mirror of
https://github.com/bitnami/charts.git
synced 2026-08-10 14:15:55 +08:00
[bitnami/kubeapps] Release Kubeapps 2.9.0 and bump bitnami/postgresql to its latest version (#19806)
* Update in preparation for the next chart release. Signed-off-by: Michael Nelson <minelson@vmware.com> * Revert two changes that we overwrote with our dev changes. Signed-off-by: Michael Nelson <minelson@vmware.com> * Avoid empty envFrom Co-authored-by: Juan Ariza Toledano <jariza@vmware.com> Signed-off-by: Michael Nelson <absoludity@gmail.com> * Update param comment for ociCatalog. Co-authored-by: Juan Ariza Toledano <jariza@vmware.com> Signed-off-by: Michael Nelson <absoludity@gmail.com> * Update README.md with readme-generator-for-helm Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> * Update oci-catalog tag. Signed-off-by: Michael Nelson <absoludity@gmail.com> * Update README.md with readme-generator-for-helm Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> * Bump PostgreSQL subchart major version Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com> * Update tests for the new version Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com> * Update container images version Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com> * Update README.md with readme-generator-for-helm Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> --------- Signed-off-by: Michael Nelson <minelson@vmware.com> Signed-off-by: Michael Nelson <absoludity@gmail.com> Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com> Co-authored-by: Michael Nelson <minelson@vmware.com> Co-authored-by: Michael Nelson <absoludity@gmail.com> Co-authored-by: Juan Ariza Toledano <jariza@vmware.com> Co-authored-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
co-authored by
Juan Ariza Toledano
Michael Nelson
Michael Nelson
Bitnami Containers
parent
bc39d28075
commit
311b9dad30
@@ -22,7 +22,7 @@ it('allows managing a helm chart release', () => {
|
||||
cy.contains('Deploy').click();
|
||||
|
||||
cy.get('#releaseName').type(releaseName);
|
||||
cy.contains('Deploy').click();
|
||||
cy.contains('cds-button', 'Deploy').click();
|
||||
cy.get('.application-status-pie-chart-title', { timeout: (Cypress.config('defaultCommandTimeout') * 3) }).should(
|
||||
'have.text',
|
||||
'Ready'
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
dependencies:
|
||||
- name: redis
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
version: 18.0.2
|
||||
version: 18.1.2
|
||||
- name: postgresql
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
version: 12.10.0
|
||||
version: 13.1.0
|
||||
- name: common
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
version: 2.10.0
|
||||
digest: sha256:36780b160705f0d3de795cc7af1970f191582a6c3ae5f78df130cd7e6e0f7ae3
|
||||
generated: "2023-09-05T11:33:52.073525+02:00"
|
||||
version: 2.13.2
|
||||
digest: sha256:f69ab959143602e192356fffbde1d77a6e441b921f3fcee8772cb986f6e53204
|
||||
generated: "2023-10-06T07:44:24.923185+02:00"
|
||||
|
||||
+31
-29
@@ -6,48 +6,50 @@ annotations:
|
||||
licenses: Apache-2.0
|
||||
images: |
|
||||
- name: kubeapps-apis
|
||||
image: docker.io/bitnami/kubeapps-apis:2.8.0-debian-11-r49
|
||||
image: docker.io/bitnami/kubeapps-apis:2.9.0-debian-11-r7
|
||||
- name: kubeapps-apprepository-controller
|
||||
image: docker.io/bitnami/kubeapps-apprepository-controller:2.8.0-debian-11-r20
|
||||
image: docker.io/bitnami/kubeapps-apprepository-controller:2.9.0-debian-11-r7
|
||||
- name: kubeapps-asset-syncer
|
||||
image: docker.io/bitnami/kubeapps-asset-syncer:2.8.0-debian-11-r20
|
||||
image: docker.io/bitnami/kubeapps-asset-syncer:2.9.0-debian-11-r7
|
||||
- name: kubeapps-oci-catalog
|
||||
image: docker.io/bitnami/kubeapps-oci-catalog:2.9.0-debian-11-r4
|
||||
- name: kubeapps-pinniped-proxy
|
||||
image: docker.io/bitnami/kubeapps-pinniped-proxy:2.8.0-debian-11-r49
|
||||
image: docker.io/bitnami/kubeapps-pinniped-proxy:2.9.0-debian-11-r8
|
||||
- name: kubeapps-dashboard
|
||||
image: docker.io/bitnami/kubeapps-dashboard:2.8.0-debian-11-r50
|
||||
image: docker.io/bitnami/kubeapps-dashboard:2.9.0-debian-11-r11
|
||||
- name: nginx
|
||||
image: docker.io/bitnami/nginx:1.25.2-debian-11-r8
|
||||
image: docker.io/bitnami/nginx:1.25.2-debian-11-r45
|
||||
- name: oauth2-proxy
|
||||
image: docker.io/bitnami/oauth2-proxy:7.4.0-debian-11-r281
|
||||
image: docker.io/bitnami/oauth2-proxy:7.5.1-debian-11-r7
|
||||
apiVersion: v2
|
||||
appVersion: 2.8.0
|
||||
appVersion: 2.9.0
|
||||
dependencies:
|
||||
- condition: packaging.flux.enabled
|
||||
name: redis
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
version: 18.x.x
|
||||
- condition: packaging.helm.enabled
|
||||
name: postgresql
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
version: 12.x.x
|
||||
- name: common
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
tags:
|
||||
- bitnami-common
|
||||
version: 2.x.x
|
||||
- condition: packaging.flux.enabled
|
||||
name: redis
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
version: 18.x.x
|
||||
- condition: packaging.helm.enabled
|
||||
name: postgresql
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
version: 13.x.x
|
||||
- name: common
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
tags:
|
||||
- bitnami-common
|
||||
version: 2.x.x
|
||||
description: Kubeapps is a web-based UI for launching and managing applications on Kubernetes. It allows users to deploy trusted applications and operators to control users access to the cluster.
|
||||
home: https://bitnami.com
|
||||
icon: https://bitnami.com/assets/stacks/kubeapps/img/kubeapps-stack-220x234.png
|
||||
keywords:
|
||||
- helm
|
||||
- dashboard
|
||||
- service catalog
|
||||
- deployment
|
||||
- helm
|
||||
- dashboard
|
||||
- service catalog
|
||||
- deployment
|
||||
kubeVersion: '>=1.21.0-0'
|
||||
maintainers:
|
||||
- name: VMware, Inc.
|
||||
url: https://github.com/bitnami/charts
|
||||
- name: VMware, Inc.
|
||||
url: https://github.com/bitnami/charts
|
||||
name: kubeapps
|
||||
sources:
|
||||
- https://github.com/bitnami/charts/tree/main/bitnami/kubeapps
|
||||
version: 13.1.1
|
||||
- https://github.com/bitnami/charts/tree/main/bitnami/kubeapps
|
||||
version: 14.0.0
|
||||
|
||||
+142
-87
@@ -108,86 +108,86 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
|
||||
|
||||
### Frontend parameters
|
||||
|
||||
| Name | Description | Value |
|
||||
| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------- | --------------------- |
|
||||
| `frontend.image.registry` | NGINX image registry | `docker.io` |
|
||||
| `frontend.image.repository` | NGINX image repository | `bitnami/nginx` |
|
||||
| `frontend.image.tag` | NGINX image tag (immutable tags are recommended) | `1.25.2-debian-11-r8` |
|
||||
| `frontend.image.digest` | NGINX image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `frontend.image.pullPolicy` | NGINX image pull policy | `IfNotPresent` |
|
||||
| `frontend.image.pullSecrets` | NGINX image pull secrets | `[]` |
|
||||
| `frontend.image.debug` | Enable image debug mode | `false` |
|
||||
| `frontend.proxypassAccessTokenAsBearer` | Use access_token as the Bearer when talking to the k8s api server | `false` |
|
||||
| `frontend.proxypassExtraSetHeader` | Set an additional proxy header for all requests proxied via NGINX | `""` |
|
||||
| `frontend.largeClientHeaderBuffers` | Set large_client_header_buffers in NGINX config | `4 32k` |
|
||||
| `frontend.replicaCount` | Number of frontend replicas to deploy | `2` |
|
||||
| `frontend.updateStrategy.type` | Frontend deployment strategy type. | `RollingUpdate` |
|
||||
| `frontend.resources.limits.cpu` | The CPU limits for the NGINX container | `250m` |
|
||||
| `frontend.resources.limits.memory` | The memory limits for the NGINX container | `128Mi` |
|
||||
| `frontend.resources.requests.cpu` | The requested CPU for the NGINX container | `25m` |
|
||||
| `frontend.resources.requests.memory` | The requested memory for the NGINX container | `32Mi` |
|
||||
| `frontend.extraEnvVars` | Array with extra environment variables to add to the NGINX container | `[]` |
|
||||
| `frontend.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for the NGINX container | `""` |
|
||||
| `frontend.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for the NGINX container | `""` |
|
||||
| `frontend.containerPorts.http` | NGINX HTTP container port | `8080` |
|
||||
| `frontend.podSecurityContext.enabled` | Enabled frontend pods' Security Context | `true` |
|
||||
| `frontend.podSecurityContext.fsGroup` | Set frontend pod's Security Context fsGroup | `1001` |
|
||||
| `frontend.containerSecurityContext.enabled` | Enabled NGINX containers' Security Context | `true` |
|
||||
| `frontend.containerSecurityContext.runAsUser` | Set NGINX container's Security Context runAsUser | `1001` |
|
||||
| `frontend.containerSecurityContext.runAsNonRoot` | Set NGINX container's Security Context runAsNonRoot | `true` |
|
||||
| `frontend.livenessProbe.enabled` | Enable livenessProbe | `true` |
|
||||
| `frontend.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `60` |
|
||||
| `frontend.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
||||
| `frontend.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
||||
| `frontend.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
||||
| `frontend.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
||||
| `frontend.readinessProbe.enabled` | Enable readinessProbe | `true` |
|
||||
| `frontend.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `0` |
|
||||
| `frontend.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
||||
| `frontend.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
||||
| `frontend.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
||||
| `frontend.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
||||
| `frontend.startupProbe.enabled` | Enable startupProbe | `false` |
|
||||
| `frontend.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `0` |
|
||||
| `frontend.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
||||
| `frontend.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
|
||||
| `frontend.startupProbe.failureThreshold` | Failure threshold for startupProbe | `6` |
|
||||
| `frontend.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
||||
| `frontend.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
||||
| `frontend.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
||||
| `frontend.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
||||
| `frontend.lifecycleHooks` | Custom lifecycle hooks for frontend containers | `{}` |
|
||||
| `frontend.command` | Override default container command (useful when using custom images) | `[]` |
|
||||
| `frontend.args` | Override default container args (useful when using custom images) | `[]` |
|
||||
| `frontend.podLabels` | Extra labels for frontend pods | `{}` |
|
||||
| `frontend.podAnnotations` | Annotations for frontend pods | `{}` |
|
||||
| `frontend.podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||
| `frontend.podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
||||
| `frontend.nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||
| `frontend.nodeAffinityPreset.key` | Node label key to match. Ignored if `affinity` is set | `""` |
|
||||
| `frontend.nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set | `[]` |
|
||||
| `frontend.affinity` | Affinity for pod assignment | `{}` |
|
||||
| `frontend.nodeSelector` | Node labels for pod assignment | `{}` |
|
||||
| `frontend.tolerations` | Tolerations for pod assignment | `[]` |
|
||||
| `frontend.priorityClassName` | Priority class name for frontend pods | `""` |
|
||||
| `frontend.schedulerName` | Name of the k8s scheduler (other than default) | `""` |
|
||||
| `frontend.topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` |
|
||||
| `frontend.hostAliases` | Custom host aliases for frontend pods | `[]` |
|
||||
| `frontend.extraVolumes` | Optionally specify extra list of additional volumes for frontend pods | `[]` |
|
||||
| `frontend.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for frontend container(s) | `[]` |
|
||||
| `frontend.sidecars` | Add additional sidecar containers to the frontend pod | `[]` |
|
||||
| `frontend.initContainers` | Add additional init containers to the frontend pods | `[]` |
|
||||
| `frontend.service.type` | Frontend service type | `ClusterIP` |
|
||||
| `frontend.service.ports.http` | Frontend service HTTP port | `80` |
|
||||
| `frontend.service.nodePorts.http` | Node port for HTTP | `""` |
|
||||
| `frontend.service.clusterIP` | Frontend service Cluster IP | `""` |
|
||||
| `frontend.service.loadBalancerIP` | Frontend service Load Balancer IP | `""` |
|
||||
| `frontend.service.loadBalancerSourceRanges` | Frontend service Load Balancer sources | `[]` |
|
||||
| `frontend.service.externalTrafficPolicy` | Frontend service external traffic policy | `Cluster` |
|
||||
| `frontend.service.extraPorts` | Extra ports to expose (normally used with the `sidecar` value) | `[]` |
|
||||
| `frontend.service.annotations` | Additional custom annotations for frontend service | `{}` |
|
||||
| `frontend.service.sessionAffinity` | Session Affinity for Kubernetes service, can be "None" or "ClientIP" | `None` |
|
||||
| `frontend.service.sessionAffinityConfig` | Additional settings for the sessionAffinity | `{}` |
|
||||
| Name | Description | Value |
|
||||
| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------- | ---------------------- |
|
||||
| `frontend.image.registry` | NGINX image registry | `docker.io` |
|
||||
| `frontend.image.repository` | NGINX image repository | `bitnami/nginx` |
|
||||
| `frontend.image.tag` | NGINX image tag (immutable tags are recommended) | `1.25.2-debian-11-r45` |
|
||||
| `frontend.image.digest` | NGINX image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `frontend.image.pullPolicy` | NGINX image pull policy | `IfNotPresent` |
|
||||
| `frontend.image.pullSecrets` | NGINX image pull secrets | `[]` |
|
||||
| `frontend.image.debug` | Enable image debug mode | `false` |
|
||||
| `frontend.proxypassAccessTokenAsBearer` | Use access_token as the Bearer when talking to the k8s api server | `false` |
|
||||
| `frontend.proxypassExtraSetHeader` | Set an additional proxy header for all requests proxied via NGINX | `""` |
|
||||
| `frontend.largeClientHeaderBuffers` | Set large_client_header_buffers in NGINX config | `4 32k` |
|
||||
| `frontend.replicaCount` | Number of frontend replicas to deploy | `2` |
|
||||
| `frontend.updateStrategy.type` | Frontend deployment strategy type. | `RollingUpdate` |
|
||||
| `frontend.resources.limits.cpu` | The CPU limits for the NGINX container | `250m` |
|
||||
| `frontend.resources.limits.memory` | The memory limits for the NGINX container | `128Mi` |
|
||||
| `frontend.resources.requests.cpu` | The requested CPU for the NGINX container | `25m` |
|
||||
| `frontend.resources.requests.memory` | The requested memory for the NGINX container | `32Mi` |
|
||||
| `frontend.extraEnvVars` | Array with extra environment variables to add to the NGINX container | `[]` |
|
||||
| `frontend.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for the NGINX container | `""` |
|
||||
| `frontend.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for the NGINX container | `""` |
|
||||
| `frontend.containerPorts.http` | NGINX HTTP container port | `8080` |
|
||||
| `frontend.podSecurityContext.enabled` | Enabled frontend pods' Security Context | `true` |
|
||||
| `frontend.podSecurityContext.fsGroup` | Set frontend pod's Security Context fsGroup | `1001` |
|
||||
| `frontend.containerSecurityContext.enabled` | Enabled NGINX containers' Security Context | `true` |
|
||||
| `frontend.containerSecurityContext.runAsUser` | Set NGINX container's Security Context runAsUser | `1001` |
|
||||
| `frontend.containerSecurityContext.runAsNonRoot` | Set NGINX container's Security Context runAsNonRoot | `true` |
|
||||
| `frontend.livenessProbe.enabled` | Enable livenessProbe | `true` |
|
||||
| `frontend.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `60` |
|
||||
| `frontend.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
||||
| `frontend.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
||||
| `frontend.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
||||
| `frontend.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
||||
| `frontend.readinessProbe.enabled` | Enable readinessProbe | `true` |
|
||||
| `frontend.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `0` |
|
||||
| `frontend.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
||||
| `frontend.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
||||
| `frontend.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
||||
| `frontend.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
||||
| `frontend.startupProbe.enabled` | Enable startupProbe | `false` |
|
||||
| `frontend.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `0` |
|
||||
| `frontend.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
||||
| `frontend.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
|
||||
| `frontend.startupProbe.failureThreshold` | Failure threshold for startupProbe | `6` |
|
||||
| `frontend.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
||||
| `frontend.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
||||
| `frontend.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
||||
| `frontend.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
||||
| `frontend.lifecycleHooks` | Custom lifecycle hooks for frontend containers | `{}` |
|
||||
| `frontend.command` | Override default container command (useful when using custom images) | `[]` |
|
||||
| `frontend.args` | Override default container args (useful when using custom images) | `[]` |
|
||||
| `frontend.podLabels` | Extra labels for frontend pods | `{}` |
|
||||
| `frontend.podAnnotations` | Annotations for frontend pods | `{}` |
|
||||
| `frontend.podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||
| `frontend.podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
||||
| `frontend.nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
||||
| `frontend.nodeAffinityPreset.key` | Node label key to match. Ignored if `affinity` is set | `""` |
|
||||
| `frontend.nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set | `[]` |
|
||||
| `frontend.affinity` | Affinity for pod assignment | `{}` |
|
||||
| `frontend.nodeSelector` | Node labels for pod assignment | `{}` |
|
||||
| `frontend.tolerations` | Tolerations for pod assignment | `[]` |
|
||||
| `frontend.priorityClassName` | Priority class name for frontend pods | `""` |
|
||||
| `frontend.schedulerName` | Name of the k8s scheduler (other than default) | `""` |
|
||||
| `frontend.topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` |
|
||||
| `frontend.hostAliases` | Custom host aliases for frontend pods | `[]` |
|
||||
| `frontend.extraVolumes` | Optionally specify extra list of additional volumes for frontend pods | `[]` |
|
||||
| `frontend.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for frontend container(s) | `[]` |
|
||||
| `frontend.sidecars` | Add additional sidecar containers to the frontend pod | `[]` |
|
||||
| `frontend.initContainers` | Add additional init containers to the frontend pods | `[]` |
|
||||
| `frontend.service.type` | Frontend service type | `ClusterIP` |
|
||||
| `frontend.service.ports.http` | Frontend service HTTP port | `80` |
|
||||
| `frontend.service.nodePorts.http` | Node port for HTTP | `""` |
|
||||
| `frontend.service.clusterIP` | Frontend service Cluster IP | `""` |
|
||||
| `frontend.service.loadBalancerIP` | Frontend service Load Balancer IP | `""` |
|
||||
| `frontend.service.loadBalancerSourceRanges` | Frontend service Load Balancer sources | `[]` |
|
||||
| `frontend.service.externalTrafficPolicy` | Frontend service external traffic policy | `Cluster` |
|
||||
| `frontend.service.extraPorts` | Extra ports to expose (normally used with the `sidecar` value) | `[]` |
|
||||
| `frontend.service.annotations` | Additional custom annotations for frontend service | `{}` |
|
||||
| `frontend.service.sessionAffinity` | Session Affinity for Kubernetes service, can be "None" or "ClientIP" | `None` |
|
||||
| `frontend.service.sessionAffinityConfig` | Additional settings for the sessionAffinity | `{}` |
|
||||
|
||||
### Dashboard parameters
|
||||
|
||||
@@ -196,7 +196,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
|
||||
| `dashboard.enabled` | Specifies whether Kubeapps Dashboard should be deployed or not | `true` |
|
||||
| `dashboard.image.registry` | Dashboard image registry | `docker.io` |
|
||||
| `dashboard.image.repository` | Dashboard image repository | `bitnami/kubeapps-dashboard` |
|
||||
| `dashboard.image.tag` | Dashboard image tag (immutable tags are recommended) | `2.8.0-debian-11-r50` |
|
||||
| `dashboard.image.tag` | Dashboard image tag (immutable tags are recommended) | `2.9.0-debian-11-r11` |
|
||||
| `dashboard.image.digest` | Dashboard image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `dashboard.image.pullPolicy` | Dashboard image pull policy | `IfNotPresent` |
|
||||
| `dashboard.image.pullSecrets` | Dashboard image pull secrets | `[]` |
|
||||
@@ -275,13 +275,13 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
|
||||
| ----------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------- |
|
||||
| `apprepository.image.registry` | Kubeapps AppRepository Controller image registry | `docker.io` |
|
||||
| `apprepository.image.repository` | Kubeapps AppRepository Controller image repository | `bitnami/kubeapps-apprepository-controller` |
|
||||
| `apprepository.image.tag` | Kubeapps AppRepository Controller image tag (immutable tags are recommended) | `2.8.0-debian-11-r20` |
|
||||
| `apprepository.image.tag` | Kubeapps AppRepository Controller image tag (immutable tags are recommended) | `2.9.0-debian-11-r7` |
|
||||
| `apprepository.image.digest` | Kubeapps AppRepository Controller image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `apprepository.image.pullPolicy` | Kubeapps AppRepository Controller image pull policy | `IfNotPresent` |
|
||||
| `apprepository.image.pullSecrets` | Kubeapps AppRepository Controller image pull secrets | `[]` |
|
||||
| `apprepository.syncImage.registry` | Kubeapps Asset Syncer image registry | `docker.io` |
|
||||
| `apprepository.syncImage.repository` | Kubeapps Asset Syncer image repository | `bitnami/kubeapps-asset-syncer` |
|
||||
| `apprepository.syncImage.tag` | Kubeapps Asset Syncer image tag (immutable tags are recommended) | `2.8.0-debian-11-r20` |
|
||||
| `apprepository.syncImage.tag` | Kubeapps Asset Syncer image tag (immutable tags are recommended) | `2.9.0-debian-11-r7` |
|
||||
| `apprepository.syncImage.digest` | Kubeapps Asset Syncer image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `apprepository.syncImage.pullPolicy` | Kubeapps Asset Syncer image pull policy | `IfNotPresent` |
|
||||
| `apprepository.syncImage.pullSecrets` | Kubeapps Asset Syncer image pull secrets | `[]` |
|
||||
@@ -343,7 +343,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
|
||||
| `authProxy.enabled` | Specifies whether Kubeapps should configure OAuth login/logout | `false` |
|
||||
| `authProxy.image.registry` | OAuth2 Proxy image registry | `docker.io` |
|
||||
| `authProxy.image.repository` | OAuth2 Proxy image repository | `bitnami/oauth2-proxy` |
|
||||
| `authProxy.image.tag` | OAuth2 Proxy image tag (immutable tags are recommended) | `7.4.0-debian-11-r281` |
|
||||
| `authProxy.image.tag` | OAuth2 Proxy image tag (immutable tags are recommended) | `7.5.1-debian-11-r7` |
|
||||
| `authProxy.image.digest` | OAuth2 Proxy image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `authProxy.image.pullPolicy` | OAuth2 Proxy image pull policy | `IfNotPresent` |
|
||||
| `authProxy.image.pullSecrets` | OAuth2 Proxy image pull secrets | `[]` |
|
||||
@@ -383,7 +383,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
|
||||
| `pinnipedProxy.enabled` | Specifies whether Kubeapps should configure Pinniped Proxy | `false` |
|
||||
| `pinnipedProxy.image.registry` | Pinniped Proxy image registry | `docker.io` |
|
||||
| `pinnipedProxy.image.repository` | Pinniped Proxy image repository | `bitnami/kubeapps-pinniped-proxy` |
|
||||
| `pinnipedProxy.image.tag` | Pinniped Proxy image tag (immutable tags are recommended) | `2.8.0-debian-11-r49` |
|
||||
| `pinnipedProxy.image.tag` | Pinniped Proxy image tag (immutable tags are recommended) | `2.9.0-debian-11-r8` |
|
||||
| `pinnipedProxy.image.digest` | Pinniped Proxy image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `pinnipedProxy.image.pullPolicy` | Pinniped Proxy image pull policy | `IfNotPresent` |
|
||||
| `pinnipedProxy.image.pullSecrets` | Pinniped Proxy image pull secrets | `[]` |
|
||||
@@ -463,7 +463,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
|
||||
| `kubeappsapis.pluginConfig.resources.packages.v1alpha1.trustedNamespaces.headerPattern` | Optional header pattern for trusted namespaces | `""` |
|
||||
| `kubeappsapis.image.registry` | Kubeapps-APIs image registry | `docker.io` |
|
||||
| `kubeappsapis.image.repository` | Kubeapps-APIs image repository | `bitnami/kubeapps-apis` |
|
||||
| `kubeappsapis.image.tag` | Kubeapps-APIs image tag (immutable tags are recommended) | `2.8.0-debian-11-r49` |
|
||||
| `kubeappsapis.image.tag` | Kubeapps-APIs image tag (immutable tags are recommended) | `2.9.0-debian-11-r7` |
|
||||
| `kubeappsapis.image.digest` | Kubeapps-APIs image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `kubeappsapis.image.pullPolicy` | Kubeapps-APIs image pull policy | `IfNotPresent` |
|
||||
| `kubeappsapis.image.pullSecrets` | Kubeapps-APIs image pull secrets | `[]` |
|
||||
@@ -535,6 +535,57 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
|
||||
| `kubeappsapis.serviceAccount.automountServiceAccountToken` | Automount service account token for the server service account | `true` |
|
||||
| `kubeappsapis.serviceAccount.annotations` | Annotations for service account. Evaluated as a template. Only used if `create` is `true`. | `{}` |
|
||||
|
||||
### OCI Catalog chart configuration
|
||||
|
||||
| Name | Description | Value |
|
||||
| -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- | ------------------------------ |
|
||||
| `ociCatalog.enabled` | Enable the OCI catalog gRPC service for cataloging | `false` |
|
||||
| `ociCatalog.image.registry` | OCI Catalog image registry | `docker.io` |
|
||||
| `ociCatalog.image.repository` | OCI Catalog image repository | `bitnami/kubeapps-oci-catalog` |
|
||||
| `ociCatalog.image.tag` | OCI Catalog image tag (immutable tags are recommended) | `2.9.0-debian-11-r4` |
|
||||
| `ociCatalog.image.digest` | OCI Catalog image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
||||
| `ociCatalog.image.pullPolicy` | OCI Catalog image pull policy | `IfNotPresent` |
|
||||
| `ociCatalog.image.pullSecrets` | OCI Catalog image pull secrets | `[]` |
|
||||
| `ociCatalog.image.debug` | Enable image debug mode | `false` |
|
||||
| `ociCatalog.extraFlags` | Additional command line flags for OCI Catalog | `[]` |
|
||||
| `ociCatalog.extraEnvVars` | Array with extra environment variables to add to the oci-catalog container | `[]` |
|
||||
| `ociCatalog.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for the OCI Catalog container | `""` |
|
||||
| `ociCatalog.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for the OCI Catalog container | `""` |
|
||||
| `ociCatalog.containerPorts.grpc` | OCI Catalog gRPC container port | `50061` |
|
||||
| `ociCatalog.resources.limits.cpu` | The CPU limits for the OCI Catalog container | `250m` |
|
||||
| `ociCatalog.resources.limits.memory` | The memory limits for the OCI Catalog container | `256Mi` |
|
||||
| `ociCatalog.resources.requests.cpu` | The requested CPU for the OCI Catalog container | `25m` |
|
||||
| `ociCatalog.resources.requests.memory` | The requested memory for the OCI Catalog container | `32Mi` |
|
||||
| `ociCatalog.containerSecurityContext.enabled` | Enabled OCI Catalog containers' Security Context | `true` |
|
||||
| `ociCatalog.containerSecurityContext.runAsUser` | Set OCI Catalog container's Security Context runAsUser | `1001` |
|
||||
| `ociCatalog.containerSecurityContext.runAsNonRoot` | Set OCI Catalog container's Security Context runAsNonRoot | `true` |
|
||||
| `ociCatalog.livenessProbe.enabled` | Enable livenessProbe | `true` |
|
||||
| `ociCatalog.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `60` |
|
||||
| `ociCatalog.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
||||
| `ociCatalog.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
||||
| `ociCatalog.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
||||
| `ociCatalog.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
||||
| `ociCatalog.readinessProbe.enabled` | Enable readinessProbe | `true` |
|
||||
| `ociCatalog.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `0` |
|
||||
| `ociCatalog.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
||||
| `ociCatalog.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
||||
| `ociCatalog.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
||||
| `ociCatalog.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
||||
| `ociCatalog.startupProbe.enabled` | Enable startupProbe | `false` |
|
||||
| `ociCatalog.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `0` |
|
||||
| `ociCatalog.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
||||
| `ociCatalog.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
|
||||
| `ociCatalog.startupProbe.failureThreshold` | Failure threshold for startupProbe | `6` |
|
||||
| `ociCatalog.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
||||
| `ociCatalog.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
||||
| `ociCatalog.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
||||
| `ociCatalog.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
||||
| `ociCatalog.lifecycleHooks` | Custom lifecycle hooks for OCI Catalog containers | `{}` |
|
||||
| `ociCatalog.command` | Override default container command (useful when using custom images) | `[]` |
|
||||
| `ociCatalog.args` | Override default container args (useful when using custom images) | `[]` |
|
||||
| `ociCatalog.extraVolumes` | Optionally specify extra list of additional volumes for the OCI Catalog pod(s) | `[]` |
|
||||
| `ociCatalog.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the OCI Catalog container(s) | `[]` |
|
||||
|
||||
### Redis® chart configuration
|
||||
|
||||
| Name | Description | Value |
|
||||
@@ -658,6 +709,10 @@ helm upgrade $RELEASE_NAME oci://registry-1.docker.io/bitnamicharts/kubeapps
|
||||
|
||||
If you find issues upgrading Kubeapps, check the [troubleshooting](#error-while-upgrading-the-chart) section.
|
||||
|
||||
### To 14.0.0
|
||||
|
||||
This major updates the PostgreSQL subchart to its newest major, 13.0.0. [Here](https://github.com/bitnami/charts/tree/master/bitnami/postgresql#to-1300) you can find more information about the changes introduced in that version.
|
||||
|
||||
### To 13.0.0
|
||||
|
||||
This major updates the Redis® subchart to its newest major, 18.0.0. [Here](https://github.com/bitnami/charts/tree/main/bitnami/redis#to-1800) you can find more information about the changes introduced in that version.
|
||||
@@ -1042,4 +1097,4 @@ Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
limitations under the License.
|
||||
|
||||
@@ -61,6 +61,13 @@ Return the proper kubeappsapis image name
|
||||
{{- include "common.images.image" (dict "imageRoot" .Values.kubeappsapis.image "global" .Values.global) -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Return the proper oci-catalog image name
|
||||
*/}}
|
||||
{{- define "kubeapps.ociCatalog.image" -}}
|
||||
{{- include "common.images.image" (dict "imageRoot" .Values.ociCatalog.image "global" .Values.global) -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create a default fully qualified app name for PostgreSQL dependency.
|
||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||
@@ -110,6 +117,13 @@ Create name for the apprepository-controller based on the fullname
|
||||
{{- printf "%s-internal-apprepository-controller" (include "common.names.fullname" .) | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create name for the apprepository-controller based on the namespace
|
||||
*/}}
|
||||
{{- define "kubeapps.apprepository.fullname.namespace" -}}
|
||||
{{- printf "%s-internal-apprepository-controller" (include "common.names.fullname.namespace" .) | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create name for the dashboard based on the fullname
|
||||
*/}}
|
||||
|
||||
@@ -23,12 +23,14 @@ spec:
|
||||
- {{ . }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if or $.Values.apprepository.containerSecurityContext.enabled $.Values.apprepository.initialReposProxy.enabled .nodeSelector }}
|
||||
{{- if or $.Values.apprepository.podSecurityContext.enabled $.Values.apprepository.containerSecurityContext.enabled $.Values.apprepository.initialReposProxy.enabled .nodeSelector .tolerations}}
|
||||
syncJobPodTemplate:
|
||||
spec:
|
||||
{{- if $.Values.apprepository.initialReposProxy.enabled }}
|
||||
{{- if or $.Values.apprepository.initialReposProxy.enabled $.Values.apprepository.containerSecurityContext.enabled }}
|
||||
containers:
|
||||
- env:
|
||||
-
|
||||
{{- if $.Values.apprepository.initialReposProxy.enabled }}
|
||||
env:
|
||||
- name: https_proxy
|
||||
value: {{ $.Values.apprepository.initialReposProxy.httpsProxy }}
|
||||
- name: http_proxy
|
||||
@@ -37,8 +39,11 @@ spec:
|
||||
value: {{ $.Values.apprepository.initialReposProxy.noProxy }}
|
||||
{{- end }}
|
||||
{{- if $.Values.apprepository.containerSecurityContext.enabled }}
|
||||
securityContext:
|
||||
runAsUser: {{ $.Values.apprepository.containerSecurityContext.runAsUser }}
|
||||
securityContext: {{- omit $.Values.apprepository.containerSecurityContext "enabled" | toYaml | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if $.Values.apprepository.podSecurityContext.enabled }}
|
||||
securityContext: {{- omit $.Values.apprepository.podSecurityContext "enabled" | toYaml | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- if .nodeSelector }}
|
||||
nodeSelector: {{- toYaml .nodeSelector | nindent 8 }}
|
||||
|
||||
@@ -123,6 +123,10 @@ spec:
|
||||
env:
|
||||
- name: REPO_SYNC_IMAGE
|
||||
value: {{ include "kubeapps.apprepository.syncImage" . }}
|
||||
{{- if .Values.ociCatalog.enabled }}
|
||||
- name: OCI_CATALOG_URL
|
||||
value: {{ printf "%s:%d" (include "kubeapps.kubeappsapis.fullname" .) (int .Values.ociCatalog.containerPorts.grpc) | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.apprepository.extraEnvVars }}
|
||||
{{- include "common.tplvalues.render" (dict "value" .Values.apprepository.extraEnvVars "context" $) | nindent 12 }}
|
||||
{{- end }}
|
||||
|
||||
@@ -5,6 +5,7 @@ SPDX-License-Identifier: APACHE-2.0
|
||||
|
||||
{{- if .Values.packaging.helm.enabled }}
|
||||
{{- if .Values.rbac.create -}}
|
||||
# Role for managing events, jobs and cronjobs in the release namespace
|
||||
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
|
||||
kind: Role
|
||||
metadata:
|
||||
@@ -40,6 +41,19 @@ rules:
|
||||
- jobs
|
||||
verbs:
|
||||
- create
|
||||
---
|
||||
# ClusterRole for managing AppRepository objects in every namespace,
|
||||
# so that we can update the finalizers on AppRepository objects
|
||||
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: {{ template "kubeapps.apprepository.fullname.namespace" . }}
|
||||
labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
|
||||
app.kubernetes.io/component: apprepository
|
||||
{{- if .Values.commonAnnotations }}
|
||||
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
|
||||
{{- end }}
|
||||
rules:
|
||||
- apiGroups:
|
||||
- kubeapps.com
|
||||
resources:
|
||||
@@ -48,8 +62,10 @@ rules:
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- update
|
||||
- watch
|
||||
- create
|
||||
- update
|
||||
- patch
|
||||
---
|
||||
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
|
||||
kind: RoleBinding
|
||||
@@ -70,6 +86,25 @@ subjects:
|
||||
name: {{ template "kubeapps.apprepository.serviceAccountName" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
---
|
||||
# ClusterRoleBinding for the apprepository controller SA
|
||||
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: {{ template "kubeapps.apprepository.fullname.namespace" . }}
|
||||
labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
|
||||
app.kubernetes.io/component: apprepository
|
||||
{{- if .Values.commonAnnotations }}
|
||||
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
|
||||
{{- end }}
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: {{ template "kubeapps.apprepository.fullname.namespace" . }}
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: {{ template "kubeapps.apprepository.serviceAccountName" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
---
|
||||
# Define role, but no binding, so users can be bound to this role
|
||||
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
|
||||
kind: Role
|
||||
|
||||
@@ -161,6 +161,10 @@ spec:
|
||||
secretKeyRef:
|
||||
key: postgres-password
|
||||
name: {{ include "kubeapps.postgresql.secretName" . }}
|
||||
{{- if .Values.ociCatalog.enabled }}
|
||||
- name: OCI_CATALOG_URL
|
||||
value: {{ printf ":%d" (int .Values.ociCatalog.containerPorts.grpc) | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeappsapis.extraEnvVars }}
|
||||
{{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.extraEnvVars "context" $) | nindent 12 }}
|
||||
@@ -184,7 +188,6 @@ spec:
|
||||
livenessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.kubeappsapis.livenessProbe "enabled") "context" $) | nindent 12 }}
|
||||
exec:
|
||||
command: ["grpc_health_probe", "-addr=:{{ .Values.kubeappsapis.containerPorts.http }}"]
|
||||
initialDelaySeconds: 10
|
||||
{{- end }}
|
||||
{{- if .Values.kubeappsapis.customReadinessProbe }}
|
||||
readinessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.customReadinessProbe "context" $) | nindent 12 }}
|
||||
@@ -192,7 +195,6 @@ spec:
|
||||
readinessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.kubeappsapis.readinessProbe "enabled") "context" $) | nindent 12 }}
|
||||
exec:
|
||||
command: ["grpc_health_probe", "-addr=:{{ .Values.kubeappsapis.containerPorts.http }}"]
|
||||
initialDelaySeconds: 5
|
||||
{{- end }}
|
||||
{{- if .Values.kubeappsapis.customStartupProbe }}
|
||||
startupProbe: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.customStartupProbe "context" $) | nindent 12 }}
|
||||
@@ -223,6 +225,88 @@ spec:
|
||||
{{- if .Values.kubeappsapis.extraVolumeMounts }}
|
||||
{{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.extraVolumeMounts "context" $) | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.ociCatalog.enabled }}
|
||||
- name: oci-catalog
|
||||
image: {{ include "kubeapps.ociCatalog.image" . }}
|
||||
imagePullPolicy: {{ .Values.ociCatalog.image.pullPolicy | quote }}
|
||||
{{- if .Values.ociCatalog.containerSecurityContext.enabled }}
|
||||
securityContext: {{- omit .Values.ociCatalog.containerSecurityContext "enabled" | toYaml | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeappsapis.lifecycleHooks }}
|
||||
lifecycle: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.lifecycleHooks "context" $) | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.diagnosticMode.enabled }}
|
||||
command: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.command "context" $) | nindent 12 }}
|
||||
{{- else if .Values.ociCatalog.command }}
|
||||
command: {{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.command "context" $) | nindent 12 }}
|
||||
{{- else }}
|
||||
command:
|
||||
- /oci-catalog
|
||||
{{- end }}
|
||||
{{- if .Values.diagnosticMode.enabled }}
|
||||
args: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.args "context" $) | nindent 12 }}
|
||||
{{- else if .Values.ociCatalog.args }}
|
||||
args: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.args "context" $) | nindent 12 }}
|
||||
{{- else }}
|
||||
args:
|
||||
{{- range .Values.ociCatalog.extraFlags }}
|
||||
- {{ . }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
env:
|
||||
- name: OCI_CATALOG_PORT
|
||||
value: {{ .Values.ociCatalog.containerPorts.grpc | quote }}
|
||||
- name: RUST_LOG
|
||||
# Use info,pinniped_proxy::pinniped=debug for module control.
|
||||
value: info
|
||||
{{- if .Values.ociCatalog.extraEnvVars }}
|
||||
{{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.extraEnvVars "context" $) | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if or .Values.ociCatalog.extraEnvVarsCM .Values.ociCatalog.extraEnvVarsSecret }}
|
||||
envFrom:
|
||||
{{- if .Values.ociCatalog.extraEnvVarsCM }}
|
||||
- configMapRef:
|
||||
name: {{ include "common.tplvalues.render" (dict "value" .Values.ociCatalog.extraEnvVarsCM "context" $) }}
|
||||
{{- end }}
|
||||
{{- if .Values.ociCatalog.extraEnvVarsSecret }}
|
||||
- secretRef:
|
||||
name: {{ include "common.tplvalues.render" (dict "value" .Values.ociCatalog.extraEnvVarsSecret "context" $) }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
ports:
|
||||
- name: grpc
|
||||
containerPort: {{ .Values.ociCatalog.containerPorts.grpc }}
|
||||
{{- if not .Values.diagnosticMode.enabled }}
|
||||
{{- if .Values.ociCatalog.customLivenessProbe }}
|
||||
livenessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.customLivenessProbe "context" $) | nindent 12 }}
|
||||
{{- else if .Values.ociCatalog.livenessProbe.enabled }}
|
||||
livenessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.kubeappsapis.livenessProbe "enabled") "context" $) | nindent 12 }}
|
||||
exec:
|
||||
command: ["grpc_health_probe", "-addr=:{{ .Values.ociCatalog.containerPorts.grpc }}"]
|
||||
{{- end }}
|
||||
{{- if .Values.ociCatalog.customReadinessProbe }}
|
||||
readinessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.customReadinessProbe "context" $) | nindent 12 }}
|
||||
{{- else if .Values.ociCatalog.readinessProbe.enabled }}
|
||||
readinessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.ociCatalog.readinessProbe "enabled") "context" $) | nindent 12 }}
|
||||
exec:
|
||||
command: ["grpc_health_probe", "-addr=:{{ .Values.ociCatalog.containerPorts.grpc }}"]
|
||||
{{- end }}
|
||||
{{- if .Values.ociCatalog.customStartupProbe }}
|
||||
startupProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.customStartupProbe "context" $) | nindent 12 }}
|
||||
{{- else if .Values.ociCatalog.startupProbe.enabled }}
|
||||
startupProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.ociCatalog.startupProbe "enabled") "context" $) | nindent 12 }}
|
||||
tcpSocket:
|
||||
port: grpc-http
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.ociCatalog.resources }}
|
||||
resources: {{- toYaml .Values.ociCatalog.resources | nindent 12 }}
|
||||
{{- end }}
|
||||
volumeMounts:
|
||||
{{- if .Values.ociCatalog.extraVolumeMounts }}
|
||||
{{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.extraVolumeMounts "context" $) | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeappsapis.sidecars }}
|
||||
{{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.sidecars "context" $) | trim | nindent 8 }}
|
||||
{{- end }}
|
||||
|
||||
@@ -22,5 +22,11 @@ spec:
|
||||
protocol: TCP
|
||||
name: grpc-http
|
||||
{{- $podLabels := include "common.tplvalues.merge" ( dict "values" ( list .Values.kubeappsapis.podLabels .Values.commonLabels ) "context" . ) }}
|
||||
{{- if .Values.ociCatalog.enabled }}
|
||||
- port: {{ .Values.ociCatalog.containerPorts.grpc }}
|
||||
targetPort: grpc
|
||||
protocol: TCP
|
||||
name: grpc
|
||||
{{- end }}
|
||||
selector: {{- include "common.labels.matchLabels" ( dict "customLabels" $podLabels "context" $ ) | nindent 4 }}
|
||||
app.kubernetes.io/component: kubeappsapis
|
||||
|
||||
+162
-11
@@ -208,7 +208,7 @@ frontend:
|
||||
image:
|
||||
registry: docker.io
|
||||
repository: bitnami/nginx
|
||||
tag: 1.25.2-debian-11-r8
|
||||
tag: 1.25.2-debian-11-r45
|
||||
digest: ""
|
||||
## Specify a imagePullPolicy
|
||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||
@@ -292,7 +292,7 @@ frontend:
|
||||
podSecurityContext:
|
||||
enabled: true
|
||||
fsGroup: 1001
|
||||
## Configure Container Security Context (only main container)
|
||||
## Configure Container Security Context for NGINX
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param frontend.containerSecurityContext.enabled Enabled NGINX containers' Security Context
|
||||
## @param frontend.containerSecurityContext.runAsUser Set NGINX container's Security Context runAsUser
|
||||
@@ -527,7 +527,7 @@ dashboard:
|
||||
image:
|
||||
registry: docker.io
|
||||
repository: bitnami/kubeapps-dashboard
|
||||
tag: 2.8.0-debian-11-r50
|
||||
tag: 2.9.0-debian-11-r11
|
||||
digest: ""
|
||||
## Specify a imagePullPolicy
|
||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||
@@ -643,7 +643,7 @@ dashboard:
|
||||
podSecurityContext:
|
||||
enabled: true
|
||||
fsGroup: 1001
|
||||
## Configure Container Security Context (only main container)
|
||||
## Configure Container Security Context for Dashboard
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param dashboard.containerSecurityContext.enabled Enabled Dashboard containers' Security Context
|
||||
## @param dashboard.containerSecurityContext.runAsUser Set Dashboard container's Security Context runAsUser
|
||||
@@ -834,7 +834,7 @@ apprepository:
|
||||
image:
|
||||
registry: docker.io
|
||||
repository: bitnami/kubeapps-apprepository-controller
|
||||
tag: 2.8.0-debian-11-r20
|
||||
tag: 2.9.0-debian-11-r7
|
||||
digest: ""
|
||||
## Specify a imagePullPolicy
|
||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||
@@ -861,7 +861,7 @@ apprepository:
|
||||
syncImage:
|
||||
registry: docker.io
|
||||
repository: bitnami/kubeapps-asset-syncer
|
||||
tag: 2.8.0-debian-11-r20
|
||||
tag: 2.9.0-debian-11-r7
|
||||
digest: ""
|
||||
## Specify a imagePullPolicy
|
||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||
@@ -990,7 +990,7 @@ apprepository:
|
||||
podSecurityContext:
|
||||
enabled: true
|
||||
fsGroup: 1001
|
||||
## Configure Container Security Context (only main container)
|
||||
## Configure Container Security Context for App Repository jobs
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param apprepository.containerSecurityContext.enabled Enabled AppRepository Controller containers' Security Context
|
||||
## @param apprepository.containerSecurityContext.runAsUser Set AppRepository Controller container's Security Context runAsUser
|
||||
@@ -1145,7 +1145,7 @@ authProxy:
|
||||
image:
|
||||
registry: docker.io
|
||||
repository: bitnami/oauth2-proxy
|
||||
tag: 7.4.0-debian-11-r281
|
||||
tag: 7.5.1-debian-11-r7
|
||||
digest: ""
|
||||
## Specify a imagePullPolicy
|
||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||
@@ -1283,7 +1283,7 @@ pinnipedProxy:
|
||||
image:
|
||||
registry: docker.io
|
||||
repository: bitnami/kubeapps-pinniped-proxy
|
||||
tag: 2.8.0-debian-11-r49
|
||||
tag: 2.9.0-debian-11-r8
|
||||
digest: ""
|
||||
## Specify a imagePullPolicy
|
||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||
@@ -1576,7 +1576,7 @@ kubeappsapis:
|
||||
image:
|
||||
registry: docker.io
|
||||
repository: bitnami/kubeapps-apis
|
||||
tag: 2.8.0-debian-11-r49
|
||||
tag: 2.9.0-debian-11-r7
|
||||
digest: ""
|
||||
## Specify a imagePullPolicy
|
||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||
@@ -1657,7 +1657,7 @@ kubeappsapis:
|
||||
podSecurityContext:
|
||||
enabled: true
|
||||
fsGroup: 1001
|
||||
## Configure Container Security Context (only main container)
|
||||
## Configure Container Security Context for Kubeapps APIs
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param kubeappsapis.containerSecurityContext.enabled Enabled KubeappsAPIs containers' Security Context
|
||||
## @param kubeappsapis.containerSecurityContext.runAsUser Set KubeappsAPIs container's Security Context runAsUser
|
||||
@@ -1843,6 +1843,157 @@ kubeappsapis:
|
||||
automountServiceAccountToken: true
|
||||
annotations: {}
|
||||
|
||||
## @section OCI Catalog chart configuration
|
||||
ociCatalog:
|
||||
## @param ociCatalog.enabled Enable the OCI catalog gRPC service for cataloging
|
||||
## OCI repositories
|
||||
enabled: false
|
||||
## Bitnami Kubeapps OCI Catalog image
|
||||
## ref: https://hub.docker.com/r/bitnami/kubeapps-ocicatalog/
|
||||
## @param ociCatalog.image.registry OCI Catalog image registry
|
||||
## @param ociCatalog.image.repository OCI Catalog image repository
|
||||
## @param ociCatalog.image.tag OCI Catalog image tag (immutable tags are recommended)
|
||||
## @param ociCatalog.image.digest OCI Catalog image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
|
||||
## @param ociCatalog.image.pullPolicy OCI Catalog image pull policy
|
||||
## @param ociCatalog.image.pullSecrets OCI Catalog image pull secrets
|
||||
## @param ociCatalog.image.debug Enable image debug mode
|
||||
##
|
||||
image:
|
||||
registry: docker.io
|
||||
repository: bitnami/kubeapps-oci-catalog
|
||||
tag: 2.9.0-debian-11-r4
|
||||
digest: ""
|
||||
## Specify a imagePullPolicy
|
||||
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
|
||||
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
|
||||
##
|
||||
pullPolicy: IfNotPresent
|
||||
## Optionally specify an array of imagePullSecrets.
|
||||
## Secrets must be manually created in the namespace.
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
||||
## e.g:
|
||||
## pullSecrets:
|
||||
## - myRegistryKeySecretName
|
||||
##
|
||||
pullSecrets: []
|
||||
## Enable debug mode
|
||||
##
|
||||
debug: false
|
||||
## @param ociCatalog.extraFlags Additional command line flags for OCI Catalog
|
||||
##
|
||||
extraFlags: []
|
||||
## @param ociCatalog.extraEnvVars Array with extra environment variables to add to the oci-catalog container
|
||||
## e.g:
|
||||
## extraEnvVars:
|
||||
## - name: FOO
|
||||
## value: "bar"
|
||||
##
|
||||
extraEnvVars: []
|
||||
## @param ociCatalog.extraEnvVarsCM Name of existing ConfigMap containing extra env vars for the OCI Catalog container
|
||||
##
|
||||
extraEnvVarsCM: ""
|
||||
## @param ociCatalog.extraEnvVarsSecret Name of existing Secret containing extra env vars for the OCI Catalog container
|
||||
##
|
||||
extraEnvVarsSecret: ""
|
||||
## @param ociCatalog.containerPorts.grpc OCI Catalog gRPC container port
|
||||
##
|
||||
containerPorts:
|
||||
grpc: 50061
|
||||
## OCI Catalog containers' resource requests and limits
|
||||
## ref: https://kubernetes.io/docs/user-guide/compute-resources/
|
||||
## @param ociCatalog.resources.limits.cpu The CPU limits for the OCI Catalog container
|
||||
## @param ociCatalog.resources.limits.memory The memory limits for the OCI Catalog container
|
||||
## @param ociCatalog.resources.requests.cpu The requested CPU for the OCI Catalog container
|
||||
## @param ociCatalog.resources.requests.memory The requested memory for the OCI Catalog container
|
||||
##
|
||||
resources:
|
||||
limits:
|
||||
cpu: 250m
|
||||
memory: 256Mi
|
||||
requests:
|
||||
cpu: 25m
|
||||
memory: 32Mi
|
||||
## Configure Container Security Context (only main container)
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param ociCatalog.containerSecurityContext.enabled Enabled OCI Catalog containers' Security Context
|
||||
## @param ociCatalog.containerSecurityContext.runAsUser Set OCI Catalog container's Security Context runAsUser
|
||||
## @param ociCatalog.containerSecurityContext.runAsNonRoot Set OCI Catalog container's Security Context runAsNonRoot
|
||||
##
|
||||
containerSecurityContext:
|
||||
enabled: true
|
||||
runAsUser: 1001
|
||||
runAsNonRoot: true
|
||||
## Configure extra options for OCI Catalog containers' liveness and readiness probes
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
|
||||
## @param ociCatalog.livenessProbe.enabled Enable livenessProbe
|
||||
## @param ociCatalog.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
|
||||
## @param ociCatalog.livenessProbe.periodSeconds Period seconds for livenessProbe
|
||||
## @param ociCatalog.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
|
||||
## @param ociCatalog.livenessProbe.failureThreshold Failure threshold for livenessProbe
|
||||
## @param ociCatalog.livenessProbe.successThreshold Success threshold for livenessProbe
|
||||
## OCI Catalog containers' liveness and readiness probes
|
||||
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
|
||||
##
|
||||
livenessProbe:
|
||||
enabled: true
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 6
|
||||
successThreshold: 1
|
||||
## @param ociCatalog.readinessProbe.enabled Enable readinessProbe
|
||||
## @param ociCatalog.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
|
||||
## @param ociCatalog.readinessProbe.periodSeconds Period seconds for readinessProbe
|
||||
## @param ociCatalog.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
|
||||
## @param ociCatalog.readinessProbe.failureThreshold Failure threshold for readinessProbe
|
||||
## @param ociCatalog.readinessProbe.successThreshold Success threshold for readinessProbe
|
||||
##
|
||||
readinessProbe:
|
||||
enabled: true
|
||||
initialDelaySeconds: 0
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 6
|
||||
successThreshold: 1
|
||||
## @param ociCatalog.startupProbe.enabled Enable startupProbe
|
||||
## @param ociCatalog.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
|
||||
## @param ociCatalog.startupProbe.periodSeconds Period seconds for startupProbe
|
||||
## @param ociCatalog.startupProbe.timeoutSeconds Timeout seconds for startupProbe
|
||||
## @param ociCatalog.startupProbe.failureThreshold Failure threshold for startupProbe
|
||||
## @param ociCatalog.startupProbe.successThreshold Success threshold for startupProbe
|
||||
##
|
||||
startupProbe:
|
||||
enabled: false
|
||||
initialDelaySeconds: 0
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 6
|
||||
successThreshold: 1
|
||||
## @param ociCatalog.customLivenessProbe Custom livenessProbe that overrides the default one
|
||||
##
|
||||
customLivenessProbe: {}
|
||||
## @param ociCatalog.customReadinessProbe Custom readinessProbe that overrides the default one
|
||||
##
|
||||
customReadinessProbe: {}
|
||||
## @param ociCatalog.customStartupProbe Custom startupProbe that overrides the default one
|
||||
##
|
||||
customStartupProbe: {}
|
||||
## @param ociCatalog.lifecycleHooks Custom lifecycle hooks for OCI Catalog containers
|
||||
##
|
||||
lifecycleHooks: {}
|
||||
## @param ociCatalog.command Override default container command (useful when using custom images)
|
||||
##
|
||||
command: []
|
||||
## @param ociCatalog.args Override default container args (useful when using custom images)
|
||||
##
|
||||
args: []
|
||||
## @param ociCatalog.extraVolumes Optionally specify extra list of additional volumes for the OCI Catalog pod(s)
|
||||
##
|
||||
extraVolumes: []
|
||||
## @param ociCatalog.extraVolumeMounts Optionally specify extra list of additional volumeMounts for the OCI Catalog container(s)
|
||||
##
|
||||
extraVolumeMounts: []
|
||||
|
||||
## @section Redis® chart configuration
|
||||
## ref: https://github.com/bitnami/charts/blob/main/bitnami/redis/values.yaml
|
||||
##
|
||||
|
||||
Reference in New Issue
Block a user