[stable/spinnaker] Add support for skipping k8s permissions check at startup (#17428)

* [stable/spinnaker] Add support for skipping k8s permissions check at startup

Signed-off-by: costimuraru <costimuraru@gmail.com>

* Fix typo and update version

Signed-off-by: costimuraru <costimuraru@gmail.com>

stable/spinnaker/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
 description: Open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.
 name: spinnaker
-version: 1.20.1
-appVersion: 1.12.5
+version: 1.20.2
+appVersion: 1.16.1
 home: http://spinnaker.io/
 sources:
 - https://github.com/spinnaker

stable/spinnaker/templates/_helpers.tpl

@@ -43,6 +43,14 @@ Create comma separated list of omitted namespaces in Kubernetes
 {{- join "," .Values.kubeConfig.omittedNameSpaces }}
 {{- end -}}
 
+{{- define "omittedKinds" -}}
+{{- join "," .Values.kubeConfig.omittedKinds }}
+{{- end -}}
+
+{{- define "k8sKinds" -}}
+{{- join "," .Values.kubeConfig.kinds }}
+{{- end -}}
+
 {{/*
 Redis base URL for Spinnaker
 */}}

stable/spinnaker/templates/configmap/halyard-config.yaml

@@ -116,7 +116,11 @@ data:
                 --context {{ $context }} {{ if not $.Values.kubeConfig.enabled }}--service-account true{{ end }} \
                 {{ if $.Values.kubeConfig.enabled }}--kubeconfig-file {{ template "spinnaker.kubeconfig" $ }}{{ end }} \
                 {{ if $.Values.kubeConfig.onlySpinnakerManaged.enabled }}--only-spinnaker-managed true{{ end }} \
-                --omit-namespaces={{ template "omittedNameSpaces" $ }} --provider-version v2
+                {{ if not $.Values.kubeConfig.checkPermissionsOnStartup }}--check-permissions-on-startup false{{ end }} \
+                --omit-namespaces={{ template "omittedNameSpaces" $ }} \
+                {{ if $.Values.kubeConfig.omittedKinds }}--omit-kinds={{ template "omittedKinds" $ }}{{ end }} \
+                {{ if $.Values.kubeConfig.kinds }}--kinds={{ template "k8sKinds" $ }}{{ end }} \
+                --provider-version v2
     {{- end }}
     $HAL_COMMAND config deploy edit --account-name {{ .Values.kubeConfig.deploymentContext }} --type distributed \
                            --location {{ .Release.Namespace }}

stable/spinnaker/values.yaml

@@ -1,8 +1,8 @@
 halyard:
-  spinnakerVersion: 1.12.5
+  spinnakerVersion: 1.16.1
   image:
     repository: gcr.io/spinnaker-marketplace/halyard
-    tag: 1.20.2
+    tag: 1.23.2
   # Set to false to disable persistence data volume for halyard
   persistence:
     enabled: true
@@ -154,6 +154,21 @@ kubeConfig:
   onlySpinnakerManaged:
     enabled: false
 
+  # When false, clouddriver will skip the permission checks for all kubernetes kinds at startup.
+  # This can save a great deal of time during clouddriver startup when you have many kubernetes
+  # accounts configured. This disables the log messages at startup about missing permissions.
+  checkPermissionsOnStartup: true
+
+  # A list of resource kinds this Spinnaker account can deploy to and will cache.
+  # When no kinds are configured, this defaults to ‘all kinds'.
+  # kinds:
+  # -
+
+  # A list of resource kinds this Spinnaker account cannot deploy to or cache.
+  # This can only be set when –kinds is empty or not set.
+  # omittedKinds:
+  # -
+
 # Change this if youd like to expose Spinnaker outside the cluster
 ingress:
   enabled: false