Skip to content

Commit

Permalink
cli: improve secure preset (#818)
Browse files Browse the repository at this point in the history
* cli: improve secure preset

* remove bootstrapExpect since it defaults to replicas

* Update cli/cmd/install/presets.go

Co-authored-by: Iryna Shustava <[email protected]>

* Update cli/cmd/install/presets.go

Co-authored-by: Iryna Shustava <[email protected]>

* Update cli/cmd/install/presets.go

Co-authored-by: Iryna Shustava <[email protected]>

* adding controller to demo preset

* Changelog

Co-authored-by: Iryna Shustava <[email protected]>
  • Loading branch information
David Yu and ishustava committed Nov 2, 2021
1 parent cef2c73 commit 08396a5
Show file tree
Hide file tree
Showing 2 changed files with 15 additions and 8 deletions.
5 changes: 4 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,14 +3,17 @@
BREAKING CHANGES:
* Helm Chart
* The `kube-system` and `local-path-storage` namespaces are now _excluded_ from connect injection by default on Kubernetes versions >= 1.21. If you wish to enable injection on those namespaces, set `connectInject.namespaceSelector` to `null`. [[GH-726](https://github.com/hashicorp/consul-k8s/pull/726)]

IMPROVEMENTS:
* Helm Chart
* Automatic retry for `gossip-encryption-autogenerate-job` on failure [[GH-789](https://github.com/hashicorp/consul-k8s/pull/789)]
* `kube-system` and `local-path-storage` namespaces are now excluded from connect injection by default on Kubernetes versions >= 1.21. This prevents deadlock issues when `kube-system` components go down and allows Kind to work without changing the failure policy of the mutating webhook. [[GH-726](https://github.com/hashicorp/consul-k8s/pull/726)]
* CLI
* Add `status` command. [[GH-768](https://github.com/hashicorp/consul-k8s/pull/768)]
* Add `-verbose`, `-v` flag to the `consul-k8s install` command, which outputs all logs emitted from the installation. By default, verbose is set to `false` to hide logs that show resources are not ready. [[GH-810](https://github.com/hashicorp/consul-k8s/pull/810)]
* Add Prometheus deployment and Consul K8s metrics integration with demo preset when installing via `-preset=demo`. [[GH-809](https://github.com/hashicorp/consul-k8s/pull/809)]
* Set `prometheus.enabled` to true and enable all metrics for Consul K8s when installing via the `demo` preset. [[GH-809](https://github.com/hashicorp/consul-k8s/pull/809)]
* Set `controller.enabled` to `true` when installing via the `demo` preset. [[GH818](https://github.com/hashicorp/consul-k8s/pull/818)]
* Set `global.gossipEncryption.autoGenerate` to `true` and `global.tls.enableAutoEncrypt` to `true` when installing via the `secure` preset. [[GH818](https://github.com/hashicorp/consul-k8s/pull/818)]

## 0.35.0 (October 19, 2021)

Expand Down
18 changes: 11 additions & 7 deletions cli/cmd/install/presets.go
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,6 @@ var presets = map[string]interface{}{
PresetSecure: convert(secure),
}

// TODO: enable prometheus in demo installation
var demo = `
global:
name: consul
Expand All @@ -28,7 +27,8 @@ connectInject:
enableGatewayMetrics: true
server:
replicas: 1
bootstrapExpect: 1
controller:
enabled: true
ui:
enabled: true
service:
Expand All @@ -40,15 +40,19 @@ prometheus:
var secure = `
global:
name: consul
acls:
manageSystemACLs: true
gossipEncryption:
autoGenerate: true
tls:
enabled: true
connectInject:
enabled: true
enableAutoEncrypt: true
acls:
manageSystemACLs: true
server:
replicas: 1
bootstrapExpect: 1
connectInject:
enabled: true
controller:
enabled: true
`

var globalNameConsul = `
Expand Down

0 comments on commit 08396a5

Please sign in to comment.