* [stable/mongodb-replicaset] Add OU to cert
Fix the bug reported and diagnosed in #7417.
When you set `security.clusterAuthMode: x509` as recommended by the
README the nodes will fail to authenticate with the following error:
2018-10-08T13:06:12.767+0000 I ACCESS [conn7] authenticate db: $external { authenticate: 1, mechanism: "MONGODB-X509", user: "CN=circleci-mongodb-1" }
2018-10-08T13:06:12.767+0000 I ACCESS [conn7] Failed to authenticate CN=circleci-mongodb-1@$external with mechanism MONGODB-X509: UserNotFound: Could not find user CN=circleci-mongodb-1@$external
2018-10-08T13:06:12.768+0000 I ACCESS [conn7] Unauthorized: not authorized on admin to execute command { replSetHeartbeat: "rs0", configVersion: 3, from: "circleci-mongodb-1.circleci-mongodb.default.svc.cluster.local:27017", fromId: 1, term: 12 }
This is because the MongoDB docs state the following:
> The Distinguished Name (DN), found in the member certificate’s
> subject, must specify a non-empty value for at least one of the
> following attributes: Organization (O), the Organizational Unit (OU)
> or the Domain Component (DC).
https://docs.mongodb.com/manual/tutorial/configure-x509-member-authentication/#certificate-requirements
Setting the OU to the name of the product seems like the most generic
solution to this without suggesting that the cert belongs to MongoDB the
company.
Signed-off-by: Dan Carley <dan.carley@gmail.com>
* [stable/mongodb-replicaset] Fix CAFile in README
The `/ca` directory doesn't exist when the `bootstrap` container is run
and this causes the `on-start.sh` script to fail. Whereas the
`/data/configdb` directory does existing throughout the process and is
the path that people have reported using in other issues.
Signed-off-by: Dan Carley <dan.carley@gmail.com>
* gocd: Invalid nodeSelector reference
Missing "agent" in if case
Signed-off-by: Johnny Bergström <johnny@klaudify.se>
* gocd: Add affinity setting
Agent and server affinity values for more flexibility.
Node selector will be deprecated in future k8s
Signed-off-by: Johnny Bergström <johnny@klaudify.se>
* gocd: Bump version and changelog
Signed-off-by: Johnny Bergström <johnny@klaudify.se>
* gocd: empty line messing up README
Signed-off-by: Johnny Bergström <johnny@klaudify.se>
* Invalid link in chart sources
There was a invalid link in sources, this commit fixes the link
Signed-off-by: Jonathan Herlin <jonte@jherlin.se>
* stable/unifi bump version
Signed-off-by: Jonathan Herlin <jonte@jherlin.se>
* [incubator/elasticsearch-curator] include annotations only when non empty
Signed-off-by: Fabrizio Fortino <fabrizio.fortino@gmail.com>
* [incubator/elasticsearch-curator] bump chart version
Signed-off-by: Fabrizio Fortino <fabrizio.fortino@gmail.com>
* es-curator: bump version
Signed-off-by: Fabrizio Fortino <fabrizio.fortino@gmail.com>
* es-curator: fix for #7898 in stable
Signed-off-by: Fabrizio Fortino <fabrizio.fortino@gmail.com>
* [stable/kubernetes-dashboard] Use the target port number instead of a name
Older (but still actual) versions of some Network Policy providers don't support named ports as
a value of `targetPort` field in the Service spec.
Changing it to the number shouldn't break the UX for existing installations.
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* [stable/kubernetes-dashboard] Bump chart version to 0.7.4
Signed-off-by: Mikhail Zholobov <legal90@gmail.com>
* Promote elasticsearch-curator to stable
Signed-off-by: Pete Brown <pete.brown@powerhrg.com>
* Fix references to incubator/elasticsearch-curator
Signed-off-by: Pete Brown <pete.brown@powerhrg.com>
* [stable/kibana] use checksum/config annotation to restart pod if configuration changed.
Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr>
* [stable/kibana] Outdent if.
Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr>
* sets container name as defined in values file
use container name defined in Values file else use Chart name by default
Signed-off-by: Marc Ian Bucad <ian.bucad@gmail.com>
* sets container name as defined in values file
use container name defined in Values file else use Chart name by default
Signed-off-by: Marc Ian Bucad <ian.bucad@gmail.com>
* changes default to chart name
prior to this PR, the container name had been "datadog" (Chart name). suddenly changing to dd-agent might/could break things for those upgrading.
Signed-off-by: Marc Ian Bucad <ian.bucad@gmail.com>
* makes cluster agent container name configurable
Signed-off-by: Marc Ian Bucad <ian.bucad@gmail.com>
* adds settings to the readme
Signed-off-by: Marc Ian Bucad <ian.bucad@gmail.com>
* bump version
Signed-off-by: Marc Ian Bucad <ian.bucad@gmail.com>
The default disk size of 1 GiB can cause mistakes (e.g.
https://stackoverflow.com/q/52245811/1925481), but is needed in
order to work in environments like Minikube.
And I don't know what's going on with the way that line breaks work in
NOTES.txt, but this is what makes it render properly.
Signed-off-by: Alex Robinson <alexdwanerobinson@gmail.com>
* gocd: wrong agent resource value ref
.Values.agent.resources exist but is not used
Signed-off-by: Johnny Bergström <johnny@klaudify.se>
* gocd: Update changelog
Signed-off-by: Johnny Bergström <johnny@klaudify.se>
Niclas Mietz
Giancarlo Rubio
Carlos Tadeu Panato Junior
Tommy Kindmark
Javier Arauz
Charly Fontaine
vinnich
Flávio Ferreira
Javier J. Salmerón-García
Ian Levesque
Joao C Costa
Bitnami Bot
Dan Carley
Aravind SV
Johnny Bergström
Brady Todhunter
Jonathan Herlin
Cédric de Saint Martin
Fabrizio Fortino
Néstor Salceda
Eric Bailey
Mikhail Zholobov
Mikhail Naletov
Zack Williams
Pete Brown
Marc Ian Bucad
Aleksandr Stepanov
Johnathan Rodgers
Alex Robinson
Renato Quinhoneiro Todorov
Carlos Rodríguez Hernández