* [stable/spinnaker] Add the option to allow live manifest calls by Clouddriver when deploying Kubernetes Cluster resources. This can greatly reduce pipeline execution time when deploying Kubernetes resources, especially for minor changes. This option defaults to false unless set.
Signed-off-by: Adam Robinson <21spock@gmail.com>
* [stable/spinnaker] Increment Helm Chart version for release
Signed-off-by: Adam Robinson <21spock@gmail.com>
* [stable/spinnaker] Option to add annotation to the created Halyard serviceaccount. This is required when using 'IAM roles for serviceaccounts' when authenticating in AWS
Signed-off-by: Adam Robinson <adam_robinson@rapid7.com>
* [stable/spinnaker] Updating README with information about Halyard serviceaccount annotations
Signed-off-by: Adam Robinson <adam_robinson@rapid7.com>
* [stable/spinnaker] Updating Chart version
Signed-off-by: Adam Robinson <adam_robinson@rapid7.com>
* [stable/spinnaker] Increment Chart version
Signed-off-by: Adam Robinson <21spock@gmail.com>
* [stable/spinnaker] Setting version level with current
Signed-off-by: Adam Robinson <21spock@gmail.com>
* [stable/spinnaker] Incrementing version
Signed-off-by: Adam Robinson <21spock@gmail.com>
* [stable/spinnaker] Use correct name (serviceAccountAnnotations) in the values.yaml file
Signed-off-by: Adam Robinson <21spock@gmail.com>
* [stable/spinnaker] Increment Chart version
Signed-off-by: Adam Robinson <21spock@gmail.com>
Co-authored-by: Adam Robinson <adam_robinson@rapid7.com>
* The kubernetes account may not have access to all the namespaces.
This will allow a user to set the namespaces the account can access.
There is a hal command to set this for kubernetes accounts. Adding
that capabiity to the helm chart to do the same for the default
kubernetes account.
Note, Spinnaker does not allow both namespaces and omittedNamespaces
to be set. Clouddriver fails if both are set. That is also
handled here.
Signed-off-by: Nirmalyasen <nirmalya@opsmx.com>
* The kubernetes account may not have access to all the namespaces.
This will allow a user to set the namespaces the account can access.
There is a hal command to set this for kubernetes accounts. Adding
that capabiity to the helm chart to do the same for the default
kubernetes account.
Note, Spinnaker does not allow both namespaces and omittedNamespaces
to be set. Clouddriver fails if both are set. That is also
handled here.
Signed-off-by: Nirmalyasen <nirmalya@opsmx.com>
Co-authored-by: Nirmalyasen <nirmalya@opsmx.com>
* Removed default for kubeconfig secret from values.yaml and updated helm templates to check for kubeconfig secret name before creating volumes and mountpaths
Signed-off-by: Karthick Prabu <karthikprabu.cs@gmail.com>
* Added version bump
Signed-off-by: Karthick Prabu <karthikprabu.cs@gmail.com>
* Update the docker-registry command to follow the format of the kubernetes provider below. Remove the string concatenation, which did not work with the 'quote' command - this was incorrectly escaped when sent to Halyard
Signed-off-by: Adam Robinson <21spock@gmail.com>
* Update README and values for the new command format
Signed-off-by: Adam Robinson <21spock@gmail.com>
* Update to the latest Spinnaker version and supporting Halyard version
Signed-off-by: Adam Robinson <21spock@gmail.com>
* Update the Chart version
Signed-off-by: Adam Robinson <21spock@gmail.com>
* [stable/spinnaker] #19172 Give extra params to hal
Allow users to give additional parameters to
halyard deploy apply command
Signed-off-by: Ryuichi Inagaki <ryuichi.inagaki.24@googlemail.com>
* [#19172] Give additional install parameters as a list
Incorporated the review comment.
Signed-off-by: Ryuichi Inagaki <ryuichi.inagaki.24@googlemail.com>
This helps when a deployer is using a self hosted s3 alternative and needs to add extra options such as `--path-style-access true`.
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
* [stable/spinnaker] Add support for skipping k8s permissions check at startup
Signed-off-by: costimuraru <costimuraru@gmail.com>
* Fix typo and update version
Signed-off-by: costimuraru <costimuraru@gmail.com>
* [stable/spinnaker] This allows for ephemeral halyard deployments
This give you the ability to deploy to clusters without pvc support.
Co-authored-by: Paul Czarkowski <pczarkowski@pivotal.io>
Co-authored-by: JJ Asghar <awesome@ibm.com>
Signed-off-by: JJ Asghar <awesome@ibm.com>
Signed-off-by: JJ Asghar <jjasghar@gmail.com>
* Updated the Chart.yaml per the contrib docs
Signed-off-by: JJ Asghar <awesome@ibm.com>
Signed-off-by: JJ Asghar <jjasghar@gmail.com>
* [stable/spinnaker] Add possibility to map your own cacerts
This may be helpful for the ones having an air-gapped setup with internal tooling (repos) and self-signed certificates.
Signed-off-by: Adrian Wyssmann <papanito@wyssmann.com>
* [stable/spinnaker] Fix lint error "mapping values are not allowed in this context"
Signed-off-by: Adrian Wyssmann <papanito@wyssmann.com>
* [stable/spinnaker] Bump chart version
Signed-off-by: papanito <papanito@wyssmann.com>
* [stable/spinnaker] More meaningful name for cacerts
Signed-off-by: papanito <papanito@wyssmann.com>
* Making permissions to write for user/group as a variable
Signed-off-by: Elizaveta <lizasvit@gmail.com>
* bumped the version
Signed-off-by: Elizaveta <lizasvit@gmail.com>
* consistent variable names
Signed-off-by: Elizaveta <lizasvit@gmail.com>
* version bumped
Signed-off-by: Elizaveta <lizasvit@gmail.com>
* added --only-spinnaker-managed option which is disabled by default
Signed-off-by: David O'Dell <dave@helix.re>
* rev'd chart version number
Signed-off-by: David O'Dell <dave@helix.re>
* remove trailing space
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
* Use next incremental version of Minion image
Due to the current configured Minion version not being on Dockerhub any longer, we shall update it to the next incremental version that exists.
Signed-off-by: Chris Burns <29541485+ChrisJBurns@users.noreply.github.com>
* Updates patch version of Helm Chart
Updates patch version of Helm Chart due to update of Minio Image
Signed-off-by: Chris Burns <29541485+ChrisJBurns@users.noreply.github.com>
* Revert accidentally remove colon
Signed-off-by: Chris Burns <29541485+ChrisJBurns@users.noreply.github.com>
* [stable/spinnaker] fix bug where spinnaker can't connect to minio
As reported in spinnaker itself [here](https://github.com/spinnaker/spinnaker/issues/4431),
It doesn't appear to affect the current stable build, but it has problems with the nightly builds.
This change should innoculate us from that bug if it makes it through to a stable build.
Effectively the issue is that in the newer builds of spinnaker it attempts to use domain paths
for s3 access. This means instead of trying to connect to `spinnaker-minio/spinnaker` which should
be valid dns for the minio service it tries to connect to `spinnaker.spinnaker-minio` and fails because
this is not valid dns for minio.
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
* bump halyard version for cli arg needed
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
* fix argument
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
* fix version
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
Environment variables such as DEFAULT_JVM_OPTS need to be set in order
for Halyard to use a proxy. This adds an option to let you pass through
any env vars to the Halyard pod.
Signed-off-by: Rhys Meaclem <rhysmeaclem@gmail.com>
* [stable/spinnaker] Use "tpl" function to render the content of additional scripts and init scripts
This allows to use variable interpolation in the body of these scripts.
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Bump chart version
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Update README.md
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Bump chart version
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Add a value for customizing service settings
Using the newly added `additionalServiceSettings` value it's possible to override service-specific
parameters. That could be used to override some component versions or to add custom labels to pods.
Read more: https://www.spinnaker.io/reference/halyard/custom/#custom-service-settings
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Allow to use existing additionalConfigMaps objects
That makes it working similar to "additionalSecrets" part. The user can define
"halyard.additionalConfigMaps.name" with the name of pre-created ConfigMap
(which is not managed by this helm chart) and it will be mounted to the halyard pod.
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Bump chart version
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Move default profile settings from values to the template
Add support of passing actual blocks (aka `map[string]interface{}`) to `halyard.additionalProfileConfigMaps.data`,
which allows to override any of the default field as blocks are deeply merged.
These changes also keep the full backward compatibility with the old way passing data to `halyard.additionalProfileConfigMaps.data`.
Users can still pass the string values there and they will be applied only if `halyard.additionalProfileConfigMaps.create` is set to `true`.
Also, `halyard.additionalProfileConfigMaps.create` has been removed from the default values
because now this ConfigMap will always be created.
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Disable S3 versioning if Minio is enabled
Minio doesn't support versioning, so we should disable it on the Front50 side in this case.
https://www.spinnaker.io/setup/install/storage/minio/#editing-your-storage-settings
Otherwise, "pull-charts-e2e" tests will always fail because of Front50 errors related to
the versioning on S3-like storage backend.
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/spinnaker] Bump chart version
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
GCE ingress requires a /* pattern for the path, this allows the user
to specify the type of ingress controller via annotations to ensure
correct behavior.
the Gate service also needs to have some X headers modified in its
tomcat settings to work properly behind an SSL terminating reverse proxy
such as a GCE ingress.
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
Sometimes you need to modify config or service-settings files before
starting halyard. This gives you that ability by moving the chain of
commands run by the init container into a script inside a configmap
which can be added to via a modified value.
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
* [stable/spinnaker] add external secret support for GCS
Allow user to supply their own pre-created secret for GCS storage
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
* fix faulty if statements
Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
* can specify which k8s namespaces to omit
Signed-off-by: David O'Dell <dave@helix.re>
* bumped chart version to 1.1.7
Signed-off-by: David O'Dell <dave@helix.re>
* fixed lint error
Signed-off-by: David O'Dell <dave@helix.re>
* passing lint test now
Signed-off-by: David O'Dell <dave@helix.re>
* [stable/spinnaker] Version bump
Signed-off-by: Vic Iglesias <viglesias@google.com>
* Added option for hal config to be created by the values.yaml file
Signed-off-by: Oliver Isaac <oisaac@gmail.com>
* Added support for creating scripts, config maps, and secrets from the values.yaml file. Included an example in values_saml.yaml on how to use this functinality to implement saml authentication.
Signed-off-by: Oliver Isaac <oisaac@gmail.com>
* Version bump
Signed-off-by: Oliver Isaac <oisaac@gmail.com>
* Use Halyard for Spinnaker installation
* Bump spinnaker version in Chart.yaml
* Add whitespace in helpers
* Remove dependency on Jenkins
* Fix cleanup
* Fix NOTES command for exec into hal
* No longer need override_config_map helper
* Simplify cleanup job
* Remove halyard-pvc empty file
* Update README
* Add lwander as maintainer of Spinnaker chart
* Make halyard-local config simpler
* Remove type: Opaque from kubeconfig map
* Mount GCS key on Halyard statefulset
* Fix credentials when using kubeConfig.enabled
* Allow custom config to be provided at install time.
* Fix port-forward commands in README
* Configure Halyard's RBAC
* Use redis deployed by helm
* Use Deck to route /gate requests
* Fix RBAC in default configuration
* Scope template helper names
* Helper for resource metadata
* Enable spinnakerFeatureFlags
* Fix deck service name
* Basic S3 support.
setting access keys is optional, if they are unset, the implicit
credentials from your environment will be used.
* Smallish updates.
* Runs the install script with bash -xe for log output.
* Makes the install script somewhat idempotent in the case of chart
upgrades on an existing halyard config state.
* Fully qualifies serviceaccount names.
* Whitespace fixes.
* Enable 'jobs' feature flag by default
* Fix typo in README
* Follow RBAC best practices for chart
* Remove trailing space
* update helm dependencies
Update minio and redis deps to be their current releases
* support username/password for docker registry
* fix variable condition for registrysecret
* remove rogue sleep command from debugging
* add readme info about using secret for registry passwords
* fix writing the secret key to hal's config
* Enable artifacts by default
* Allow Halyard and Spinnaker SAs to be configurable
* Use custom SA in halyard SS if passed
* Default to version 1.8.4 of Spinnaker
* Simplify ingress values, fix nodeports for svcs
* Slight change; moving 'host' to be under Ingress resource
* Updater Spinnaker to 1.8.5
* Make nodeport exposure idempotent
* Add newline
* Add newline
* Add newline
* Add newline
* Update component versions
* Bump Spinnaker version in Chart.yaml
* Use either local or kubeconfig accounts
* Update docs for spinnaker multicluster
* Fix capitalization of values
* Fix README indentation
* Add more info to values file
* Bump Spinnaker chart minor version
* Only mount secrets if kubeConfig is enabled
* Make Jenkins optional
Some organizations may not use jenkins.
- Adds jenkins.enabled
- Load requirements, hooks, and config maps if jenkins
enabled
Update dependencies
bump chart version
Actually bump version
* Add jenkins.enabled value to stable/spinnaker
* Update Jenkins
* Update requirements.lock
* Use new config override mechanism
* Remove Jenkins test from Spinnaker chart
snorlaX-sleeps
Kevin Lefevre
Karthick PrabuandPaul Czarkowski
Nirmalya SenandNirmalyasen
Fabrice
Robbert RijkseandPaul Czarkowski
Ryuichi Inagaki
Cédric Menassa
Scott Frederick
Josiah Adenegan
Costi Muraru
Scott Frederick
Andres Castano
Brian Nutt
Wykiki
Adrian Wyssmann
ElizabethSvit
David O'Dell
Chris Burns
rhysm
Mikhail Zholobov
Miles Matthias
Vyas Swaroop
Ian Paredes
Renato Quinhoneiro Todorov
Oliver
Carlos Tadeu Panato Junior
Vic Iglesias
Benjamin W. Smith