mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-21 16:10:34 +00:00
Compare commits
4
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
4a59718a34 | ||
|
|
0c0e73c57f | ||
|
|
dd6bc283c7 | ||
|
|
f3787856f6 |
@@ -11,12 +11,16 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
strategy:
|
strategy:
|
||||||
fail-fast: false
|
fail-fast: false
|
||||||
|
matrix:
|
||||||
|
globalnet: ['', 'globalnet']
|
||||||
steps:
|
steps:
|
||||||
- name: Check out the repository
|
- name: Check out the repository
|
||||||
uses: actions/checkout@v2
|
uses: actions/checkout@v2
|
||||||
|
|
||||||
- name: Run E2E deployment and tests
|
- name: Run E2E deployment and tests
|
||||||
uses: submariner-io/shipyard/gh-actions/e2e@devel
|
uses: submariner-io/shipyard/gh-actions/e2e@devel
|
||||||
|
with:
|
||||||
|
globalnet: ${{ matrix.globalnet }}
|
||||||
|
|
||||||
- name: Post mortem
|
- name: Post mortem
|
||||||
if: failure()
|
if: failure()
|
||||||
|
|||||||
@@ -22,9 +22,8 @@ e2e: E2E_ARGS=cluster1 cluster2
|
|||||||
preload-images:
|
preload-images:
|
||||||
source $(SCRIPTS_DIR)/lib/debug_functions; \
|
source $(SCRIPTS_DIR)/lib/debug_functions; \
|
||||||
source $(SCRIPTS_DIR)/lib/deploy_funcs; \
|
source $(SCRIPTS_DIR)/lib/deploy_funcs; \
|
||||||
source $(SCRIPTS_DIR)/lib/version; \
|
|
||||||
set -e; \
|
set -e; \
|
||||||
for image in submariner submariner-route-agent submariner-operator lighthouse-agent submariner-globalnet lighthouse-coredns; do \
|
for image in submariner-gateway submariner-route-agent submariner-operator lighthouse-agent submariner-globalnet lighthouse-coredns; do \
|
||||||
import_image quay.io/submariner/$${image}; \
|
import_image quay.io/submariner/$${image}; \
|
||||||
done
|
done
|
||||||
|
|
||||||
|
|||||||
@@ -105,7 +105,7 @@ spec:
|
|||||||
type: string
|
type: string
|
||||||
colorCodes:
|
colorCodes:
|
||||||
type: string
|
type: string
|
||||||
engineDaemonSetStatus:
|
gatewayDaemonSetStatus:
|
||||||
properties:
|
properties:
|
||||||
lastResourceVersion:
|
lastResourceVersion:
|
||||||
type: string
|
type: string
|
||||||
|
|||||||
@@ -92,6 +92,13 @@ questions:
|
|||||||
label: "Service CIDR"
|
label: "Service CIDR"
|
||||||
group: "CIDR Configuration"
|
group: "CIDR Configuration"
|
||||||
required: true
|
required: true
|
||||||
|
- variable: submariner.globalCidr
|
||||||
|
default: ""
|
||||||
|
description: "Enter the globalnet CIDR (i.e. 169.254.1.0/24) for this cluster if using globalnet"
|
||||||
|
type: string
|
||||||
|
label: "Globalnet CIDR"
|
||||||
|
group: "CIDR Configuration"
|
||||||
|
required: false
|
||||||
- variable: submariner.natEnabled
|
- variable: submariner.natEnabled
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
Submariner is now installed.
|
Submariner is now installed.
|
||||||
|
|
||||||
{{- if .Values.engine.nodeSelectorEnabled }}
|
{{- if .Values.gateway.nodeSelectorEnabled }}
|
||||||
If you haven't done so yet, please label a node as `submariner.io/gateway=true` to elect it for running Submariner.
|
If you haven't done so yet, please label a node as `submariner.io/gateway=true` to elect it for running Submariner.
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
|
|||||||
@@ -43,13 +43,13 @@ Create the name of the submariner-operator service account to use
|
|||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Create the name of the submariner-engine service account to use
|
Create the name of the submariner-gateway service account to use
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "submariner.engineServiceAccountName" -}}
|
{{- define "submariner.gatewayServiceAccountName" -}}
|
||||||
{{- if .Values.serviceAccounts.engine.create -}}
|
{{- if .Values.serviceAccounts.gateway.create -}}
|
||||||
{{ default "submariner-engine" .Values.serviceAccounts.engine.name }}
|
{{ default "submariner-gateway" .Values.serviceAccounts.gateway.name }}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{ default "default" .Values.serviceAccounts.engine.name }}
|
{{ default "default" .Values.serviceAccounts.gateway.name }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
|
|||||||
@@ -6,7 +6,7 @@ metadata:
|
|||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
chart: {{ template "submariner.chart" . }}
|
chart: {{ template "submariner.chart" . }}
|
||||||
app: {{ template "submariner.fullname" . }}
|
app: {{ template "submariner.fullname" . }}
|
||||||
component: engine
|
component: gateway
|
||||||
name: {{ template "submariner.fullname" . }}
|
name: {{ template "submariner.fullname" . }}
|
||||||
spec:
|
spec:
|
||||||
progressDeadlineSeconds: 600
|
progressDeadlineSeconds: 600
|
||||||
|
|||||||
@@ -86,7 +86,7 @@ roleRef:
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: Role
|
kind: Role
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -166,7 +166,7 @@ rules:
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -175,10 +175,10 @@ metadata:
|
|||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: Role
|
kind: Role
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "submariner.engineServiceAccountName" . }}
|
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
@@ -458,7 +458,7 @@ roleRef:
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -525,7 +525,7 @@ rules:
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -534,10 +534,10 @@ metadata:
|
|||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "submariner.engineServiceAccountName" . }}
|
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
|||||||
@@ -22,4 +22,5 @@ spec:
|
|||||||
repository: {{ .Values.submariner.images.repository }}
|
repository: {{ .Values.submariner.images.repository }}
|
||||||
version: {{ .Values.submariner.images.tag }}
|
version: {{ .Values.submariner.images.tag }}
|
||||||
serviceCIDR: "{{ .Values.submariner.serviceCidr }}"
|
serviceCIDR: "{{ .Values.submariner.serviceCidr }}"
|
||||||
|
globalCIDR: "{{ .Values.submariner.globalCidr }}"
|
||||||
serviceDiscoveryEnabled: {{ .Values.submariner.serviceDiscovery }}
|
serviceDiscoveryEnabled: {{ .Values.submariner.serviceDiscovery }}
|
||||||
|
|||||||
@@ -10,11 +10,11 @@ metadata:
|
|||||||
app: {{ template "submariner.name" . }}
|
app: {{ template "submariner.name" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
---
|
---
|
||||||
{{- if .Values.serviceAccounts.engine.create }}
|
{{- if .Values.serviceAccounts.gateway.create }}
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.engineServiceAccountName" . }}
|
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
|
|||||||
@@ -37,15 +37,15 @@ operator:
|
|||||||
resources: {}
|
resources: {}
|
||||||
tolerations: []
|
tolerations: []
|
||||||
affinity: {}
|
affinity: {}
|
||||||
engine:
|
gateway:
|
||||||
image:
|
image:
|
||||||
repository: quay.io/submariner/submariner
|
repository: quay.io/submariner/submariner-gateway
|
||||||
tag: "0.7.0"
|
tag: "0.7.0"
|
||||||
serviceAccounts:
|
serviceAccounts:
|
||||||
operator:
|
operator:
|
||||||
create: true
|
create: true
|
||||||
name: ""
|
name: ""
|
||||||
engine:
|
gateway:
|
||||||
create: true
|
create: true
|
||||||
name: ""
|
name: ""
|
||||||
routeAgent:
|
routeAgent:
|
||||||
|
|||||||
+11
-11
@@ -1,22 +1,22 @@
|
|||||||
questions:
|
questions:
|
||||||
- variable: defaultEngineImage
|
- variable: defaultGatewayImage
|
||||||
default: true
|
default: true
|
||||||
description: "Use default Submariner Engine image or specify a custom one"
|
description: "Use default Submariner Gateway image or specify a custom one"
|
||||||
label: Use default submariner engine image
|
label: Use default submariner gateway image
|
||||||
type: boolean
|
type: boolean
|
||||||
show_subquestion_if: false
|
show_subquestion_if: false
|
||||||
group: "Container Images"
|
group: "Container Images"
|
||||||
subquestions:
|
subquestions:
|
||||||
- variable: engine.image.repository
|
- variable: gateway.image.repository
|
||||||
default: "quay.io/submariner/submariner"
|
default: "quay.io/submariner/submariner-gateway"
|
||||||
description: "Submariner Engine Image Repository"
|
description: "Submariner Gateway Image Repository"
|
||||||
type: string
|
type: string
|
||||||
label: Submariner Engine Image Repository
|
label: Submariner Gateway Image Repository
|
||||||
- variable: engine.image.tag
|
- variable: gateway.image.tag
|
||||||
default: "0.6.0"
|
default: "0.6.0"
|
||||||
description: "Submariner Engine Image Tag"
|
description: "Submariner Gateway Image Tag"
|
||||||
type: string
|
type: string
|
||||||
label: Submariner Engine Image Tag
|
label: Submariner Gateway Image Tag
|
||||||
- variable: defaultRouteAgentImage
|
- variable: defaultRouteAgentImage
|
||||||
default: true
|
default: true
|
||||||
description: "Use default Submariner Route Agent image or specify a custom one"
|
description: "Use default Submariner Route Agent image or specify a custom one"
|
||||||
@@ -35,7 +35,7 @@ questions:
|
|||||||
description: "Submariner Route Agent Image Tag"
|
description: "Submariner Route Agent Image Tag"
|
||||||
type: string
|
type: string
|
||||||
label: Submariner Route Agent Image Tag
|
label: Submariner Route Agent Image Tag
|
||||||
- variable: engine.nodeSelectorEnabled
|
- variable: gateway.nodeSelectorEnabled
|
||||||
default: true
|
default: true
|
||||||
description: "Restrict submariner to nodes labeled with submariner.io/gateway=true"
|
description: "Restrict submariner to nodes labeled with submariner.io/gateway=true"
|
||||||
label: Restrict gateway deployments to specific nodes
|
label: Restrict gateway deployments to specific nodes
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
Submariner is now installed.
|
Submariner is now installed.
|
||||||
|
|
||||||
{{- if .Values.engine.nodeSelectorEnabled }}
|
{{- if .Values.gateway.nodeSelectorEnabled }}
|
||||||
If you haven't done so yet, please label a node as `submariner.io/gateway=true` to elect it for running Submariner.
|
If you haven't done so yet, please label a node as `submariner.io/gateway=true` to elect it for running Submariner.
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
|
|||||||
@@ -32,13 +32,13 @@ Create chart name and version as used by the chart label.
|
|||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Create the name of the submariner-engine service account to use
|
Create the name of the submariner-gateway service account to use
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "submariner.engineServiceAccountName" -}}
|
{{- define "submariner.gatewayServiceAccountName" -}}
|
||||||
{{- if .Values.serviceAccounts.engine.create -}}
|
{{- if .Values.serviceAccounts.gateway.create -}}
|
||||||
{{ default "submariner-engine" .Values.serviceAccounts.engine.name }}
|
{{ default "submariner-gateway" .Values.serviceAccounts.gateway.name }}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{ default "default" .Values.serviceAccounts.engine.name }}
|
{{ default "default" .Values.serviceAccounts.gateway.name }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
|
|||||||
@@ -5,14 +5,14 @@ metadata:
|
|||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
chart: {{ template "submariner.chart" . }}
|
chart: {{ template "submariner.chart" . }}
|
||||||
app: {{ template "submariner.fullname" . }}-engine
|
app: {{ template "submariner.fullname" . }}-gateway
|
||||||
component: engine
|
component: gateway
|
||||||
name: {{ template "submariner.fullname" . }}-gateway
|
name: {{ template "submariner.fullname" . }}-gateway
|
||||||
spec:
|
spec:
|
||||||
revisionHistoryLimit: 5
|
revisionHistoryLimit: 5
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: {{ template "submariner.fullname" . }}-engine
|
app: {{ template "submariner.fullname" . }}-gateway
|
||||||
updateStrategy:
|
updateStrategy:
|
||||||
rollingUpdate:
|
rollingUpdate:
|
||||||
maxUnavailable: 1
|
maxUnavailable: 1
|
||||||
@@ -21,7 +21,7 @@ spec:
|
|||||||
metadata:
|
metadata:
|
||||||
creationTimestamp: null
|
creationTimestamp: null
|
||||||
labels:
|
labels:
|
||||||
app: {{ template "submariner.fullname" . }}-engine
|
app: {{ template "submariner.fullname" . }}-gateway
|
||||||
spec:
|
spec:
|
||||||
affinity:
|
affinity:
|
||||||
podAntiAffinity:
|
podAntiAffinity:
|
||||||
@@ -31,19 +31,19 @@ spec:
|
|||||||
- key: app
|
- key: app
|
||||||
operator: In
|
operator: In
|
||||||
values:
|
values:
|
||||||
- {{ template "submariner.fullname" . }}-engine
|
- {{ template "submariner.fullname" . }}-gateway
|
||||||
topologyKey: "kubernetes.io/hostname"
|
topologyKey: "kubernetes.io/hostname"
|
||||||
{{- with .Values.engine.affinity }}
|
{{- with .Values.gateway.affinity }}
|
||||||
{{ toYaml . | indent 8 }}
|
{{ toYaml . | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
{{- if .Values.engine.nodeSelectorEnabled }}
|
{{- if .Values.gateway.nodeSelectorEnabled }}
|
||||||
submariner.io/gateway: "true"
|
submariner.io/gateway: "true"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- with .Values.engine.nodeSelector }}
|
{{- with .Values.gateway.nodeSelector }}
|
||||||
{{ toYaml . | indent 8 }}
|
{{ toYaml . | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- with .Values.engine.tolerations }}
|
{{- with .Values.gateway.tolerations }}
|
||||||
tolerations:
|
tolerations:
|
||||||
{{ toYaml . | indent 8 }}
|
{{ toYaml . | indent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
@@ -112,11 +112,11 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: "spec.nodeName"
|
fieldPath: "spec.nodeName"
|
||||||
image: {{ .Values.engine.image.repository }}:{{ default .Chart.AppVersion .Values.engine.image.tag }}
|
image: {{ .Values.gateway.image.repository }}:{{ default .Chart.AppVersion .Values.gateway.image.tag }}
|
||||||
imagePullPolicy: {{ .Values.engine.image.pullPolicy }}
|
imagePullPolicy: {{ .Values.gateway.image.pullPolicy }}
|
||||||
name: submariner
|
name: submariner
|
||||||
resources:
|
resources:
|
||||||
{{ toYaml .Values.engine.resources | indent 10 }}
|
{{ toYaml .Values.gateway.resources | indent 10 }}
|
||||||
securityContext:
|
securityContext:
|
||||||
allowPrivilegeEscalation: true
|
allowPrivilegeEscalation: true
|
||||||
capabilities:
|
capabilities:
|
||||||
@@ -135,4 +135,4 @@ spec:
|
|||||||
schedulerName: default-scheduler
|
schedulerName: default-scheduler
|
||||||
securityContext: {}
|
securityContext: {}
|
||||||
terminationGracePeriodSeconds: 1
|
terminationGracePeriodSeconds: 1
|
||||||
serviceAccountName: {{ template "submariner.engineServiceAccountName" . }}
|
serviceAccountName: {{ template "submariner.gatewayServiceAccountName" . }}
|
||||||
|
|||||||
@@ -2,7 +2,7 @@
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: Role
|
kind: Role
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -82,7 +82,7 @@ rules:
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -91,10 +91,10 @@ metadata:
|
|||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: Role
|
kind: Role
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "submariner.engineServiceAccountName" . }}
|
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
@@ -299,7 +299,7 @@ subjects:
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -366,7 +366,7 @@ rules:
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -375,10 +375,10 @@ metadata:
|
|||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: {{ template "submariner.fullname" . }}:engine
|
name: {{ template "submariner.fullname" . }}:gateway
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "submariner.engineServiceAccountName" . }}
|
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
|||||||
@@ -1,8 +1,8 @@
|
|||||||
{{- if .Values.serviceAccounts.engine.create }}
|
{{- if .Values.serviceAccounts.gateway.create }}
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.engineServiceAccountName" . }}
|
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
|
|||||||
@@ -29,9 +29,9 @@ leadership:
|
|||||||
leaseDuration: 10
|
leaseDuration: 10
|
||||||
renewDeadline: 5
|
renewDeadline: 5
|
||||||
retryPeriod: 2
|
retryPeriod: 2
|
||||||
engine:
|
gateway:
|
||||||
image:
|
image:
|
||||||
repository: quay.io/submariner/submariner
|
repository: quay.io/submariner/submariner-gateway
|
||||||
tag: ""
|
tag: ""
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
resources: {}
|
resources: {}
|
||||||
@@ -65,7 +65,7 @@ lighthouseCoredns:
|
|||||||
tag: ""
|
tag: ""
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
serviceAccounts:
|
serviceAccounts:
|
||||||
engine:
|
gateway:
|
||||||
create: true
|
create: true
|
||||||
name: ""
|
name: ""
|
||||||
routeAgent:
|
routeAgent:
|
||||||
|
|||||||
Reference in New Issue
Block a user