* [stable/traefik] allow labels and annotations to be specified
Signed-off-by: Nick Roberts (nickrobertssky) <nick.roberts@sky.uk>
* [stable/traefik] bump chart version
Signed-off-by: Nick Roberts (nickrobertssky) <nick.roberts@sky.uk>
* [stable/traefik] add new values to readme
Signed-off-by: Nick Roberts (nickrobertssky) <nick.roberts@sky.uk>
* [stable/traefik] fix issue when labels no specified
Signed-off-by: Nick Roberts (nickrobertssky) <nick.roberts@sky.uk>
* [stable/traefik] Updated acme storage location to be configurable
Signed-off-by: Ryan Orth <ryanorth@workfront.com>
* Fixed wrong version update
Signed-off-by: Ryan Orth <ryanorth@workfront.com>
Bug fixes:
- Update to go1.12.8 (#5201 by ldez). HTTP/2 Denial of Service
CVE-2019-9512 and CVE-2019-9514
- [server] Make hijackConnectionTracker.Close thread safe (#5194 by
jlevesy)
- [acme] Update lego (#5166 by dabeck)
- [consulcatalog] warning should not be a fail status (#4537 by
saez0pub)
- [docker] Update docker api version (#4909 by dtomcej)
- [dynamodb] Use dynamodbav tags to override json tags. (#5002 by ldez)
- [healthcheck] Wrr loadbalancer honors old weight on recovered servers
(#5051 by DougWagner)
- [k8s] Check for multiport services on Global Backend Ingress (#5021 by
dtomcej)
- [logs] Allows logs to use local time zone instead of UTC (#4954 by
dduportal)
- [middleware] Clear TLS client headers if TLSMutualAuth is optional
(#4963 by stffabi)
- [tls] Add missing KeyUsages for default generated certificate (#5150
by dtomcej)
Signed-off-by: Raymond Walker <raymond.walker@greenpeace.org>
* feat: imporvements to pachyderm chart (#13054)
* feat: imporvements to pachyderm chart
- De-hardcode suite label to allow deployment in a different namespace
than `pachyderm`
- De-hardcode service account name to allow deployment in a different
namespace than `pachyderm`
- Allow specifying resource limits for `etcd` and `patchd` deployments
- Split `pachd` service in 3 stand alone services to allow exposing
`pachd-grpc-api` through a LoadBalancer service type
- `pachd-grpc-api` port can be customized
- `pachd` deployment now support iam-role annotation for `kube2iam`
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* add variables to support 1.8.x
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* node port fixed to 30650
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* boolean as stringwq
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* fix typo
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* quote the value in the template instead
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
Signed-off-by: Philipp Hellmich <phil@hellmi.de>
* some changes based on feedback of dtomcej
Signed-off-by: Philipp Hellmich <phil@hellmi.de>
* commented out servicemonitor as requested in PR
Signed-off-by: Philipp Hellmich <phil@hellmi.de>
* fix
Signed-off-by: Philipp Hellmich <phil@hellmi.de>
* Adds MTLS support to Traefik chart.
Work previously done by @somcsel and picked up here after abndoned.
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Removed base64 ca cert requirement
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Comment out MTLS by default
- PR feedback to comment out values MTLS settings by default
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* PR feedback, removing typos from values
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Add missing comment blocks
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Bumped chart version to 1.70.0
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Bumped chart version to 1.74.0
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Add configurable logLevel to traefik
Signed-off-by: Paul Leathwood <paul.leathwood@sky.uk>
* Chart version bump
Signed-off-by: Paul Leathwood <paul.leathwood@sky.uk>
* Update default logLevel to `info`
Signed-off-by: Paul Leathwood <paul.leathwood@sky.uk>
* Update to default to info using `| default`
Signed-off-by: Paul Leathwood <paul.leathwood@sky.uk>
Adding helm hook delete policy so hook is deleted if successful or if running install again after a failure.
Signed-off-by: Todd Brown <mrbrownt@me.com>
* [stable/traefik] Add option to enable strict SNI checking
Signed-off-by: Adam Jodock <ajodock@gmail.com>
* [stable/traefik] Make sniStrict value optional
Signed-off-by: Adam Jodock <ajodock@gmail.com>
* traefik tests, copy from mysql
Signed-off-by: Steven Chung <schung@mesosphere.io>
* traefik tests finalized
Signed-off-by: Steven Chung <schung@mesosphere.io>
* [stable/traefik] Add acme.dnsChallenge.resolvers
`resolvers` configuration is not available into Helm deployment but it
could be necessary for Letsencrypt DSN challange.
Signed-off-by: Emmanuel CARRE <emmanuelCarre@users.noreply.github.com>
* [stable/traefik] Bumped chart version
Signed-off-by: Emmanuel CARRE <emmanuelCarre@users.noreply.github.com>
Google Cloud DNS is configured differently from all other ACME DNS providers in that it expects a file to be available inside the container (because of how the underlying lego library is set up). This didn’t map well to how helm packages are expected to be provided with configuration/secrets.
To support this the ability to specify any number of Secrets and ConfigMaps from the values.yaml file has been added.
Signed-off-by: Jacob Magnusson <m@jacobian.se>
* traefik: update to 1.7.9
Signed-off-by: Leo Antunes <leo@costela.net>
* traefik: increase memory limit to 40Mib
Signed-off-by: Leo Antunes <leo@costela.net>
* traefik: replace cpu/memory limits with resources
This deprecates the {cpu,memory}{Request,Limit} parameters and
introduces the `resources` parameter.
Signed-off-by: Leo Antunes <leo@costela.net>
* added dashboard.serviceType value to be able to deploy to GKE
Signed-off-by: Ole Rößner <o.roessner@neusta.de>
* added dashboard.serviceType value to be able to deploy to GKE
Signed-off-by: Ole Rößner <o.roessner@neusta.de>
* added dashboard.serviceType value to be able to deploy to GKE
Signed-off-by: Ole Rößner <o.roessner@neusta.de>
* removed executable flag from yaml files
Signed-off-by: Matyas Somfai <somfai.matyas@gmail.com>
* added a default value for dashboard.serviceType; modified the service to use a named port; fixed a link in the readme
Signed-off-by: Matyas Somfai <somfai.matyas@gmail.com>
* stable/traefik/Chart.yaml: Update Traefik image to v1.7.7
Signed-off-by: Nolan Reisbeck <nolan.reisbeck@gmail.com>
* update readme too
Signed-off-by: David J. M. Karlsen <david@davidkarlsen.com>
* [stable/traefik] Fixes helm upgrades for kv providers
This will run the storeconfig job also on upgrades but without the `traefikConfiguration.GlobalConfiguration.ACME.OverrideCertificates=true` parameter, so the configuration gets updated but the certs are left alone.
It's still possible to override the certificates by importing an
`acme.json` file and using the `kvprovider.importAcme=true` parameter.
Fixes: #7172
Signed-off-by: Alwin Mark <a.mark@crowdfox.com>
* [stable/traefik] Don't delete storeconfig job
Rather add revision to the job to make it unique, so its possible to get
logs from it, even if it succeeded
Signed-off-by: Alwin Mark <a.mark@crowdfox.com>
Robin Elfrink
Nick Roberts
Alexandre amiche
Carlos Alexandro Becker
ryaneorth
Florian Kinder
Nándor István Krácser
Cameron Attard
Felipe
Ray Walker
Wi1dcard
Philipp Hellmich
Yong Wen Chua
Thomas Miller
Kaden Nelson
Sebastian Pöhn
Steven Goodliff
Dat Truong
Minh Danh
Todd Brown
Paul Leathwood
Angelo Olivera
Kevin Houdebert
Alexandre Malucelli
Adam Jodock
Stefan Kürzeder
Andrés Álvarez
Steve Chung
Emmanuel CARRE
Art3mK
Jacob Magnusson
Leo Antunes
Sebastian Pöhn
Ricardo Hernandez
Mátyás Somfai
nreisbeck
Rico Pahlisch
alwinmarkcf
Tobias Brunner
Gabor Kozma