mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-21 22:00:35 +00:00
Compare commits
2
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 Daniel Farrell
|
c422f45756 | ||
|
Daniel Farrell
|
44c1ad34ab |
@@ -1,2 +1,8 @@
|
|||||||
Periodic link aliveness CI detected a broken link. Please see the [periodic job
|
---
|
||||||
results](https://github.com/submariner-io/submariner-charts/actions?query=workflow%3APeriodic) for details.
|
name: Broken link detected by CI
|
||||||
|
labels: bug
|
||||||
|
---
|
||||||
|
|
||||||
|
<!-- Used by automation to raise an Issue when the periodic link aliveness tests detect a broken link. -->
|
||||||
|
|
||||||
|
Periodic link aliveness CI detected a broken link. Please see the job results for details.
|
||||||
|
|||||||
@@ -1,31 +0,0 @@
|
|||||||
---
|
|
||||||
name: Bug Report
|
|
||||||
about: Report a bug in Helm Charts
|
|
||||||
labels: bug
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
<!-- Please use this template while reporting a bug and provide as much info as
|
|
||||||
possible. Not doing so may result in your bug not being addressed in a timely
|
|
||||||
manner. Thanks!
|
|
||||||
|
|
||||||
If the matter is security related, please disclose it privately to the
|
|
||||||
Submariner Owners: https://github.com/orgs/submariner-io/teams/submariner-core
|
|
||||||
-->
|
|
||||||
|
|
||||||
|
|
||||||
**What happened**:
|
|
||||||
|
|
||||||
**What you expected to happen**:
|
|
||||||
|
|
||||||
**How to reproduce it (as minimally and precisely as possible)**:
|
|
||||||
|
|
||||||
**Anything else we need to know?**:
|
|
||||||
|
|
||||||
**Environment**:
|
|
||||||
- Diagnose information (use `subctl diagnose all`):
|
|
||||||
- Gather information (use `subctl gather`):
|
|
||||||
- Cloud provider or hardware configuration:
|
|
||||||
- Install tools:
|
|
||||||
- Network plugin and version (if this is a network-related bug):
|
|
||||||
- Others:
|
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
---
|
|
||||||
name: Enhancement Request
|
|
||||||
about: Suggest an enhancement to the Helm Charts project
|
|
||||||
labels: enhancement
|
|
||||||
|
|
||||||
---
|
|
||||||
<!-- Please only use this template for submitting enhancement requests -->
|
|
||||||
|
|
||||||
**What would you like to be added**:
|
|
||||||
|
|
||||||
**Why is this needed**:
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
---
|
|
||||||
name: Support Request
|
|
||||||
about: Support request or question relating to Helm Charts
|
|
||||||
labels: support
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
<!--
|
|
||||||
GitHub may not be the right place for support requests.
|
|
||||||
|
|
||||||
You can also post your question on the [Submariner
|
|
||||||
Slack](https://kubernetes.slack.com/archives/C010RJV694M) or the Submariner
|
|
||||||
[users](https://bit.ly/submariner-users) or
|
|
||||||
[developers](https://bit.ly/submariner-dev) mailing lists.
|
|
||||||
|
|
||||||
If the matter is security related, please disclose it privately to the
|
|
||||||
Submariner Owners: https://github.com/orgs/submariner-io/teams/submariner-core
|
|
||||||
-->
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
<!-- Thanks for sending a pull request! Here are some tips for you:
|
|
||||||
|
|
||||||
1. If this is your first time, please read our developer guide: https://submariner.io/development/
|
|
||||||
2. Ensure you have added the appropriate tests for your PR: https://submariner.io/development/code-review/#test-new-functionality
|
|
||||||
3. Read the code review guide to ease the review process: https://submariner.io/development/code-review/
|
|
||||||
4. If the PR is unfinished, mark it as a draft: https://submariner.io/development/code-review/#mark-work-in-progress-prs-as-drafts
|
|
||||||
5. If you are using CI to debug, use your private fork: https://submariner.io/development/code-review/#use-private-forks-for-debugging-prs-by-running-ci
|
|
||||||
6. Add labels to the PR as appropriate.
|
|
||||||
|
|
||||||
This template is based on the K8s/K8s template:
|
|
||||||
|
|
||||||
https://github.com/kubernetes/kubernetes/blob/master/.github/PULL_REQUEST_TEMPLATE.md
|
|
||||||
-->
|
|
||||||
+1
-1
@@ -2,7 +2,7 @@
|
|||||||
# Configuration for probot-stale - https://github.com/probot/stale
|
# Configuration for probot-stale - https://github.com/probot/stale
|
||||||
|
|
||||||
# Number of days of inactivity before an Issue becomes stale (pull request is overridden later)
|
# Number of days of inactivity before an Issue becomes stale (pull request is overridden later)
|
||||||
daysUntilStale: 120
|
daysUntilStale: 60
|
||||||
|
|
||||||
# Number of days of inactivity before an Issue or Pull Request with the stale label is closed.
|
# Number of days of inactivity before an Issue or Pull Request with the stale label is closed.
|
||||||
# Set to false to disable. If disabled, issues still need to be closed manually, but will remain marked as stale.
|
# Set to false to disable. If disabled, issues still need to be closed manually, but will remain marked as stale.
|
||||||
|
|||||||
@@ -1,14 +0,0 @@
|
|||||||
---
|
|
||||||
name: Branch Checks
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
target_branch:
|
|
||||||
name: PR targets branch
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Check that the PR targets release-0.12
|
|
||||||
if: ${{ github.base_ref != 'release-0.12' }}
|
|
||||||
run: exit 1
|
|
||||||
@@ -1,39 +0,0 @@
|
|||||||
---
|
|
||||||
name: PR Dependencies
|
|
||||||
|
|
||||||
on:
|
|
||||||
issues:
|
|
||||||
types:
|
|
||||||
- opened
|
|
||||||
- edited
|
|
||||||
- closed
|
|
||||||
- reopened
|
|
||||||
- synchronize
|
|
||||||
pull_request_target:
|
|
||||||
types:
|
|
||||||
- opened
|
|
||||||
- edited
|
|
||||||
- closed
|
|
||||||
- reopened
|
|
||||||
- synchronize
|
|
||||||
schedule:
|
|
||||||
- cron: '0 0/6 * * *' # every 6 hours
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
check:
|
|
||||||
name: Check Dependencies
|
|
||||||
if: github.repository_owner == 'submariner-io'
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- uses: z0al/dependent-issues@950226e7ca8fc43dc209a7febf67c655af3bdb43
|
|
||||||
env:
|
|
||||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
||||||
with:
|
|
||||||
# The label to use to mark dependent issues
|
|
||||||
label: dependent
|
|
||||||
|
|
||||||
# Enable checking for dependencies in issues.
|
|
||||||
check_issues: on
|
|
||||||
|
|
||||||
# A comma-separated list of keywords to mark dependency.
|
|
||||||
keywords: depends on, Depends on
|
|
||||||
@@ -1,37 +0,0 @@
|
|||||||
---
|
|
||||||
name: End to End Full
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
types: [labeled, opened, synchronize, reopened]
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
e2e:
|
|
||||||
name: E2E
|
|
||||||
if: contains(github.event.pull_request.labels.*.name, 'ready-to-test')
|
|
||||||
timeout-minutes: 45
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
strategy:
|
|
||||||
fail-fast: false
|
|
||||||
matrix:
|
|
||||||
cable_driver: ['libreswan', 'wireguard', 'vxlan']
|
|
||||||
globalnet: ['', 'globalnet']
|
|
||||||
k8s_version: ['1.23']
|
|
||||||
lighthouse: ['', 'lighthouse']
|
|
||||||
include:
|
|
||||||
- k8s_version: '1.20'
|
|
||||||
- k8s_version: '1.21'
|
|
||||||
- k8s_version: '1.22'
|
|
||||||
steps:
|
|
||||||
- name: Check out the repository
|
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
|
||||||
|
|
||||||
- name: Run E2E deployment and tests
|
|
||||||
uses: submariner-io/shipyard/gh-actions/e2e@release-0.12
|
|
||||||
with:
|
|
||||||
k8s_version: ${{ matrix.k8s_version }}
|
|
||||||
using: ${{ matrix.cable_driver }} ${{ matrix.globalnet }} ${{ matrix.lighthouse }}
|
|
||||||
|
|
||||||
- name: Post mortem
|
|
||||||
if: failure()
|
|
||||||
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.12
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
---
|
|
||||||
name: End to End Default
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
e2e:
|
|
||||||
name: E2E
|
|
||||||
timeout-minutes: 30
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Check out the repository
|
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
|
||||||
|
|
||||||
- name: Run E2E deployment and tests
|
|
||||||
uses: submariner-io/shipyard/gh-actions/e2e@release-0.12
|
|
||||||
|
|
||||||
- name: Post mortem
|
|
||||||
if: failure()
|
|
||||||
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.12
|
|
||||||
@@ -1,31 +0,0 @@
|
|||||||
---
|
|
||||||
name: Flake Finder
|
|
||||||
|
|
||||||
on:
|
|
||||||
schedule:
|
|
||||||
- cron: "0 0 * * *"
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
e2e:
|
|
||||||
name: E2E
|
|
||||||
if: github.repository_owner == 'submariner-io'
|
|
||||||
timeout-minutes: 30
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
strategy:
|
|
||||||
fail-fast: false
|
|
||||||
matrix:
|
|
||||||
cable_driver: ['libreswan', 'wireguard', 'vxlan']
|
|
||||||
globalnet: ['', 'globalnet']
|
|
||||||
lighthouse: ['', 'lighthouse']
|
|
||||||
steps:
|
|
||||||
- name: Check out the repository
|
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
|
||||||
|
|
||||||
- name: Run E2E deployment and tests
|
|
||||||
uses: submariner-io/shipyard/gh-actions/e2e@release-0.12
|
|
||||||
with:
|
|
||||||
using: ${{ matrix.cable_driver }} ${{ matrix.globalnet }} ${{ matrix.lighthouse }}
|
|
||||||
|
|
||||||
- name: Post mortem
|
|
||||||
if: failure()
|
|
||||||
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.12
|
|
||||||
@@ -5,108 +5,53 @@ on:
|
|||||||
pull_request:
|
pull_request:
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
apply-suggestions-commits:
|
dco:
|
||||||
name: 'No "Apply suggestions from code review" Commits'
|
name: DCO in Commit Message(s)
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Get PR commits
|
- name: Get PR commits
|
||||||
id: 'get-pr-commits'
|
id: 'get-pr-commits'
|
||||||
uses: tim-actions/get-pr-commits@8673d84c368f480628607dbe21c88545811ef23a
|
uses: tim-actions/get-pr-commits@master
|
||||||
with:
|
with:
|
||||||
token: ${{ secrets.GITHUB_TOKEN }}
|
token: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
- name: Run DCO check
|
||||||
- name: 'Verify no "Apply suggestions from code review" commits'
|
uses: tim-actions/dco@master
|
||||||
uses: tim-actions/commit-message-checker-with-regex@e16b08b1a7f5cafeb1f8167de05bf1d40239eb5d
|
|
||||||
with:
|
with:
|
||||||
commits: ${{ steps.get-pr-commits.outputs.commits }}
|
commits: ${{ steps.get-pr-commits.outputs.commits }}
|
||||||
pattern: '^(?!.*(apply suggestions from code review))'
|
|
||||||
flags: 'i'
|
|
||||||
error: 'Commits addressing code review feedback should typically be squashed into the commits under review'
|
|
||||||
|
|
||||||
- name: 'Verify no "fixup!" commits'
|
|
||||||
uses: tim-actions/commit-message-checker-with-regex@e16b08b1a7f5cafeb1f8167de05bf1d40239eb5d
|
|
||||||
with:
|
|
||||||
commits: ${{ steps.get-pr-commits.outputs.commits }}
|
|
||||||
pattern: '^(?!fixup!)'
|
|
||||||
flags: 'i'
|
|
||||||
error: 'Fixup commits should be squashed into the commits under review'
|
|
||||||
|
|
||||||
chart-testing:
|
|
||||||
name: Helm Chart Linting
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Check out the repository
|
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
|
||||||
|
|
||||||
- name: Set up Helm
|
|
||||||
uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78
|
|
||||||
with:
|
|
||||||
version: v3.6.0
|
|
||||||
|
|
||||||
- name: Set up Python
|
|
||||||
uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b
|
|
||||||
with:
|
|
||||||
python-version: '3.x'
|
|
||||||
|
|
||||||
- name: Set up helm/chart-testing
|
|
||||||
uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76
|
|
||||||
|
|
||||||
- name: Run helm/chart-testing (lint)
|
|
||||||
run: ct lint --config ct.yaml
|
|
||||||
|
|
||||||
gitlint:
|
|
||||||
name: Commit Message(s)
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Check out the repository
|
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
|
||||||
with:
|
|
||||||
fetch-depth: 0
|
|
||||||
- name: Run gitlint
|
|
||||||
run: make gitlint
|
|
||||||
|
|
||||||
helm-docs:
|
|
||||||
name: Helm Docs Generation
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Check out the repository
|
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
|
||||||
|
|
||||||
- name: Run helm-docs and verify docs are up-to-date
|
|
||||||
run: make helm-docs
|
|
||||||
|
|
||||||
markdown-link-check:
|
markdown-link-check:
|
||||||
name: Markdown Links (modified files)
|
name: Markdown Links (modified files)
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Check out the repository
|
- name: Check out the repository
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
uses: actions/checkout@v2
|
||||||
|
|
||||||
- name: Run markdown-link-check
|
- name: Run markdown-link-check
|
||||||
uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec
|
uses: gaurav-nelson/github-action-markdown-link-check@v1
|
||||||
with:
|
with:
|
||||||
config-file: ".markdownlinkcheck.json"
|
config-file: ".markdownlinkcheck.json"
|
||||||
check-modified-files-only: "yes"
|
check-modified-files-only: "yes"
|
||||||
base-branch: ${{ github.base_ref }}
|
|
||||||
|
|
||||||
markdownlint:
|
markdownlint:
|
||||||
name: Markdown
|
name: Markdown
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Check out the repository
|
- name: Check out the repository
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
uses: actions/checkout@v2
|
||||||
- name: Run markdownlint
|
- name: Run markdownlint
|
||||||
run: make markdownlint
|
uses: nosborn/github-action-markdown-cli@v1.1.1
|
||||||
|
with:
|
||||||
|
files: .
|
||||||
|
config_file: ".markdownlint.yml"
|
||||||
|
|
||||||
yaml-lint:
|
yaml-lint:
|
||||||
name: YAML
|
name: YAML
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Check out the repository
|
- name: Check out the repository
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
uses: actions/checkout@v2
|
||||||
- name: Run yamllint
|
- name: Run yamllint
|
||||||
uses: ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c
|
uses: ibiqlik/action-yamllint@v1
|
||||||
with:
|
with:
|
||||||
file_or_dir: submariner-k8s-broker/Chart.yaml submariner-k8s-broker/values.yaml submariner-operator/Chart.yaml submariner-operator/values.yaml
|
file_or_dir: submariner/values.yaml submariner-k8s-broker/values.yaml submariner/Chart.yaml submariner-k8s-broker/Chart.yaml
|
||||||
config_file: .yamllint.yml
|
config_file: .yamllint.yml
|
||||||
strict: true
|
|
||||||
|
|||||||
@@ -8,21 +8,20 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
markdown-link-check-periodic:
|
markdown-link-check-periodic:
|
||||||
name: Markdown Links (all files)
|
name: Markdown Links (all files)
|
||||||
if: github.repository_owner == 'submariner-io'
|
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Check out the repository
|
- name: Check out the repository
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
uses: actions/checkout@v2
|
||||||
|
|
||||||
- name: Run markdown-link-check
|
- name: Run markdown-link-check
|
||||||
uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec
|
uses: gaurav-nelson/github-action-markdown-link-check@v1
|
||||||
with:
|
with:
|
||||||
config-file: ".markdownlinkcheck.json"
|
config-file: ".markdownlinkcheck.json"
|
||||||
|
|
||||||
- name: Raise an Issue to report broken links
|
- name: Raise an Issue to report broken links
|
||||||
if: ${{ failure() }}
|
if: ${{ failure() }}
|
||||||
uses: peter-evans/create-issue-from-file@433e51abf769039ee20ba1293a088ca19d573b7f
|
uses: JasonEtco/create-an-issue@v2
|
||||||
|
env:
|
||||||
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||||
with:
|
with:
|
||||||
title: Broken link detected by CI
|
filename: .github/ISSUE_TEMPLATE/broken-link.md
|
||||||
content-filepath: .github/ISSUE_TEMPLATE/broken-link.md
|
|
||||||
labels: automated, broken link
|
|
||||||
|
|||||||
@@ -1,33 +0,0 @@
|
|||||||
---
|
|
||||||
name: Release Charts
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches:
|
|
||||||
- release-0.12
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
release:
|
|
||||||
name: Release
|
|
||||||
if: github.repository_owner == 'submariner-io'
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
|
|
||||||
with:
|
|
||||||
fetch-depth: 0
|
|
||||||
|
|
||||||
- name: Configure Git
|
|
||||||
run: |
|
|
||||||
git config user.name "$GITHUB_ACTOR"
|
|
||||||
git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
|
|
||||||
|
|
||||||
- name: Update the charts
|
|
||||||
run: |
|
|
||||||
make release
|
|
||||||
|
|
||||||
- name: Push the charts
|
|
||||||
run: |
|
|
||||||
git add charts/*
|
|
||||||
git commit -m "Chart update"
|
|
||||||
git push
|
|
||||||
@@ -1,5 +1,2 @@
|
|||||||
.dapper
|
|
||||||
.idea
|
.idea
|
||||||
.shflags
|
|
||||||
*.tgz
|
*.tgz
|
||||||
Makefile.dapper
|
|
||||||
|
|||||||
@@ -5,9 +5,6 @@
|
|||||||
},
|
},
|
||||||
{
|
{
|
||||||
"pattern": "^http://localhost:"
|
"pattern": "^http://localhost:"
|
||||||
},
|
|
||||||
{
|
|
||||||
"pattern": "^https://submariner-io.github.io/submariner-charts/charts"
|
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -10,7 +10,3 @@ line-length:
|
|||||||
no-inline-html:
|
no-inline-html:
|
||||||
allowed_elements:
|
allowed_elements:
|
||||||
- span
|
- span
|
||||||
|
|
||||||
# Temporary while helm-docs has a bug where maintainer URLs are used raw in MD
|
|
||||||
# Waiting on: https://github.com/norwoodj/helm-docs/pull/102
|
|
||||||
no-bare-urls: false
|
|
||||||
|
|||||||
@@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
cni: ovn
|
|
||||||
submariner: true
|
|
||||||
nodes: control-plane worker worker
|
|
||||||
clusters:
|
|
||||||
cluster1:
|
|
||||||
cluster2:
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
submariner: true
|
|
||||||
nodes: control-plane worker
|
|
||||||
clusters:
|
|
||||||
cluster1:
|
|
||||||
cluster2:
|
|
||||||
@@ -1,3 +0,0 @@
|
|||||||
label-approved:
|
|
||||||
approvals: 2
|
|
||||||
label: ready-to-test
|
|
||||||
+47
@@ -0,0 +1,47 @@
|
|||||||
|
language: python
|
||||||
|
|
||||||
|
env:
|
||||||
|
global:
|
||||||
|
- HELM_URL=https://storage.googleapis.com/kubernetes-helm
|
||||||
|
- HELM_TGZ=helm-v2.14.3-linux-amd64.tar.gz
|
||||||
|
- TARGET_BR=gh-pages
|
||||||
|
- GH_URL=https://submariner-io.github.io/submariner-charts/charts
|
||||||
|
- CHARTS_DIR=charts
|
||||||
|
- YAMLLINT_VERSION=1.17.0
|
||||||
|
- HELM_FLAGS='--set submariner.serviceDiscovery=true,serviceAccounts.globalnet.create=true,globalCidr="169.254.0.0/16"'
|
||||||
|
|
||||||
|
install:
|
||||||
|
- wget -q ${HELM_URL}/${HELM_TGZ}
|
||||||
|
- tar xzfv ${HELM_TGZ}
|
||||||
|
- PATH=`pwd`/linux-amd64/:$PATH
|
||||||
|
- helm init --client-only
|
||||||
|
- sudo pip install yamllint=="${YAMLLINT_VERSION}"
|
||||||
|
|
||||||
|
script:
|
||||||
|
- for dir in submariner submariner-k8s-broker; do helm lint $dir $HELM_FLAGS; done
|
||||||
|
- yamllint -c .yamllint.yml -s $(find . -type f -name "Chart.yaml")
|
||||||
|
- yamllint -c .yamllint.yml -s $(find . -type f -name "values.yaml")
|
||||||
|
|
||||||
|
after_success:
|
||||||
|
- >
|
||||||
|
if [ $TRAVIS_BRANCH = 'master' ] && [ $TRAVIS_PULL_REQUEST = 'false' ]; then
|
||||||
|
set -e
|
||||||
|
for dir in submariner submariner-k8s-broker; do
|
||||||
|
helm dep update $dir
|
||||||
|
helm package $dir
|
||||||
|
done
|
||||||
|
REPO_URL=`git config remote.origin.url`
|
||||||
|
git clone ${REPO_URL} out && cd out && git checkout gh-pages && mkdir -p ${CHARTS_DIR}
|
||||||
|
cp -f ../submariner-*.tgz ${CHARTS_DIR}/
|
||||||
|
if [ -f charts/index.yaml ]; then
|
||||||
|
helm repo index ${CHARTS_DIR} --url ${GH_URL} --merge index.yaml
|
||||||
|
else
|
||||||
|
helm repo index ${CHARTS_DIR} --url ${GH_URL}
|
||||||
|
fi
|
||||||
|
git config user.name "Travis CI"
|
||||||
|
git config user.email "travis@travis-ci.org"
|
||||||
|
git add -f ${CHARTS_DIR}/*
|
||||||
|
git commit -m "Travis build: $TRAVIS_BUILD_NUMBER"
|
||||||
|
git remote add origin-pages https://${GH_TOKEN}@github.com/submariner-io/submariner-charts.git > /dev/null 2>&1
|
||||||
|
git push --quiet -f -u origin-pages gh-pages
|
||||||
|
fi
|
||||||
+1
-1
@@ -1,3 +1,3 @@
|
|||||||
# Code of Conduct
|
# Code of Conduct
|
||||||
|
|
||||||
Please see the [Code of Conduct docs on Submariner's website](https://submariner.io/community/code-of-conduct/).
|
Please see the [Code of Conduct docs on Submariner's website](https://submariner.io/contributing/code-of-conduct/).
|
||||||
|
|||||||
+1
-3
@@ -1,3 +1 @@
|
|||||||
# Auto-generated, do not edit; see CODEOWNERS.in
|
* @mangelajo @tpantelis @Oats87
|
||||||
* @Oats87 @skitt @sridhargaddam @tpantelis
|
|
||||||
*.md @dfarrell07 @Oats87 @skitt @sridhargaddam @tpantelis
|
|
||||||
|
|||||||
@@ -1,5 +0,0 @@
|
|||||||
@dfarrell07 *.md
|
|
||||||
@Oats87 *
|
|
||||||
@skitt *
|
|
||||||
@sridhargaddam *
|
|
||||||
@tpantelis *
|
|
||||||
+1
-1
@@ -1,3 +1,3 @@
|
|||||||
# Contributing
|
# Contributing
|
||||||
|
|
||||||
Please see the [Development docs on Submariner's website](https://submariner.io/development/).
|
Please see the [Contributing docs on Submariner's website](https://submariner.io/contributing/).
|
||||||
|
|||||||
@@ -1,18 +0,0 @@
|
|||||||
ARG BASE_BRANCH
|
|
||||||
FROM quay.io/submariner/shipyard-dapper-base:${BASE_BRANCH}
|
|
||||||
|
|
||||||
ARG DAPPER_HOST_ARCH
|
|
||||||
ENV HOST_ARCH=${DAPPER_HOST_ARCH} ARCH=${DAPPER_HOST_ARCH} \
|
|
||||||
DAPPER_ENV="REPO TAG QUAY_USERNAME QUAY_PASSWORD GITHUB_SHA MAKEFLAGS CLUSTERS_ARGS DEPLOY_ARGS E2E_ARGS RELEASE_ARGS" \
|
|
||||||
DAPPER_SOURCE=/go/src/github.com/submariner-io/submariner-charts DAPPER_DOCKER_SOCKET=true
|
|
||||||
ENV DAPPER_OUTPUT=${DAPPER_SOURCE}/output PATH=${DAPPER_SOURCE}/bin/:${PATH}
|
|
||||||
|
|
||||||
WORKDIR ${DAPPER_SOURCE}
|
|
||||||
|
|
||||||
RUN git config --global --add safe.directory ${DAPPER_SOURCE}
|
|
||||||
|
|
||||||
# Override the Helm deployment scripts
|
|
||||||
COPY deploy_helm /opt/shipyard/scripts/lib/
|
|
||||||
|
|
||||||
ENTRYPOINT ["/opt/shipyard/scripts/entry"]
|
|
||||||
CMD ["sh"]
|
|
||||||
@@ -1,83 +0,0 @@
|
|||||||
BASE_BRANCH ?= release-0.12
|
|
||||||
export BASE_BRANCH
|
|
||||||
|
|
||||||
ifneq (,$(DAPPER_HOST_ARCH))
|
|
||||||
|
|
||||||
# Running in Dapper
|
|
||||||
|
|
||||||
PRELOAD_IMAGES := submariner-gateway submariner-operator submariner-route-agent lighthouse-agent lighthouse-coredns
|
|
||||||
|
|
||||||
include $(SHIPYARD_DIR)/Makefile.inc
|
|
||||||
|
|
||||||
ifneq (,$(filter ovn,$(_using)))
|
|
||||||
CLUSTER_SETTINGS_FLAG = --settings $(DAPPER_SOURCE)/.shipyard.e2e.ovn.yml
|
|
||||||
else
|
|
||||||
CLUSTER_SETTINGS_FLAG = --settings $(DAPPER_SOURCE)/.shipyard.e2e.yml
|
|
||||||
endif
|
|
||||||
|
|
||||||
override CLUSTERS_ARGS += $(CLUSTER_SETTINGS_FLAG)
|
|
||||||
override DEPLOY_ARGS += $(CLUSTER_SETTINGS_FLAG) --deploytool helm
|
|
||||||
export DEPLOY_ARGS
|
|
||||||
GH_URL=https://submariner-io.github.io/submariner-charts/charts
|
|
||||||
CHARTS_DIR=charts
|
|
||||||
CHARTS_VERSION=0.12.2
|
|
||||||
HELM_DOCS_VERSION=0.15.0
|
|
||||||
REPO_URL=$(shell git config remote.origin.url)
|
|
||||||
|
|
||||||
# Process extra flags from the `using=a,b,c` optional flag
|
|
||||||
|
|
||||||
ifneq (,$(filter lighthouse,$(_using)))
|
|
||||||
override DEPLOY_ARGS += --service_discovery
|
|
||||||
endif
|
|
||||||
|
|
||||||
ifneq (,$(filter globalnet,$(_using)))
|
|
||||||
override DEPLOY_ARGS += --globalnet
|
|
||||||
endif
|
|
||||||
|
|
||||||
# Targets to make
|
|
||||||
|
|
||||||
e2e: E2E_ARGS=cluster1 cluster2
|
|
||||||
|
|
||||||
%.tgz:
|
|
||||||
helm dep update $(subst -$(CHARTS_VERSION),,$(basename $(@F)))
|
|
||||||
helm package --version $(CHARTS_VERSION) $(subst -$(CHARTS_VERSION),,$(basename $(@F)))
|
|
||||||
|
|
||||||
helm-docs:
|
|
||||||
# Avoid polluting repo with helm-docs' README/LICENSE or other files in the release archive
|
|
||||||
cd /tmp && \
|
|
||||||
curl -sL https://github.com/norwoodj/helm-docs/releases/download/v$(HELM_DOCS_VERSION)/helm-docs_$(HELM_DOCS_VERSION)_Linux_x86_64.tar.gz | tar zx && \
|
|
||||||
cd -
|
|
||||||
/tmp/helm-docs
|
|
||||||
if [ ! -z $(git status --porcelain) ]; then \
|
|
||||||
echo "Helm docs not up-to-date:"; \
|
|
||||||
git status --porcelain; \
|
|
||||||
git diff; \
|
|
||||||
echo "Run make helm-docs locally to generate updated docs, commit the updates."; \
|
|
||||||
exit 1; \
|
|
||||||
fi
|
|
||||||
|
|
||||||
release: submariner-k8s-broker-$(CHARTS_VERSION).tgz submariner-operator-$(CHARTS_VERSION).tgz
|
|
||||||
git checkout gh-pages
|
|
||||||
mv *.tgz $(CHARTS_DIR)
|
|
||||||
if [ -f $(CHARTS_DIR)/index.yaml ]; then \
|
|
||||||
helm repo index $(CHARTS_DIR) --url $(GH_URL) --merge $(CHARTS_DIR)/index.yaml; \
|
|
||||||
else \
|
|
||||||
helm repo index $(CHARTS_DIR) --url $(GH_URL); \
|
|
||||||
fi
|
|
||||||
|
|
||||||
.PHONY: release helm-docs
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
# Not running in Dapper
|
|
||||||
|
|
||||||
Makefile.dapper:
|
|
||||||
@echo Downloading $@
|
|
||||||
@curl -sfLO https://raw.githubusercontent.com/submariner-io/shipyard/$(BASE_BRANCH)/$@
|
|
||||||
|
|
||||||
include Makefile.dapper
|
|
||||||
|
|
||||||
endif
|
|
||||||
|
|
||||||
# Disable rebuilding Makefile
|
|
||||||
Makefile Makefile.inc: ;
|
|
||||||
@@ -1,20 +1,13 @@
|
|||||||
# submariner-charts
|
# submariner-charts
|
||||||
|
|
||||||
<!-- markdownlint-disable line-length -->
|
Please see the [Helm docs on Submariner's website](https://submariner.io/deployment/helm/).
|
||||||
[](https://bestpractices.coreinfrastructure.org/projects/4865)
|
|
||||||
[](https://github.com/submariner-io/submariner-charts/actions?query=workflow%3A%22Release+Charts%22)
|
|
||||||
[](https://github.com/submariner-io/submariner-charts/actions?query=workflow%3APeriodic)
|
|
||||||
[](https://github.com/submariner-io/submariner-charts/actions?query=workflow%3A%22Flake+Finder%22)
|
|
||||||
<!-- markdownlint-enable line-length -->
|
|
||||||
|
|
||||||
Please see the [Helm docs on Submariner's website](https://submariner.io/operations/deployment/helm/).
|
## Dev workflow
|
||||||
|
|
||||||
## Development workflow
|
|
||||||
|
|
||||||
### Prerequisites
|
### Prerequisites
|
||||||
|
|
||||||
- [Helm] v3
|
- [helm]
|
||||||
- [Docker] or [Podman]
|
- [docker] or [podman]
|
||||||
|
|
||||||
### Create a fork and checkout
|
### Create a fork and checkout
|
||||||
|
|
||||||
@@ -28,36 +21,96 @@ cd submariner-charts
|
|||||||
git checkout -b new-feature
|
git checkout -b new-feature
|
||||||
```
|
```
|
||||||
|
|
||||||
Now you can modify the Helm charts according to your needs.
|
Now you can modify the helm charts according to your needs.
|
||||||
|
|
||||||
|
### Serve the modified charts
|
||||||
|
|
||||||
|
Before serving the modified charts, the charts must be packaged for local usage.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm package ./submariner
|
||||||
|
helm package ./submariner-k8s-broker
|
||||||
|
```
|
||||||
|
|
||||||
|
Note: if you just installed helm, you have to init the helm, by running
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm init --client-only
|
||||||
|
```
|
||||||
|
|
||||||
|
Serve the packaged charts through a local helm repository:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
docker run -d --rm --name helm-repo -p 8080:8080 -v $PWD:/charts -e DEBUG=true -e STORAGE=local -e STORAGE_LOCAL_ROOTDIR=/charts chartmuseum/chartmuseum
|
||||||
|
```
|
||||||
|
|
||||||
|
or
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sudo podman run -d --rm --name helm-repo -p 8080:8080 -v $PWD:/charts -e DEBUG=true -e STORAGE=local -e STORAGE_LOCAL_ROOTDIR=/charts chartmuseum/chartmuseum
|
||||||
|
```
|
||||||
|
|
||||||
|
Get the container internal ip:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' helm-repo
|
||||||
|
```
|
||||||
|
|
||||||
|
The local container will serve the charts locally on port 8080.
|
||||||
|
|
||||||
|
Get logs for the container:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
docker logs -f helm-repo
|
||||||
|
```
|
||||||
|
|
||||||
### Use the modified charts
|
### Use the modified charts
|
||||||
|
|
||||||
Locally-modified charts can be installed using `helm install`,
|
Init helm
|
||||||
referring to the local path; for example:
|
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
helm install submariner-k8s-broker ./submariner-k8s-broker ...
|
helm init --client-only
|
||||||
```
|
```
|
||||||
|
|
||||||
In the base directory of this repository, a local deployment using the
|
Add your local repository to helm
|
||||||
local charts can be obtained by running the following command:
|
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
make deploy
|
internal_ip=$(docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' helm-repo)
|
||||||
|
helm repo add test-repo http://$internal_ip:8080
|
||||||
```
|
```
|
||||||
|
|
||||||
This will start two kind clusters and deploy Submariner using the
|
List the repos:
|
||||||
Broker and Operator charts.
|
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
make e2e
|
helm repo list
|
||||||
```
|
```
|
||||||
|
|
||||||
will run the end-to-end test suite used to validate that Submariner is
|
You should be able to see test-repo in the list
|
||||||
working correctly.
|
|
||||||
|
Search the new repo for submariner charts:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm search -l test-repo
|
||||||
|
```
|
||||||
|
|
||||||
|
### Modify submariner e2e tests helm deployment script to use your local test-repo
|
||||||
|
|
||||||
|
You can test your helm-charts with e2e tests from the [shipyard](https://github.com/submariner-io/shipyard) repository.
|
||||||
|
In the file `scripts/shared/lib/deploy_helm` change the line from:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
helm repo add submariner-latest https://submariner-io.github.io/submariner-charts/charts
|
||||||
|
```
|
||||||
|
|
||||||
|
to
|
||||||
|
|
||||||
|
```bash
|
||||||
|
internal_ip=$(docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' helm-repo)
|
||||||
|
helm repo add submariner-latest http://$internal_ip:8080
|
||||||
|
```
|
||||||
|
|
||||||
<!--links-->
|
<!--links-->
|
||||||
[Helm]: https://helm.sh/docs/using_helm/#installing-helm
|
[helm]: https://helm.sh/docs/using_helm/#installing-helm
|
||||||
[Docker]: https://docs.docker.com/install/
|
[docker]: https://docs.docker.com/install/
|
||||||
[Podman]: https://podman.io/getting-started/installation
|
[podman]: https://podman.io/getting-started/installation
|
||||||
[Create a fork]: https://help.github.com/en/articles/fork-a-repo
|
[Create a fork]: https://help.github.com/en/articles/fork-a-repo
|
||||||
|
|||||||
@@ -1,6 +0,0 @@
|
|||||||
charts:
|
|
||||||
- submariner-operator
|
|
||||||
- submariner-k8s-broker
|
|
||||||
# Tests that maintainer name is valid GitHub account, which isn't what we want
|
|
||||||
# See: https://github.com/helm/chart-testing/issues/192
|
|
||||||
validate-maintainers: false
|
|
||||||
-76
@@ -1,76 +0,0 @@
|
|||||||
# shellcheck shell=bash
|
|
||||||
# shellcheck source=scripts/shared/lib/source_only
|
|
||||||
. "${BASH_SOURCE%/*}"/source_only
|
|
||||||
|
|
||||||
### Constants ###
|
|
||||||
|
|
||||||
readonly SUBMARINER_BROKER_NS=submariner-k8s-broker
|
|
||||||
readonly SUBMARINER_PSK=$(LC_CTYPE=C tr -dc 'a-zA-Z0-9' < /dev/urandom | fold -w 64 | head -n 1)
|
|
||||||
|
|
||||||
### Functions ###
|
|
||||||
|
|
||||||
function deploytool_prereqs() {
|
|
||||||
helm version
|
|
||||||
}
|
|
||||||
|
|
||||||
function setup_broker() {
|
|
||||||
if kubectl get crd clusters.submariner.io > /dev/null 2>&1; then
|
|
||||||
echo "Submariner CRDs already exist, skipping broker creation..."
|
|
||||||
else
|
|
||||||
echo "Installing submariner broker..."
|
|
||||||
# shellcheck disable=SC2086 # Split on purpose
|
|
||||||
helm install "${SUBMARINER_BROKER_NS}" ./submariner-k8s-broker \
|
|
||||||
--create-namespace \
|
|
||||||
--kube-context "${cluster}" \
|
|
||||||
--namespace "${SUBMARINER_BROKER_NS}" \
|
|
||||||
${deploytool_broker_args}
|
|
||||||
fi
|
|
||||||
|
|
||||||
submariner_broker_url=$(kubectl -n default get endpoints kubernetes -o jsonpath="{.subsets[0].addresses[0].ip}:{.subsets[0].ports[?(@.name=='https')].port}")
|
|
||||||
submariner_broker_ca=$(kubectl -n "${SUBMARINER_BROKER_NS}" get secrets -o jsonpath="{.items[?(@.metadata.annotations['kubernetes\.io/service-account\.name']=='${SUBMARINER_BROKER_NS}-client')].data['ca\.crt']}")
|
|
||||||
submariner_broker_token=$(kubectl -n "${SUBMARINER_BROKER_NS}" get secrets -o jsonpath="{.items[?(@.metadata.annotations['kubernetes\.io/service-account\.name']=='${SUBMARINER_BROKER_NS}-client')].data.token}"|base64 --decode)
|
|
||||||
}
|
|
||||||
|
|
||||||
function helm_install_subm() {
|
|
||||||
local crd_create=false
|
|
||||||
[[ "${cluster}" = "${broker}" ]] || crd_create=true
|
|
||||||
|
|
||||||
if kubectl wait --for=condition=Ready pods -l app=submariner-operator -n "${SUBM_NS}" --timeout=60s > /dev/null 2>&1; then
|
|
||||||
echo "Submariner already installed, skipping installation..."
|
|
||||||
return
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "Installing Submariner..."
|
|
||||||
# shellcheck disable=SC2086 # Split on purpose
|
|
||||||
helm --kube-context "${cluster}" install submariner-operator \
|
|
||||||
./submariner-operator \
|
|
||||||
--create-namespace \
|
|
||||||
--namespace "${SUBM_NS}" \
|
|
||||||
--set ipsec.psk="${SUBMARINER_PSK}" \
|
|
||||||
--set broker.server="${submariner_broker_url}" \
|
|
||||||
--set broker.token="${submariner_broker_token}" \
|
|
||||||
--set broker.namespace="${SUBMARINER_BROKER_NS}" \
|
|
||||||
--set broker.ca="${submariner_broker_ca}" \
|
|
||||||
--set broker.globalnet="${globalnet}" \
|
|
||||||
--set submariner.serviceDiscovery="${service_discovery}" \
|
|
||||||
--set submariner.cableDriver="${cable_driver}" \
|
|
||||||
--set submariner.clusterId="${cluster}" \
|
|
||||||
--set submariner.clusterCidr="${cluster_CIDRs[$cluster]}" \
|
|
||||||
--set submariner.serviceCidr="${service_CIDRs[$cluster]}" \
|
|
||||||
--set submariner.globalCidr="${global_CIDRs[$cluster]}" \
|
|
||||||
--set serviceAccounts.globalnet.create="${globalnet}" \
|
|
||||||
--set serviceAccounts.lighthouseAgent.create="${service_discovery}" \
|
|
||||||
--set serviceAccounts.lighthouseCoreDns.create="${service_discovery}" \
|
|
||||||
--set submariner.natEnabled="false" \
|
|
||||||
--set operator.image.repository="localhost:5000/submariner-operator" \
|
|
||||||
--set operator.image.tag="local" \
|
|
||||||
--set operator.image.pullPolicy="IfNotPresent" \
|
|
||||||
--set submariner.images.repository="localhost:5000" \
|
|
||||||
--set submariner.images.tag="local" \
|
|
||||||
--set brokercrds.create="${crd_create}" \
|
|
||||||
${deploytool_submariner_args}
|
|
||||||
}
|
|
||||||
|
|
||||||
function install_subm_all_clusters() {
|
|
||||||
run_subm_clusters helm_install_subm
|
|
||||||
}
|
|
||||||
@@ -1,14 +1,12 @@
|
|||||||
---
|
---
|
||||||
name: submariner-k8s-broker
|
name: submariner-k8s-broker
|
||||||
version: 0.12.2
|
version: 0.6.0
|
||||||
apiVersion: v2
|
appVersion: 0.6.0
|
||||||
appVersion: 0.12.2
|
|
||||||
description: Submariner Kubernetes Broker
|
description: Submariner Kubernetes Broker
|
||||||
keywords:
|
keywords:
|
||||||
home: https://submariner-io.github.io/
|
home: https://submariner-io.github.io/
|
||||||
sources:
|
sources:
|
||||||
- https://submariner-io.github.io/submariner-charts/charts
|
- https://submariner-io.github.io/submariner-charts/charts
|
||||||
maintainers:
|
maintainers:
|
||||||
- name: Contributors to the Submariner project
|
- name: Submariner Developers
|
||||||
email: submariner-dev@googlegroups.com
|
email: submariner-dev@googlegroups.com
|
||||||
url: https://submariner.io/
|
|
||||||
|
|||||||
@@ -1,26 +0,0 @@
|
|||||||
# submariner-k8s-broker
|
|
||||||
|
|
||||||
 
|
|
||||||
|
|
||||||
Submariner Kubernetes Broker
|
|
||||||
|
|
||||||
**Homepage:** <https://submariner-io.github.io/>
|
|
||||||
|
|
||||||
## Maintainers
|
|
||||||
|
|
||||||
| Name | Email | Url |
|
|
||||||
| ---- | ------ | --- |
|
|
||||||
| Contributors to the Submariner project | submariner-dev@googlegroups.com | https://submariner.io/ |
|
|
||||||
|
|
||||||
## Source Code
|
|
||||||
|
|
||||||
* <https://submariner-io.github.io/submariner-charts/charts>
|
|
||||||
|
|
||||||
## Values
|
|
||||||
|
|
||||||
| Key | Type | Default | Description |
|
|
||||||
|-----|------|---------|-------------|
|
|
||||||
| crd.create | bool | `true` | |
|
|
||||||
| rbac.create | bool | `true` | |
|
|
||||||
| serviceAccounts.client.create | bool | `true` | |
|
|
||||||
| serviceAccounts.client.name | string | `""` | |
|
|
||||||
@@ -1,560 +0,0 @@
|
|||||||
apiVersion: apiextensions.k8s.io/v1
|
|
||||||
kind: CustomResourceDefinition
|
|
||||||
metadata:
|
|
||||||
name: clusters.submariner.io
|
|
||||||
spec:
|
|
||||||
group: submariner.io
|
|
||||||
names:
|
|
||||||
kind: Cluster
|
|
||||||
listKind: ClusterList
|
|
||||||
plural: clusters
|
|
||||||
singular: cluster
|
|
||||||
scope: Namespaced
|
|
||||||
versions:
|
|
||||||
- name: v1
|
|
||||||
schema:
|
|
||||||
openAPIV3Schema:
|
|
||||||
properties:
|
|
||||||
apiVersion:
|
|
||||||
description: 'APIVersion defines the versioned schema of this representation
|
|
||||||
of an object. Servers should convert recognized schemas to the latest
|
|
||||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
||||||
type: string
|
|
||||||
kind:
|
|
||||||
description: 'Kind is a string value representing the REST resource this
|
|
||||||
object represents. Servers may infer this from the endpoint the client
|
|
||||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
||||||
type: string
|
|
||||||
metadata:
|
|
||||||
type: object
|
|
||||||
spec:
|
|
||||||
properties:
|
|
||||||
cluster_cidr:
|
|
||||||
items:
|
|
||||||
type: string
|
|
||||||
type: array
|
|
||||||
cluster_id:
|
|
||||||
type: string
|
|
||||||
color_codes:
|
|
||||||
items:
|
|
||||||
type: string
|
|
||||||
type: array
|
|
||||||
global_cidr:
|
|
||||||
items:
|
|
||||||
type: string
|
|
||||||
type: array
|
|
||||||
service_cidr:
|
|
||||||
items:
|
|
||||||
type: string
|
|
||||||
type: array
|
|
||||||
required:
|
|
||||||
- cluster_cidr
|
|
||||||
- cluster_id
|
|
||||||
- color_codes
|
|
||||||
- global_cidr
|
|
||||||
- service_cidr
|
|
||||||
type: object
|
|
||||||
required:
|
|
||||||
- spec
|
|
||||||
type: object
|
|
||||||
served: true
|
|
||||||
storage: true
|
|
||||||
status:
|
|
||||||
acceptedNames:
|
|
||||||
kind: ""
|
|
||||||
plural: ""
|
|
||||||
conditions: []
|
|
||||||
storedVersions: []
|
|
||||||
---
|
|
||||||
apiVersion: apiextensions.k8s.io/v1
|
|
||||||
kind: CustomResourceDefinition
|
|
||||||
metadata:
|
|
||||||
name: endpoints.submariner.io
|
|
||||||
spec:
|
|
||||||
group: submariner.io
|
|
||||||
names:
|
|
||||||
kind: Endpoint
|
|
||||||
listKind: EndpointList
|
|
||||||
plural: endpoints
|
|
||||||
singular: endpoint
|
|
||||||
scope: Namespaced
|
|
||||||
versions:
|
|
||||||
- name: v1
|
|
||||||
schema:
|
|
||||||
openAPIV3Schema:
|
|
||||||
properties:
|
|
||||||
apiVersion:
|
|
||||||
description: 'APIVersion defines the versioned schema of this representation
|
|
||||||
of an object. Servers should convert recognized schemas to the latest
|
|
||||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
||||||
type: string
|
|
||||||
kind:
|
|
||||||
description: 'Kind is a string value representing the REST resource this
|
|
||||||
object represents. Servers may infer this from the endpoint the client
|
|
||||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
||||||
type: string
|
|
||||||
metadata:
|
|
||||||
type: object
|
|
||||||
spec:
|
|
||||||
properties:
|
|
||||||
backend:
|
|
||||||
type: string
|
|
||||||
backend_config:
|
|
||||||
additionalProperties:
|
|
||||||
type: string
|
|
||||||
type: object
|
|
||||||
cable_name:
|
|
||||||
type: string
|
|
||||||
cluster_id:
|
|
||||||
type: string
|
|
||||||
healthCheckIP:
|
|
||||||
type: string
|
|
||||||
hostname:
|
|
||||||
type: string
|
|
||||||
nat_enabled:
|
|
||||||
type: boolean
|
|
||||||
private_ip:
|
|
||||||
type: string
|
|
||||||
public_ip:
|
|
||||||
type: string
|
|
||||||
subnets:
|
|
||||||
items:
|
|
||||||
type: string
|
|
||||||
type: array
|
|
||||||
required:
|
|
||||||
- backend
|
|
||||||
- cable_name
|
|
||||||
- cluster_id
|
|
||||||
- hostname
|
|
||||||
- nat_enabled
|
|
||||||
- private_ip
|
|
||||||
- public_ip
|
|
||||||
- subnets
|
|
||||||
type: object
|
|
||||||
required:
|
|
||||||
- spec
|
|
||||||
type: object
|
|
||||||
served: true
|
|
||||||
storage: true
|
|
||||||
status:
|
|
||||||
acceptedNames:
|
|
||||||
kind: ""
|
|
||||||
plural: ""
|
|
||||||
conditions: []
|
|
||||||
storedVersions: []
|
|
||||||
---
|
|
||||||
apiVersion: apiextensions.k8s.io/v1
|
|
||||||
kind: CustomResourceDefinition
|
|
||||||
metadata:
|
|
||||||
name: gateways.submariner.io
|
|
||||||
spec:
|
|
||||||
group: submariner.io
|
|
||||||
names:
|
|
||||||
kind: Gateway
|
|
||||||
listKind: GatewayList
|
|
||||||
plural: gateways
|
|
||||||
singular: gateway
|
|
||||||
scope: Namespaced
|
|
||||||
versions:
|
|
||||||
- additionalPrinterColumns:
|
|
||||||
- description: High availability status of the Gateway
|
|
||||||
jsonPath: .status.haStatus
|
|
||||||
name: HA Status
|
|
||||||
type: string
|
|
||||||
name: v1
|
|
||||||
schema:
|
|
||||||
openAPIV3Schema:
|
|
||||||
properties:
|
|
||||||
apiVersion:
|
|
||||||
description: 'APIVersion defines the versioned schema of this representation
|
|
||||||
of an object. Servers should convert recognized schemas to the latest
|
|
||||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
||||||
type: string
|
|
||||||
kind:
|
|
||||||
description: 'Kind is a string value representing the REST resource this
|
|
||||||
object represents. Servers may infer this from the endpoint the client
|
|
||||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
||||||
type: string
|
|
||||||
metadata:
|
|
||||||
type: object
|
|
||||||
status:
|
|
||||||
properties:
|
|
||||||
connections:
|
|
||||||
items:
|
|
||||||
properties:
|
|
||||||
endpoint:
|
|
||||||
properties:
|
|
||||||
backend:
|
|
||||||
type: string
|
|
||||||
backend_config:
|
|
||||||
additionalProperties:
|
|
||||||
type: string
|
|
||||||
type: object
|
|
||||||
cable_name:
|
|
||||||
type: string
|
|
||||||
cluster_id:
|
|
||||||
type: string
|
|
||||||
healthCheckIP:
|
|
||||||
type: string
|
|
||||||
hostname:
|
|
||||||
type: string
|
|
||||||
nat_enabled:
|
|
||||||
type: boolean
|
|
||||||
private_ip:
|
|
||||||
type: string
|
|
||||||
public_ip:
|
|
||||||
type: string
|
|
||||||
subnets:
|
|
||||||
items:
|
|
||||||
type: string
|
|
||||||
type: array
|
|
||||||
required:
|
|
||||||
- backend
|
|
||||||
- cable_name
|
|
||||||
- cluster_id
|
|
||||||
- hostname
|
|
||||||
- nat_enabled
|
|
||||||
- private_ip
|
|
||||||
- public_ip
|
|
||||||
- subnets
|
|
||||||
type: object
|
|
||||||
latency:
|
|
||||||
description: LatencySpec describes the round trip time information
|
|
||||||
in nanoseconds for a packet between the gateway pods of two
|
|
||||||
clusters.
|
|
||||||
properties:
|
|
||||||
averageRTT:
|
|
||||||
format: int64
|
|
||||||
type: integer
|
|
||||||
lastRTT:
|
|
||||||
description: TODO This shall be deleted once the operator
|
|
||||||
is using the latest. Using Optional to avoid validation
|
|
||||||
errors when this field is not used.
|
|
||||||
format: int64
|
|
||||||
type: integer
|
|
||||||
maxRTT:
|
|
||||||
format: int64
|
|
||||||
type: integer
|
|
||||||
minRTT:
|
|
||||||
format: int64
|
|
||||||
type: integer
|
|
||||||
stddevRTT:
|
|
||||||
format: int64
|
|
||||||
type: integer
|
|
||||||
type: object
|
|
||||||
latencyRTT:
|
|
||||||
description: LatencySpec describes the round trip time information
|
|
||||||
for a packet between the gateway pods of two clusters.
|
|
||||||
properties:
|
|
||||||
average:
|
|
||||||
type: string
|
|
||||||
last:
|
|
||||||
type: string
|
|
||||||
max:
|
|
||||||
type: string
|
|
||||||
min:
|
|
||||||
type: string
|
|
||||||
stdDev:
|
|
||||||
type: string
|
|
||||||
type: object
|
|
||||||
status:
|
|
||||||
type: string
|
|
||||||
statusMessage:
|
|
||||||
type: string
|
|
||||||
required:
|
|
||||||
- endpoint
|
|
||||||
- status
|
|
||||||
- statusMessage
|
|
||||||
type: object
|
|
||||||
type: array
|
|
||||||
haStatus:
|
|
||||||
type: string
|
|
||||||
localEndpoint:
|
|
||||||
properties:
|
|
||||||
backend:
|
|
||||||
type: string
|
|
||||||
backend_config:
|
|
||||||
additionalProperties:
|
|
||||||
type: string
|
|
||||||
type: object
|
|
||||||
cable_name:
|
|
||||||
type: string
|
|
||||||
cluster_id:
|
|
||||||
type: string
|
|
||||||
healthCheckIP:
|
|
||||||
type: string
|
|
||||||
hostname:
|
|
||||||
type: string
|
|
||||||
nat_enabled:
|
|
||||||
type: boolean
|
|
||||||
private_ip:
|
|
||||||
type: string
|
|
||||||
public_ip:
|
|
||||||
type: string
|
|
||||||
subnets:
|
|
||||||
items:
|
|
||||||
type: string
|
|
||||||
type: array
|
|
||||||
required:
|
|
||||||
- backend
|
|
||||||
- cable_name
|
|
||||||
- cluster_id
|
|
||||||
- hostname
|
|
||||||
- nat_enabled
|
|
||||||
- private_ip
|
|
||||||
- public_ip
|
|
||||||
- subnets
|
|
||||||
type: object
|
|
||||||
statusFailure:
|
|
||||||
type: string
|
|
||||||
version:
|
|
||||||
type: string
|
|
||||||
required:
|
|
||||||
- connections
|
|
||||||
- haStatus
|
|
||||||
- localEndpoint
|
|
||||||
- statusFailure
|
|
||||||
- version
|
|
||||||
type: object
|
|
||||||
required:
|
|
||||||
- status
|
|
||||||
type: object
|
|
||||||
served: true
|
|
||||||
storage: true
|
|
||||||
subresources: {}
|
|
||||||
status:
|
|
||||||
acceptedNames:
|
|
||||||
kind: ""
|
|
||||||
plural: ""
|
|
||||||
conditions: []
|
|
||||||
storedVersions: []
|
|
||||||
---
|
|
||||||
apiVersion: apiextensions.k8s.io/v1
|
|
||||||
kind: CustomResourceDefinition
|
|
||||||
metadata:
|
|
||||||
name: serviceexports.multicluster.x-k8s.io
|
|
||||||
spec:
|
|
||||||
group: multicluster.x-k8s.io
|
|
||||||
scope: Namespaced
|
|
||||||
names:
|
|
||||||
plural: serviceexports
|
|
||||||
singular: serviceexport
|
|
||||||
kind: ServiceExport
|
|
||||||
shortNames:
|
|
||||||
- svcex
|
|
||||||
versions:
|
|
||||||
- name: v1alpha1
|
|
||||||
served: true
|
|
||||||
storage: true
|
|
||||||
subresources:
|
|
||||||
status: {}
|
|
||||||
additionalPrinterColumns:
|
|
||||||
- name: Age
|
|
||||||
type: date
|
|
||||||
jsonPath: .metadata.creationTimestamp
|
|
||||||
"schema":
|
|
||||||
"openAPIV3Schema":
|
|
||||||
description: ServiceExport declares that the Service with the same name and
|
|
||||||
namespace as this export should be consumable from other clusters.
|
|
||||||
type: object
|
|
||||||
properties:
|
|
||||||
apiVersion:
|
|
||||||
description: 'APIVersion defines the versioned schema of this representation
|
|
||||||
of an object. Servers should convert recognized schemas to the latest
|
|
||||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
||||||
type: string
|
|
||||||
kind:
|
|
||||||
description: 'Kind is a string value representing the REST resource this
|
|
||||||
object represents. Servers may infer this from the endpoint the client
|
|
||||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
||||||
type: string
|
|
||||||
metadata:
|
|
||||||
type: object
|
|
||||||
status:
|
|
||||||
description: status describes the current state of an exported service.
|
|
||||||
Service configuration comes from the Service that had the same name
|
|
||||||
and namespace as this ServiceExport. Populated by the multi-cluster
|
|
||||||
service implementation's controller.
|
|
||||||
type: object
|
|
||||||
properties:
|
|
||||||
conditions:
|
|
||||||
type: array
|
|
||||||
items:
|
|
||||||
description: "ServiceExportCondition contains details for the current
|
|
||||||
condition of this service export. \n Once [KEP-1623](https://github.com/kubernetes/enhancements/tree/master/keps/sig-api-machinery/1623-standardize-conditions)
|
|
||||||
is implemented, this will be replaced by metav1.Condition."
|
|
||||||
type: object
|
|
||||||
required:
|
|
||||||
- status
|
|
||||||
- type
|
|
||||||
properties:
|
|
||||||
lastTransitionTime:
|
|
||||||
type: string
|
|
||||||
format: date-time
|
|
||||||
message:
|
|
||||||
type: string
|
|
||||||
reason:
|
|
||||||
type: string
|
|
||||||
status:
|
|
||||||
description: Status is one of {"True", "False", "Unknown"}
|
|
||||||
type: string
|
|
||||||
enum:
|
|
||||||
- "True"
|
|
||||||
- "False"
|
|
||||||
- Unknown
|
|
||||||
type:
|
|
||||||
description: ServiceExportConditionType identifies a specific
|
|
||||||
condition.
|
|
||||||
type: string
|
|
||||||
x-kubernetes-list-map-keys:
|
|
||||||
- type
|
|
||||||
x-kubernetes-list-type: map
|
|
||||||
---
|
|
||||||
apiVersion: apiextensions.k8s.io/v1
|
|
||||||
kind: CustomResourceDefinition
|
|
||||||
metadata:
|
|
||||||
name: serviceimports.multicluster.x-k8s.io
|
|
||||||
spec:
|
|
||||||
group: multicluster.x-k8s.io
|
|
||||||
scope: Namespaced
|
|
||||||
names:
|
|
||||||
plural: serviceimports
|
|
||||||
singular: serviceimport
|
|
||||||
kind: ServiceImport
|
|
||||||
shortNames:
|
|
||||||
- svcim
|
|
||||||
versions:
|
|
||||||
- name: v1alpha1
|
|
||||||
served: true
|
|
||||||
storage: true
|
|
||||||
subresources:
|
|
||||||
status: {}
|
|
||||||
additionalPrinterColumns:
|
|
||||||
- name: Type
|
|
||||||
type: string
|
|
||||||
description: The type of this ServiceImport
|
|
||||||
jsonPath: .spec.type
|
|
||||||
- name: IP
|
|
||||||
type: string
|
|
||||||
description: The VIP for this ServiceImport
|
|
||||||
jsonPath: .spec.ips
|
|
||||||
- name: Age
|
|
||||||
type: date
|
|
||||||
jsonPath: .metadata.creationTimestamp
|
|
||||||
"schema":
|
|
||||||
"openAPIV3Schema":
|
|
||||||
description: ServiceImport describes a service imported from clusters in a
|
|
||||||
ClusterSet.
|
|
||||||
type: object
|
|
||||||
properties:
|
|
||||||
apiVersion:
|
|
||||||
description: 'APIVersion defines the versioned schema of this representation
|
|
||||||
of an object. Servers should convert recognized schemas to the latest
|
|
||||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
||||||
type: string
|
|
||||||
kind:
|
|
||||||
description: 'Kind is a string value representing the REST resource this
|
|
||||||
object represents. Servers may infer this from the endpoint the client
|
|
||||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
||||||
type: string
|
|
||||||
metadata:
|
|
||||||
type: object
|
|
||||||
spec:
|
|
||||||
description: spec defines the behavior of a ServiceImport.
|
|
||||||
type: object
|
|
||||||
required:
|
|
||||||
- ports
|
|
||||||
- type
|
|
||||||
properties:
|
|
||||||
ips:
|
|
||||||
description: ip will be used as the VIP for this service when type
|
|
||||||
is ClusterSetIP.
|
|
||||||
type: array
|
|
||||||
maxItems: 1
|
|
||||||
items:
|
|
||||||
type: string
|
|
||||||
ports:
|
|
||||||
type: array
|
|
||||||
items:
|
|
||||||
description: ServicePort represents the port on which the service
|
|
||||||
is exposed
|
|
||||||
type: object
|
|
||||||
required:
|
|
||||||
- port
|
|
||||||
properties:
|
|
||||||
appProtocol:
|
|
||||||
description: The application protocol for this port. This field
|
|
||||||
follows standard Kubernetes label syntax. Un-prefixed names
|
|
||||||
are reserved for IANA standard service names (as per RFC-6335
|
|
||||||
and http://www.iana.org/assignments/service-names). Non-standard
|
|
||||||
protocols should use prefixed names such as mycompany.com/my-custom-protocol.
|
|
||||||
Field can be enabled with ServiceAppProtocol feature gate.
|
|
||||||
type: string
|
|
||||||
name:
|
|
||||||
description: The name of this port within the service. This
|
|
||||||
must be a DNS_LABEL. All ports within a ServiceSpec must have
|
|
||||||
unique names. When considering the endpoints for a Service,
|
|
||||||
this must match the 'name' field in the EndpointPort. Optional
|
|
||||||
if only one ServicePort is defined on this service.
|
|
||||||
type: string
|
|
||||||
port:
|
|
||||||
description: The port that will be exposed by this service.
|
|
||||||
type: integer
|
|
||||||
format: int32
|
|
||||||
protocol:
|
|
||||||
description: The IP protocol for this port. Supports "TCP",
|
|
||||||
"UDP", and "SCTP". Default is TCP.
|
|
||||||
type: string
|
|
||||||
x-kubernetes-list-type: atomic
|
|
||||||
sessionAffinity:
|
|
||||||
description: 'Supports "ClientIP" and "None". Used to maintain session
|
|
||||||
affinity. Enable client IP based session affinity. Must be ClientIP
|
|
||||||
or None. Defaults to None. Ignored when type is Headless More info:
|
|
||||||
https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies'
|
|
||||||
type: string
|
|
||||||
sessionAffinityConfig:
|
|
||||||
description: sessionAffinityConfig contains session affinity configuration.
|
|
||||||
type: object
|
|
||||||
properties:
|
|
||||||
clientIP:
|
|
||||||
description: clientIP contains the configurations of Client IP
|
|
||||||
based session affinity.
|
|
||||||
type: object
|
|
||||||
properties:
|
|
||||||
timeoutSeconds:
|
|
||||||
description: timeoutSeconds specifies the seconds of ClientIP
|
|
||||||
type session sticky time. The value must be >0 && <=86400(for
|
|
||||||
1 day) if ServiceAffinity == "ClientIP". Default value is
|
|
||||||
10800(for 3 hours).
|
|
||||||
type: integer
|
|
||||||
format: int32
|
|
||||||
type:
|
|
||||||
description: type defines the type of this service. Must be ClusterSetIP
|
|
||||||
or Headless.
|
|
||||||
type: string
|
|
||||||
enum:
|
|
||||||
- ClusterSetIP
|
|
||||||
- Headless
|
|
||||||
status:
|
|
||||||
description: status contains information about the exported services that
|
|
||||||
form the multi-cluster service referenced by this ServiceImport.
|
|
||||||
type: object
|
|
||||||
properties:
|
|
||||||
clusters:
|
|
||||||
description: clusters is the list of exporting clusters from which
|
|
||||||
this service was derived.
|
|
||||||
type: array
|
|
||||||
items:
|
|
||||||
description: ClusterStatus contains service configuration mapped
|
|
||||||
to a specific source cluster
|
|
||||||
type: object
|
|
||||||
required:
|
|
||||||
- cluster
|
|
||||||
properties:
|
|
||||||
cluster:
|
|
||||||
description: cluster is the name of the exporting cluster. Must
|
|
||||||
be a valid RFC-1123 DNS label.
|
|
||||||
type: string
|
|
||||||
x-kubernetes-list-map-keys:
|
|
||||||
- cluster
|
|
||||||
x-kubernetes-list-type: map
|
|
||||||
@@ -0,0 +1,110 @@
|
|||||||
|
{{- if .Values.crd.create -}}
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: clusters.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: submariner.io
|
||||||
|
version: v1
|
||||||
|
names:
|
||||||
|
kind: Cluster
|
||||||
|
plural: clusters
|
||||||
|
scope: Namespaced
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: endpoints.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: submariner.io
|
||||||
|
version: v1
|
||||||
|
names:
|
||||||
|
kind: Endpoint
|
||||||
|
plural: endpoints
|
||||||
|
scope: Namespaced
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: gateways.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: submariner.io
|
||||||
|
version: v1
|
||||||
|
names:
|
||||||
|
kind: Gateway
|
||||||
|
plural: gateways
|
||||||
|
scope: Namespaced
|
||||||
|
additionalPrinterColumns:
|
||||||
|
- name: ha-status
|
||||||
|
type: string
|
||||||
|
description: High Availability Status of the Gateway
|
||||||
|
JSONPath: .status.haStatus
|
||||||
|
---
|
||||||
|
{{- if .Values.submariner.serviceDiscovery }}
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: multiclusterservices.lighthouse.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: lighthouse.submariner.io
|
||||||
|
version: v1
|
||||||
|
names:
|
||||||
|
kind: MultiClusterService
|
||||||
|
plural: multiclusterservices
|
||||||
|
singular: multiclusterservice
|
||||||
|
scope: Namespaced
|
||||||
|
validation:
|
||||||
|
openAPIV3Schema:
|
||||||
|
properties:
|
||||||
|
spec:
|
||||||
|
properties:
|
||||||
|
clusterServiceInfo:
|
||||||
|
properties:
|
||||||
|
clusterID:
|
||||||
|
type: "string"
|
||||||
|
clusterDomain:
|
||||||
|
type: "string"
|
||||||
|
serviceIP:
|
||||||
|
type: "string"
|
||||||
|
port:
|
||||||
|
type: "integer"
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: serviceexports.lighthouse.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: lighthouse.submariner.io
|
||||||
|
version: v2alpha1
|
||||||
|
names:
|
||||||
|
kind: ServiceExport
|
||||||
|
plural: serviceexports
|
||||||
|
singular: serviceexport
|
||||||
|
scope: Namespaced
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: serviceimports.lighthouse.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: lighthouse.submariner.io
|
||||||
|
version: v2alpha1
|
||||||
|
names:
|
||||||
|
kind: ServiceImport
|
||||||
|
plural: serviceimports
|
||||||
|
singular: serviceimport
|
||||||
|
scope: Namespaced
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
@@ -2,7 +2,7 @@
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: Role
|
kind: Role
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner-k8s-broker.fullname" . }}-cluster
|
name: {{ template "submariner-k8s-broker.fullname" . }}:client
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -16,20 +16,17 @@ rules:
|
|||||||
resources: ["*"]
|
resources: ["*"]
|
||||||
verbs: ["create", "get", "list", "watch", "patch", "update", "delete"]
|
verbs: ["create", "get", "list", "watch", "patch", "update", "delete"]
|
||||||
- apiGroups: ["discovery.k8s.io"]
|
- apiGroups: ["discovery.k8s.io"]
|
||||||
resources: ["endpointslices", "endpointslices/restricted"]
|
resources: ["endpointslices"]
|
||||||
verbs: ["create", "get", "list", "watch","patch", "update", "delete"]
|
verbs: ["create", "get", "list", "watch","patch", "update", "delete"]
|
||||||
- apiGroups: ["multicluster.x-k8s.io"]
|
|
||||||
resources: ["*"]
|
|
||||||
verbs: ["create", "get", "list", "watch", "update", "delete"]
|
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner-k8s-broker.fullname" . }}-cluster
|
name: {{ template "submariner-k8s-broker.fullname" . }}:client
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
kind: Role
|
kind: Role
|
||||||
name: {{ template "submariner-k8s-broker.fullname" . }}-cluster
|
name: {{ template "submariner-k8s-broker.fullname" . }}:client
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "submariner-k8s-broker.clientServiceAccountName" . }}
|
name: {{ template "submariner-k8s-broker.clientServiceAccountName" . }}
|
||||||
|
|||||||
@@ -7,3 +7,5 @@ serviceAccounts:
|
|||||||
client:
|
client:
|
||||||
create: true
|
create: true
|
||||||
name: ""
|
name: ""
|
||||||
|
submariner:
|
||||||
|
serviceDiscovery: false
|
||||||
|
|||||||
@@ -1,71 +0,0 @@
|
|||||||
# submariner-operator
|
|
||||||
|
|
||||||
 
|
|
||||||
|
|
||||||
Submariner enables direct networking between Pods and Services in different Kubernetes clusters
|
|
||||||
|
|
||||||
**Homepage:** <https://submariner-io.github.io/>
|
|
||||||
|
|
||||||
## Maintainers
|
|
||||||
|
|
||||||
| Name | Email | Url |
|
|
||||||
| ---- | ------ | --- |
|
|
||||||
| Contributors to the Submariner project | submariner-dev@googlegroups.com | https://submariner.io/ |
|
|
||||||
|
|
||||||
## Source Code
|
|
||||||
|
|
||||||
* <https://submariner-io.github.io/submariner-charts/charts>
|
|
||||||
|
|
||||||
## Values
|
|
||||||
|
|
||||||
| Key | Type | Default | Description |
|
|
||||||
|-----|------|---------|-------------|
|
|
||||||
| broker.ca | string | `""` | |
|
|
||||||
| broker.globalnet | bool | `false` | |
|
|
||||||
| broker.insecure | bool | `false` | |
|
|
||||||
| broker.namespace | string | `"xyz"` | |
|
|
||||||
| broker.server | string | `"example.k8s.apiserver"` | |
|
|
||||||
| broker.token | string | `"test"` | |
|
|
||||||
| gateway.image.repository | string | `"quay.io/submariner/submariner-gateway"` | |
|
|
||||||
| gateway.image.tag | string | `"0.12.2"` | |
|
|
||||||
| ipsec.debug | bool | `false` | |
|
|
||||||
| ipsec.forceUDPEncaps | bool | `false` | |
|
|
||||||
| ipsec.ikePort | int | `500` | |
|
|
||||||
| ipsec.natPort | int | `4500` | |
|
|
||||||
| ipsec.psk | string | `""` | |
|
|
||||||
| leadership.leaseDuration | int | `10` | |
|
|
||||||
| leadership.renewDeadline | int | `5` | |
|
|
||||||
| leadership.retryPeriod | int | `2` | |
|
|
||||||
| operator.affinity | object | `{}` | |
|
|
||||||
| operator.image.pullPolicy | string | `"IfNotPresent"` | |
|
|
||||||
| operator.image.repository | string | `"quay.io/submariner/submariner-operator"` | |
|
|
||||||
| operator.image.tag | string | `"0.12.2"` | |
|
|
||||||
| operator.resources | object | `{}` | |
|
|
||||||
| operator.tolerations | list | `[]` | |
|
|
||||||
| rbac.create | bool | `true` | |
|
|
||||||
| serviceAccounts.gateway.create | bool | `true` | |
|
|
||||||
| serviceAccounts.gateway.name | string | `""` | |
|
|
||||||
| serviceAccounts.globalnet.create | bool | `true` | |
|
|
||||||
| serviceAccounts.globalnet.name | string | `""` | |
|
|
||||||
| serviceAccounts.lighthouseAgent.create | bool | `true` | |
|
|
||||||
| serviceAccounts.lighthouseAgent.name | string | `""` | |
|
|
||||||
| serviceAccounts.lighthouseCoreDns.create | bool | `true` | |
|
|
||||||
| serviceAccounts.lighthouseCoreDns.name | string | `""` | |
|
|
||||||
| serviceAccounts.operator.create | bool | `true` | |
|
|
||||||
| serviceAccounts.operator.name | string | `""` | |
|
|
||||||
| serviceAccounts.routeAgent.create | bool | `true` | |
|
|
||||||
| serviceAccounts.routeAgent.name | string | `""` | |
|
|
||||||
| submariner.cableDriver | string | `"libreswan"` | |
|
|
||||||
| submariner.clusterCidr | string | `""` | |
|
|
||||||
| submariner.clusterId | string | `""` | |
|
|
||||||
| submariner.colorCodes | string | `"blue"` | |
|
|
||||||
| submariner.coreDNSCustomConfig | object | `{}` | |
|
|
||||||
| submariner.debug | bool | `false` | |
|
|
||||||
| submariner.globalCidr | string | `""` | |
|
|
||||||
| submariner.healthcheckEnabled | bool | `true` | |
|
|
||||||
| submariner.images.repository | string | `"quay.io/submariner"` | |
|
|
||||||
| submariner.images.tag | string | `"0.12.2"` | |
|
|
||||||
| submariner.natEnabled | bool | `false` | |
|
|
||||||
| submariner.serviceCidr | string | `""` | |
|
|
||||||
| submariner.serviceDiscovery | bool | `true` | |
|
|
||||||
| submariner.token | string | `""` | |
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
# Submariner
|
|
||||||
|
|
||||||
[Submariner](https://submariner.io) is a cross-cluster networking tool.
|
|
||||||
|
|
||||||
This chart creates the required components in this cluster to deploy the Submariner operator.
|
|
||||||
File diff suppressed because it is too large
Load Diff
@@ -1,57 +0,0 @@
|
|||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.fullname" . }}
|
|
||||||
component: gateway
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
spec:
|
|
||||||
progressDeadlineSeconds: 600
|
|
||||||
replicas: 1
|
|
||||||
revisionHistoryLimit: 10
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
strategy:
|
|
||||||
rollingUpdate:
|
|
||||||
maxSurge: 25%
|
|
||||||
maxUnavailable: 25%
|
|
||||||
type: RollingUpdate
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
labels:
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- command:
|
|
||||||
- submariner-operator
|
|
||||||
env:
|
|
||||||
- name: WATCH_NAMESPACE
|
|
||||||
valueFrom:
|
|
||||||
fieldRef:
|
|
||||||
apiVersion: v1
|
|
||||||
fieldPath: metadata.namespace
|
|
||||||
- name: POD_NAME
|
|
||||||
valueFrom:
|
|
||||||
fieldRef:
|
|
||||||
apiVersion: v1
|
|
||||||
fieldPath: metadata.name
|
|
||||||
- name: OPERATOR_NAME
|
|
||||||
value: submariner-operator
|
|
||||||
image: {{ .Values.operator.image.repository }}:{{ default .Chart.AppVersion .Values.operator.image.tag }}
|
|
||||||
imagePullPolicy: {{ .Values.operator.image.pullPolicy }}
|
|
||||||
name: submariner-operator
|
|
||||||
resources: {}
|
|
||||||
terminationMessagePath: /dev/termination-log
|
|
||||||
terminationMessagePolicy: File
|
|
||||||
dnsPolicy: ClusterFirst
|
|
||||||
restartPolicy: Always
|
|
||||||
schedulerName: default-scheduler
|
|
||||||
securityContext: {}
|
|
||||||
serviceAccount: {{ template "submariner.fullname" . }}
|
|
||||||
serviceAccountName: {{ template "submariner.fullname" . }}
|
|
||||||
terminationGracePeriodSeconds: 30
|
|
||||||
@@ -1,915 +0,0 @@
|
|||||||
{{- if .Values.rbac.create -}}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: Role
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- services
|
|
||||||
- services/finalizers
|
|
||||||
- endpoints
|
|
||||||
- persistentvolumeclaims
|
|
||||||
- events
|
|
||||||
- configmaps
|
|
||||||
- secrets
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resources:
|
|
||||||
- deployments
|
|
||||||
- daemonsets
|
|
||||||
- replicasets
|
|
||||||
- statefulsets
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- monitoring.coreos.com
|
|
||||||
resources:
|
|
||||||
- servicemonitors
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- create
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resourceNames:
|
|
||||||
- {{ template "submariner.fullname" . }}
|
|
||||||
resources:
|
|
||||||
- deployments/finalizers
|
|
||||||
verbs:
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resources:
|
|
||||||
- replicasets
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- '*'
|
|
||||||
- servicediscoveries
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
---
|
|
||||||
kind: RoleBinding
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.operatorServiceAccountName" . }}
|
|
||||||
roleRef:
|
|
||||||
kind: Role
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: Role
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:gateway
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- services
|
|
||||||
- services/finalizers
|
|
||||||
- endpoints
|
|
||||||
- persistentvolumeclaims
|
|
||||||
- events
|
|
||||||
- configmaps
|
|
||||||
- secrets
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resources:
|
|
||||||
- deployments
|
|
||||||
- daemonsets
|
|
||||||
- replicasets
|
|
||||||
- statefulsets
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- monitoring.coreos.com
|
|
||||||
resources:
|
|
||||||
- servicemonitors
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- create
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resourceNames:
|
|
||||||
- submariner-operator
|
|
||||||
resources:
|
|
||||||
- deployments/finalizers
|
|
||||||
verbs:
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resources:
|
|
||||||
- replicasets
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- '*'
|
|
||||||
- servicediscoveries
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- lighthouse.submariner.io
|
|
||||||
resources:
|
|
||||||
- '*'
|
|
||||||
- serviceexports
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- delete
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- patch
|
|
||||||
- update
|
|
||||||
- watch
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: RoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:gateway
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: Role
|
|
||||||
name: {{ template "submariner.fullname" . }}:gateway
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: Role
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:routeagent
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- services
|
|
||||||
- services/finalizers
|
|
||||||
- endpoints
|
|
||||||
- persistentvolumeclaims
|
|
||||||
- events
|
|
||||||
- configmaps
|
|
||||||
- secrets
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resources:
|
|
||||||
- deployments
|
|
||||||
- daemonsets
|
|
||||||
- replicasets
|
|
||||||
- statefulsets
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- monitoring.coreos.com
|
|
||||||
resources:
|
|
||||||
- servicemonitors
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- create
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resourceNames:
|
|
||||||
- submariner-operator
|
|
||||||
resources:
|
|
||||||
- deployments/finalizers
|
|
||||||
verbs:
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resources:
|
|
||||||
- replicasets
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- '*'
|
|
||||||
- servicediscoveries
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- lighthouse.submariner.io
|
|
||||||
resources:
|
|
||||||
- '*'
|
|
||||||
- serviceexports
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- delete
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- patch
|
|
||||||
- update
|
|
||||||
- watch
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: RoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:routeagent
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: Role
|
|
||||||
name: {{ template "submariner.fullname" . }}:routeagent
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.routeAgentServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
---
|
|
||||||
{{- if .Values.broker.globalnet }}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: Role
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:globalnet
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- services
|
|
||||||
- services/finalizers
|
|
||||||
- endpoints
|
|
||||||
- persistentvolumeclaims
|
|
||||||
- events
|
|
||||||
- configmaps
|
|
||||||
- secrets
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resources:
|
|
||||||
- deployments
|
|
||||||
- daemonsets
|
|
||||||
- replicasets
|
|
||||||
- statefulsets
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- monitoring.coreos.com
|
|
||||||
resources:
|
|
||||||
- servicemonitors
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- create
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resourceNames:
|
|
||||||
- submariner-operator
|
|
||||||
resources:
|
|
||||||
- deployments/finalizers
|
|
||||||
verbs:
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- apiGroups:
|
|
||||||
- apps
|
|
||||||
resources:
|
|
||||||
- replicasets
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- '*'
|
|
||||||
- servicediscoveries
|
|
||||||
verbs:
|
|
||||||
- '*'
|
|
||||||
- apiGroups:
|
|
||||||
- lighthouse.submariner.io
|
|
||||||
resources:
|
|
||||||
- '*'
|
|
||||||
- serviceexports
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- delete
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- patch
|
|
||||||
- update
|
|
||||||
- watch
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: RoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:globalnet
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: Role
|
|
||||||
name: {{ template "submariner.fullname" . }}:globalnet
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.globalnetServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
---
|
|
||||||
{{- end -}}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
# submariner-operator updates the config map of core-dns to forward requests to
|
|
||||||
# clusterset.local to Lighthouse DNS, also looks at existing configmaps
|
|
||||||
# to figure out network settings
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- configmaps
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- apiextensions.k8s.io
|
|
||||||
resources:
|
|
||||||
- customresourcedefinitions
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- create
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
- watch
|
|
||||||
- apiGroups: # pods, services and nodes are looked up to figure out network settings
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- services
|
|
||||||
- nodes
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- operator.openshift.io
|
|
||||||
resources:
|
|
||||||
- dnses
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- config.openshift.io
|
|
||||||
resources:
|
|
||||||
- networks
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- namespaces
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- monitoring.coreos.com
|
|
||||||
resources:
|
|
||||||
- servicemonitors
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- create
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.operatorServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ template "submariner.fullname" . }}
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: Role
|
|
||||||
metadata:
|
|
||||||
name: submariner-metrics-reader
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
rules:
|
|
||||||
- apiGroups: [""]
|
|
||||||
resources: ["pods", "services", "endpoints"]
|
|
||||||
verbs: ["get", "list", "watch"]
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: RoleBinding
|
|
||||||
metadata:
|
|
||||||
name: read-submariner-metrics
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: prometheus-k8s
|
|
||||||
namespace: openshift-monitoring
|
|
||||||
roleRef:
|
|
||||||
kind: Role
|
|
||||||
name: submariner-metrics-reader
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:gateway
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- configmaps
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- create
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- apiextensions.k8s.io
|
|
||||||
resources:
|
|
||||||
- customresourcedefinitions
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- create
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
- apiGroups: # pods and services are looked up to figure out network settings
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- services
|
|
||||||
- nodes
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- operator.openshift.io
|
|
||||||
resources:
|
|
||||||
- dnses
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- config.openshift.io
|
|
||||||
resources:
|
|
||||||
- networks
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- endpoints
|
|
||||||
- gateways
|
|
||||||
- clusters
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:gateway
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ template "submariner.fullname" . }}:gateway
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:routeagent
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- configmaps
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- apiextensions.k8s.io
|
|
||||||
resources:
|
|
||||||
- customresourcedefinitions
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- create
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
- apiGroups: # pods and services are looked up to figure out network settings
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- services
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- operator.openshift.io
|
|
||||||
resources:
|
|
||||||
- dnses
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- config.openshift.io
|
|
||||||
resources:
|
|
||||||
- networks
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
resources:
|
|
||||||
- nodes
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:routeagent
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ template "submariner.fullname" . }}:routeagent
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.routeAgentServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
---
|
|
||||||
{{- if .Values.broker.globalnet }}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:globalnet
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- namespaces
|
|
||||||
- nodes
|
|
||||||
- endpoints
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- services
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- endpoints
|
|
||||||
- clusters
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- clusterglobalegressips
|
|
||||||
- globalegressips
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- globalingressips
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
- deletecollection
|
|
||||||
- apiGroups:
|
|
||||||
- multicluster.x-k8s.io
|
|
||||||
resources:
|
|
||||||
- "serviceexports"
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- network.openshift.io
|
|
||||||
resources:
|
|
||||||
- service/externalips
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- delete
|
|
||||||
---
|
|
||||||
{{- end -}}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:globalnet
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ template "submariner.fullname" . }}:globalnet
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.globalnetServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
---
|
|
||||||
{{- if .Values.submariner.serviceDiscovery }}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:lighthouse-agent
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- services
|
|
||||||
- namespaces
|
|
||||||
- endpoints
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- discovery.k8s.io
|
|
||||||
resources:
|
|
||||||
- endpointslices
|
|
||||||
- endpointslices/restricted
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
- deletecollection
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- "gateways"
|
|
||||||
- "globalingressips"
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- multicluster.x-k8s.io
|
|
||||||
resources:
|
|
||||||
- "*"
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:lighthouse-agent
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ template "submariner.fullname" . }}:lighthouse-agent
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.lighthouseAgentServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:lighthouse-coredns
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- services
|
|
||||||
- namespaces
|
|
||||||
- endpoints
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- apiGroups:
|
|
||||||
- discovery.k8s.io
|
|
||||||
resources:
|
|
||||||
- endpointslices
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
- deletecollection
|
|
||||||
- apiGroups:
|
|
||||||
- lighthouse.submariner.io
|
|
||||||
resources:
|
|
||||||
- "*"
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
- apiGroups:
|
|
||||||
- submariner.io
|
|
||||||
resources:
|
|
||||||
- "gateways"
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- multicluster.x-k8s.io
|
|
||||||
resources:
|
|
||||||
- "*"
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- get
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
||||||
- delete
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.fullname" . }}:lighthouse-coredns
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ template "submariner.fullname" . }}:lighthouse-coredns
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "submariner.lighthouseCoreDnsServiceAccountName" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
{{- end -}}
|
|
||||||
{{- end -}}
|
|
||||||
@@ -1,38 +0,0 @@
|
|||||||
apiVersion: submariner.io/v1alpha1
|
|
||||||
kind: Submariner
|
|
||||||
metadata:
|
|
||||||
name: submariner
|
|
||||||
namespace: submariner-operator
|
|
||||||
spec:
|
|
||||||
broker: k8s
|
|
||||||
brokerK8sApiServer: {{ .Values.broker.server }}
|
|
||||||
brokerK8sApiServerToken: {{ .Values.broker.token }}
|
|
||||||
brokerK8sCA: {{ .Values.broker.ca }}
|
|
||||||
brokerK8sRemoteNamespace: {{ .Values.broker.namespace }}
|
|
||||||
brokerK8sInsecure: {{ .Values.broker.insecure }}
|
|
||||||
ceIPSecDebug: {{ .Values.ipsec.debug }}
|
|
||||||
ceIPSecForceUDPEncaps: {{ .Values.ipsec.forceUDPEncaps }}
|
|
||||||
ceIPSecIKEPort: {{ .Values.ipsec.ikePort }}
|
|
||||||
ceIPSecNATTPort: {{ .Values.ipsec.natPort }}
|
|
||||||
ceIPSecPSK: {{ .Values.ipsec.psk }}
|
|
||||||
clusterCIDR: "{{ .Values.submariner.clusterCidr }}"
|
|
||||||
clusterID: {{ .Values.submariner.clusterId }}
|
|
||||||
colorCodes: {{ .Values.submariner.colorCodes }}
|
|
||||||
debug: {{ .Values.submariner.debug }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
natEnabled: {{ .Values.submariner.natEnabled }}
|
|
||||||
repository: {{ .Values.submariner.images.repository }}
|
|
||||||
version: {{ .Values.submariner.images.tag }}
|
|
||||||
serviceCIDR: "{{ .Values.submariner.serviceCidr }}"
|
|
||||||
globalCIDR: "{{ .Values.submariner.globalCidr }}"
|
|
||||||
serviceDiscoveryEnabled: {{ .Values.submariner.serviceDiscovery }}
|
|
||||||
cableDriver: {{ .Values.submariner.cableDriver }}
|
|
||||||
connectionHealthCheck:
|
|
||||||
enabled: {{ .Values.submariner.healthcheckEnabled }}
|
|
||||||
intervalSeconds: 1
|
|
||||||
maxPacketLossCount: 5
|
|
||||||
{{- with .Values.submariner.coreDNSCustomConfig }}
|
|
||||||
coreDNSCustomConfig:
|
|
||||||
configmapName: {{ .configmapName }}
|
|
||||||
namespace: {{ .namespace }}
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,67 +0,0 @@
|
|||||||
---
|
|
||||||
submariner:
|
|
||||||
clusterId: ""
|
|
||||||
token: ""
|
|
||||||
clusterCidr: ""
|
|
||||||
serviceCidr: ""
|
|
||||||
globalCidr: ""
|
|
||||||
natEnabled: false
|
|
||||||
colorCodes: blue
|
|
||||||
debug: false
|
|
||||||
serviceDiscovery: true
|
|
||||||
cableDriver: "libreswan"
|
|
||||||
healthcheckEnabled: true
|
|
||||||
coreDNSCustomConfig: {}
|
|
||||||
images:
|
|
||||||
repository: quay.io/submariner
|
|
||||||
tag: "0.12.2"
|
|
||||||
broker:
|
|
||||||
server: example.k8s.apiserver
|
|
||||||
token: test
|
|
||||||
namespace: xyz
|
|
||||||
insecure: false
|
|
||||||
ca: ""
|
|
||||||
globalnet: false
|
|
||||||
rbac:
|
|
||||||
create: true
|
|
||||||
ipsec:
|
|
||||||
psk: ""
|
|
||||||
debug: false
|
|
||||||
forceUDPEncaps: false
|
|
||||||
ikePort: 500
|
|
||||||
natPort: 4500
|
|
||||||
leadership:
|
|
||||||
leaseDuration: 10
|
|
||||||
renewDeadline: 5
|
|
||||||
retryPeriod: 2
|
|
||||||
operator:
|
|
||||||
image:
|
|
||||||
repository: quay.io/submariner/submariner-operator
|
|
||||||
tag: "0.12.2"
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
resources: {}
|
|
||||||
tolerations: []
|
|
||||||
affinity: {}
|
|
||||||
gateway:
|
|
||||||
image:
|
|
||||||
repository: quay.io/submariner/submariner-gateway
|
|
||||||
tag: "0.12.2"
|
|
||||||
serviceAccounts:
|
|
||||||
operator:
|
|
||||||
create: true
|
|
||||||
name: ""
|
|
||||||
gateway:
|
|
||||||
create: true
|
|
||||||
name: ""
|
|
||||||
routeAgent:
|
|
||||||
create: true
|
|
||||||
name: ""
|
|
||||||
globalnet:
|
|
||||||
create: true
|
|
||||||
name: ""
|
|
||||||
lighthouseAgent:
|
|
||||||
create: true
|
|
||||||
name: ""
|
|
||||||
lighthouseCoreDns:
|
|
||||||
create: true
|
|
||||||
name: ""
|
|
||||||
@@ -1,14 +1,12 @@
|
|||||||
---
|
---
|
||||||
name: submariner-operator
|
name: submariner
|
||||||
version: 0.12.2
|
version: 0.6.0
|
||||||
apiVersion: v2
|
appVersion: 0.6.0
|
||||||
appVersion: 0.12.2
|
|
||||||
description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters
|
description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters
|
||||||
keywords:
|
keywords:
|
||||||
home: https://submariner-io.github.io/
|
home: https://submariner-io.github.io/
|
||||||
sources:
|
sources:
|
||||||
- https://submariner-io.github.io/submariner-charts/charts
|
- https://submariner-io.github.io/submariner-charts/charts
|
||||||
maintainers:
|
maintainers:
|
||||||
- name: Contributors to the Submariner project
|
- name: Submariner Developers
|
||||||
email: submariner-dev@googlegroups.com
|
email: submariner-dev@googlegroups.com
|
||||||
url: https://submariner.io/
|
|
||||||
@@ -0,0 +1,5 @@
|
|||||||
|
# Submariner
|
||||||
|
|
||||||
|
[Submariner](https://submariner.io) is a cross-cluster networking tool.
|
||||||
|
|
||||||
|
This chart creates the required components in this cluster to enable cross cluster networking.
|
||||||
@@ -1,40 +1,46 @@
|
|||||||
questions:
|
questions:
|
||||||
- variable: defaultOperatorImage
|
- variable: defaultEngineImage
|
||||||
default: true
|
default: true
|
||||||
description: "Use default Submariner operator image or specify a custom one"
|
description: "Use default Submariner Engine image or specify a custom one"
|
||||||
label: Use default Submariner operator image
|
label: Use default submariner engine image
|
||||||
type: boolean
|
type: boolean
|
||||||
show_subquestion_if: false
|
show_subquestion_if: false
|
||||||
group: "Container Images"
|
group: "Container Images"
|
||||||
subquestions:
|
subquestions:
|
||||||
- variable: operator.image.repository
|
- variable: engine.image.repository
|
||||||
default: "quay.io/submariner/submariner-operator"
|
default: "quay.io/submariner/submariner"
|
||||||
description: "Submariner Operator Image Repository"
|
description: "Submariner Engine Image Repository"
|
||||||
type: string
|
type: string
|
||||||
label: Submariner Operator Image Repository
|
label: Submariner Engine Image Repository
|
||||||
- variable: operator.image.tag
|
- variable: engine.image.tag
|
||||||
default: "0.12.2"
|
default: "0.6.0"
|
||||||
description: "Submariner Operator Image Tag"
|
description: "Submariner Engine Image Tag"
|
||||||
type: string
|
type: string
|
||||||
label: Submariner Operator Image Tag
|
label: Submariner Engine Image Tag
|
||||||
- variable: defaultSubmarinerImages
|
- variable: defaultRouteAgentImage
|
||||||
default: true
|
default: true
|
||||||
description: "Use default Submariner images or specify custom ones"
|
description: "Use default Submariner Route Agent image or specify a custom one"
|
||||||
label: Use default Submariner images
|
label: Use default submariner route agent image
|
||||||
type: boolean
|
type: boolean
|
||||||
show_subquestion_if: false
|
show_subquestion_if: false
|
||||||
group: "Container images"
|
group: "Container Images"
|
||||||
subquestions:
|
subquestions:
|
||||||
- variable: submariner.images.repository
|
- variable: routeAgent.image.repository
|
||||||
default: "quay.io/submariner"
|
default: "quay.io/submariner/submariner-route-agent"
|
||||||
description: "Submariner Repository (base for all non-operator images)"
|
description: "Submariner Route Agent Image Repository"
|
||||||
type: string
|
type: string
|
||||||
label: Submariner Repository
|
label: Submariner Route Agent Image Repository
|
||||||
- variable: submariner.images.tag
|
- variable: routeAgent.image.tag
|
||||||
default: "0.12.2"
|
default: "0.6.0"
|
||||||
description: "Submariner Images Tag (shared for all non-operator images)"
|
description: "Submariner Route Agent Image Tag"
|
||||||
type: string
|
type: string
|
||||||
label: Submariner Images Tag
|
label: Submariner Route Agent Image Tag
|
||||||
|
- variable: engine.nodeSelectorEnabled
|
||||||
|
default: true
|
||||||
|
description: "Restrict submariner to nodes labeled with submariner.io/gateway=true"
|
||||||
|
label: Restrict gateway deployments to specific nodes
|
||||||
|
type: boolean
|
||||||
|
group: "Gateway Configuration"
|
||||||
- variable: submariner.clusterId
|
- variable: submariner.clusterId
|
||||||
default: ""
|
default: ""
|
||||||
description: "Enter a unique cluster ID to identify this cluster"
|
description: "Enter a unique cluster ID to identify this cluster"
|
||||||
@@ -49,6 +55,14 @@ questions:
|
|||||||
label: "IPsec Pre-Shared Key"
|
label: "IPsec Pre-Shared Key"
|
||||||
group: "Configuration"
|
group: "Configuration"
|
||||||
required: true
|
required: true
|
||||||
|
- variable: broker.type
|
||||||
|
type: enum
|
||||||
|
default: k8s
|
||||||
|
options:
|
||||||
|
- k8s
|
||||||
|
group: "Broker Configuration"
|
||||||
|
label: "Broker Type"
|
||||||
|
description: "Type of Broker to use"
|
||||||
- variable: broker.server
|
- variable: broker.server
|
||||||
type: string
|
type: string
|
||||||
default: ""
|
default: ""
|
||||||
@@ -92,32 +106,18 @@ questions:
|
|||||||
label: "Service CIDR"
|
label: "Service CIDR"
|
||||||
group: "CIDR Configuration"
|
group: "CIDR Configuration"
|
||||||
required: true
|
required: true
|
||||||
- variable: submariner.serviceDiscovery
|
|
||||||
type: boolean
|
|
||||||
default: false
|
|
||||||
group: "Advanced Configuration"
|
|
||||||
description: "Enable multicluster service discovery"
|
|
||||||
label: "Service Discovery Enabled"
|
|
||||||
- variable: broker.globalnet
|
|
||||||
type: boolean
|
|
||||||
default: false
|
|
||||||
group: "Broker Configuration"
|
|
||||||
description: "Enable support for overlapping Cluster/Service CIDRs in connecting clusters"
|
|
||||||
label: "Globalnet Enabled"
|
|
||||||
subquestions:
|
|
||||||
- variable: submariner.globalCidr
|
|
||||||
default: ""
|
|
||||||
description: "Enter the globalnet CIDR (i.e. 169.254.1.0/24) for this cluster if using globalnet"
|
|
||||||
type: string
|
|
||||||
label: "Globalnet CIDR"
|
|
||||||
group: "CIDR Configuration"
|
|
||||||
required: false
|
|
||||||
- variable: submariner.natEnabled
|
- variable: submariner.natEnabled
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
group: "Advanced Configuration"
|
group: "Advanced Configuration"
|
||||||
description: "If the gateway nodes for this cluster are behind 1:1 NAT, you should enable NAT"
|
description: "If the gateway nodes for this cluster are behind 1:1 NAT, you should enable NAT"
|
||||||
label: "NAT Enabled"
|
label: "NAT Enabled"
|
||||||
|
- variable: crd.create
|
||||||
|
type: boolean
|
||||||
|
default: true
|
||||||
|
group: "Advanced Configuration"
|
||||||
|
description: "Create the Submariner CRDs, if deploying Submariner into the same cluster as the submariner-k8s-broker, you probably shouldn't create CRDs"
|
||||||
|
label: "CRD Creation Enabled"
|
||||||
- variable: submariner.debug
|
- variable: submariner.debug
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
@@ -136,9 +136,3 @@ questions:
|
|||||||
group: "Advanced Configuration"
|
group: "Advanced Configuration"
|
||||||
description: "Cable driver implementation"
|
description: "Cable driver implementation"
|
||||||
label: "Cable Driver"
|
label: "Cable Driver"
|
||||||
- variable: submariner.healthcheckEnabled
|
|
||||||
type: boolean
|
|
||||||
default: true
|
|
||||||
group: "Advanced Configuration"
|
|
||||||
description: "Disable Healthcheck"
|
|
||||||
label: "Healthcheck Disabled"
|
|
||||||
@@ -1,6 +1,6 @@
|
|||||||
Submariner is now installed.
|
Submariner is now installed.
|
||||||
|
|
||||||
{{- if .Values.gateway.nodeSelectorEnabled }}
|
{{- if .Values.engine.nodeSelectorEnabled }}
|
||||||
If you haven't done so yet, please label a node as `submariner.io/gateway=true` to elect it for running Submariner.
|
If you haven't done so yet, please label a node as `submariner.io/gateway=true` to elect it for running Submariner.
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
@@ -32,24 +32,13 @@ Create chart name and version as used by the chart label.
|
|||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Create the name of the submariner-operator service account to use
|
Create the name of the submariner-engine service account to use
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "submariner.operatorServiceAccountName" -}}
|
{{- define "submariner.engineServiceAccountName" -}}
|
||||||
{{- if .Values.serviceAccounts.operator.create -}}
|
{{- if .Values.serviceAccounts.engine.create -}}
|
||||||
{{ default (printf "%s" (include "submariner.fullname" .)) .Values.serviceAccounts.operator.name }}
|
{{ default (printf "%s-engine" (include "submariner.fullname" .)) .Values.serviceAccounts.engine.name }}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{ default "default" .Values.serviceAccounts.operator.name }}
|
{{ default "default" .Values.serviceAccounts.engine.name }}
|
||||||
{{- end -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Create the name of the submariner-gateway service account to use
|
|
||||||
*/}}
|
|
||||||
{{- define "submariner.gatewayServiceAccountName" -}}
|
|
||||||
{{- if .Values.serviceAccounts.gateway.create -}}
|
|
||||||
{{ default "submariner-gateway" .Values.serviceAccounts.gateway.name }}
|
|
||||||
{{- else -}}
|
|
||||||
{{ default "default" .Values.serviceAccounts.gateway.name }}
|
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
@@ -58,7 +47,7 @@ Create the name of the submariner-route-agent service account to use
|
|||||||
*/}}
|
*/}}
|
||||||
{{- define "submariner.routeAgentServiceAccountName" -}}
|
{{- define "submariner.routeAgentServiceAccountName" -}}
|
||||||
{{- if .Values.serviceAccounts.routeAgent.create -}}
|
{{- if .Values.serviceAccounts.routeAgent.create -}}
|
||||||
{{ default "submariner-routeagent" .Values.serviceAccounts.routeAgent.name }}
|
{{ default (printf "%s-routeagent" (include "submariner.fullname" .)) .Values.serviceAccounts.routeAgent.name }}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{ default "default" .Values.serviceAccounts.routeAgent.name }}
|
{{ default "default" .Values.serviceAccounts.routeAgent.name }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
@@ -69,31 +58,20 @@ Create the name of the submariner-globalnet service account to use
|
|||||||
*/}}
|
*/}}
|
||||||
{{- define "submariner.globalnetServiceAccountName" -}}
|
{{- define "submariner.globalnetServiceAccountName" -}}
|
||||||
{{- if .Values.serviceAccounts.globalnet.create -}}
|
{{- if .Values.serviceAccounts.globalnet.create -}}
|
||||||
{{ default "submariner-globalnet" .Values.serviceAccounts.globalnet.name }}
|
{{ default (printf "%s-globalnet" (include "submariner.fullname" .)) .Values.serviceAccounts.globalnet.name }}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{ default "default" .Values.serviceAccounts.globalnet.name }}
|
{{ default "default" .Values.serviceAccounts.globalnet.name }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Create the name of the submariner-lighthouse-agent service account to use
|
Create the name of the submariner-lighthouse service account to use
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "submariner.lighthouseAgentServiceAccountName" -}}
|
{{- define "submariner.lighthouseServiceAccountName" -}}
|
||||||
{{- if and (.Values.submariner.serviceDiscovery ) (.Values.serviceAccounts.lighthouseAgent.create) -}}
|
{{- if .Values.submariner.serviceDiscovery -}}
|
||||||
{{ default "submariner-lighthouse-agent" .Values.serviceAccounts.lighthouseAgent.name }}
|
{{ default (printf "%s-lighthouse" (include "submariner.fullname" .)) .Values.serviceAccounts.lighthouse.name }}
|
||||||
{{- else -}}
|
{{- else -}}
|
||||||
{{ default "default" .Values.serviceAccounts.lighthouseAgent.name }}
|
{{ default "default" .Values.serviceAccounts.lighthouse.name }}
|
||||||
{{- end -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{/*
|
|
||||||
Create the name of the submariner-lighthouse-coredns service account to use
|
|
||||||
*/}}
|
|
||||||
{{- define "submariner.lighthouseCoreDnsServiceAccountName" -}}
|
|
||||||
{{- if and (.Values.submariner.serviceDiscovery ) (.Values.serviceAccounts.lighthouseCoreDns.create) -}}
|
|
||||||
{{ default "submariner-lighthouse-coredns" .Values.serviceAccounts.lighthouseCoreDns.name }}
|
|
||||||
{{- else -}}
|
|
||||||
{{ default "default" .Values.serviceAccounts.lighthouseCoreDns.name }}
|
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
@@ -0,0 +1,110 @@
|
|||||||
|
{{- if .Values.crd.create -}}
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: clusters.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: submariner.io
|
||||||
|
version: v1
|
||||||
|
names:
|
||||||
|
kind: Cluster
|
||||||
|
plural: clusters
|
||||||
|
scope: Namespaced
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: endpoints.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: submariner.io
|
||||||
|
version: v1
|
||||||
|
names:
|
||||||
|
kind: Endpoint
|
||||||
|
plural: endpoints
|
||||||
|
scope: Namespaced
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: gateways.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: submariner.io
|
||||||
|
version: v1
|
||||||
|
names:
|
||||||
|
kind: Gateway
|
||||||
|
plural: gateways
|
||||||
|
scope: Namespaced
|
||||||
|
additionalPrinterColumns:
|
||||||
|
- name: ha-status
|
||||||
|
type: string
|
||||||
|
description: High Availability Status of the Gateway
|
||||||
|
JSONPath: .status.haStatus
|
||||||
|
---
|
||||||
|
{{- if .Values.submariner.serviceDiscovery }}
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: multiclusterservices.lighthouse.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: lighthouse.submariner.io
|
||||||
|
version: v1
|
||||||
|
names:
|
||||||
|
kind: MultiClusterService
|
||||||
|
plural: multiclusterservices
|
||||||
|
singular: multiclusterservice
|
||||||
|
scope: Namespaced
|
||||||
|
validation:
|
||||||
|
openAPIV3Schema:
|
||||||
|
properties:
|
||||||
|
spec:
|
||||||
|
properties:
|
||||||
|
clusterServiceInfo:
|
||||||
|
properties:
|
||||||
|
clusterID:
|
||||||
|
type: "string"
|
||||||
|
clusterDomain:
|
||||||
|
type: "string"
|
||||||
|
serviceIP:
|
||||||
|
type: "string"
|
||||||
|
port:
|
||||||
|
type: "integer"
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: serviceexports.lighthouse.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: lighthouse.submariner.io
|
||||||
|
version: v2alpha1
|
||||||
|
names:
|
||||||
|
kind: ServiceExport
|
||||||
|
plural: serviceexports
|
||||||
|
singular: serviceexport
|
||||||
|
scope: Namespaced
|
||||||
|
---
|
||||||
|
apiVersion: apiextensions.k8s.io/v1beta1
|
||||||
|
kind: CustomResourceDefinition
|
||||||
|
metadata:
|
||||||
|
name: serviceimports.lighthouse.submariner.io
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": crd-install
|
||||||
|
spec:
|
||||||
|
group: lighthouse.submariner.io
|
||||||
|
version: v2alpha1
|
||||||
|
names:
|
||||||
|
kind: ServiceImport
|
||||||
|
plural: serviceimports
|
||||||
|
singular: serviceimport
|
||||||
|
scope: Namespaced
|
||||||
|
{{- end }}
|
||||||
|
{{- end -}}
|
||||||
@@ -0,0 +1,134 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: DaemonSet
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
heritage: {{ .Release.Service | quote }}
|
||||||
|
release: {{ .Release.Name | quote }}
|
||||||
|
chart: {{ template "submariner.chart" . }}
|
||||||
|
app: {{ template "submariner.fullname" . }}-engine
|
||||||
|
component: engine
|
||||||
|
name: {{ template "submariner.fullname" . }}-gateway
|
||||||
|
spec:
|
||||||
|
revisionHistoryLimit: 5
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: {{ template "submariner.fullname" . }}-engine
|
||||||
|
updateStrategy:
|
||||||
|
rollingUpdate:
|
||||||
|
maxUnavailable: 1
|
||||||
|
type: RollingUpdate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
creationTimestamp: null
|
||||||
|
labels:
|
||||||
|
app: {{ template "submariner.fullname" . }}-engine
|
||||||
|
spec:
|
||||||
|
affinity:
|
||||||
|
podAntiAffinity:
|
||||||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
- labelSelector:
|
||||||
|
matchExpressions:
|
||||||
|
- key: app
|
||||||
|
operator: In
|
||||||
|
values:
|
||||||
|
- {{ template "submariner.fullname" . }}-engine
|
||||||
|
topologyKey: "kubernetes.io/hostname"
|
||||||
|
{{- with .Values.engine.affinity }}
|
||||||
|
{{ toYaml . | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
nodeSelector:
|
||||||
|
{{- if .Values.engine.nodeSelectorEnabled }}
|
||||||
|
submariner.io/gateway: "true"
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.engine.nodeSelector }}
|
||||||
|
{{ toYaml . | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.engine.tolerations }}
|
||||||
|
tolerations:
|
||||||
|
{{ toYaml . | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
containers:
|
||||||
|
- command:
|
||||||
|
- submariner.sh
|
||||||
|
env:
|
||||||
|
- name: SUBMARINER_NAMESPACE
|
||||||
|
value: "{{ .Release.Namespace }}"
|
||||||
|
- name: SUBMARINER_CLUSTERCIDR
|
||||||
|
value: "{{ .Values.submariner.clusterCidr }}"
|
||||||
|
- name: SUBMARINER_SERVICECIDR
|
||||||
|
value: "{{ .Values.submariner.serviceCidr }}"
|
||||||
|
- name: SUBMARINER_GLOBALCIDR
|
||||||
|
value: "{{ .Values.submariner.globalCidr }}"
|
||||||
|
- name: SUBMARINER_TOKEN
|
||||||
|
value: "{{ .Values.submariner.apiToken }}"
|
||||||
|
- name: SUBMARINER_CLUSTERID
|
||||||
|
value: "{{ .Values.submariner.clusterId }}"
|
||||||
|
- name: SUBMARINER_COLORCODES
|
||||||
|
value: "{{ .Values.submariner.colorCodes }}"
|
||||||
|
- name: SUBMARINER_DEBUG
|
||||||
|
value: "{{ .Values.submariner.debug }}"
|
||||||
|
- name: SUBMARINER_NATENABLED
|
||||||
|
value: "{{ .Values.submariner.natEnabled }}"
|
||||||
|
- name: SUBMARINER_BROKER
|
||||||
|
value: "{{ .Values.broker.type }}"
|
||||||
|
- name: SUBMARINER_CABLEDRIVER
|
||||||
|
value: "{{ .Values.submariner.cableDriver }}"
|
||||||
|
{{- if eq .Values.broker.type "phpapi" }}
|
||||||
|
- name: BROKER_PHPAPI_PROTO
|
||||||
|
value: "{{ .Values.broker.proto }}"
|
||||||
|
- name: BROKER_PHPAPI_SERVER
|
||||||
|
value: "{{ .Values.broker.server }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- if eq .Values.broker.type "k8s" }}
|
||||||
|
- name: BROKER_K8S_APISERVER
|
||||||
|
value: "{{ .Values.broker.server }}"
|
||||||
|
- name: BROKER_K8S_APISERVERTOKEN
|
||||||
|
value: "{{ .Values.broker.token }}"
|
||||||
|
- name: BROKER_K8S_REMOTENAMESPACE
|
||||||
|
value: "{{ .Values.broker.namespace }}"
|
||||||
|
{{- if .Values.broker.insecure }}
|
||||||
|
- name: BROKER_K8S_INSECURE
|
||||||
|
value: "true"
|
||||||
|
{{- else }}
|
||||||
|
- name: BROKER_K8S_CA
|
||||||
|
value: "{{ .Values.broker.ca }}"
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
- name: CE_IPSEC_PSK
|
||||||
|
value: "{{ .Values.ipsec.psk }}"
|
||||||
|
- name: CE_IPSEC_DEBUG
|
||||||
|
value: "{{ .Values.ipsec.debug }}"
|
||||||
|
- name: CE_IPSEC_IKEPORT
|
||||||
|
value: "{{ .Values.ipsec.ikePort }}"
|
||||||
|
- name: CE_IPSEC_NATTPORT
|
||||||
|
value: "{{ .Values.ipsec.natPort }}"
|
||||||
|
- name: LEADERSHIP_LEASEDURATION
|
||||||
|
value: "{{ .Values.leadership.leaseDuration }}"
|
||||||
|
- name: LEADERSHIP_RENEWDEADLINE
|
||||||
|
value: "{{ .Values.leadership.renewDeadline }}"
|
||||||
|
- name: LEADERSHIP_RETRYPERIOD
|
||||||
|
value: "{{ .Values.leadership.retryPeriod }}"
|
||||||
|
image: {{ .Values.engine.image.repository }}:{{ default .Chart.AppVersion .Values.engine.image.tag }}
|
||||||
|
imagePullPolicy: {{ .Values.engine.image.pullPolicy }}
|
||||||
|
name: submariner
|
||||||
|
resources:
|
||||||
|
{{ toYaml .Values.engine.resources | indent 10 }}
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: true
|
||||||
|
capabilities:
|
||||||
|
add:
|
||||||
|
- ALL
|
||||||
|
privileged: true
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
runAsNonRoot: false
|
||||||
|
stdin: true
|
||||||
|
terminationMessagePath: /dev/termination-log
|
||||||
|
terminationMessagePolicy: File
|
||||||
|
tty: true
|
||||||
|
dnsPolicy: ClusterFirst
|
||||||
|
hostNetwork: true
|
||||||
|
restartPolicy: Always
|
||||||
|
schedulerName: default-scheduler
|
||||||
|
securityContext: {}
|
||||||
|
terminationGracePeriodSeconds: 1
|
||||||
|
serviceAccountName: {{ template "submariner.engineServiceAccountName" . }}
|
||||||
@@ -0,0 +1,59 @@
|
|||||||
|
{{- if ne .Values.submariner.globalCidr "" }}
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: DaemonSet
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}-globalnet
|
||||||
|
labels:
|
||||||
|
heritage: {{ .Release.Service | quote }}
|
||||||
|
release: {{ .Release.Name | quote }}
|
||||||
|
chart: {{ template "submariner.chart" . }}
|
||||||
|
app: {{ template "submariner.fullname" . }}-globalnet
|
||||||
|
component: globalnet
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: {{ template "submariner.fullname" . }}-globalnet
|
||||||
|
updateStrategy:
|
||||||
|
rollingUpdate:
|
||||||
|
maxUnavailable: 1
|
||||||
|
type: RollingUpdate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: {{ template "submariner.fullname" . }}-globalnet
|
||||||
|
spec:
|
||||||
|
hostNetwork: true
|
||||||
|
serviceAccountName: submariner-globalnet
|
||||||
|
serviceAccount: submariner-globalnet
|
||||||
|
terminationGracePeriodSeconds: 2
|
||||||
|
nodeSelector:
|
||||||
|
submariner.io/gateway: 'true'
|
||||||
|
containers:
|
||||||
|
- name: {{ template "submariner.fullname" . }}-globalnet
|
||||||
|
image: {{ .Values.globalnet.image.repository }}:{{ default .Chart.AppVersion .Values.globalnet.image.tag }}
|
||||||
|
imagePullPolicy: {{ .Values.globalnet.image.pullPolicy }}
|
||||||
|
env:
|
||||||
|
- name: SUBMARINER_CLUSTERID
|
||||||
|
value: '{{ .Values.submariner.clusterId }}'
|
||||||
|
- name: SUBMARINER_EXCLUDENS
|
||||||
|
value: 'submariner-operator,kube-system,operators'
|
||||||
|
- name: SUBMARINER_NAMESPACE
|
||||||
|
value: '{{ .Release.Namespace }}'
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: true
|
||||||
|
capabilities:
|
||||||
|
add:
|
||||||
|
- ALL
|
||||||
|
privileged: true
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
runAsNonRoot: false
|
||||||
|
volumeMounts:
|
||||||
|
# Because we don't actually run iptables locally, but chroot in to the host
|
||||||
|
- mountPath: /host
|
||||||
|
name: host-slash
|
||||||
|
readOnly: true
|
||||||
|
volumes:
|
||||||
|
- name: host-slash
|
||||||
|
hostPath:
|
||||||
|
path: /
|
||||||
|
{{- end }}
|
||||||
@@ -0,0 +1,74 @@
|
|||||||
|
{{- if .Values.submariner.serviceDiscovery }}
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
labels:
|
||||||
|
heritage: {{ .Release.Service | quote }}
|
||||||
|
release: {{ .Release.Name | quote }}
|
||||||
|
chart: {{ template "submariner.chart" . }}
|
||||||
|
app: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
component: lighthouse-coredns
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
replicas: 2
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- args:
|
||||||
|
- -conf
|
||||||
|
- /etc/coredns/Corefile
|
||||||
|
image: {{ .Values.lighthouseCoredns.image.repository }}:{{ default .Chart.AppVersion .Values.lighthouseCoredns.image.tag }}
|
||||||
|
imagePullPolicy: {{ .Values.lighthouseCoredns.image.pullPolicy }}
|
||||||
|
name: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /etc/coredns
|
||||||
|
name: config-volume
|
||||||
|
readOnly: true
|
||||||
|
serviceAccountName: {{ template "submariner.lighthouseServiceAccountName" . }}
|
||||||
|
volumes:
|
||||||
|
- configMap:
|
||||||
|
defaultMode: 420
|
||||||
|
items:
|
||||||
|
- key: Corefile
|
||||||
|
path: Corefile
|
||||||
|
name: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
name: config-volume
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
labels:
|
||||||
|
app: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
spec:
|
||||||
|
ports:
|
||||||
|
- name: udp
|
||||||
|
port: 53
|
||||||
|
protocol: UDP
|
||||||
|
targetPort: 53
|
||||||
|
selector:
|
||||||
|
app: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
type: ClusterIP
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.lighthouseDnsName" . }}
|
||||||
|
data:
|
||||||
|
Corefile: |
|
||||||
|
clusterset.local:53 {
|
||||||
|
{{- if .Values.submariner.debug }}
|
||||||
|
log
|
||||||
|
{{- end }}
|
||||||
|
lighthouse
|
||||||
|
errors
|
||||||
|
health
|
||||||
|
ready
|
||||||
|
}
|
||||||
|
{{- end }}
|
||||||
@@ -0,0 +1,55 @@
|
|||||||
|
{{- if .Values.submariner.serviceDiscovery }}
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}-lighthouse-agent
|
||||||
|
labels:
|
||||||
|
heritage: {{ .Release.Service | quote }}
|
||||||
|
release: {{ .Release.Name | quote }}
|
||||||
|
chart: {{ template "submariner.chart" . }}
|
||||||
|
app: {{ template "submariner.fullname" . }}-lighthouse-agent
|
||||||
|
component: lighthouse
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: {{ template "submariner.fullname" . }}-lighthouse-agent
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: {{ template "submariner.fullname" . }}-lighthouse-agent
|
||||||
|
spec:
|
||||||
|
serviceAccountName: {{ template "submariner.lighthouseServiceAccountName" . }}
|
||||||
|
containers:
|
||||||
|
- command:
|
||||||
|
- lighthouse-agent.sh
|
||||||
|
env:
|
||||||
|
- name: SUBMARINER_NAMESPACE
|
||||||
|
value: "{{ .Release.Namespace }}"
|
||||||
|
- name: SUBMARINER_CLUSTERID
|
||||||
|
value: "{{ .Values.submariner.clusterId }}"
|
||||||
|
- name: SUBMARINER_DEBUG
|
||||||
|
value: "{{ .Values.submariner.debug }}"
|
||||||
|
{{- if ne .Values.submariner.globalCidr "" }}
|
||||||
|
- name: SUBMARINER_GLOBALNET_ENABLED
|
||||||
|
value: "true"
|
||||||
|
{{- end }}
|
||||||
|
- name: BROKER_K8S_APISERVER
|
||||||
|
value: "{{ .Values.broker.server }}"
|
||||||
|
- name: BROKER_K8S_APISERVERTOKEN
|
||||||
|
value: "{{ .Values.broker.token }}"
|
||||||
|
- name: BROKER_K8S_REMOTENAMESPACE
|
||||||
|
value: "{{ .Values.broker.namespace }}"
|
||||||
|
{{- if .Values.broker.insecure }}
|
||||||
|
- name: BROKER_K8S_INSECURE
|
||||||
|
value: "true"
|
||||||
|
{{- else }}
|
||||||
|
- name: BROKER_K8S_CA
|
||||||
|
value: "{{ .Values.broker.ca }}"
|
||||||
|
{{- end }}
|
||||||
|
name: {{ template "submariner.fullname" . }}-lighthouse-agent
|
||||||
|
image: {{ .Values.lighthouse.image.repository }}:{{ default .Chart.AppVersion .Values.lighthouse.image.tag }}
|
||||||
|
imagePullPolicy: {{ .Values.lighthouse.image.pullPolicy }}
|
||||||
|
restartPolicy: Always
|
||||||
|
terminationGracePeriodSeconds: 0
|
||||||
|
{{- end }}
|
||||||
@@ -0,0 +1,146 @@
|
|||||||
|
{{- if .Values.rbac.create -}}
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:engine
|
||||||
|
labels:
|
||||||
|
heritage: {{ .Release.Service | quote }}
|
||||||
|
release: {{ .Release.Name | quote }}
|
||||||
|
chart: {{ template "submariner.chart" . }}
|
||||||
|
app: {{ template "submariner.name" . }}
|
||||||
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["configmaps"]
|
||||||
|
verbs: ["create", "get", "list", "watch", "patch", "update"]
|
||||||
|
- apiGroups: ["submariner.io"]
|
||||||
|
resources: ["clusters", "endpoints", "gateways"]
|
||||||
|
verbs: ["create", "get", "list", "watch", "patch", "update", "delete"]
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["events"]
|
||||||
|
verbs: ["create", "patch"]
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:routeagent
|
||||||
|
labels:
|
||||||
|
heritage: {{ .Release.Service | quote }}
|
||||||
|
release: {{ .Release.Name | quote }}
|
||||||
|
chart: {{ template "submariner.chart" . }}
|
||||||
|
app: {{ template "submariner.name" . }}
|
||||||
|
rules:
|
||||||
|
- apiGroups: ["submariner.io"]
|
||||||
|
resources: ["clusters", "endpoints", "gateways"]
|
||||||
|
verbs: ["create", "get", "list", "watch", "patch", "update"]
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["pods"]
|
||||||
|
verbs: ["get", "watch", "list"]
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:engine
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: Role
|
||||||
|
name: {{ template "submariner.fullname" . }}:engine
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "submariner.engineServiceAccountName" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:routeagent
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: Role
|
||||||
|
name: {{ template "submariner.fullname" . }}:routeagent
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "submariner.routeAgentServiceAccountName" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:routeagent
|
||||||
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["nodes"]
|
||||||
|
verbs: ["get", "update"]
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:routeagent
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: {{ template "submariner.fullname" . }}:routeagent
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "submariner.routeAgentServiceAccountName" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
---
|
||||||
|
{{- if ne .Values.submariner.globalCidr "" }}
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:globalnet
|
||||||
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["services", "namespaces", "pods", "nodes"]
|
||||||
|
verbs: ["get", "list", "watch", "update"]
|
||||||
|
- apiGroups: ["submariner.io"]
|
||||||
|
resources: ["clusters", "endpoints", "gateways"]
|
||||||
|
verbs: ["get", "list", "watch"]
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:globalnet
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: {{ template "submariner.fullname" . }}:globalnet
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "submariner.globalnetServiceAccountName" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
---
|
||||||
|
{{- end -}}
|
||||||
|
{{- if .Values.submariner.serviceDiscovery }}
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:lighthouse
|
||||||
|
rules:
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["services", "namespaces", "configmaps", "endpoints"]
|
||||||
|
verbs: ["get", "list", "watch", "update"]
|
||||||
|
- apiGroups: ["discovery.k8s.io"]
|
||||||
|
resources: ["endpointslices"]
|
||||||
|
verbs: ["create", "get", "list", "watch", "update", "delete", "deletecollection"]
|
||||||
|
- apiGroups: ["lighthouse.submariner.io"]
|
||||||
|
resources: ["*"]
|
||||||
|
verbs: ["create", "get", "list", "watch", "update", "delete"]
|
||||||
|
- apiGroups: ["submariner.io"]
|
||||||
|
resources: ["gateways"]
|
||||||
|
verbs: ["get", "list", "watch"]
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}:lighthouse
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: {{ template "submariner.fullname" . }}:lighthouse
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "submariner.lighthouseServiceAccountName" . }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
@@ -0,0 +1,78 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: DaemonSet
|
||||||
|
metadata:
|
||||||
|
name: {{ template "submariner.fullname" . }}-routeagent
|
||||||
|
labels:
|
||||||
|
heritage: {{ .Release.Service | quote }}
|
||||||
|
release: {{ .Release.Name | quote }}
|
||||||
|
chart: {{ template "submariner.chart" . }}
|
||||||
|
app: {{ template "submariner.fullname" . }}-routeagent
|
||||||
|
component: routeagent
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: {{ template "submariner.fullname" . }}-routeagent
|
||||||
|
updateStrategy:
|
||||||
|
rollingUpdate:
|
||||||
|
maxUnavailable: "100%"
|
||||||
|
type: RollingUpdate
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
heritage: {{ .Release.Service | quote }}
|
||||||
|
release: {{ .Release.Name | quote }}
|
||||||
|
chart: {{ template "submariner.chart" . }}
|
||||||
|
app: {{ template "submariner.fullname" . }}-routeagent
|
||||||
|
component: routeagent
|
||||||
|
spec:
|
||||||
|
serviceAccountName: {{ template "submariner.routeAgentServiceAccountName" . }}
|
||||||
|
terminationGracePeriodSeconds: 1
|
||||||
|
hostNetwork: true
|
||||||
|
containers:
|
||||||
|
- name: routeagent
|
||||||
|
command:
|
||||||
|
- submariner-route-agent.sh
|
||||||
|
image: {{ .Values.routeAgent.image.repository }}:{{ default .Chart.AppVersion .Values.routeAgent.image.tag }}
|
||||||
|
imagePullPolicy: {{ .Values.routeAgent.image.pullPolicy }}
|
||||||
|
env:
|
||||||
|
- name: SUBMARINER_NAMESPACE
|
||||||
|
value: "{{ .Release.Namespace }}"
|
||||||
|
- name: SUBMARINER_CLUSTERID
|
||||||
|
value: "{{ .Values.submariner.clusterId }}"
|
||||||
|
- name: SUBMARINER_DEBUG
|
||||||
|
value: "{{ .Values.submariner.debug }}"
|
||||||
|
- name: SUBMARINER_CLUSTERCIDR
|
||||||
|
value: "{{ .Values.submariner.clusterCidr }}"
|
||||||
|
- name: SUBMARINER_SERVICECIDR
|
||||||
|
value: "{{ .Values.submariner.serviceCidr }}"
|
||||||
|
resources:
|
||||||
|
{{ toYaml .Values.routeAgent.resources | indent 10 }}
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: true
|
||||||
|
capabilities:
|
||||||
|
add:
|
||||||
|
- ALL
|
||||||
|
privileged: true
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
runAsNonRoot: false
|
||||||
|
volumeMounts:
|
||||||
|
# Because we don't actually run iptables locally, but chroot in to the host
|
||||||
|
- mountPath: /host
|
||||||
|
name: host-slash
|
||||||
|
readOnly: true
|
||||||
|
{{- with .Values.routeAgent.nodeSelector }}
|
||||||
|
nodeSelector:
|
||||||
|
{{ toYaml . | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.routeAgent.tolerations }}
|
||||||
|
tolerations:
|
||||||
|
{{ toYaml . | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with .Values.routeAgent.affinity }}
|
||||||
|
affinity:
|
||||||
|
{{ toYaml . | indent 8 }}
|
||||||
|
{{- end }}
|
||||||
|
volumes:
|
||||||
|
- name: host-slash
|
||||||
|
hostPath:
|
||||||
|
path: /
|
||||||
@@ -1,20 +1,8 @@
|
|||||||
{{- if .Values.serviceAccounts.operator.create }}
|
{{- if .Values.serviceAccounts.engine.create }}
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.operatorServiceAccountName" . }}
|
name: {{ template "submariner.engineServiceAccountName" . }}
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
{{- end }}
|
|
||||||
---
|
|
||||||
{{- if .Values.serviceAccounts.gateway.create }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.gatewayServiceAccountName" . }}
|
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
@@ -46,26 +34,14 @@ metadata:
|
|||||||
app: {{ template "submariner.name" . }}
|
app: {{ template "submariner.name" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
---
|
---
|
||||||
{{- if .Values.serviceAccounts.lighthouseAgent.create }}
|
{{- if .Values.serviceAccounts.lighthouse.create }}
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ template "submariner.lighthouseAgentServiceAccountName" . }}
|
name: {{ template "submariner.lighthouseServiceAccountName" . }}
|
||||||
labels:
|
labels:
|
||||||
heritage: {{ .Release.Service | quote }}
|
heritage: {{ .Release.Service | quote }}
|
||||||
release: {{ .Release.Name | quote }}
|
release: {{ .Release.Name | quote }}
|
||||||
chart: {{ template "submariner.chart" . }}
|
chart: {{ template "submariner.chart" . }}
|
||||||
app: {{ template "submariner.name" . }}
|
app: {{ template "submariner.name" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
---
|
|
||||||
{{- if .Values.serviceAccounts.lighthouseCoreDns.create }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: {{ template "submariner.lighthouseCoreDnsServiceAccountName" . }}
|
|
||||||
labels:
|
|
||||||
heritage: {{ .Release.Service | quote }}
|
|
||||||
release: {{ .Release.Name | quote }}
|
|
||||||
chart: {{ template "submariner.chart" . }}
|
|
||||||
app: {{ template "submariner.name" . }}
|
|
||||||
{{- end }}
|
|
||||||
@@ -0,0 +1,79 @@
|
|||||||
|
---
|
||||||
|
submariner:
|
||||||
|
clusterId: ""
|
||||||
|
token: ""
|
||||||
|
clusterCidr: "10.42.0.0/16"
|
||||||
|
serviceCidr: "10.43.0.0/16"
|
||||||
|
globalCidr: ""
|
||||||
|
natEnabled: false
|
||||||
|
colorCodes: blue
|
||||||
|
debug: false
|
||||||
|
serviceDiscovery: false
|
||||||
|
crd:
|
||||||
|
create: true
|
||||||
|
broker:
|
||||||
|
type: k8s
|
||||||
|
server: example.k8s.apiserver
|
||||||
|
token: test
|
||||||
|
namespace: xyz
|
||||||
|
insecure: false
|
||||||
|
ca: ""
|
||||||
|
rbac:
|
||||||
|
create: true
|
||||||
|
ipsec:
|
||||||
|
psk: ""
|
||||||
|
debug: false
|
||||||
|
ikePort: 500
|
||||||
|
natPort: 4500
|
||||||
|
leadership:
|
||||||
|
leaseDuration: 10
|
||||||
|
renewDeadline: 5
|
||||||
|
retryPeriod: 2
|
||||||
|
engine:
|
||||||
|
image:
|
||||||
|
repository: quay.io/submariner/submariner
|
||||||
|
tag: ""
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
resources: {}
|
||||||
|
nodeSelectorEnabled: true
|
||||||
|
nodeSelector: {}
|
||||||
|
tolerations: []
|
||||||
|
affinity: {}
|
||||||
|
routeAgent:
|
||||||
|
image:
|
||||||
|
repository: quay.io/submariner/submariner-route-agent
|
||||||
|
tag: ""
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
resources: {}
|
||||||
|
nodeSelector: {}
|
||||||
|
tolerations: []
|
||||||
|
affinity: {}
|
||||||
|
globalnet:
|
||||||
|
image:
|
||||||
|
repository: quay.io/submariner/submariner-globalnet
|
||||||
|
tag: ""
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
lighthouse:
|
||||||
|
image:
|
||||||
|
repository: quay.io/submariner/lighthouse-agent
|
||||||
|
tag: ""
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
lighthouseCoredns:
|
||||||
|
name: ""
|
||||||
|
image:
|
||||||
|
repository: quay.io/submariner/lighthouse-coredns
|
||||||
|
tag: ""
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
serviceAccounts:
|
||||||
|
engine:
|
||||||
|
create: true
|
||||||
|
name: ""
|
||||||
|
routeAgent:
|
||||||
|
create: true
|
||||||
|
name: ""
|
||||||
|
globalnet:
|
||||||
|
create: false
|
||||||
|
name: ""
|
||||||
|
lighthouse:
|
||||||
|
create: false
|
||||||
|
name: ""
|
||||||
Reference in New Issue
Block a user