Brady Todhunter
bd048b272a
[stable/anchore-engine] Fix upgrade jobs ( #22451 )
...
* set rollingUpdate to null for helm 2 compatibility
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* pass /bin/bash -c to entrypoint to fix upgrade job failures
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-05-19 22:56:18 -07:00
Brady Todhunter
4e3359a3b7
[stable/anchore-engine] Allow loading custom CA certificate ( #22440 )
...
* pass anchore-manager to entrypoint
instead of overwriting the entrypoint with anchore-manager pass it to
the entrypoint to be executed. This will allow custom SSL certs to
loaded by the entrypoint.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add custom certs volume to upgrade jobs
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* bump chart version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-05-18 22:17:36 -07:00
Brady Todhunter
f31183bd57
Update to enterprise v2.3.0 & engine v0.7.1 ( #22173 )
...
add pre-upgrade hook for updating DB
Use enterprise image, pullPolicy & imagePullSecret when appropriate
Use recreate deployment strategy for upgrade hook
add global timeout to engine & enterprise
add license to engine components when enterprise is enabled
add license to engine configmap for enterprise installs
use anchore-enterprise-manager for all services when enterprise is enabled
update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-04-28 23:26:25 -07:00
Brady Todhunter
b82e36f9a6
Update chart for anchore-engine:v0.7.0 ( #21668 )
...
enabled github feeds configuration
Use anchore-engine:v0.6.1 image when enterprise is enabled
add imagePullSecret configuration for private anchore-engine images
bump chart minor version
update feeds read timeout to 180
update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-03-29 08:37:53 -07:00
Bradley Massey
69ef199c9a
[stable/anchore-engine] Split environment variables configMap ( #20239 )
...
* [stable/anchore-engine] Split environment variables configMap
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
* [ref] bump chart version
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
* [stable/anchore-engine] Split enterprise feeds environment variables configMap
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
* [stable/anchore-engine] fixed enterprise feeds environment configmap
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
2020-01-23 15:08:31 -08:00
Brady Todhunter
8558ba35b4
[stable/anchore-engine] update chart to anchore engine v0.5.1 ( #17905 )
...
* add securityContext to all deployments to run as anchore:anchore
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* version bump to anchore-engine v0.5.1
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-10-11 10:15:43 -07:00
Brady Todhunter
304cc943e6
add openshift deployment option ( #17321 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-09-25 00:39:59 -07:00
Brady Todhunter
be0dbfa9da
[stable/anchore-engine] Enterprise 2.1 update ( #16864 )
...
* remove |trim from all toYaml statements
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update configmaps to support new feed drivers
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update db configurations to allow sslmode: verify-full & specifying a custom root ca cert
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* allow customizable analyzer_config.yaml
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add _secret to ui config file name to clarify the k8s resource type
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add saml support, custom ssl ca certificate support, & cleanup minor implementation bugs
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* fix internal ssl configuration
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update image versions
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add https to readiness & liveness checks when anchoreGlobal.internalServicesSsl.enabed=true
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* always use -k with curl health check on auth-manager, localhost will never match cert hostname
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* remove SSL config from auth handler & make all engine endpoints use https when anchoreGlobal.internalServicesSsl.enabled=true
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add ssl_verify config to feed section
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-09-04 15:44:22 -07:00
Brady Todhunter
595f51dda8
[stable/anchore-engine] Engine Release v0.4.1 ( #15195 )
...
* remove unnecessary quotes from templates
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update ui to v0.3.4 & add policy hub config. Update engine & enterprise to v0.4.1
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update Chart & app version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-07-01 20:51:08 -07:00
Philippe Dagenais
01ca361c8e
[stable/anchore-engine] Ability to add custom labels ( #14549 )
...
* Add unused quotes in the analyzer deployment
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* Remove unused quotes
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* Add the ability to specify additionnal labels
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* Bump chart version to 1.1.0
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* Fix value name
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* with scope instead of conditional block. Same convention as annotations etc.
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
* Add feeds labels to the feeds configmap
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
* Code cleanup
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
* Allow the user to add custom labels to all kubernetes resources deployed by the anchore-engine chart
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
* Remove invalid values
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
2019-06-11 23:33:28 -07:00
sT331h0rs3
4469c956d3
Add ability to use existing service account for CloudSQL. ( #14246 )
...
Signed-off-by: sT331h0rs3 <sT331h0rs3@gmail.com >
2019-05-31 18:16:36 -07:00
Philippe Dagenais
2551d5f3e4
Fix simplequeue template ( #14219 )
...
Signed-off-by: Dagenais, Philippe <pdagenais@nuglif.com >
2019-05-28 14:59:33 -07:00
Brady Todhunter
cce3116dae
Enterprise 2.0 ( #13636 )
...
* UI LDAP functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* Enterprise Reports functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* prepare deployments for rootless UBI image
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* cleanup toYaml blocks to use nindent
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* lock redis to v6 chart, due to breaking upgrade changes
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* provide configuration for analyzer image layer caching
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update readme & chart version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* fix whitespace issues for linter
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-05-08 23:38:47 -07:00
Gabor Kozma
2733615628
[stable/anchore-engine] Small improvement about secret end env ( #12996 )
...
* extraEnv vars change
Signed-off-by: Gabor Kozma <gabo@kozmagabor.com >
* bump version
Signed-off-by: Gabor Kozma <gabo@kozmagabor.com >
* add existing secret support
Signed-off-by: Gabor Kozma <gabo@kozmagabor.com >
* extraEnv map to array in values.yaml
Signed-off-by: Gabor Kozma <gabo@kozmagabor.com >
2019-04-22 10:39:46 -07:00
Peter Balogh
4c71ec3926
add gce-proxy support for anchore-engine ( #12529 )
...
Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com >
2019-04-15 15:51:03 -07:00
Brady Todhunter
2c651a910a
Update to Anchore Engine v0.3.3 ( #12014 )
...
* Update anchore engine image to use v0.3.3
* Consolidate all ingress resource values
* Upgrade to latest Redis chart version
* Increase postgres persistence to 20Gi
* Allow additional env vars from values
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-03-13 18:00:53 -07:00
Brady Todhunter
41c48b60a0
Update anchore-engine version ( #10911 )
...
* Updated Anchore Engine image to v0.3.2
* Updated Anchore Enterprise image to v0.3.3
* Changed image values from image.name, image.tag, & image.pullPolicy
to image & imagePullPolicy
* Removed unnecessary quotes from templates
* Updated chart version to v0.11.0
* Update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-01-30 09:32:15 -08:00
Brady Todhunter
d0e80c76e2
service config changes ( #9765 )
...
* initial service config changes
update readiness & liveness probes
update chart app version. update redis chart version. update readme/notes.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* Update ingress resource to work directly with NGINX ingress controller
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* Update readme
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* revert default ports in values.yaml back to original chart values.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2018-12-18 15:16:59 -08:00
Brady Todhunter
8eb06375ba
Upgrade to v0.3.0 & add Enterprise ( #9287 )
...
* ui functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* enterprise feeds service functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* rbac functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* distributed services functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* Add more comments to values.yml. Clean up feeds configuration. Make internal ssl configuration global.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* use /health for all readiness & liveness probes
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* config rbac authorizer on external APIs. Move k8s webhook to core pod. Fix ssl configs to use anchoreGlobal values.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add values.yaml snippet & install instructions to README. Default anchoreEnterpriseGlobal.enabled to false
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* be explicit about license secret creation
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* organize values.yaml. Add additional cycle timers. Set image info to non-dev.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* make service port values global. Remove k8s webhook pod. Default more feeds values.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* remove alias for base postgresql dependency
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add upgrade info to README. update chart version to 0.9.0
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* fix requirements.lock. Remove inline comments. Change case of true/false values.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2018-11-14 22:22:39 -08:00