19 Commits
Author SHA1 Message Date
Brady Todhunter bd048b272a [stable/anchore-engine] Fix upgrade jobs (#22451)
* set rollingUpdate to null for helm 2 compatibility

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* pass /bin/bash -c to entrypoint to fix upgrade job failures

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-05-19 22:56:18 -07:00
Brady Todhunter 4e3359a3b7 [stable/anchore-engine] Allow loading custom CA certificate (#22440)
* pass anchore-manager to entrypoint

instead of overwriting the entrypoint with anchore-manager pass it to
the entrypoint to be executed. This will allow custom SSL certs to
loaded by the entrypoint.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add custom certs volume to upgrade jobs

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* bump chart version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-05-18 22:17:36 -07:00
Brady Todhunter f31183bd57 Update to enterprise v2.3.0 & engine v0.7.1 (#22173)
add pre-upgrade hook for updating DB
Use enterprise image, pullPolicy & imagePullSecret when appropriate
Use recreate deployment strategy for upgrade hook
add global timeout to engine & enterprise
add license to engine components when enterprise is enabled
add license to engine configmap for enterprise installs
use anchore-enterprise-manager for all services when enterprise is enabled
update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-04-28 23:26:25 -07:00
Brady Todhunter b82e36f9a6 Update chart for anchore-engine:v0.7.0 (#21668)
enabled github feeds configuration
Use anchore-engine:v0.6.1 image when enterprise is enabled
add imagePullSecret configuration for private anchore-engine images
bump chart minor version
update feeds read timeout to 180
update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-03-29 08:37:53 -07:00
Bradley Massey 69ef199c9a [stable/anchore-engine] Split environment variables configMap (#20239)
* [stable/anchore-engine] Split environment variables configMap

Signed-off-by: Bradley Massey <bradley.massey@yields.io>

* [ref] bump chart version

Signed-off-by: Bradley Massey <bradley.massey@yields.io>

* [stable/anchore-engine] Split enterprise feeds environment variables configMap

Signed-off-by: Bradley Massey <bradley.massey@yields.io>

* [stable/anchore-engine] fixed enterprise feeds environment configmap

Signed-off-by: Bradley Massey <bradley.massey@yields.io>
2020-01-23 15:08:31 -08:00
Brady Todhunter 8558ba35b4 [stable/anchore-engine] update chart to anchore engine v0.5.1 (#17905)
* add securityContext to all deployments to run as anchore:anchore

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* version bump to anchore-engine v0.5.1

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-10-11 10:15:43 -07:00
Brady Todhunter 304cc943e6 add openshift deployment option (#17321)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-09-25 00:39:59 -07:00
Brady Todhunter be0dbfa9da [stable/anchore-engine] Enterprise 2.1 update (#16864)
* remove |trim from all toYaml statements

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update configmaps to support new feed drivers

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update db configurations to allow sslmode: verify-full & specifying a custom root ca cert

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* allow customizable analyzer_config.yaml

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add _secret to ui config file name to clarify the k8s resource type

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add saml support, custom ssl ca certificate support, & cleanup minor implementation bugs

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* fix internal ssl configuration

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update image versions

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add https to readiness & liveness checks when anchoreGlobal.internalServicesSsl.enabed=true

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* always use -k with curl health check on auth-manager, localhost will never match cert hostname

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* remove SSL config from auth handler & make all engine endpoints use https when anchoreGlobal.internalServicesSsl.enabled=true

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add ssl_verify config to feed section

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-09-04 15:44:22 -07:00
Brady Todhunter 595f51dda8 [stable/anchore-engine] Engine Release v0.4.1 (#15195)
* remove unnecessary quotes from templates

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update ui to v0.3.4 & add policy hub config. Update engine & enterprise to v0.4.1

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update Chart & app version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-07-01 20:51:08 -07:00
Philippe Dagenais 01ca361c8e [stable/anchore-engine] Ability to add custom labels (#14549)
* Add unused quotes in the analyzer deployment

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* Remove unused quotes

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* Add the ability to specify additionnal labels

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* Bump chart version to 1.1.0

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* Fix value name

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* with scope instead of conditional block. Same convention as annotations etc.

Signed-off-by: pgdagenais <pgdagenais@gmail.com>

* Add feeds labels to the feeds configmap

Signed-off-by: pgdagenais <pgdagenais@gmail.com>

* Code cleanup

Signed-off-by: pgdagenais <pgdagenais@gmail.com>

* Allow the user to add custom labels to all kubernetes resources deployed by the anchore-engine chart

Signed-off-by: pgdagenais <pgdagenais@gmail.com>

* Remove invalid values

Signed-off-by: pgdagenais <pgdagenais@gmail.com>
2019-06-11 23:33:28 -07:00
sT331h0rs3 4469c956d3 Add ability to use existing service account for CloudSQL. (#14246)
Signed-off-by: sT331h0rs3 <sT331h0rs3@gmail.com>
2019-05-31 18:16:36 -07:00
Philippe Dagenais 2551d5f3e4 Fix simplequeue template (#14219)
Signed-off-by: Dagenais, Philippe <pdagenais@nuglif.com>
2019-05-28 14:59:33 -07:00
Brady Todhunter cce3116dae Enterprise 2.0 (#13636)
* UI LDAP functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* Enterprise Reports functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* prepare deployments for rootless UBI image

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* cleanup toYaml blocks to use nindent

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* lock redis to v6 chart, due to breaking upgrade changes

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* provide configuration for analyzer image layer caching

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update readme & chart version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* fix whitespace issues for linter

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-05-08 23:38:47 -07:00
Gabor Kozma 2733615628 [stable/anchore-engine] Small improvement about secret end env (#12996)
* extraEnv vars change

Signed-off-by: Gabor Kozma <gabo@kozmagabor.com>

* bump version

Signed-off-by: Gabor Kozma <gabo@kozmagabor.com>

* add existing secret support

Signed-off-by: Gabor Kozma <gabo@kozmagabor.com>

* extraEnv map to array in values.yaml

Signed-off-by: Gabor Kozma <gabo@kozmagabor.com>
2019-04-22 10:39:46 -07:00
Peter Balogh 4c71ec3926 add gce-proxy support for anchore-engine (#12529)
Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com>
2019-04-15 15:51:03 -07:00
Brady Todhunter 2c651a910a Update to Anchore Engine v0.3.3 (#12014)
* Update anchore engine image to use v0.3.3
* Consolidate all ingress resource values
* Upgrade to latest Redis chart version
* Increase postgres persistence to 20Gi
* Allow additional env vars from values

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-03-13 18:00:53 -07:00
Brady Todhunter 41c48b60a0 Update anchore-engine version (#10911)
* Updated Anchore Engine image to v0.3.2

* Updated Anchore Enterprise image to v0.3.3

* Changed image values from image.name, image.tag, & image.pullPolicy
to image & imagePullPolicy

* Removed unnecessary quotes from templates

* Updated chart version to v0.11.0

* Update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-01-30 09:32:15 -08:00
Brady Todhunter d0e80c76e2 service config changes (#9765)
* initial service config changes

update readiness & liveness probes

update chart app version. update redis chart version. update readme/notes.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* Update ingress resource to work directly with NGINX ingress controller

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* Update readme

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* revert default ports in values.yaml back to original chart values.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2018-12-18 15:16:59 -08:00
Brady Todhunter 8eb06375ba Upgrade to v0.3.0 & add Enterprise (#9287)
* ui functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* enterprise feeds service functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* rbac functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* distributed services functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* Add more comments to values.yml. Clean up feeds configuration. Make internal ssl configuration global.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* use /health for all readiness & liveness probes

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* config rbac authorizer on external APIs. Move k8s webhook to core pod. Fix ssl configs to use anchoreGlobal values.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add values.yaml snippet & install instructions to README. Default anchoreEnterpriseGlobal.enabled to false

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* be explicit about license secret creation

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* organize values.yaml. Add additional cycle timers. Set image info to non-dev.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* make service port values global. Remove k8s webhook pod. Default more feeds values.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* remove alias for base postgresql dependency

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add upgrade info to README. update chart version to 0.9.0

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* fix requirements.lock. Remove inline comments. Change case of true/false values.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2018-11-14 22:22:39 -08:00