . }} + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +rules: + - apiGroups: + - "" + resources: + - pods + - nodes + - nodes/stats + - namespaces + verbs: + - get + - list + - watch + {{- if .Values.rbac.pspEnabled }} + - apiGroups: + - extensions + - policy + resources: + - podsecuritypolicies + resourceNames: + - privileged-{{ template "metrics-server.fullname" . }} + verbs: + - use + {{- end -}} +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metric-server-service.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metric-server-service.yaml new file mode 100755 index 0000000..0d64cd1 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metric-server-service.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ template "metrics-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} + {{- with .Values.service.labels -}} + {{ toYaml . | nindent 4 }} + {{- end }} + annotations: + {{- toYaml .Values.service.annotations | trim | nindent 4 }} +spec: + ports: + - port: {{ .Values.service.port }} + protocol: TCP + targetPort: https + selector: + app: {{ template "metrics-server.name" . }} + release: {{ .Release.Name }} + type: {{ .Values.service.type }} + diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-api-service.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-api-service.yaml new file mode 100755 index 0000000..0ac04e2 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-api-service.yaml @@ -0,0 +1,20 @@ +{{- if .Values.apiService.create -}} +apiVersion: apiregistration.k8s.io/v1 +kind: APIService +metadata: + name: v1beta1.metrics.k8s.io + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +spec: + service: + name: {{ template "metrics-server.fullname" . }} + namespace: {{ .Release.Namespace }} + group: metrics.k8s.io + version: v1beta1 + insecureSkipTLSVerify: true + groupPriorityMinimum: 100 + versionPriority: 100 +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-crb.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-crb.yaml new file mode 100755 index 0000000..eb04c6f --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-crb.yaml @@ -0,0 +1,19 @@ +{{- if .Values.rbac.create -}} +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: system:{{ template "metrics-server.fullname" . }} + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: system:{{ template "metrics-server.fullname" . }} +subjects: + - kind: ServiceAccount + name: {{ template "metrics-server.serviceAccountName" . }} + namespace: {{ .Release.Namespace }} +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-deployment.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-deployment.yaml new file mode 100755 index 0000000..2e54f27 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-deployment.yaml @@ -0,0 +1,88 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ template "metrics-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +spec: + selector: + matchLabels: + app: {{ template "metrics-server.name" . }} + release: {{ .Release.Name }} + replicas: {{ .Values.replicas }} + template: + metadata: + labels: + app: {{ template "metrics-server.name" . }} + release: {{ .Release.Name }} + {{- if .Values.podLabels }} +{{ toYaml .Values.podLabels | indent 8 }} + {{- end }} + {{- with .Values.podAnnotations }} + annotations: + {{- range $key, $value := . }} + {{ $key }}: {{ $value | quote }} + {{- end }} + {{- end }} + spec: + {{- if .Values.priorityClassName }} + priorityClassName: "{{ .Values.priorityClassName }}" + {{- end }} + {{- if .Values.imagePullSecrets }} + imagePullSecrets: + {{- range .Values.imagePullSecrets }} + - name: {{ . }} + {{- end }} + {{- end }} + serviceAccountName: {{ template "metrics-server.serviceAccountName" . }} +{{- if .Values.hostNetwork.enabled }} + hostNetwork: true +{{- end }} + containers: + {{- if .Values.extraContainers }} + {{- ( tpl (toYaml .Values.extraContainers) . ) | nindent 8 }} + {{- end }} + - name: metrics-server + image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }} + imagePullPolicy: {{ .Values.image.pullPolicy }} + command: + - /metrics-server + - --cert-dir=/tmp + - --logtostderr + - --secure-port=8443 + {{- range .Values.args }} + - {{ . }} + {{- end }} + ports: + - containerPort: 8443 + name: https + livenessProbe: + {{- toYaml .Values.livenessProbe | trim | nindent 12 }} + readinessProbe: + {{- toYaml .Values.readinessProbe | trim | nindent 12 }} + resources: + {{- toYaml .Values.resources | trim | nindent 12 }} + securityContext: + {{- toYaml .Values.securityContext | trim | nindent 12 }} + volumeMounts: + - name: tmp + mountPath: /tmp + {{- with .Values.extraVolumeMounts }} + {{- toYaml . | nindent 10 }} + {{- end }} + nodeSelector: + {{- toYaml .Values.nodeSelector | trim | nindent 8 }} + affinity: + {{- toYaml .Values.affinity | trim | nindent 8 }} + tolerations: + {{- toYaml .Values.tolerations | trim | nindent 8 }} + volumes: + - name: tmp + emptyDir: {} + {{- with .Values.extraVolumes }} + {{- toYaml . | nindent 6}} + {{- end }} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-serviceaccount.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-serviceaccount.yaml new file mode 100755 index 0000000..4d748ed --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/metrics-server-serviceaccount.yaml @@ -0,0 +1,12 @@ +{{- if .Values.serviceAccount.create -}} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ template "metrics-server.serviceAccountName" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/pdb.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/pdb.yaml new file mode 100755 index 0000000..3831097 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/pdb.yaml @@ -0,0 +1,23 @@ +{{- if .Values.podDisruptionBudget.enabled -}} +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} + name: {{ template "metrics-server.fullname" . }} + namespace: {{ .Release.Namespace }} + +spec: + {{- if .Values.podDisruptionBudget.minAvailable }} + minAvailable: {{ .Values.podDisruptionBudget.minAvailable }} + {{- end }} + {{- if .Values.podDisruptionBudget.maxUnavailable }} + maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} + {{- end }} + selector: + matchLabels: + app: {{ template "metrics-server.name" . }} +{{- end -}} \ No newline at end of file diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/psp.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/psp.yaml new file mode 100755 index 0000000..b5cb7da --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/psp.yaml @@ -0,0 +1,26 @@ +{{- if .Values.rbac.pspEnabled }} +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: privileged-{{ template "metrics-server.fullname" . }} +spec: + allowedCapabilities: + - '*' + fsGroup: + rule: RunAsAny + privileged: true + runAsUser: + rule: RunAsAny + seLinux: + rule: RunAsAny + supplementalGroups: + rule: RunAsAny + volumes: + - '*' + hostPID: true + hostIPC: true + hostNetwork: true + hostPorts: + - min: 1 + max: 65536 +{{- end }} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/role-binding.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/role-binding.yaml new file mode 100755 index 0000000..3169f24 --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/role-binding.yaml @@ -0,0 +1,20 @@ +{{- if .Values.rbac.create -}} +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ template "metrics-server.fullname" . }}-auth-reader + namespace: kube-system + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: extension-apiserver-authentication-reader +subjects: + - kind: ServiceAccount + name: {{ template "metrics-server.serviceAccountName" . }} + namespace: {{ .Release.Namespace }} +{{- end -}} diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/tests/test-version.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/tests/test-version.yaml new file mode 100755 index 0000000..3648e6d --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/templates/tests/test-version.yaml @@ -0,0 +1,21 @@ +apiVersion: v1 +kind: Pod +metadata: + name: {{ template "metrics-server.fullname" . }}-test + labels: + app: {{ template "metrics-server.name" . }} + chart: {{ template "metrics-server.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} + annotations: + "helm.sh/hook": test-success +spec: + containers: + - name: wget + image: busybox + command: ['/bin/sh'] + args: + - -c + - 'wget -qO- https://{{ include "metrics-server.fullname" . }}:{{ .Values.service.port }}/version | grep -F {{ .Values.image.tag }}' + restartPolicy: Never + diff --git a/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/values.yaml b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/values.yaml new file mode 100755 index 0000000..6139d0f --- /dev/null +++ b/charts/rke2-metrics-server/rke2-metrics-server/2.11.100-build2021091503/values.yaml @@ -0,0 +1,114 @@ +rbac: + # Specifies whether RBAC resources should be created + create: true + pspEnabled: false + +serviceAccount: + # Specifies whether a ServiceAccount should be created + create: true + # The name of the ServiceAccount to use. + # If not set and create is true, a name is generated using the fullname template + name: + +apiService: + # Specifies if the v1beta1.metrics.k8s.io API service should be created. + # + # You typically want this enabled! If you disable API service creation you have to + # manage it outside of this chart for e.g horizontal pod autoscaling to + # work with this release. + create: true + +hostNetwork: + # Specifies if metrics-server should be started in hostNetwork mode. + # + # You would require this enabled if you use alternate overlay networking for pods and + # API server unable to communicate with metrics-server. As an example, this is required + # if you use Weave network on EKS + enabled: false + +image: + repository: rancher/hardened-k8s-metrics-server + tag: v0.5.0-build20210915 + pullPolicy: IfNotPresent + +imagePullSecrets: [] +# - registrySecretName + +args: +# enable this if you have self-signed certificates, see: https://github.com/kubernetes-incubator/metrics-server +# - --kubelet-insecure-tls + - --kubelet-preferred-address-types=InternalIP + +resources: {} + +nodeSelector: + kubernetes.io/os: linux + +tolerations: [] + +affinity: {} + +replicas: 1 + +extraContainers: [] + +podLabels: {} + +podAnnotations: {} +# The following annotations guarantee scheduling for critical add-on pods. +# See more at: https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/ +# scheduler.alpha.kubernetes.io/critical-pod: '' + +## Set a pod priorityClassName +priorityClassName: system-node-critical + +extraVolumeMounts: [] +# - name: secrets +# mountPath: /etc/kubernetes/secrets +# readOnly: true + +extraVolumes: [] +# - name: secrets +# secret: +# secretName: kube-apiserver + +livenessProbe: + httpGet: + path: /healthz + port: https + scheme: HTTPS + initialDelaySeconds: 20 + +readinessProbe: + httpGet: + path: /healthz + port: https + scheme: HTTPS + initialDelaySeconds: 20 + +securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: ["all"] + readOnlyRootFilesystem: true + runAsGroup: 10001 + runAsNonRoot: true + runAsUser: 10001 + +service: + annotations: {} + labels: {} + # Add these labels to have metrics-server show up in `kubectl cluster-info` + # kubernetes.io/cluster-service: "true" + # kubernetes.io/name: "Metrics-server" + port: 443 + type: ClusterIP + +podDisruptionBudget: + # https://kubernetes.io/docs/tasks/run-application/configure-pdb/ + enabled: false + minAvailable: + maxUnavailable: + +global: + systemDefaultRegistry: "" diff --git a/index.yaml b/index.yaml index 3fa10d8..d464002 100755 --- a/index.yaml +++ b/index.yaml @@ -2459,6 +2459,25 @@ entries: urls: - assets/rke2-metrics-server/rke2-metrics-server-2.11.100.tgz version: 2.11.100 + - apiVersion: v1 + appVersion: 0.5.0 + created: "2021-10-01T19:07:35.360915886Z" + description: Metrics Server is a cluster-wide aggregator of resource usage data. + digest: dfab8d9bb42380aff0e754a1f85ef6e92547f7141c38cba8a142cb16d4bc20bd + home: https://github.com/kubernetes-incubator/metrics-server + keywords: + - metrics-server + maintainers: + - email: o.with@sportradar.com + name: olemarkus + - email: k.aasan@sportradar.com + name: kennethaasan + name: rke2-metrics-server + sources: + - https://github.com/kubernetes-incubator/metrics-server + urls: + - assets/rke2-metrics-server/rke2-metrics-server-2.11.100-build2021091503.tgz + version: 2.11.100-build2021091503 - apiVersion: v1 appVersion: 0.3.6 created: "2021-08-19T18:31:37.450618192Z"