[stable/kuberhealthy] kuberhealthy 2.0.0 release chart with helm 3

stable/kuberhealthy/Chart.yaml

@@ -1,26 +1,32 @@
 apiVersion: v1
-appVersion: "v1.0.2"
-home: https://comcast.github.io/kuberhealthy/
-description: The official Helm chart for Kuberhealthy.
 name: kuberhealthy
-version: 1.2.6
+appVersion: 2.0.0
+version: 2.0.0
+home: https://comcast.github.io/kuberhealthy/
+description: "An operator for synthetic test and monitoring.  Works great with Prometheus."
+type: application
 maintainers:
   - name: integrii
     email: [email protected]
   - name: lolimjake
     email: [email protected]
   - name: ihoegen
     email: [email protected]
+  - name: jonnydawg
+    email: [email protected]
+  - name: joshulyne
+    email: [email protected]
 keywords:
 - kuberhealthy
 - kubernetes
+- operator
 - monitoring
 - synthetic
+- testing
 - comcast
 - health
-- cluster
 - prometheus
 sources:
 - https://github.com/Comcast/kuberhealthy
 - https://github.com/helm/charts/tree/master/stable/kuberhealthy
-icon: https://raw.githubusercontent.com/Comcast/kuberhealthy/helm/deploy/helm/kuberhealthy/kh-logo.png
+icon: https://raw.githubusercontent.com/Comcast/kuberhealthy/master/images/logo-square.png

stable/kuberhealthy/OWNERS

@@ -2,7 +2,11 @@ approvers:
 - integrii
 - lolimjake
 - ihoegen
+- jonnydawg
+- joshulyne
 reviewers:
 - integrii
 - lolimjake
 - ihoegen
+- jonnydawg
+- joshulyne

stable/kuberhealthy/crds/khcheck.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: khchecks.comcast.github.io
+spec:
+  group: comcast.github.io
+  version: v1
+  scope: Namespaced
+  names:
+    plural: khchecks
+    singular: khcheck
+    kind: KuberhealthyCheck
+    shortNames:
+      - khc  
+

stable/kuberhealthy/templates/customresourcedefinition.yaml → stable/kuberhealthy/crds/khstate.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
@@ -11,4 +12,4 @@ spec:
     singular: khstate
     kind: KuberhealthyState
     shortNames:
-    - khs
+      - khs

stable/kuberhealthy/templates/clusterrole.yaml

@@ -1,17 +1,62 @@
+---
 apiVersion: {{ template "rbac.apiVersion" . }}
 kind: ClusterRole
 metadata:
   name: {{ template "kuberhealthy.name" . }}
 rules:
+  - apiGroups:
+    - apps
+    resources:
+    - daemonsets
+    verbs:
+    - create
+    - delete
+    - deletecollection
+    - get
+    - list
+    - patch
+    - update
+    - watch
+  - apiGroups:
+    - extensions
+    resources:
+    - daemonsets
+    verbs:
+    - create
+    - delete
+    - deletecollection
+    - get
+    - list
+    - patch
+    - update
+    - watch
   - apiGroups:
     - ""
     resources:
     - pods
+    verbs:
+    - create
+    - delete
+    - deletecollection
+    - get
+    - list
+    - patch
+    - update
+    - watch
+  - apiGroups:
+    - comcast.github.io
+    resources:
+    - khstates
+    - khchecks
+    verbs:
+    - "*"
+  - apiGroups:
+    - ""
+    resources:
     - namespaces
     - componentstatuses
     - nodes
     verbs:
     - get
     - list
-    - watch
-
+    - watch

stable/kuberhealthy/templates/clusterrolebinding.yaml

@@ -11,4 +11,4 @@ subjects:
 - kind: ServiceAccount
   name: {{ template "kuberhealthy.name" . }}
   namespace: {{ .Release.Namespace }}
-
+

stable/kuberhealthy/templates/deployment.yaml

@@ -1,18 +1,16 @@
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ template "kuberhealthy.name" . }}
   labels:
     app: {{ template "kuberhealthy.name" . }}
     chart: {{ .Chart.Name }}
-    release: {{ .Release.Name }}
-    heritage: {{ .Release.Service }}
 spec:
   replicas: {{ .Values.deployment.replicas }}
   selector:
     matchLabels:
       app: {{ template "kuberhealthy.name" . }}
-      release: {{ .Release.Name }}
   strategy:
     rollingUpdate:
       maxSurge: {{ .Values.deployment.maxSurge }}
@@ -30,7 +28,7 @@ spec:
       {{- if .Values.prometheus.enableScraping -}}
       {{- if not .Values.deployment.podAnnotations }}
       annotations:
-      {{- end}}
+      {{- end }}
         prometheus.io/scrape: "true"
         prometheus.io/path: "/metrics"
         prometheus.io/port: "8080"
@@ -39,8 +37,6 @@ spec:
       labels:
         app: {{ template "kuberhealthy.name" . }}
         chart: {{ .Chart.Name }}
-        release: {{ .Release.Name }}
-        heritage: {{ .Release.Service }}
     spec:
       serviceAccountName: kuberhealthy
       automountServiceAccountToken: true
@@ -90,7 +86,7 @@ spec:
             cpu: {{ .Values.resources.requests.cpu }}
             memory: {{ .Values.resources.requests.memory }}
       restartPolicy: Always
-      terminationGracePeriodSeconds: 310
+      terminationGracePeriodSeconds: 60
 {{- if .Values.tolerations.master }}
       tolerations:
       - effect: NoSchedule

stable/kuberhealthy/templates/khcheck-daemonset.yaml

@@ -0,0 +1,67 @@
+{{- if .Values.check.daemonset }}
+---
+apiVersion: comcast.github.io/v1
+kind: KuberhealthyCheck
+metadata:
+  name: daemonset
+spec:
+  runInterval: 15m
+  timeout: 12m
+  podSpec:
+    containers:
+      - env:
+          - name: POD_NAMESPACE
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.namespace
+          - name: CHECK_POD_TIMEOUT
+            value: "10m"
+        image: quay.io/comcast/kh-daemonset-check:1.0.0
+        imagePullPolicy: IfNotPresent
+        name: main
+        resources:
+          requests:
+            cpu: 10m
+            memory: 50Mi
+    serviceAccountName: daemonset-khcheck
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: daemonset-khcheck
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ds-admin
+subjects:
+  - kind: ServiceAccount
+    name: daemonset-khcheck
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ds-admin
+rules:
+  - apiGroups:
+      - ""
+      - extensions
+      - app
+    resources:
+      - daemonsets
+      - pods
+    verbs:
+      - create
+      - delete
+      - deletecollection
+      - get
+      - list
+      - patch
+      - update
+      - watch
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: daemonset-khcheck
+{{- end }}
+

stable/kuberhealthy/templates/khcheck-deployment.yaml

@@ -0,0 +1,84 @@
+{{- if .Values.check.deployment }}
+---
+apiVersion: comcast.github.io/v1
+kind: KuberhealthyCheck
+metadata:
+  name: deployment
+spec:
+  runInterval: 30m
+  timeout: 10m
+  podSpec:
+    containers:
+    - name: deployment
+      image: quay.io/comcast/deployment-check:1.0.2
+      imagePullPolicy: IfNotPresent
+      env:
+        - name: CHECK_DEPLOYMENT_REPLICAS
+          value: "4"
+        - name: CHECK_DEPLOYMENT_ROLLING_UPDATE
+          value: "true"
+      resources:
+        requests:
+          cpu: 25m
+          memory: 15Mi
+        limits:
+          cpu: 40m
+      restartPolicy: Always
+    serviceAccountName: deployment-sa
+    terminationGracePeriodSeconds: 60
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: deployment-check-rb
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: deployment-service-role
+subjects:
+  - kind: ServiceAccount
+    name: deployment-sa
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: deployment-service-role
+rules:
+  - apiGroups:
+      - "apps"
+    resources:
+      - deployments
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - services
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - get
+      - list
+      - watch
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: deployment-sa
+{{- end }}

stable/kuberhealthy/templates/khcheck-dns.yaml

@@ -0,0 +1,25 @@
+{{- if .Values.check.dnsInternal }}
+---
+apiVersion: comcast.github.io/v1
+kind: KuberhealthyCheck
+metadata:
+  name: dns-status-internal
+spec:
+  runInterval: 2m
+  timeout: 15m
+  podSpec:
+    containers:
+      - env:
+          - name: CHECK_POD_TIMEOUT
+            value: "110s"
+          - name: HOSTNAME
+            value: "kubernetes.default"
+        image: quay.io/comcast/dns-status-check:1.0.0
+        imagePullPolicy: IfNotPresent
+        name: main
+        resources:
+          requests:
+            cpu: 10m
+            memory: 50Mi
+{{- end }}
+