* [stable/kong] add sideEffects and admissionReviewVersions
These are required fields for v1 and we operate on v1beta but support
the v1 resources as well.
Also removed the sym link to default values and introduced a blank file.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] use service type NodePort for CI testing
kind doesn't support services of type LoadBalancer and the CI test fail
on kind.
This is part of the effort to move the chart under Kong's Github
organization and deprecate it from `helm/charts` repo on Github.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] 0.36.2 admission webhook fixes
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] bump up timeouts to 5 seconds
On constrained hardware and especially Minikube, 1 second timeouts are
common. Possibly, due to triple scheduling going on.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/minio] Decouple directory root from the mountPath
Introduce a new variable named `.Values.bucketRoot` which defaults to
`.Values.mountPath` if unset.
This allows the Helm chart to serve only a subset of the mounted drive,
which can be useful if the mounted data contains symlinks to locations
that should not be accessible directly through minio.
Addresses #19939
Signed-off-by: gzur <gzur@gzur.org>
* Remove extra spaces
Signed-off-by: gzur <gzur@gzur.org>
* [stable/nginx-ingress] Fix ClusterRole creation when using namespaces
We want to be able to choose to deploy to a namespace and still opt-in
to ClusterRole creation.
Fixes: https://github.com/helm/charts/issues/18420
Signed-off-by: Graham McGregor <graham@gmcgregor.ca>
Co-authored-by: Madeline Van Der Paelt <madd_y@hotmail.com>
* [stable/nginx-ingress] Bump nginx-ingress chart version
Signed-off-by: Graham McGregor <graham@gmcgregor.ca>
Co-authored-by: Madeline Van Der Paelt <madd_y@hotmail.com>
Co-authored-by: maddster82 <madd_y@hotmail.com>
* [stable/kong] add rainest as a maintainer
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] update CRDs to Ingress Controller 0.7
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] standardize and optimize readiness and liveness probes
- Initial delay has been lowered to 5 seconds for increased responsiveness
- Frequency is now 10 seconds, again for reponsiveness
- timeout has been standardized to 1s
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] 0.35.1 changelog
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] remove the extra space in NOTES.txt
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] fix values.yalm ingress tls section
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
The following document describes all the standard labels that charts
should include:
https://v2.helm.sh/docs/chart_best_practices/#standard-labels
Kong's chart already had these but the keys were outdated.
This commit also de-duplicates these data to further DRY out these
labels.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
Comment in values.yaml related to kubeScheduler scraping
configuration incorrectly referred to kube-controller-manager
scraping.
Only the comment is fixed as the logic is correct.
Signed-off-by: Martin Polednik <m.polednik@gmail.com>
* [stable/kong] typos in readme and change Kong Enterprise section
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* remove ci test, it is a duplicate of defautl-values.yaml
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* remove ci test, it is another duplicate of defautl-values.yaml
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] consolidate various CI tests
We get a lot of flaky tests. Some of those are likely cause by the CI
process itself but reducing the number of tests gives us a speedy test
and reduces the probability of flakiness.
There are no tests that are being skipped here, multipe unrelated tests
have been consolidated together.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] draft changelog and version bump
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] elaborate on kong enterprise and fix typos
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] call out pre-reqs in install for enterprise
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] renam test files to run the tests
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* remove blank lines as lint barfs
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* remove blank lines as lint barfs
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* remove trailing white space
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] update changelog and version
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* specify pg details in ci test
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stabl/kong] de-duplicate test2 and test4
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
Add an additional level of indentation to Job securityContexts.
Previously, the context would render incorrectly, e.g.
securityContext:
runAsUser: 1000
It should now render as:
securityContext:
runAsUser: 1000
Signed-off-by: Travis Raines <traines@konghq.com>
The output of the templated chart breaks other templating tools it
may be used in (like YTT). Removing the duplicate configmap keys cleans
up the output, and makes it easier to use elsewhere.
Signed-off-by: Ben <ben@ros.io>
Do not chomp leading whitespace prior to including kong.license within
the final_env helper. Doing so appends the license block immediately
after the preceding value, generating invalid YAML.
Prior to the creation of final_env, kong.license was injected directly
into Deployment and Job templates, using the nindent function to apply
indentation and add a newline. final_env instead places kong.license at
the correct indentation within the templated block, and does not use
nindent. As such, the include should not chomp leading whitespace before
it.
Signed-off-by: Travis Raines <traines@konghq.com>
* [stable/kong] consolidate all rbac resources into a single file
- Simplify and reduce number of ifs in our helm chart to reduce
maintainence burden
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] move all custom resources into a single file
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] remove podDistruption budget for ingressController
Ingress Controller has been consolidated into the Kong pod itself now
so this policy is not needed anymore.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] refactor wait-for-postgres container into helpers for de-duplication
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] refactor env section of the deployment into a helper
In the next commit, we will use this same env section for the migration
containers as well to ensure consistency in Kong's configuration across
different pods.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] use kong.final_env for migration containers
This ensures that the exact same configuration for kong is used across
containers of all types.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] wait-for-postgres to be available
Previously, if the Postgres instance was managed externally, eg, like an
RDS instance, then the chart would fail to wait for it. The migrations
eventually succeeded but if the pod fails while connecting to Postgres,
it is more helpful as it highlights an issue with network itself.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] use a hard-coded name for the container name
This allows us to have determisintic container names and makes writing
scripts easier. The name of the pod and deployment are still generated
by Helm.
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] bump up Postgresql sub-chart to 8.1.2
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] write changelog and bump chart for 0.33
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* fix: remove installCRDs since it is present twice
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] add content of FAQ doc
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] re-orgnize values.yaml
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
* [stable/kong] fix language in the FAQ
Signed-off-by: Harry Bagdi <harrybagdi@gmail.com>
The webhook configurations are cluster global objects and do not need
namespace metadata.
Remove the field to simplify the chart.
Signed-off-by: Julian Taylor <juliantaylor108@gmail.com>
* Set the default user from an existing secret
Signed-off-by: Angelo Fausti <afausti@lsst.org>
* Address reviewer comments
Signed-off-by: Angelo Fausti <afausti@lsst.org>
* Add service account annotations
This allows you to pass annotations to the service account.
Signed-off-by: Ashley Penney <apenney@simondata.com>
* Rename key as it's under serviceaccount already
Signed-off-by: Ashley Penney <apenney@simondata.com>