From 091bb70133cd611ed819423687019a7fbbce3d51 Mon Sep 17 00:00:00 2001 From: Prateek Pandey Date: Fri, 24 May 2019 04:04:21 +0530 Subject: [PATCH] [stable/openebs] update charts to 0.9.0 release (#14102) - Updated README - Updated chart version - Updated values.yaml - Added admission-webhook and localprovisioner deployment - Added webhook configuration and required service and secrets Signed-off-by: prateekpandey14 --- stable/openebs/Chart.yaml | 4 +- stable/openebs/README.md | 31 ++++---- stable/openebs/templates/clusterrole.yaml | 7 +- stable/openebs/templates/daemonset-ndm.yaml | 1 + .../deployment-admission-server.yaml | 54 ++++++++++++++ .../deployment-local-provisioner.yaml | 72 +++++++++++++++++++ .../templates/deployment-maya-apiserver.yaml | 10 +-- .../deployment-maya-provisioner.yaml | 3 +- .../deployment-maya-snapshot-operator.yaml | 1 + .../templates/service-admission-server.yaml | 15 ++++ .../openebs/templates/validationwebhook.yaml | 60 ++++++++++++++++ stable/openebs/values.yaml | 47 +++++++++--- 12 files changed, 272 insertions(+), 33 deletions(-) create mode 100644 stable/openebs/templates/deployment-admission-server.yaml create mode 100644 stable/openebs/templates/deployment-local-provisioner.yaml create mode 100644 stable/openebs/templates/service-admission-server.yaml create mode 100644 stable/openebs/templates/validationwebhook.yaml diff --git a/stable/openebs/Chart.yaml b/stable/openebs/Chart.yaml index 965c9a980b..8c0c4f5594 100644 --- a/stable/openebs/Chart.yaml +++ b/stable/openebs/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v1 -version: 0.8.6 +version: 0.9.0 name: openebs -appVersion: 0.8.2 +appVersion: 0.9.0 description: Containerized Storage for Containers icon: https://raw.githubusercontent.com/openebs/chitrakala/master/OpenEBS%20logo/logo-square.png home: http://www.openebs.io/ diff --git a/stable/openebs/README.md b/stable/openebs/README.md index c1c8d88595..93120a29b8 100644 --- a/stable/openebs/README.md +++ b/stable/openebs/README.md @@ -40,37 +40,44 @@ The following table lists the configurable parameters of the OpenEBS chart and t | `rbac.create` | Enable RBAC Resources | `true` | | `image.pullPolicy` | Container pull policy | `IfNotPresent` | | `apiserver.image` | Image for API Server | `quay.io/openebs/m-apiserver` | -| `apiserver.imageTag` | Image Tag for API Server | `0.8.2` | +| `apiserver.imageTag` | Image Tag for API Server | `0.9.0` | | `apiserver.replicas` | Number of API Server Replicas | `1` | +| `apiserver.sparse.enabled` | Create Sparse Pool based on Sparsefile | `false` | | `provisioner.image` | Image for Provisioner | `quay.io/openebs/openebs-k8s-provisioner` | -| `provisioner.imageTag` | Image Tag for Provisioner | `0.8.2` | +| `provisioner.imageTag` | Image Tag for Provisioner | `0.9.0` | | `provisioner.replicas` | Number of Provisioner Replicas | `1` | +| `localProvisioner.image` | Image for localProvisioner | `quay.io/openebs/provisioner-localpv` | +| `localProvisioner.imageTag` | Image Tag for localProvisioner | `0.9.0` | +| `localProvisioner.replicas` | Number of localProvisioner Replicas | `1` | +| `localProvisioner.basePath` | BasePath for hostPath volumes on Nodes | `/var/openebs/local` | +| `webhook.image` | Image for admision server | `quay.io/openebs/admission-server` | +| `webhook.imageTag` | Image Tag for admission server | `0.9.0` | +| `webhook.replicas` | Number of admission server Replicas | `1` | | `snapshotOperator.provisioner.image` | Image for Snapshot Provisioner | `quay.io/openebs/snapshot-provisioner` | -| `snapshotOperator.provisioner.imageTag` | Image Tag for Snapshot Provisioner | `0.8.2` | +| `snapshotOperator.provisioner.imageTag` | Image Tag for Snapshot Provisioner | `0.9.0` | | `snapshotOperator.controller.image` | Image for Snapshot Controller | `quay.io/openebs/snapshot-controller` | -| `snapshotOperator.controller.imageTag` | Image Tag for Snapshot Controller | `0.8.2` | +| `snapshotOperator.controller.imageTag` | Image Tag for Snapshot Controller | `0.9.0` | | `snapshotOperator.replicas` | Number of Snapshot Operator Replicas | `1` | -| `ndm.image` | Image for Node Disk Manager | `quay.io/openebs/openebs/node-disk-manager-amd64` | +| `ndm.image` | Image for Node Disk Manager | `quay.io/openebs/node-disk-manager-amd64` | | `ndm.imageTag` | Image Tag for Node Disk Manager | `v0.3.5` | -| `ndm.sparse.enabled` | Create Sparse files and cStor Sparse Pool | `true` | | `ndm.sparse.path` | Directory where Sparse files are created | `/var/openebs/sparse` | | `ndm.sparse.size` | Size of the sparse file in bytes | `10737418240` | | `ndm.sparse.count` | Number of sparse files to be created | `1` | | `ndm.filters.excludeVendors` | Exclude devices with specified vendor | `CLOUDBYT,OpenEBS` | | `ndm.filters.excludePaths` | Exclude devices with specified path patterns | `loop,fd0,sr0,/dev/ram,/dev/dm-,/dev/md` | | `jiva.image` | Image for Jiva | `quay.io/openebs/jiva` | -| `jiva.imageTag` | Image Tag for Jiva | `0.8.2` | +| `jiva.imageTag` | Image Tag for Jiva | `0.9.0` | | `jiva.replicas` | Number of Jiva Replicas | `3` | | `cstor.pool.image` | Image for cStor Pool | `quay.io/openebs/cstor-pool` | -| `cstor.pool.imageTag` | Image Tag for cStor Pool | `0.8.2` | +| `cstor.pool.imageTag` | Image Tag for cStor Pool | `0.9.0` | | `cstor.poolMgmt.image` | Image for cStor Pool Management | `quay.io/openebs/cstor-pool-mgmt` | -| `cstor.poolMgmt.imageTag` | Image Tag for cStor Pool Management | `0.8.2` | +| `cstor.poolMgmt.imageTag` | Image Tag for cStor Pool Management | `0.9.0` | | `cstor.target.image` | Image for cStor Target | `quay.io/openebs/cstor-istgt` | -| `cstor.target.imageTag` | Image Tag for cStor Target | `0.8.2` | +| `cstor.target.imageTag` | Image Tag for cStor Target | `0.9.0` | | `cstor.volumeMgmt.image` | Image for cStor Volume Management | `quay.io/openebs/cstor-volume-mgmt` | -| `cstor.volumeMgmt.imageTag` | Image Tag for cStor Volume Management | `0.8.2` | +| `cstor.volumeMgmt.imageTag` | Image Tag for cStor Volume Management | `0.9.0` | | `policies.monitoring.image` | Image for Prometheus Exporter | `quay.io/openebs/m-exporter` | -| `policies.monitoring.imageTag` | Image Tag for Prometheus Exporter | `0.8.2` | +| `policies.monitoring.imageTag` | Image Tag for Prometheus Exporter | `0.9.0` | | `analytics.enabled` | Enable sending stats to Google Analytics | `true` | | `analytics.pingInterval` | Duration(hours) between sending ping stat | `24h` | | `HealthCheck.initialDelaySeconds` | Delay before liveness probe is initiated | `30` | | 30 | diff --git a/stable/openebs/templates/clusterrole.yaml b/stable/openebs/templates/clusterrole.yaml index 9eb3f75716..6a6fadb340 100644 --- a/stable/openebs/templates/clusterrole.yaml +++ b/stable/openebs/templates/clusterrole.yaml @@ -28,13 +28,16 @@ rules: resources: [ "disks"] verbs: ["*" ] - apiGroups: ["*"] - resources: [ "storagepoolclaims", "storagepools"] + resources: [ "storagepoolclaims", "storagepoolclaims/finalizers","storagepools"] verbs: ["*" ] - apiGroups: ["*"] resources: [ "castemplates", "runtasks"] verbs: ["*" ] - apiGroups: ["*"] - resources: [ "cstorpools", "cstorvolumereplicas", "cstorvolumes"] + resources: [ "cstorpools", "cstorpools/finalizers", "cstorvolumereplicas", "cstorvolumes"] + verbs: ["*" ] +- apiGroups: ["*"] + resources: [ "cstorbackups", "cstorrestores", "cstorcompletedbackups"] verbs: ["*" ] - nonResourceURLs: ["/metrics"] verbs: ["get"] diff --git a/stable/openebs/templates/daemonset-ndm.yaml b/stable/openebs/templates/daemonset-ndm.yaml index 37e288b24d..d278c9e3a0 100644 --- a/stable/openebs/templates/daemonset-ndm.yaml +++ b/stable/openebs/templates/daemonset-ndm.yaml @@ -23,6 +23,7 @@ spec: app: {{ template "openebs.name" . }} release: {{ .Release.Name }} component: ndm + openebs.io/version: {{ .Values.release.version }} spec: serviceAccountName: {{ template "openebs.serviceAccountName" . }} hostNetwork: true diff --git a/stable/openebs/templates/deployment-admission-server.yaml b/stable/openebs/templates/deployment-admission-server.yaml new file mode 100644 index 0000000000..95aafe1fa6 --- /dev/null +++ b/stable/openebs/templates/deployment-admission-server.yaml @@ -0,0 +1,54 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ template "openebs.fullname" . }}-admission-server + labels: + app: admission-webhook + chart: {{ template "openebs.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} + component: admission-webhook + name: admission-webhook + openebs.io/component-name: maya-apiserver +spec: + replicas: {{ .Values.webhook.replicas }} + selector: + matchLabels: + app: admission-webhook + template: + metadata: + labels: + app: admission-webhook + openebs.io/version: {{ .Values.release.version }} + spec: +{{- if .Values.webhook.nodeSelector }} + nodeSelector: +{{ toYaml .Values.webhook.nodeSelector | indent 8 }} +{{- end }} +{{- if .Values.webhook.tolerations }} + tolerations: +{{ toYaml .Values.webhook.tolerations | indent 8 }} +{{- end }} +{{- if .Values.webhook.affinity }} + affinity: +{{ toYaml .Values.webhook.affinity | indent 8 }} +{{- end }} + serviceAccountName: {{ template "openebs.serviceAccountName" . }} + containers: + - name: admission-webhook + image: "{{ .Values.webhook.image }}:{{ .Values.webhook.imageTag }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + args: + - -tlsCertFile=/etc/webhook/certs/cert.pem + - -tlsKeyFile=/etc/webhook/certs/key.pem + - -alsologtostderr + - -v=8 + - 2>&1 + volumeMounts: + - name: webhook-certs + mountPath: /etc/webhook/certs + readOnly: true + volumes: + - name: webhook-certs + secret: + secretName: admission-server-certs diff --git a/stable/openebs/templates/deployment-local-provisioner.yaml b/stable/openebs/templates/deployment-local-provisioner.yaml new file mode 100644 index 0000000000..82d95c78e5 --- /dev/null +++ b/stable/openebs/templates/deployment-local-provisioner.yaml @@ -0,0 +1,72 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ template "openebs.fullname" . }}-localpv-provisioner + labels: + app: {{ template "openebs.name" . }} + chart: {{ template "openebs.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} + component: localpv-provisioner + openebs.io/component-name: openebs-localpv-provisioner +spec: + replicas: {{ .Values.provisioner.replicas }} + selector: + matchLabels: + app: {{ template "openebs.name" . }} + release: {{ .Release.Name }} + template: + metadata: + labels: + app: {{ template "openebs.name" . }} + release: {{ .Release.Name }} + component: localpv-provisioner + openebs.io/version: {{ .Values.release.version }} + spec: + serviceAccountName: {{ template "openebs.serviceAccountName" . }} + containers: + - name: {{ template "openebs.name" . }}-localpv-provisioner + image: "{{ .Values.localprovisioner.image }}:{{ .Values.localprovisioner.imageTag }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + env: + # OPENEBS_IO_K8S_MASTER enables openebs provisioner to connect to K8s + # based on this address. This is ignored if empty. + # This is supported for openebs provisioner version 0.5.2 onwards + #- name: OPENEBS_IO_K8S_MASTER + # value: "http://10.128.0.12:8080" + # OPENEBS_IO_KUBE_CONFIG enables openebs provisioner to connect to K8s + # based on this config. This is ignored if empty. + # This is supported for openebs provisioner version 0.5.2 onwards + #- name: OPENEBS_IO_KUBE_CONFIG + # value: "/home/ubuntu/.kube/config" + # OPENEBS_NAMESPACE is the namespace that this provisioner will + # lookup to find maya api service + - name: OPENEBS_NAMESPACE + value: "{{ .Release.Namespace }}" + - name: NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + # OPENEBS_IO_BASE_PATH is the environment variable that provides the + # default base path on the node where host-path PVs will be provisioned. + - name: OPENEBS_IO_BASE_PATH + value: "{{ .Values.localprovisioner.basePath }}" + livenessProbe: + exec: + command: + - pgrep + - ".*localpv" + initialDelaySeconds: {{ .Values.localprovisioner.healthCheck.initialDelaySeconds }} + periodSeconds: {{ .Values.localprovisioner.healthCheck.periodSeconds }} +{{- if .Values.localprovisioner.nodeSelector }} + nodeSelector: +{{ toYaml .Values.localprovisioner.nodeSelector | indent 8 }} +{{- end }} +{{- if .Values.localprovisioner.tolerations }} + tolerations: +{{ toYaml .Values.localprovisioner.tolerations | indent 8 }} +{{- end }} +{{- if .Values.localprovisioner.affinity }} + affinity: +{{ toYaml .Values.localprovisioner.affinity | indent 8 }} +{{- end }} diff --git a/stable/openebs/templates/deployment-maya-apiserver.yaml b/stable/openebs/templates/deployment-maya-apiserver.yaml index 6d0904981d..5414ee3087 100644 --- a/stable/openebs/templates/deployment-maya-apiserver.yaml +++ b/stable/openebs/templates/deployment-maya-apiserver.yaml @@ -22,6 +22,8 @@ spec: app: {{ template "openebs.name" . }} release: {{ .Release.Name }} component: apiserver + name: maya-apiserver + openebs.io/version: {{ .Values.release.version }} spec: serviceAccountName: {{ template "openebs.serviceAccountName" . }} containers: @@ -41,15 +43,11 @@ spec: # This is supported for maya api server version 0.5.2 onwards #- name: OPENEBS_IO_K8S_MASTER # value: "http://172.28.128.3:8080" -{{- if .Values.ndm.sparse }} -{{- if .Values.ndm.sparse.enabled }} # OPENEBS_IO_INSTALL_DEFAULT_CSTOR_SPARSE_POOL decides whether default cstor sparse pool should be # configured as a part of openebs installation. # If "true" a default cstor sparse pool will be configured, if "false" it will not be configured. - name: OPENEBS_IO_INSTALL_DEFAULT_CSTOR_SPARSE_POOL - value: "{{ .Values.ndm.sparse.enabled }}" -{{- end }} -{{- end }} + value: "{{ .Values.apiserver.sparse.enabled }}" # OPENEBS_NAMESPACE provides the namespace of this deployment as an # environment variable - name: OPENEBS_NAMESPACE @@ -84,6 +82,8 @@ spec: value: "{{ .Values.cstor.volumeMgmt.image }}:{{ .Values.cstor.volumeMgmt.imageTag }}" - name: OPENEBS_IO_VOLUME_MONITOR_IMAGE value: "{{ .Values.policies.monitoring.image }}:{{ .Values.policies.monitoring.imageTag }}" + - name: OPENEBS_IO_CSTOR_POOL_EXPORTER_IMAGE + value: "{{ .Values.policies.monitoring.image }}:{{ .Values.policies.monitoring.imageTag }}" # OPENEBS_IO_ENABLE_ANALYTICS if set to true sends anonymous usage # events to Google Analytics - name: OPENEBS_IO_ENABLE_ANALYTICS diff --git a/stable/openebs/templates/deployment-maya-provisioner.yaml b/stable/openebs/templates/deployment-maya-provisioner.yaml index ccb652268d..7e3ba6de4f 100644 --- a/stable/openebs/templates/deployment-maya-provisioner.yaml +++ b/stable/openebs/templates/deployment-maya-provisioner.yaml @@ -21,6 +21,7 @@ spec: app: {{ template "openebs.name" . }} release: {{ .Release.Name }} component: provisioner + openebs.io/version: {{ .Values.release.version }} spec: serviceAccountName: {{ template "openebs.serviceAccountName" . }} containers: @@ -47,7 +48,7 @@ spec: fieldRef: fieldPath: spec.nodeName # OPENEBS_MAYA_SERVICE_NAME provides the maya-apiserver K8s service name, - # that provisioner should forward the volume creaet/delete requests. + # that provisioner should forward the volume create/delete requests. # If not present, "maya-apiserver-service" will be used for lookup. # This is supported for openebs provisioner version 0.5.3-RC1 onwards - name: OPENEBS_MAYA_SERVICE_NAME diff --git a/stable/openebs/templates/deployment-maya-snapshot-operator.yaml b/stable/openebs/templates/deployment-maya-snapshot-operator.yaml index 7a012536c4..270554eda4 100644 --- a/stable/openebs/templates/deployment-maya-snapshot-operator.yaml +++ b/stable/openebs/templates/deployment-maya-snapshot-operator.yaml @@ -23,6 +23,7 @@ spec: app: {{ template "openebs.name" . }} release: {{ .Release.Name }} component: snapshot-operator + openebs.io/version: {{ .Values.release.version }} spec: serviceAccountName: {{ template "openebs.serviceAccountName" . }} containers: diff --git a/stable/openebs/templates/service-admission-server.yaml b/stable/openebs/templates/service-admission-server.yaml new file mode 100644 index 0000000000..4bb77cf96c --- /dev/null +++ b/stable/openebs/templates/service-admission-server.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Service +metadata: + name: admission-server-svc + labels: + app: admission-webhook + chart: {{ template "openebs.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +spec: + ports: + - port: 443 + targetPort: 443 + selector: + app: admission-webhook diff --git a/stable/openebs/templates/validationwebhook.yaml b/stable/openebs/templates/validationwebhook.yaml new file mode 100644 index 0000000000..5089aee11e --- /dev/null +++ b/stable/openebs/templates/validationwebhook.yaml @@ -0,0 +1,60 @@ +{{- $ca := genCA "admission-server-ca" 3650 }} +{{- $cn := printf "admission-server-svc" }} +{{- $altName1 := printf "admission-server-svc.%s" .Release.Namespace }} +{{- $altName2 := printf "admission-server-svc.%s.svc" .Release.Namespace }} +{{- $cert := genSignedCert $cn nil (list $altName1 $altName2) 3650 $ca }} +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: ValidatingWebhookConfiguration +metadata: + name: openebs-validation-webhook-cfg + labels: + app: {{ template "openebs.name" . }} + chart: {{ template "openebs.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} + component: admission-webhook +webhooks: + - name: admission-webhook.openebs.io + clientConfig: + service: + name: admission-server-svc + namespace: {{ .Release.Namespace }} + path: "/validate" +{{- if .Values.webhook.generateTLS }} + caBundle: {{ b64enc $ca.Cert }} +{{- else }} + caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURpekNDQW5PZ0F3SUJBZ0lKQUk5NG9wdWdKb1drTUEwR0NTcUdTSWIzRFFFQkN3VUFNRnd4Q3pBSkJnTlYKQkFZVEFuaDRNUW93Q0FZRFZRUUlEQUY0TVFvd0NBWURWUVFIREFGNE1Rb3dDQVlEVlFRS0RBRjRNUW93Q0FZRApWUVFMREFGNE1Rc3dDUVlEVlFRRERBSmpZVEVRTUE0R0NTcUdTSWIzRFFFSkFSWUJlREFlRncweE9UQXpNREl3Ck56TXlOREZhRncweU1EQXpNREV3TnpNeU5ERmFNRnd4Q3pBSkJnTlZCQVlUQW5oNE1Rb3dDQVlEVlFRSURBRjQKTVFvd0NBWURWUVFIREFGNE1Rb3dDQVlEVlFRS0RBRjRNUW93Q0FZRFZRUUxEQUY0TVFzd0NRWURWUVFEREFKagpZVEVRTUE0R0NTcUdTSWIzRFFFSkFSWUJlRENDQVNJd0RRWUpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DCmdnRUJBT0pxNmI2dnI0cDMzM3FRaHJQbmNCVFVIUE1ESnJtaEYvOU44NjZodzFvOGZLclFwNkJmRkcvZEQ0N2gKVGcvWnJ0U2VHT0NoRjFxSEk1dGp3SlVEeGphSUM3U0FkZGpxb1pJUGFoT1pjVlpxZE1POVVFTlFUbktIRXczVQpCUjJUaHdydi9QTTRxZitUazdRa1J6Y2VJQXg1VS9lbUlEV2t4NEk3RlRYQk1XT1hGUTNoRlFtWFppZHpHN21mCnZJTlhYN0krOHR3QVM0alNSdGhxYjVUTzMwYmpxQTFzY0RRdXlZU2R6OVg5TGw1WU1QSUtSZHpnYUR1d1Q5QkQKZjNxT1VqazN6M1FZd0IvWmowaXJtQlpKejJla0V3a1QxbWlyUHF2NTA5QVJ5V1U2QUlSSTN6dnB6S2tWeFJUaApmcUROa1M5SmRRV1Q3RW9vN2lITmRtZlhOYmtDQXdFQUFhTlFNRTR3SFFZRFZSME9CQllFRk1ORzZGeGlMYWFmCjFld2w1RDd1SXJiK0UrSE9NQjhHQTFVZEl3UVlNQmFBRk1ORzZGeGlMYWFmMWV3bDVEN3VJcmIrRStIT01Bd0cKQTFVZEV3UUZNQU1CQWY4d0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFHQnYxeC92OWRnWU1ZY1h5TU9MUUNENgpVZWNsS3YzSFRTVGUybXZQcTZoTW56K0ExOGF6RWhPU0xONHZuQUNSd2pzRmVobWIrWk9wMVlYWDkzMi9OckRxCk1XUmh1bENiblFndjlPNVdHWXBDQUR1dnBBMkwyT200aU50S0FucUpGNm5ubHI1UFdQZnVJelB1eVlvQUpKRDkKSFpZRjVwa2hac0EwdDlUTDFuUmdPbFY4elZ0eUg2TTVDWm5nSEpjWG9CWlVvSlBvcGJsc3BpUnh6dzBkMUU0SgpUVmVHaXZFa0RJNFpFYTVuTzZyTUZzcXJ1L21ydVQwN1FCaWd5ZzlEY3h0QU5TUTczQUhOemNRUWpZMWg3L2RiCmJ6QXQ2aWxNZXZKc2lpVFlGYjRPb0dIVW53S2tTQUJuazFNQW5oUUhvYUNuS2dXZE1vU3orQWVuYkhzYXJSMD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= +{{- end }} + rules: + - operations: [ "CREATE", "DELETE" ] + apiGroups: ["*"] + apiVersions: ["*"] + resources: ["persistentvolumeclaims"] +--- +apiVersion: v1 +kind: Secret +metadata: + name: admission-server-certs + namespace: {{ .Release.Namespace }} + labels: + app: {{ template "openebs.name" . }} + chart: {{ template "openebs.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} + # Helm hook annotations in order to ensure that the certs + # will only be generated on chart install. This will + # prevent overriding the certs anytime we upgrade the chart’s + # released instance. + annotations: + "helm.sh/hook": "pre-install" + "helm.sh/hook-delete-policy": "before-hook-creation" +type: Opaque +data: +{{- if .Values.webhook.generateTLS }} + cert.pem: {{ b64enc $cert.Cert }} + key.pem: {{ b64enc $cert.Key }} +{{- else }} + cert.pem: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUQ3VENDQXRXZ0F3SUJBZ0lVYk84NS9JR0ZXYTA2Vm11WVdTWjdxaTUybmRRd0RRWUpLb1pJaHZjTkFRRUwKQlFBd1hERUxNQWtHQTFVRUJoTUNlSGd4Q2pBSUJnTlZCQWdNQVhneENqQUlCZ05WQkFjTUFYZ3hDakFJQmdOVgpCQW9NQVhneENqQUlCZ05WQkFzTUFYZ3hDekFKQmdOVkJBTU1BbU5oTVJBd0RnWUpLb1pJaHZjTkFRa0JGZ0Y0Ck1CNFhEVEU1TURNd01qQTNNek13TUZvWERUSXdNRE13TVRBM01qYzFNbG93S3pFcE1DY0dBMVVFQXhNZ1lXUnQKYVhOemFXOXVMWE5sY25abGNpMXpkbU11YjNCbGJtVmljeTV6ZG1Nd2dnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQQpBNElCRHdBd2dnRUtBb0lCQVFERk5MRE1xKzd6eFZidDNPcnFhaVUyOFB6K25ZeFRCblA0NVhFWGFjSUpPWG1aClM1c2ZjMjM3WVNWS0I5Tlp4cXNYT08wcXpWb0xtNlZ0UDJjREpWZGZIVUQ0QXBZSC94UVBVTktrcFg3K0NVTFEKZ3VBNWowOXozdkFaeDJidXBTaXFFdE1mVldqNkh5V0Jyd2FuZW9IaVVXVVdpbmtnUXpCQzR1SWtiRkE2djYrZwp4ZzAwS09TY2NFRWY3eU5McjBvejBKVHRpRm1aS1pVVVBwK3N3WTRpRTZ3RER5bVVnTmY4SW8wUEExVkQ1TE9vCkFwQ0l2WDJyb1RNd3VkR1VrZUc1VTA2OWIrMWtQMEJsUWdDZk9TQTBmZEN3Snp0aWE1aHpaUlVIWGxFOVArN0kKekgyR0xXeHh1aHJPTlFmT25HcVRiUE13UmowekZIdmcycUo1azJ2VkFnTUJBQUdqZ2Rjd2dkUXdEZ1lEVlIwUApBUUgvQkFRREFnV2dNQk1HQTFVZEpRUU1NQW9HQ0NzR0FRVUZCd01CTUF3R0ExVWRFd0VCL3dRQ01BQXdIUVlEClZSME9CQllFRklnOVFSOSsyVW12THQwQXY4MlYwZml0bU81WE1COEdBMVVkSXdRWU1CYUFGTU5HNkZ4aUxhYWYKMWV3bDVEN3VJcmIrRStIT01GOEdBMVVkRVFSWU1GYUNGR0ZrYldsemMybHZiaTF6WlhKMlpYSXRjM1pqZ2h4aApaRzFwYzNOcGIyNHRjMlZ5ZG1WeUxYTjJZeTV2Y0dWdVpXSnpnaUJoWkcxcGMzTnBiMjR0YzJWeWRtVnlMWE4yCll5NXZjR1Z1WldKekxuTjJZekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBSlpJRzd2d0RYaWxhWUFCS1Brc0oKZVJtdml4ZnYybTRVTVdzdlBKVVVJTXhHbzhtc1J6aWhBRjVuTExzaURKRDl4MjhraXZXaGUwbWE4aWVHYjY5Sgp1U1N4bys0OStaV3NVaTB3UlRDMi9ZWGlkWS9xNDU2c1g4ck9qQURDZlFUcFpYc2ZyekVWa2Q4NE0zdU5GTmhnCnMyWmxJMnNDTWljYXExNWxIWEh3akFkY2FqZit1VklwOXNHUElsMUhmZFcxWVFLc0NoU3dhdi80NUZJcFlMSVYKM3hiS2ZIbmh2czhJck5ZbTVIenAvVVdvcFN1Tm5tS1IwWGo3cXpGcllUYzV3eHZ3VVZrKzVpZFFreWMwZ0RDcApGbkFVdEdmaUVUQnBhU3pISjQ4STZqUFpneVE0NzlZMmRxRUtXcWtyc0RkZ2tVcXlnNGlQQ0YwWC9YVU9YU3VGClNnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= + key.pem: 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 +{{- end }} diff --git a/stable/openebs/values.yaml b/stable/openebs/values.yaml index d02fa7c0aa..07cbceb883 100644 --- a/stable/openebs/values.yaml +++ b/stable/openebs/values.yaml @@ -10,16 +10,22 @@ serviceAccount: create: true name: +release: + # "openebs.io/version" label for control plane components + version: "0.9.0" + image: pullPolicy: IfNotPresent apiserver: image: "quay.io/openebs/m-apiserver" - imageTag: "0.8.2" + imageTag: "0.9.0" replicas: 1 ports: externalPort: 5656 internalPort: 5656 + sparse: + enabled: "false" nodeSelector: {} tolerations: [] affinity: {} @@ -29,7 +35,18 @@ apiserver: provisioner: image: "quay.io/openebs/openebs-k8s-provisioner" - imageTag: "0.8.2" + imageTag: "0.9.0" + replicas: 1 + nodeSelector: {} + tolerations: [] + affinity: {} + healthCheck: + initialDelaySeconds: 30 + periodSeconds: 60 + +localprovisioner: + image: "quay.io/openebs/provisioner-localpv" + imageTag: "0.9.0" replicas: 1 nodeSelector: {} tolerations: [] @@ -41,10 +58,10 @@ provisioner: snapshotOperator: controller: image: "quay.io/openebs/snapshot-controller" - imageTag: "0.8.2" + imageTag: "0.9.0" provisioner: image: "quay.io/openebs/snapshot-provisioner" - imageTag: "0.8.2" + imageTag: "0.9.0" replicas: 1 upgradeStrategy: "Recreate" nodeSelector: {} @@ -58,7 +75,6 @@ ndm: image: "quay.io/openebs/node-disk-manager-amd64" imageTag: "v0.3.5" sparse: - enabled: "true" path: "/var/openebs/sparse" size: "10737418240" count: "1" @@ -70,30 +86,39 @@ ndm: initialDelaySeconds: 30 periodSeconds: 60 +webhook: + image: "quay.io/openebs/admission-server" + imageTag: "0.9.0" + generateTLS: true + replicas: 1 + nodeSelector: {} + tolerations: [] + affinity: {} + jiva: image: "quay.io/openebs/jiva" - imageTag: "0.8.2" + imageTag: "0.9.0" replicas: 3 cstor: pool: image: "quay.io/openebs/cstor-pool" - imageTag: "0.8.2" + imageTag: "0.9.0" poolMgmt: image: "quay.io/openebs/cstor-pool-mgmt" - imageTag: "0.8.2" + imageTag: "0.9.0" target: image: "quay.io/openebs/cstor-istgt" - imageTag: "0.8.2" + imageTag: "0.9.0" volumeMgmt: image: "quay.io/openebs/cstor-volume-mgmt" - imageTag: "0.8.2" + imageTag: "0.9.0" policies: monitoring: enabled: true image: "quay.io/openebs/m-exporter" - imageTag: "0.8.2" + imageTag: "0.9.0" analytics: enabled: true