The documentation changes will inform user that there is a way to disable opa from loading default policies.
Fixes https://github.com/open-policy-agent/opa/issues/2410
Signed-off-by
Author: Ahil Mathew Eapachen <ahil1232@gmail.com>
Date: Mon May 25 11:27:02 2020 +1200
Signed-off-by: Ahil Mathew Eapachen <ahil1232@gmail.com>
Bumped up chart version
Incorporated PR comments
* Allow pulling images by digest
The digest uniquely identifies a specific version of the image, so it is
never updated by Kubernetes unless you change the digest value. This is
desirable for security to gain confidence that no unvetted changes are
pulled to a deployment.
Signed-off-by: Graham McGregor <graham@gmcgregor.ca>
* Bump chart version
Signed-off-by: Graham McGregor <graham@gmcgregor.ca>
* Add `DD_AC_INCLUDE` and `DD_AC_EXCLUDE` to all containers
* Add "Unix Domain Socket" support in trace-agent
* Add new parameter to specify the dogstatsd socket path on the host
* Fix typos in values.yaml
* Update "tags:" example in values.yaml
* Add rate_limit_queries_ metrics
Signed-off-by: cedric lamoriniere <cedric.lamoriniere@datadoghq.com>
* Update ingress version
Signed-off-by: etash-singh <etash.singh@hpe.com>
* Bumped chart version
Signed-off-by: etash-singh <etash.singh@hpe.com>
* Added version support for older K8s clusters
Signed-off-by: etash-singh <etash.singh@hpe.com>
* Fixed version support for older K8s clusters
Signed-off-by: etash-singh <etash.singh@hpe.com>
* Refactored capabilities function to check specifically for Ingress resource
Signed-off-by: etash-singh <etash.singh@hpe.com>
* Added logic for auto api version detection for ingress
Signed-off-by: etash-singh <etash.singh@hpe.com>
* Added logic for auto detection of api version for ingress
Signed-off-by: etash-singh <etash.singh@hpe.com>
Co-authored-by: etash-singh <etash.singh@hpe.com>
* Fix warning messages with Helm 2.x
Fixes warning messages like the below examples when using Helm 2.
```
Warning: Merging destination map for chart 'datadog'. The destination item 'confd' is a table and ignoring the source 'confd' as it has a non-table value of: <nil>
Warning: Merging destination map for chart 'datadog'. The destination item 'resources' is a table and ignoring the source 'resources' as it has a non-table value of: <nil>
```
Fixes#22428
Signed-off-by: Aditya Sundaramurthy <aditya.sundaramurthy@gmail.com>
* Bump chart version
Signed-off-by: Aditya Sundaramurthy <aditya.sundaramurthy@gmail.com>
* Updated changelog
Signed-off-by: Aditya Sundaramurthy <aditya.sundaramurthy@gmail.com>
* Bump chart version
Signed-off-by: Aditya Sundaramurthy <aditya.sundaramurthy@gmail.com>
* [incubator/zookeeper] Ensure headless service force registers DNS
Force registering DNS entries will fix issues with java errors such as
java.net.UnknownHostException when fresh pod is created and is not
yet ready. In edge cases it was causing cluster creation failures.
Signed-off-by: Michał Sochoń <kaszpir@gmail.com>
* [incubator/zookeeper] Add values entries for publishNotReadyAddresses with comments
Signed-off-by: Michał Sochoń <kaszpir@gmail.com>
In order to use AWS EKS IAM Roles for Service Accounts feature, one must annotate the service account to specify what IAM role admin wants to grant to that service account.
```yaml
apiVersion: v1
kind: ServiceAccount
metadata:
annotations:
eks.amazonaws.com/role-arn: arn:aws:iam::AWS_ACCOUNT_ID:role/IAM_ROLE_NAME
```
Signed-off-by: Tam Mach <sayboras@yahoo.com>
* Fix typos in deployment template
Signed-off-by: Tyler Nguyen <tai.nguyen@nfq.asia>
* mysql to 1.6.4 version
Signed-off-by: Tyler Nguyen <tai.nguyen@nfq.asia>
* Revert dduportal/bats image version to 0.4.0
Signed-off-by: Tyler Nguyen <tai.nguyen@nfq.asia>
* Define serviceAccountName and use it instead of fullname
Signed-off-by: ada-u <yuta@adachi.life>
* Remove `.serviceAccount.create` condition to pass the existing sa name
e.g. pass the sa name created by eksctl for using IRSA
Signed-off-by: ada-u <yuta@adachi.life>
* Bump chart version to 0.8.0
Signed-off-by: ada-u <yuta@adachi.life>
* Fix default image version to 0.8.0
Signed-off-by: ada-u <yuta@adachi.life>
Adding possibility to expose certificate and its key via k8s secret/tls.
Since secret/tls keeps cert under tls.crt and key under tls.key modified
default values for customCert.certName and customCert.keyName to be
more compatible with k8s native way of storing certificates.
Signed-off-by: Marcin Iwinski <marcin.iwinski@gmail.com>
* - fix mixed up readiness and livess check conditions
- decrease initialDelay for readiness check
Signed-off-by: Norbert Varzariu <nv@rebbits.com>
* fix versioning
Signed-off-by: David Karlsen <david@davidkarlsen.com>
Co-authored-by: David J. M. Karlsen <davidkarlsen@gmail.com>
Co-authored-by: David Karlsen <david@davidkarlsen.com>
* feat(rabbitmq-ha): add toggle to initcontainer
since I'm currently using NFS mounted pvc my initcontainer can't
run as root and change ownership of the files.
Signed-off-by: PixelJonas <jonas@janz.digital>
* feat(rabbitmq-ha): add securityContext
adds custom options to define securityContext
and behaviour of the initContainer
Signed-off-by: PixelJonas <jonas@janz.digital>
* feat(rabbitmq-ha): bump chart version to 1.44.3
Signed-off-by: PixelJonas <jonas@janz.digital>
* feat(rabbitmq-ha): bump chart version
Signed-off-by: pixeljonas <jonas@janz.digital>
* feat(rabbitmq-ha): initContainer securityContext
make securityContext for initContainer configurable via values.yaml
Signed-off-by: pixeljonas <jonas@janz.digital>
* feat(rabbitmq-ha): rename chownFiles property
Signed-off-by: pixeljonas <jonas@janz.digital>
* feat(rabbitmq-ha): bump chart version to 1.45.0
Signed-off-by: pixeljonas <jonas@janz.digital>
* pass anchore-manager to entrypoint
instead of overwriting the entrypoint with anchore-manager pass it to
the entrypoint to be executed. This will allow custom SSL certs to
loaded by the entrypoint.
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
* add custom certs volume to upgrade jobs
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
* bump chart version
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
Jeff KolbandGitHub
Tatsuya FukutaandGitHub
Aaron McDonaldandGitHub
Ahil Mathew EapachenandGitHub
Michael SeiwaldandGitHub
Markus MagaandGitHub
Graham McGregorandGitHub
Smaine KahlouchandGitHub
Cedric LamoriniereandGitHub
Mathew WicksandGitHub
Jeff GeerlingandGitHub
Ciprian HacmanandGitHub
Aditya SundaramurthyandGitHub
ArturoandGitHub
devOpsHelmandGitHub
Karl-Philipp RichterandGitHub
KAWACHI TakashiandGitHub
Tariq IbrahimandGitHub
alejandrodnmandGitHub
Michał SochońandGitHub
Tam MachandGitHub
TylerandGitHub
YutaAdachiandGitHub
MullerandGitHub
Erwan MiranandGitHub
Marcin IwińskiandGitHub
Christian KotzbauerandGitHub
Cédric de Saint MartinandGitHub
Lénaïc HuardandGitHub
Brady TodhunterandGitHub
Rico BergerandGitHub
rvolykhandGitHub
Jonas JanzandGitHub
Sergio MillanandGitHub
Prateek PandeyandGitHub
Rodrigo ValerioandGitHub
Chris SchaeferandGitHub
moxiousandGitHub
Hagai BarelandGitHub