Skip to content
This repository has been archived by the owner on Feb 22, 2022. It is now read-only.

[incubator/sparkoperator] Fixed malformed CRD manifests #19654

Merged
merged 1 commit into from
Dec 17, 2019

Conversation

liyinan926
Copy link
Collaborator

Signed-off-by: Yinan Li [email protected]

Is this a new chart

NOTE: We're experiencing a high volume of PRs to this repo and reviews will be delayed. Please host your own chart repository and submit your repository to the Helm Hub instead of this repo to make them discoverable to the community. Here is how to submit new chart repositories to the Helm Hub.

What this PR does / why we need it:

Fixed malformed CRD manifests introduced in 0f5eef5.

Special notes for your reviewer:

Checklist

[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]

  • DCO signed
  • Chart Version bumped
  • Variables are documented in the README.md
  • Title of the PR starts with chart name (e.g. [stable/mychartname])

@helm-bot helm-bot added Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Dec 17, 2019
@liyinan926
Copy link
Collaborator Author

/assign @yuchaoran2011

Copy link
Collaborator

@yuchaoran2011 yuchaoran2011 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@k8s-ci-robot k8s-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Dec 17, 2019
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: liyinan926, yuchaoran2011

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot merged commit 7b54b23 into helm:master Dec 17, 2019
mced pushed a commit to mced/charts that referenced this pull request Dec 26, 2019
emas80 added a commit to faceit/charts that referenced this pull request Jan 10, 2020
* [stable/parse] Configure parse-dashboard to form Urls with HTTPS protocol (#19582)

* Configure parse-dashboard to form Urls with HTTPS protocol

Signed-off-by: darteaga <[email protected]>

* remove reasignaments in helpers

Signed-off-by: darteaga <[email protected]>

* [stable/datadog] Add nodeSelector for Cluster Agent Deployment (#19430)

Signed-off-by: Ivan Sukhomlyn <[email protected]>

* [stable/wordpress] adds loadBalancerSourceRanges to service (#19549)

* adds loadBalancerSourceRanges to service

Signed-off-by: Dennis Webb <[email protected]>

* [stable/kube2iam] adds loadBalancerSourceRanges to values-production.yaml

Signed-off-by: Dennis Webb <[email protected]>

* [stable/traefik] Allow custom caServer for ACME and allow string type for acme.staging (#19567)

* allow traefik support of string or boolean for the acme.staging value

Signed-off-by: dduportal <[email protected]>

* allow traefik to be configured for a custom caServer when using ACME protocol

Signed-off-by: dduportal <[email protected]>

* stable/traefik chart version bump

Signed-off-by: dduportal <[email protected]>

* fix acme.staging value type to support both boolean and string

Signed-off-by: dduportal <[email protected]>

* Lint fix trailing spaces

Signed-off-by: dduportal <[email protected]>

* [stable/datadog] Make the seccomp profile for system-probe optional (#19533)

* [stable/datadog] Remove the seccomp profile for system-probe

The `system-probe` container currently has a specific seccomp profile.
This seccomp profile currently misses some syscalls that are necessary to
exec inside the container.

Concretely, attempting to exec inside the container produces this error:

```
$ kubectl exec -ti datadog-fswnc -c system-probe /bin/bash
shell-init: error retrieving current directory: getcwd: cannot access parent directories: Operation not permitted
bash: initialize_job_control: getpgrp failed: Operation not permitted
command terminated with exit code 1
```

If we add `setpgrp` to the seccomp profile, we get:

```
$ kubectl exec -ti datadog-kbg97 -c system-probe /bin/bash
shell-init: error retrieving current directory: getcwd: cannot access parent directories: Operation not permitted
I have no name!@datadog-kbg97:.$ exit
```

If we add `getcwd`, we get:

```
$ kubectl exec -ti datadog-7b7lf -c system-probe /bin/bash
I have no name!@datadog-7b7lf:/$ exit
```

If we add `geteuid` and `geteuid32`, we get:

```
$ kubectl exec -ti datadog-c42rb -c system-probe /bin/bash
/bin/bash: cannot set uid to -1: effective uid 0: Invalid argument
/bin/bash: cannot set gid to -1: effective gid -1: Invalid argument
bash-5.0$ exit
```

If we get `getgid` and `getgid32`, we get:

```
$ kubectl exec -ti datadog-tp4qd -c system-probe /bin/bash
/bin/bash: cannot set uid to -1: effective uid 0: Invalid argument
bash-5.0$ exit
```

etc.

If we compare the seccomp profile of `system-probe` with the
[default one](https://github.com/moby/moby/blob/4b0371fb36a958589319ab7c501ff4bc22645cfa/profiles/seccomp/default.json),
we see that a lot of syscalls that are missing are innocuous (`getcwd`) or might become useful one day (`inotify` family)
Some syscalls are added on purpose for the `system-probe` container like `bpf` or `perf_event_open` ones.
But those syscalls are part of the [default seccomp profile for containers that have the `SYS_ADMIN` capability](https://github.com/moby/moby/blob/4b0371fb36a958589319ab7c501ff4bc22645cfa/profiles/seccomp/default.json#L567-L594),
and the [`system-probe` container do have the `SYS_ADMIN` capability](https://github.com/helm/charts/blob/3907cebc7042f452506a7471f912d6d0c8380e51/stable/datadog/templates/container-system-probe.yaml#L7).

So, the `system-probe` specific seccomp profile is not necessary to have the `system-probe` container able to load eBPF programs.

Its removal has been tested on GKE, both with Ubuntu and with Container-Optimized OS
and both with docker and containerd.

Signed-off-by: Lénaïc Huard <[email protected]>

* Make the ad-hoc seccomp profile for system-probe an option

which is enabled by default to stick with the current behavior.

Signed-off-by: Lénaïc Huard <[email protected]>

* [stable/datadog] Allow use of any arbitrary seccomp profile

…for system-probe.
By default, it will create an ad-hoc one.

Signed-off-by: Lénaïc Huard <[email protected]>

* [stable/datadog] Add a CI test for seccomp profile override

Signed-off-by: Lénaïc Huard <[email protected]>

* [stable/datadog] Add validity checks on clusterName (#19327)

The cluster name parameter has been introduced to disambiguate nodes
having the same name in different clusters.

Cluster names are, for ex., used to build hostnames and must therefore
comply with some rules.

We enforce here the same rules as the ones enforced by GKE:
https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1beta1/projects.locations.clusters#Cluster.FIELDS.name

The DataDog agent itself is already checking the validity of cluster names since
DataDog/datadog-agent#4492.

The goal of this change in the helm chart is to catch issues as early as possible because
having a clear error message from helm is smarter than having to dig in the logs of
a failing agent.

Signed-off-by: Lénaïc Huard <[email protected]>

* [incubator/zookeeper] Fix zookeeper service template (#19556)

* [incubator/zookeeper] Removing extraneous ending curly brace from the zookeeper service template

Signed-off-by: Vishnu Pradeep <[email protected]>

* [incubator/zookeeper] Bumping up the zookeeper chart version to 2.1.2

Signed-off-by: Vishnu Pradeep <[email protected]>

* [stable/ambassador] Add missing logservices.getambassador.io from the crds (#19593)

rbac resource names.

Signed-off-by: Stefan Sedich <[email protected]>

* [Velero] Enable prometheus metrics by default (#19595)

Signed-off-by: Ashish Amarnath <[email protected]>

* [stable/openebs] Update charts to 1.5.0 release (#19587)

- Updated image tags as per 1.4.0 release
 - Updated values.yaml
 - Updated README
 - Updated Chart.yaml
 - Updated deployment-local-provisioner.yaml
 - Updated deployment-maya-apiserver.yaml
 - Updated deployment-ndm-operator.yaml

Signed-off-by: ChandanSagar <[email protected]>

* [stable/mysql] Update MySQL to the latest 5.7.28 (#19561)

* Upgrade to the latest 5.7.28 version
* Fixes server crash for 5.7.14, see #16222

Signed-off-by: Taras Yatsurak <[email protected]>

* [stable/grafana] Support env valueFrom entries (#19605)

Signed-off-by: Dave Henderson <[email protected]>

* [stable/redis-ha] Add resource limits to sysctlImage (#18847)

* Add resource limits to sysctlImage

Signed-off-by: Bob Violier <[email protected]>

* Fix description in README

Signed-off-by: Bob Violier <[email protected]>

* [stable/telegraf] Add health output and probes (#19607)

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* HTTPS is required for unifi gui (#19612)

* HTTPS is required for unifi gui

Signed-off-by: Wayne Pascoe <[email protected]>

* Removed new annotation in values.yaml
Added instructions in README

Signed-off-by: Wayne Pascoe <[email protected]>

* Update readiness liveness probe path for prometheus pushgateway (#19580)

Signed-off-by: Ato Araki <[email protected]>

* [stable/odoo] Release 12.0.4 updating components versions (#19609)

Signed-off-by: Bitnami Containers <[email protected]>

* [stable/phabricator] Release 9.0.4 updating components versions (#19599)

Signed-off-by: Bitnami Containers <[email protected]>

* [stable/chartmuseum] upgrade to 0.11.0 (#19615)

Signed-off-by: Josh Dolitsky <[email protected]>

* [stable/graylog] fix the logic to determine master node. (#19552)

* fix the logic to determine master node.

When container was recreated or restart or other conditions, pod is not bing removed, then the master node may becomes a coordinator .
This commit add a condition to check if master ip equals the ip of pod itself. If master ip equals the ip of pod itself, it is master node.
fix https://github.com/helm/charts/issues/17550

Signed-off-by: fuyuan.chu <[email protected]>

* fix unexpected new line

Signed-off-by: fuyuan.chu <[email protected]>

* [stable/fluent-bit] allow collecting audit logs (#19598)

* [fluent-bit] allow collecting audit logs

Signed-off-by: alejandroEsc <[email protected]>

* fixed extranentry item

Signed-off-by: alejandroEsc <[email protected]>

* [stable/pomerium] Fix helm lint --strict errors (#19527)

* [stable/pomerium] Added the extra values that are needed to pass helm lint --strict

Signed-off-by: Alexios Polyzos <[email protected]>

* [stable/pomerium] Added the extra variables to the Pomerium configuration list

Signed-off-by: Alexios Polyzos <[email protected]>

* [stable/pomerium] Bump chart version

Signed-off-by: Alexios Polyzos <[email protected]>

* [stable/pomerium] Default name overrides to empty string

Signed-off-by: Alexios Polyzos <[email protected]>

* [stable/prometheus-blackbox-exporter] Able to mount extra secrets int… (#19119)

* [stable/prometheus-blackbox-exporter] Able to mount extra secrets into the Pod, for example certificates.
Signed-off-by: Hung Do <[email protected]>

* [stable/prometheus-blackbox-exporter] Able to mount extra configmaps

Signed-off-by: Hung Do <[email protected]>

* [stable/prometheus-blackbox-exporter] Bump up minor version and configmap and secret variables are on par with each other

Signed-off-by: Hung Do <[email protected]>

* [stable/prometheus-blackbox-exporter] Improved configmap/secrets examples in the values.yaml

Signed-off-by: Hung Do <[email protected]>

* [stable/datadog] Allow dots in cluster names (#19618)

* [stable/datadog] Allow dots in cluster names

because some users already have dots in their cluster names:
https://github.com/helm/charts/pull/19327#issuecomment-565535449

Signed-off-by: Lénaïc Huard <[email protected]>

* [stable/datadog] Add a test for clusterName

Signed-off-by: Lénaïc Huard <[email protected]>

* Add support for ServiceAccount (#19586)

AWS EKS supports IAM roles via ServiceAccounts.

Signed-off-by: Mikko Kokkonen <[email protected]>

* [stable/ambassador] - Changing the var podLabels to extraLabels to use in Pods and Deployments (#19311)

* changing the flag podLabels to extraLabels in order to change also the Deployment resource

Signed-off-by: Thiago Dias <[email protected]>

* rolling back podLabels and adding extraLabels in all the others resources

Signed-off-by: Thiago Dias <[email protected]>

* bumping the version to 5.3.0

Signed-off-by: Thiago Dias <[email protected]>

* [stable/kong] Allow environment variables to be set on kong ingress controller (#19627)

Signed-off-by: Peter Rifel <[email protected]>

* [stable/karma] Add option for configmap annotations (#19569)

* [stable/karma] Add configMap.annotations option

Signed-off-by: Grace Do <[email protected]>

* [stable/karma] Bump chart version

Signed-off-by: Grace Do <[email protected]>

* Fix configmap annotations value

Signed-off-by: Grace Do <[email protected]>

* [stable/rethinkdb] Kubernetes apiVersion Depreciated (#19624)

* [stable/rethinkdb] stateful migrate api version from depreciated, add required selector

Signed-off-by: Jacob Dent <[email protected]>

* [stable/rethinkdb] deployment  migrate api version from depreciated, add required selector

Signed-off-by: Jacob Dent <[email protected]>

* [stable/rethinkdb] bump minor version

Signed-off-by: Jacob Dent <[email protected]>

* [stable/datadog] use 6.15, remove hard coded names/versions (#18930)

* Datadog: remove hard coded names

* The new system-probe container and config used hard coded CongigMap
names meaning only one installation is possible per cluster and
namespace.

Signed-off-by: Matt Klich <[email protected]>

* bump version

Signed-off-by: David J. M. Karlsen <[email protected]>

* [stable/grafana] Upgrade to Grafana 6.5.2 (#19606)

Signed-off-by: Dave Henderson <[email protected]>

* [incubator/jaeger] deprecate jaeger (#19638)

* deprecate jaeger

Signed-off-by: Carlos Panato <[email protected]>

* remove maintainers

Signed-off-by: Carlos Panato <[email protected]>

* [stable/coredns] Add support for customLabels / Upgrade to 1.6.6 (#17966)

* [stable/coredns] Add support for customLabels

Signed-off-by: Manuel Rüger <[email protected]>

* [stable/coredns] Version bump to 1.6.6

Signed-off-by: Manuel Rüger <[email protected]>

* [stable/jaeger-operator]  deprecate jaeger operator (#19636)

* deprecate jaeger operator

Signed-off-by: Carlos Panato <[email protected]>

* update readme

Signed-off-by: Carlos Panato <[email protected]>

* remove maintainers

Signed-off-by: Carlos Panato <[email protected]>

* Don't add the 'enabled' key to 'securityContext' (#19571)

The template uses securityContext.enabled to set whether the securityContext should be added. This fails the validation in Helm 3 because 'enabled' isn't a valid field in io.k8s.api.core.v1.PodSecurityContext, so keep using that key for the switch to maintain back compat, but don't add it to the output.

Signed-off-by: Mark Rydstrom <[email protected]>

* [stable/mongodb] Release 7.6.1 updating components versions (#19633)

Signed-off-by: Bitnami Containers <[email protected]>

* [stable/mongodb-replicaset] Update MongoDB Exporter to 0.10.x (#19495)

* Support MongoDB Exporter v0.10.x (TLS via connection string)

Signed-off-by: Kai Timmer <[email protected]>

* Removing unsupported fsGroup from security context at container spec level for metrics

Signed-off-by: Kai Timmer <[email protected]>

* Bumped chart version

Signed-off-by: Kai Timmer <[email protected]>

* fix intendation

Signed-off-by: Kai Timmer <[email protected]>

* use toString instead of cat

Signed-off-by: Kai Timmer <[email protected]>

* [prometheus-node-exporter] - add podAnnotations value (#17740)

Signed-off-by: Alex Williams <[email protected]>

* [stable/drone] add gitea oauth2 support (#19223)

Signed-off-by: Christian Groschupp <[email protected]>

* [stable/stolon] Add custom labels support for servicemonitor (#19543)

* [stable/stolon] Add custom labels support for servicemonitor

Signed-off-by: Raj Perera <[email protected]>

* [stable/stolon] Document custom labels support for servicemonitor

Signed-off-by: Raj Perera <[email protected]>

* [stable/stolon] Bump chart version

Signed-off-by: Raj Perera <[email protected]>

* Add metrics port to containerSpec (#19479)

WIthout a metrics port given in the container spec, prometheus scraping annotations would not scrape the correct port. See https://github.com/prometheus/prometheus/issues/3826#issuecomment-380736580 for details.

Signed-off-by: Tammo van Lessen <[email protected]>

* Adding the option the set deployment annotations (#19458)

* Adding the option the set deployment annotations

Signed-off-by: Elad Kaplan <[email protected]>

* Bump version to 1.27.0

Signed-off-by: Elad Kaplan <[email protected]>

* [stable/prometheus] Add option to configure AlertManagers for Prometheus server (#19557)

* Add option to configure Prometheus AlertManagers for Prometheus server

Signed-off-by: Fredrik Haugseth <[email protected]>

* Bump chart version

Signed-off-by: Fredrik Haugseth <[email protected]>

* Set default to list instead of set

Signed-off-by: Fredrik Haugseth <[email protected]>

* Fixed malformed CRD manifests (#19654)

Signed-off-by: Yinan Li <[email protected]>

* [stable/stolon] Make fsgroup optional for keeper security context for pg9-10 compat (#19648)

Signed-off-by: Raj Perera <[email protected]>

* [stable/joomla] Release 7.1.1 updating components versions (#19657)

Signed-off-by: Bitnami Containers <[email protected]>

* Add Carlisia and Ashish as chart maintainers (#19659)

Signed-off-by: Nolan Brubaker <[email protected]>

* [stable/velero] dropping prydonius from OWNERS (#19661)

Signed-off-by: Adnan Abdulhussein <[email protected]>

* [stable/rabbitmq-ha] add option for StatefulSet annotations (#19261)

* [stable/rabbitmq-ha] add option for StatefulSet annotations

Signed-off-by: Max Williams <[email protected]>

* update readme

Signed-off-by: Max Williams <[email protected]>

* bump version higher

Signed-off-by: Max Williams <[email protected]>

* Update MinIO version to RELEASE.2019-12-17T23-16-33Z (#19662)

Bumping Chart version to 4.0.0 since this MinIO release wouldn't support rolling
upgrade from the previous version.

Note: rolling upgrades would become possible with subsequent MinIO server
releases.

Signed-off-by: Krishnan Parthasarathi <[email protected]>

* [stable/prometheus] add failure and success threshold to probes (#19058)

- Add readinessProbeFailureThreshold
- Add readinessProbeSuccessThreshold
- Add livenessProbeFailureThreshold
- Add livenessProbeSuccessThreshold

Signed-off-by: Markus Blaschke <[email protected]>

* [stable/ghost] support nodeSelector (#19660)

Signed-off-by: Dr Nic Williams <[email protected]>

* Allow single drive mounts (#19664)

Signed-off-by: Harshavardhana <[email protected]>

* [stable/postgres] add priority class name option to postgres chart (#19628)

* [stable/postgres] add priority class name to postgres chart

Signed-off-by: Jessica Tracy <[email protected]>

* version bump

Signed-off-by: Jessica Tracy <[email protected]>

* bump minor version, add changes to values-production.yaml

Signed-off-by: Jessica Tracy <[email protected]>

* additional control added (#19496)

Signed-off-by: schoofsc <[email protected]>

* 19576 Improved Jenkins persistence parameters documentation (#19577)

* 19576 Improved Jenkins persistence parameters documentation

Signed-off-by: Fabio Kruger <[email protected]>

* 19576 Updated CHANGELOG.md

Signed-off-by: Fabio Kruger <[email protected]>

* Add optional service replica selector (#19398)

When using a replicaset for the server (for redundancy purposes),
this allows to select which replica the service will talk to in
order to have a consistent view of the data.

Signed-off-by: rabadin <[email protected]>

* [stable/redis-ha] Enable sticky connections balancing via HAProxy. (#19589)

I just found that python Redis client (Sentry, Weblate) is having trouble with HAProxy + Redis HA scheme.
It seems like HAProxy balance source + hash-type consistent does the trick.

Signed-off-by: Andrey Voronkov <[email protected]>

* [stable/datadog] allow dogstatsd port to be variable (#18966)

* [stable/datadog] allow dogstatsd port to be variable

Signed-off-by: John Pekcan <[email protected]>

* need to uncomment customAgentConfig

Signed-off-by: John Pekcan <[email protected]>

* leave dogstatsd port empty in values.yaml

Signed-off-by: John Pekcan <[email protected]>

* spacing for comments

Signed-off-by: John Pekcan <[email protected]>

* need to leave dogstatsd_port uncommented

Signed-off-by: John Pekcan <[email protected]>

* taking feedback, moving var around

Signed-off-by: John Pekcan <[email protected]>

* fixing camelCase, and adding env var for statsd

Signed-off-by: John Pekcan <[email protected]>

* bumping version with sign off

Signed-off-by: John Pekcan <[email protected]>

* relocating the param in readme

Signed-off-by: John Pekcan <[email protected]>

* [stabel/datadog] fix syntax error in templates/datadog-yaml-configmap.yaml (#19676)

* fix syntax error in templates/datadog-yaml-configmap.yaml

Signed-off-by: Alex Jones <[email protected]>

* Up chart version since new versions of the chart have been merged since PR was opened

Signed-off-by: Alex Jones <[email protected]>

* Fix issue with literal (|) being added to deployment yaml when using extraContainers. (#19384)

Signed-off-by: Michael Lamanuzzi <[email protected]>

* [stable/prometheus] Add PodDisruptionBudget support (#19670)

* [stable/prometheus] Add PodDisruptionBudget support

Signed-off-by: Vlad Ionescu <[email protected]>

* PDB should be false by default

Signed-off-by: Vlad Ionescu <[email protected]>

* Formatting fixes

Signed-off-by: Vlad Ionescu <[email protected]>

* [stable/prometheus] Update readiness and liveness probe path for prometheus pushgateway (#19554)

* Update readiness liveness probe path for prometheus pushgateway

Signed-off-by: Ato Araki <[email protected]>

* Add livenessProbe for pushgateway

Signed-off-by: Ato Araki <[email protected]>

* [stable/prometheus-pushgateway] fix default values for podDisruptionBudget and networkPolicy (#19680)

Signed-off-by: Angelo Olivera <[email protected]>

* [stable/newrelic-infrastructure] Fixes #19210 Properly indent additional pod labels (#19211)

Signed-off-by: Enver Cicak <[email protected]>

* [stable/drupal] Release 6.2.1 updating components versions (#19687)

Signed-off-by: Bitnami Containers <[email protected]>

* [stable/logstash] Allow for additional sidecar containers (#17904)

Signed-off-by: Marc Sensenich <[email protected]>

* [stable/prometheus] Add support for volumeBindingMode (#18242)

Signed-off-by: Joseph (Jy) Yaworski <[email protected]>

* [stable/dex] Add initContainers support (#15588)

Signed-off-by: Martin Hrabovcin <[email protected]>

* [incubator/kube-downscaler] Add OWNERS file (#18491)

Signed-off-by: Florent Delannoy <[email protected]>

* [stable/wordpress] Release 8.0.4 updating components versions (#19689)

Signed-off-by: Bitnami Containers <[email protected]>

* [stable/graylog] extra init containers/volumes support (#19681)

* Add extra volumes and mounts support to graylog

Adds `graylog.extraVolumes` and `graylog.extraVolumeMounts` as values to
allow extra files to be mounted into the container for use at runtime.

Signed-off-by: Chris Barton <[email protected]>

* Add extra init containers to graylog

Add the `graylog.extraInitContainers` value to extend the stateful set
with additional init containers

Signed-off-by: Chris Barton <[email protected]>

* bump graylog to 1.5.0

Signed-off-by: Chris Barton <[email protected]>

* [stable/prestashop] multi release support (#19467)

Signed-off-by: Andrejs Volkovs <[email protected]>

* [stable/wordpress] allow users to enable/disable the health checks (#19666)

Signed-off-by: Sameer Naik <[email protected]>

* [stable/mongodb-replicaset] Dont initiate replicaset during bootstrapping (#18831)

* start the server with ssl enabled if the client also uses ssl

Signed-off-by: Kai Timmer <[email protected]>

* in retry_until only read the last mongo client line

Signed-off-by: Kai Timmer <[email protected]>

* add a doNotInit value that skips the replicaset creation on first start

Signed-off-by: Kai Timmer <[email protected]>

* added test for donotinit flag

Signed-off-by: Kai Timmer <[email protected]>

* bumped chart version, added documentation to README.md

Signed-off-by: Kai Timmer <[email protected]>

* remove empty lines to make the linter happy

Signed-off-by: Kai Timmer <[email protected]>

* renaming value, remove else, new feature higher version

Signed-off-by: Kai Timmer <[email protected]>

* Added documentation for skipInitialization flag and how to use it

Signed-off-by: Kai Timmer <[email protected]>

* correct chart number

Signed-off-by: Kai Timmer <[email protected]>

* [stable/datadog] Allow providing volumes and mounts in the cluster agent deployment (#19679)

* Allow providing volumes and mounts in the cluster agent deployment

Signed-off-by: Ivan Ilichev <[email protected]>

* Document volumes and volumeMounts for cluster agent in README

Signed-off-by: Ivan Ilichev <[email protected]>

* Add a test for the volumes and volumeMounts

Signed-off-by: Ivan Ilichev <[email protected]>

* Bump chart version

Signed-off-by: Ivan Ilichev <[email protected]>

* Fix file ending

Signed-off-by: Ivan Ilichev <[email protected]>

* Rename the ci test and change to use a hostPath volume

Signed-off-by: Ivan Ilichev <[email protected]>

* Add deprecation notices to Dask chart (#18419)

* Add deprecation notices to Dask chart

Signed-off-by: Jacob Tomlinson <[email protected]>

* Update stable/dask/Chart.yaml

Co-Authored-By: Scott Rigby <[email protected]>
Signed-off-by: Jacob Tomlinson <[email protected]>

* [stable/kong] Allow admin_gui_auth_conf to be defined as an external secret (#19678)

* [stable/kong] Allow admin_gui_auth_conf to be defined externally

This adds support for providing a secret name rather than the contents of admin_gui_auth_conf directly.

For LDAP authentication, the admin_gui_auth_conf contents include an LDAP password which would be in plaintext in the pod spec's environment variables.

This prevents the LDAP password from being exposed by keeping it in a secret defined outside of the helm chart, similar to other sensitive data.

Signed-off-by: Peter Rifel <[email protected]>

* [stable/kong] Fix readme typo in session_conf_secret value name

Signed-off-by: Peter Rifel <[email protected]>

* [stable/sonarqube] Make sure the sonarqube data directories have the right owner to be written to (#17001)

* Make sure the sonarqube data directories have the right owner to be written to

Signed-off-by: Gavin Mogan <[email protected]>

* mkdir and chmod all the directories

Signed-off-by: Gavin Mogan <[email protected]>

* Bump helm chart version

Signed-off-by: Gavin Mogan <[email protected]>

* [stable/instana-agent] Chart version 1.0.19 (#19706)

Signed-off-by: Instana CD <[email protected]>

* Ability to scope alertmanager to a specific instance using probe annotation (#18039)

Signed-off-by: Florian Dambrine <[email protected]>

* Explicitly pin to agent 7 (#19700)

* Explicitly pin to agent 7

Signed-off-by: Xavier Lucas <[email protected]>

* Update chart version

Signed-off-by: Xavier Lucas <[email protected]>

* Add value to set ssl mode (#19711)

Signed-off-by: ricoberger <[email protected]>

* Remove useless val (#18525)

* remove useless value

Signed-off-by: Xiang Dai <[email protected]>

* bump up version

Signed-off-by: Xiang Dai <[email protected]>

* [stable/mongodb]: configure update strategy for deployments (#19720)

Signed-off-by: Sameer Naik <[email protected]>

* Added clusterIP as a possible configuration value to service-kong-proxy.yaml (#19710)

Signed-off-by: Steffen Folman Qvistgaard <[email protected]>

* [stable/velero] DEPRECATE - Velero (#19719)

* DEPRECATE - Velero

moving Velero Chart to https://github.com/vmware-tanzu/helm-charts

Signed-off-by: Carlos Panato <[email protected]>

* add deprecation note

Signed-off-by: Carlos Panato <[email protected]>

* [stable/consul] fix gossip configuration parameter name in README (#19528)

* fix gossip configuration parameter name

Signed-off-by: Oleg Dianov <[email protected]>

* bump chart version

Signed-off-by: Oleg Dianov <[email protected]>

* [stable/prometheus-pushgateway] Fix missleading documentation about `metrics.enabled` in values documentation (#19730)

* Remove missleading statement about `metrics.enabled` from readme

This statement holds true for most chart but not the pushgateway.
It does not have the `metrics.enabled` attribute.

Signed-off-by: Jannik Hollenbach <[email protected]>

* Increment chart version to `1.2.9`

Signed-off-by: Jannik Hollenbach <[email protected]>

* update to 0.27.5, allow extra env vars (#19722)

Signed-off-by: Bart Verwilst <[email protected]>

* [stable/kube-state-metrics] Version bump to 1.9.0 (#19726)

Signed-off-by: Manuel Rüger <[email protected]>

* [stable/prometheus-operator] Bump grafana and prometheus-node-exporter subcharts (#19703)

Signed-off-by: Alex Williams <[email protected]>

* as of apps/v1beta2 spec.template.labels are immutable (#19134)

* as of apps/v1beta2 spec.template.labels are immutable.  The chart should not exist in these lables as it will always cause upgrade issues

Signed-off-by: Shane Starcher <[email protected]>

* add chart helper

Signed-off-by: Shane Starcher <[email protected]>

* bump correct version

Signed-off-by: David J. M. Karlsen <[email protected]>

Co-authored-by: David J. M. Karlsen <[email protected]>

* [stable/joomla] Fix wrongly referenced ingress annotations (#19715)

* Fix wrongly referenced ingress annotations

Signed-off-by: Brendan Keessen <[email protected]>
Signed-off-by: Brendan Keessen <[email protected]>

* Bump version

Signed-off-by: Brendan Keessen <[email protected]>
Signed-off-by: Brendan Keessen <[email protected]>

* Bump version

Signed-off-by: Brendan Keessen <[email protected]>

* [stable/verdaccio] Fix deployment (#18329)

* [stable/verdaccio] Fixed deployment apiVersion

Signed-off-by: Luong Bui <[email protected]>

* [stable/verdaccio] Fixed deployment spec.selector

Signed-off-by: Luong Bui <[email protected]>

* [stable/verdaccio] Bumped chart version

Signed-off-by: Luong Bui <[email protected]>

* bump version

Signed-off-by: David J. M. Karlsen <[email protected]>

Co-authored-by: David J. M. Karlsen <[email protected]>

* [incubator/aws-alb-ingress-controller] bump image version 1.1.3 -> 1.1.4 (#19721)

* [incubator/aws-alb-ingress-controller] bump the image version to v1.1.4

Signed-off-by: Sergei Gavrilov <[email protected]>

* fix readme

Signed-off-by: David J. M. Karlsen <[email protected]>

Co-authored-by: David J. M. Karlsen <[email protected]>

* [stable/metabase] Bump version metabase to v0.34.0 (#19641)

* Bump version metabase to v0.33.7.3

Signed-off-by: Fabian Becker <[email protected]>

* Bump version metabase to v0.34.0

Signed-off-by: Fabian Becker <[email protected]>

* [stable/prometheus-pushgateway] Upgrade push-gateway (#19732)

Signed-off-by: David J. M. Karlsen <[email protected]>

* [stable/jasperreports] Release 7.0.2 updating components versions (#19735)

Signed-off-by: Bitnami Containers <[email protected]>

* [stable/fluent-bit]: upgrade to Fluent Bit v1.3.5 (#19736)

* [stable/fluent-bit]: upgrade to Fluent Bit v1.3.5

release notes:

https://fluentbit.io/announcements/v1.3.5/

Signed-off-by: Eduardo Silva <[email protected]>

* update readme

Signed-off-by: David J. M. Karlsen <[email protected]>

Co-authored-by: David J. M. Karlsen <[email protected]>

* [stable/prometheus] Adding Vertical Pod Autoscaler support (#17742)

* Adding vertical Pod Autoscaler support to the chart

Signed-off-by: Ali Sattari <[email protected]>

* EOF fixed in new file

Signed-off-by: Ali Sattari <[email protected]>

* bumping the right version field!

Signed-off-by: Ali Sattari <[email protected]>

* fixing a mistake in version bumping

Signed-off-by: Ali Sattari <[email protected]>

* fixing wrong version bump

Signed-off-by: Ali Sattari <[email protected]>

* Fixes loop issue

Signed-off-by: Ali Sattari <[email protected]>

* Bumped chart version, synced app version with master.

Signed-off-by: Ali Sattari <[email protected]>

* Bumping chart version

Signed-off-by: Ali Sattari <[email protected]>

* Merge conflict cleanup

Signed-off-by: Ali Sattari <[email protected]>

* [stable/opa] allow data loading configuration in kube-mgmt. (#19564)

* [stable/opa] allow data loading configuration in kube-mgmt.

Signed-off-by: Ivo Verberk <[email protected]>

* [stable/opa] bump chart version to 1.13.2

Signed-off-by: Ivo Verberk <[email protected]>

* [stable/opa] update README to describe kube-mgmt config.

Signed-off-by: Ivo Verberk <[email protected]>

* [stable/opa] bump chart version.

Signed-off-by: Ivo Verberk <[email protected]>

* [stable/home-assistant] - probes reconfiguing and bump image version (#19741)

* probes reconfiguing and bump image version

* make all probes optional
* introduce (optional)
[startupProbe](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#define-startup-probes) (intoroduced in kubernetes 1.16) which is disabled by default
* bump the home-assistant version to 103.3

Signed-off-by: Jeff Billimek <[email protected]>

* add missing probes stanza

Signed-off-by: Jeff Billimek <[email protected]>

* [stable/hackmd] Fix API path of Ingress (#19592)

* [stable/hackmd] Fix API path of Ingress

There is no Ingress in apps/v1.

* 1.14 added support for Ingress in networking.k8s.io/v1beta1
* 1.20 will drop support for Ingress in extensions/v1beta1

So this chart will only work with Kubernetes 1.14+.
If this is not acceptable we need to go back extensions/v1beta1 for now.

Signed-off-by: Max Rosin <[email protected]>

* [stable/hackmd] Make ingress ApiVersion dependent of the Kubernetes version

Signed-off-by: Max Rosin <[email protected]>

* [stable/redis-ha] Add `haproxy.timeout.check` parameter. (#19737)

Signed-off-by: Andrey Voronkov <[email protected]>

* [stable/prometheus-operator] Upgrade grafana (#19718)

* [stable/prometheus-operator] Upgrading grafana

Signed-off-by: Mohsen <[email protected]>

* [stable/prometheus-operator] bump the version chart

Signed-off-by: Mohsen <[email protected]>

* fix lockfile

Signed-off-by: David J. M. Karlsen <[email protected]>

Co-authored-by: David J. M. Karlsen <[email protected]>

* [stable/spark] Fixes compatibility with 1.16 (#17523)

* Fixes compatibility with 1.16

Signed-off-by: Xiang Dai <[email protected]>

* bump up version

Signed-off-by: Xiang Dai <[email protected]>

* fix a typo

Signed-off-by: Xiang Dai <[email protected]>

* fix a typo

Signed-off-by: Xiang Dai <[email protected]>

* [stable/rabbitmq-ha] add lifecycle for rabbitmq statefulset (#19748)

Signed-off-by: LittleWhiteYA <[email protected]>

* [prometheus-postgres-exporter] update app to v0.8.0 (#19749)

Signed-off-by: Denis Baryshev <[email protected]>

* [stable/docker-registry] Allow extra volume mounts in registry container (#17858)

Signed-off-by: Basilio Vera <[email protected]>

* [stable/gocd] Bump up GoCD Version to 19.12.0 (#19750)

* Bump up GoCD Version to 19.12.0

Signed-off-by: GoCD Build User <[email protected]>

* Updated Changelog.

Signed-off-by: GoCD Build User <[email protected]>

* [stable/prometheus-redis-exporter]Add redis authoration configuration in chart (#19447)

* Add redis authoration configuration in prometheus-redis-exporter chart

Signed-off-by: aixeshunter <[email protected]>

* document all new values in the readme

Signed-off-by: aixeshunter <[email protected]>

* Fix READ.md some bugs

Signed-off-by: aixeshunter <[email protected]>

* [stable/postgres] Generate password when postgresqlUsername is not postgres and postgresqlPostgresPassword is empty (#19742)

Signed-off-by: Faik Uygur <[email protected]>

* Fixed imagePullSecrets (#19705)

Signed-off-by: Shane O'Brien <[email protected]>

* [stable/jenkins] Update jenkins README.MD with right default values (#19698)

* Update READ.ME

Changing the default value for master.enableXmlConfig on READ.ME acording to values.yaml

Signed-off-by: Mateus Miranda <[email protected]>

* Bumping jenkins chart version

Signed-off-by: Mateus Miranda <[email protected]>

* Allow adding serviceaccount annotations (#19724)

Signed-off-by: Gerard Godone-Maresca <[email protected]>

* [stable/sysdig] Upgrade to latest sysdig agent version (0.94.0) (#19753)

Signed-off-by: Néstor Salceda <[email protected]>

* [stable/instana-agent] Chart version 1.0.20 (#19754)

Signed-off-by: Instana CD <[email protected]>

* Fix single disk distributed deployment (#19758)

Signed-off-by: Harshavardhana <[email protected]>

* [stable/odoo] Release 12.0.5 updating components versions (#19760)

Signed-off-by: Bitnami Containers <[email protected]>

* [stable/kong] optiont to disable admin service (#19757)

Signed-off-by: Harry Bagdi <[email protected]>

* Update default values to latest released version (#19768)

Signed-off-by: Harshavardhana <[email protected]>

* [stable/redis] networkPolicy for clients from other namespaces (#19771)

* NetworkPolicy values for other namespaces

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update values.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update values-production.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update Chart.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update README.md

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update README.md

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update values.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update values-production.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update networkpolicy.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update networkpolicy.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update networkpolicy.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* spaces

Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update stable/redis/values-production.yaml

Co-Authored-By: Carlos Rodríguez Hernández <[email protected]>
Signed-off-by: Anton Fayzrahmanov <[email protected]>

* Update stable/redis/values.yaml

Signed-off-by: Anton Fayzrahmanov <[email protected]>

Co-Authored-By: Carlos Rodríguez Hernández <[email protected]>
Signed-off-by: Anton Fayzrahmanov <[email protected]>

Co-authored-by: Carlos Rodríguez Hernández <[email protected]>

* [stable/postgresql] Fix readiness probe (#19774)

Signed-off-by: Carlos Rodriguez Hernandez <[email protected]>

* Redeploy pods when changing the secret (#19775)

Signed-off-by: Alejandro Moreno <[email protected]>

* [stable/rabbitmq-ha] fix lifecycle yaml parse error (#19773)

Signed-off-by: LittleWhiteYA <[email protected]>

* [stable/telegraf] Configurable service account (#19456)

* [stable/telegraf] Configurable service account

By default the telegraf service runs with the default RBAC permissions
this PR adds the option to create a service account with configurable
rules.

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] Move RBAD flag one level up

Co-Authored-By: Naseem <[email protected]>
Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] Align templates with charts

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] Update RBAC deployment conditional

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] Make role and binding kind configurable

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] Move comments about values

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] Simplify (cluster)role values

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] prometheus input rules example

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] Applied @naseemkullah suggestions

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

* [stable/telegraf] Corrected bad copy pasta

Signed-off-by: Cees-Jan Kiewiet <[email protected]>

Co-authored-by: Naseem <[email protected]>

* [stable/sysdig] Add slim support for Sysdig Agent (#19778)

* Drop permissions to read configmaps and secrets

Sysdig is no longer planning to add support for configmaps and secrets
in cointerface

Signed-off-by: Néstor Salceda <[email protected]>

* Mount /etc/modprobe.d from host

Signed-off-by: Néstor Salceda <[email protected]>

* Add support for slim image for Agent

Signed-off-by: Néstor Salceda <[email protected]>

* Document new values for slim

Signed-off-by: Néstor Salceda <[email protected]>

* Add a new major release with slim support

Signed-off-by: Néstor Salceda <[email protected]>

* Document the /etc/modprobe.d support on CHANGELOG

Signed-off-by: Néstor Salceda <[email protected]>

* [stable/phpmyadmin] Release 4.2.5 updating components versions (#19779)

Signed-off-by: Bitnami Containers <[email protected]>

* [stable/node-problem-detector] Template apiVersion for podSecurityPolicy (#19769)

* Template apiVersion for podSecurityPolicy for k8s version v1.16.3 or newer

Signed-off-by: Nikita Gorlov <[email protected]>

* Updated chart version

Signed-off-by: Nikita Gorlov <[email protected]>

* [stable/docker-registry] Fix incorrect default annotations type (#19739) (#19780)

* [docker-registry] Fix incorrect annotations type (#19739)

Signed-off-by: Rushy Panchal <[email protected]>

* [docker-registry] Bump to version 1.9.1

Signed-off-by: Rushy Panchal <[email protected]>

* [stable/magic-namespace]: deprecate chart (#19643)

Signed-off-by: Kent Rancourt <[email protected]>

* [stable/efs-provisioner] Default storage class to aws-efs (#19782)

* [stable/efs-provisioner] Default storage class to aws-efs

The current value for the efs-provisioner storage class is efs, which
differs from the default value in
https://github.com/kubernetes-incubator/external-storage/tree/master/aws/efs
and also in the AWS example page at
https://aws.amazon.com/premiumsupport/knowledge-center/eks-pods-efs/
This can be confusing when running examples and (automated) tests, so
I'm changing the value to "aws-efs" in the chart to be consistent with the references
in the storage provide and on the AWS example page.

Signed-off-by: Mariyan Dimitrov <[email protected]>

* [stable/efs-provisioner] Bump chart version to 0.9.0

This version bump is related to the change in the default value of the
storage class that is created: from efs to aws-efs, so that it is
consistent with the reference in the storage provider and in the AWS
examples.

Signed-off-by: Mariyan Dimitrov <[email protected]>

* [stable/dex] fix notes instructions (#19781)

* [stable/dex] Notes should filter pods with the new labels

Signed-off-by: Nicolas Degory <[email protected]>

* [stable/dex] Minor corrections in README file

Signed-off-by: Nicolas Degory <[email protected]>

* [stable/dex] Increment chart version

Signed-off-by: Nicolas Degory <[email protected]>

* typo (#19093)

* typo
bump version

Signed-off-by: David J. M. Karlsen <[email protected]>

* bump version

Signed-off-by: David J. M. Karlsen <[email protected]>

Co-authored-by: David J. M. Karlsen <[email protected]>

* added existing gitconfig secret support (#19167)

Signed-off-by: Jonny Ford <[email protected]>

Co-authored-by: David J. M. Karlsen <[email protected]>

* Fixing StatefulSet configuration for [stable/hadoop] (#18559)

Signed-off-by: Alex Tawse <[email protected]>

* Add additional privileges for patronictl remove. (#19092)

Signed-off-by: Andrey Voronkov <[email protected]>

* Update README.md (#19763)

bump chart version

Signed-off-by: David J. M. Karlsen <[email protected]>

* [stable/kong] quote host for proxy ingress (#19785)

To enable specification of wildcard hosts we need to ensure that the
host is quoted, otherwise we need to explicitly quote hosts of the form
`*.somedomain.tld`. Before this change, for something of the form `helm
install stable/kong kong --set-string='*.somedomain.tld'` we would
produce:

```
$ helm template ... --set-string='*.somedomain.tld'
...
    - host: *.somedomain.tld
...
```

which results in something of the form "error converting YAML to JSON:
yaml: line 17: did not find expected alphabetic or numeric character".
With the quoting we end up with:

```
$ helm template ... --set-string='*.somedomain.tld'
...
    - host: '*.somedomain.tld'
...
```

Some resources that I happened upon that provide some prior art and the
above solution:

 1. https://github.com/helm/helm/issues/5080
 2. https://github.com/jupyterhub/zero-to-jupyterhub-k8s/issues/1058

Signed-off-by: Harry Waye <[email protected]>

* [stable/mongodb] correct repo link of metrics (#19787)

Signed-off-by: Weihang Lo <[email protected]>

* [stable/falco] support multiple lines for falco.programOutput.program (#19444)

* [stable/falco] support multiple lines for falco.programOutput.program

Signed-off-by: Naoki Oketani <[email protected]>

* Modify CHANGELOG

Signed-off-by: Naoki Oketani <[email protected]>

* [stable/kong] Fix: Preserve whitespace when rendering (#19789)

* Preserve whitespace when rendering

Signed-off-by: Marc Campbell <[email protected]>

* Bump kong chart version to 0.31.2

Signed-off-by: Marc Campbell <[email protected]>

* Add 0.31.2 to changelog

Signed-off-by: Marc Campbell <[email protected]>

* [stable/ipfs] Move livenessProbe to container config block (#19790)

* Move livenessProbe to container config block

Signed-off-by: Nate Walck <[email protected]>

* bump stable/ipfs chart version

Signed-off-by: Nate Walck <[email protected]>

* [stable/kube-ops-view] Support kubernetes 1.16 (#19674)

Signed-off-by: conorfennell <[email protected]>

* Update to work on 1.16 (#19798)

as per https://kubernetes.io/blog/2019/07/18/api-deprecations-in-1-16/

```
DaemonSet, Deployment, StatefulSet, and ReplicaSet (in the extensions/v1beta1 and apps/v1beta2 API groups)
Migrate to use the apps/v1 API, available since v1.9. Existing persisted data can be retrieved/updated via the apps/v1 API.
```

Signed-off-by: Russell Sim <[email protected]>

* [stable/sonatype-nexus] Use official sonatype nexus image. Keep default admin123 password. (#19791)

* Use official sonatype nexus image. Keep default admin123 password.

Signed-off-by: Andrew M. Stoltz <[email protected]>

* Chart version

Signed-off-by: Andrew M. Stoltz <[email protected]>

* [stable/stackdriver-exporter] - Add prometheus rule additionalLabels in servicemonitor.yaml  (#19802)

* fix(stable/stackdriver-exporter): add prometheusRule additionalLabels

Signed-off-by: Ricardo Medeiros <[email protected]>

* chore(stable/stackdriver-exporter): change version from 1.2.1 to 1.2.2

Signed-off-by: Ricardo Medeiros <[email protected]>

* doc(stable/stackdriver-exporter): add serviceMonitor.additonalLabels in stable/stackdriver-exporter/README.md

Signed-off-by: Ricardo Medeiros <[email protected]>

* fix(stable/stackdriver-exporter): add additionalLabes in servicemonitor

Signed-off-by: Ricardo Medeiros <[email protected]>

* fix(stable/stackdriver-export): fix typo at servicemonitor.yaml

Signed-off-by: Ricardo Medeiros <[email protected]>

* Add securityContext for minio deployments (#19806)

Signed-off-by: Harshavardhana <[email protected]>

* Fix helm lint bug in mongodb-replicaset (#19809)

Signed-off-by: aixeshunter <[email protected]>

* feat: bump metrics-server to v0.3.6 (#19814)

Signed-off-by: wilmardo <[email protected]>

* [stable/kong] add security restrictions (#19663)

* [stable/kong] add security restrictions

This commit wraps up several security improvements:

* Create emptyDir volumes and mount them at /tmp and /kong_prefix.
Override the standard prefix setting (/usr/local/kong) to /kong_prefix.
Update the stock PSP to allow emptyDir access.

Kong writes runtime data (rendered configuration templates, temporary
request body files, etc.) to its prefix and also writes some temporary
files to /tmp. These are on the root container filesystem by default,
and are as such incompatible with Kubernetes policies that disallow root
filesystem writes.

It is not possible to mount a new emptyDir at /usr/local/kong, as that
location is also used to store some static files installed by Kong's
package.

* Set mounted plugin volumes to read-only. Previously, a malicious actor
with access to the container filesystem and the ability to send signals
could modify plugin code and have Kong reload it.

* Add injection points for Kong pod securityContexts, and default to
running as UID 1000. Kong should not need to run as root, and has a
dedicated user in stock container images.

* Fix a bug where disabling Vitals from values.yaml had no effect.

Signed-off-by: Travis Raines <[email protected]>

* [stable/kong] fix custom plugin loader in init

Add automatically-generated KONG_PLUGINS to wait-for-db's environment
variables. Move KONG_LUA_PACKAGE_PATH outside the "Postgres enabled"
if-block.

Once a custom plugin has been configured, Kong must find that plugin in
both KONG_PLUGINS and on disk in order to start. Previously, the
wait-for-db initContainer did not populate KONG_PLUGINS using the helper
template added by eb2c69b7577d85cdd6db54734e499d5fa80e5041, preventing
any instance with a custom plugin configuration from starting. It
furthermore only set KONG_LUA_PACKAGE_PATH if the Postgres subchart was
enabled.

Signed-off-by: Travis Raines <[email protected]>

* [incubator/fluentd-cloudwatch] Add configurable volumes and volumeMounts (#18670)

* Update daemonset.yaml file to have configurable volumes and volumeMounts. This allows us to add volumes and volumeMounts. For example, the kubelet writes to journald. We want to add a volume "/run/log/journal" and its volume mount so that fluentd-cloudwatch can send the kubelet log messages to CloudWatch.

Signed-off-by: Aditya Pahuja <[email protected]>

* Bump fluentd-cloudwatch chart version

Signed-off-by: Aditya Pahuja <[email protected]>

* [stable/kube-ops-view] Upgrade redis and also enable when testing (#19803)

* Upgrade redis and also enable when testing

Signed-off-by: David J. M. Karlsen <[email protected]>

* bump chart-version

Signed-off-by: David J. M. Karlsen <[email protected]>

* set redis master port

Signed-off-by: David J. M. Karlsen <[email protected]>

* Enable Readiness checks for MinIO chart (#19822)

Signed-off-by: Nitish Tiwari <[email protected]>

* [stable/spinnaker] #19172 Give extra params to hal deploy apply command (#19205)

* [stable/spinnaker] #19172 Give extra params to hal

Allow users to give additional parameters to
halyard deploy apply command

Signed-off-by: Ryuichi Inagaki <[email protected]>

* [#19172] Give additional install parameters as a list

Incorporated the review comment.

Signed-off-by: Ryuichi Inagaki <[email protected]>

* [stable/grafana] - Add allowUiUpdates for Grafana 6.5 (#19794)

* Add allowUiUpdates new option in Grafana 6.5

Signed-off-by: Ivan Aracki <[email protected]
>
Signed-off-by: Ivan Aracki <[email protected]>

* Add allowUiUpdates to README

Signed-off-by: Ivan Aracki <[email protected]>

* Bump Chart version

Signed-off-by: Ivan Aracki <[email protected]>

* [stable/pomerium] Bump pomerium image to 0.5.2 (#19610)

Signed-off-by: Travis Groth <[email protected]>

* [stable/coredns] Update deprecated api version (#19795)

* Update deprecated api version

Signed-off-by: Alex Perez-Pujol <[email protected]>

* Use helm capabilities

Signed-off-by: Alex Perez-Pujol <[email protected]>

* [stable/redmine] Redmine mail receive (#19449)

* [stable/redmine] adds configurable health checks

Signed-off-by: Dmitrii Ermakov <[email protected]>
Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] adds newline to values.yaml

Signed-off-by: Dmitrii Ermakov <[email protected]>
Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] sets description to common format

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] documents probes parameters

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] version increase

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Increments version

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Implemented RedmineReceivingEmails

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Increased chart version

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Lint fixed "No new line character"

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Update stable/redmine/templates/secrets.yaml

Co-Authored-By: Sameer Naik <[email protected]>

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Fixed wrong ordered list syntax

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Removed extra newline

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Removed extra newlines

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Use bitnami/redmine image for receveiving

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Increased version number

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Increased version number

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] Fixed image name, tag

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] label changes on v14.0.0

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] version increment

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] fixed "no newline at the end of file"

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] mailReceiver labels fix  app.kubernetes.io/name: fullname => name

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/redmine] set arrays 2-space indent

Signed-off-by: Dmitriy Ermakov <[email protected]>

* [stable/prometheus-operator] Fix wrong CRD links (#19828)

* Fix wrong CRD links

Signed-off-by: Mikhail Naletov <[email protected]>

* Fix: wrong chart's version

Signed-off-by: Mikhail Naletov <[email protected]>

* [stable/nginx-ingress] Update to stable "rbac.authorization.k8s.io/v1" (#19816)

Signed-off-by: ialidzhikov <[email protected]>

* [stable/spring-cloud-data-flow] Add support for restricting load bala… (#19727)

* [stable/spring-cloud-data-flow] Add support for restricting load balancer by IP ranges

Signed-off-by: Viktor Radnai <[email protected]>

* Fix linting error

Signed-off-by: Viktor Radnai <[email protected]>

* [stable/grafana] Namespace override (#18986)

* [stable/grafana] Namespace override

Signed-off-by: Alexander Katsyuba <[email protected]>

* [stable/grafana] Bump chart version

Signed-off-by: Alexander Katsyuba <[email protected]>

* [stable/grafana] Fix nil pointer exception

Signed-off-by: Alexander Katsyuba <[email protected]>

* [stable/kube-state-metrics] Namespace override (#18990)

Signed-off-by: Alexander Katsyuba <[email protected]>

* [stable/efs-provisioner] Upgrade EFS provisioner (#19829)

Signed-off-by: Alex Snast <[email protected]>

* [stable/atlantis] Add service account annotations (#19818)

* Add service account annotations

This allows you to pass annotations to the service account.

Signed-off-by: Ashley Penney <[email protected]>

* Rename key as it's under serviceaccount already

Signed-off-by: Ashley Penney <[email protected]>

* Fix incorrect rendering (#19838)

Signed-off-by: Alex Perez-Pujol <[email protected]>

* copy scriptapprovals when overwriteConfig enabled (#19734)

Signed-off-by: Jan Heylen <[email protected]>

* [stable/instana-agent] Chart version 1.0.21 (#19841)

Signed-off-by: Instana CD <[email protected]>

* fixes kubernetes-sig/external-dns#1262 (#19839)

unnecessary source_profile

breaks config

in new aws sdk

Signed-off-by: Fulton Byrne <[email protected]>

* [stable/influxdb] Set the default user from an existing secret (#19601)

* Set the default user from an existing secret

Signed-off-by: Angelo Fausti <[email protected]>

* Address reviewer comments

Signed-off-by: Angelo Fausti <[email protected]>

* fix runAsUser invalid comparison (#19832)

Signed-off-by: Peter Evers <[email protected]>

* [stable/prometheus-operator] remove namespace from global resources (#19835)

The webhook configurations are cluster global objects and do not need
namespace metadata.
Remove the field to simplify the chart.

Signed-off-by: Julian Taylor <[email protected]>

* Add exception for maxclients option in sentinel config (#19588)

Signed-off-by: Léopold Jacquot <[email protected]>

* [stable/kong] revamp and simplify readme (#19821)

* [stable/kong] revamp and simplify readme

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] remove duplicate image.repository

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] 0.33: misc updates (#19840)

* [stable/kong] consolidate all rbac resources into a single file

- Simplify and reduce number of ifs in our helm chart to reduce
maintainence burden

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] move all custom resources into a single file

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] remove podDistruption budget for ingressController

Ingress Controller has been consolidated into the Kong pod itself now
so this policy is not needed anymore.

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] refactor wait-for-postgres container into helpers for de-duplication

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] refactor env section of the deployment into a helper

In the next commit, we will use this same env section for the migration
containers as well to ensure consistency in Kong's configuration across
different pods.

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] use kong.final_env for migration containers

This ensures that the exact same configuration for kong is used across
containers of all types.

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] wait-for-postgres to be available

Previously, if the Postgres instance was managed externally, eg, like an
RDS instance, then the chart would fail to wait for it. The migrations
eventually succeeded but if the pod fails while connecting to Postgres,
it is more helpful as it highlights an issue with network itself.

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] use a hard-coded name for the container name

This allows us to have determisintic container names and makes writing
scripts easier. The name of the pod and deployment are still generated
by Helm.

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] bump up Postgresql sub-chart to 8.1.2

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] write changelog and bump chart for 0.33

Signed-off-by: Harry Bagdi <[email protected]>

* fix: remove installCRDs since it is present twice

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] add content of FAQ doc

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] re-orgnize values.yaml

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] fix language in the FAQ

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] fix whitespace handling for license (#19852)

Do not chomp leading whitespace prior to including kong.license within
the final_env helper. Doing so appends the license block immediately
after the preceding value, generating invalid YAML.

Prior to the creation of final_env, kong.license was injected directly
into Deployment and Job templates, using the nindent function to apply
indentation and add a newline. final_env instead places kong.license at
the correct indentation within the templated block, and does not use
nindent. As such, the include should not chomp leading whitespace before
it.

Signed-off-by: Travis Raines <[email protected]>

* [stable/spark-history-server] Remove duplicate configmap keys (#19851)

The output of the templated chart breaks other templating tools it
may be used in (like YTT). Removing the duplicate configmap keys cleans
up the output, and makes it easier to use elsewhere.

Signed-off-by: Ben <[email protected]>

* Merge branch 'master' of https://github.com/helm/charts (#17071)

Signed-off-by: eMCeee89 <[email protected]>

* 1. Add release label into chart. (#19846)

Signed-off-by: youngman <[email protected]>

* [stable/openebs] Add PodSecurityPolicy (PSP) (#19837)

In order to run in namespace other than kube-system on cluster with
PSP enabled, we need to allow openebs serviceaccount to launch
privileged containers.

The PSP is taken from [0].

[0] https://docs.openebs.io/v081/docs/next/faq.html#how-to-setup-default-podsecuritypolicy-to-allow-the-openebs-pods-to-work-with-all-permissions

Signed-off-by: Martin Polednik <[email protected]>

* [stable/prometheus] server.env default value should be an array (#19141)

Signed-off-by: Ivan Kurnosov <[email protected]>

* Only inject DO_TOKEN when actually provided (#19866)

Signed-off-by: Martin Hanzík <[email protected]>

* [stable/sysdig] Enable K8s audit log feature for Sysdig Agent (#19815)

* Add auditlog support Sysdig Agent

Signed-off-by: Néstor Salceda <[email protected]>

* Add documentation for the K8s audit log feature

Signed-off-by: Néstor Salceda <[email protected]>

* [stable/minio]: Update to latest release (#19882)

Signed-off-by: Harshavardhana <[email protected]>

* [stable/kong] bump up ingress controller to 0.7 (#19885)

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/prometheus-operator] Add namespace to all PrometheusRule objects (#19704)

* [stable/prometheus-operator] Add namespace to all PrometheusRule objects

Signed-off-by: Alex Williams <[email protected]>

* prometheus-operator - modify sync_prometheus_rules.py for ns

Signed-off-by: Alex Williams <[email protected]>

* Bump chart again to keep it +1 patch version

Signed-off-by: Alex Williams <[email protected]>

* Revert changes to prometheus rule

Signed-off-by: Alex Williams <[email protected]>

* set chart version to 8.5.3

Signed-off-by: Alex Williams <[email protected]>

* [stable/kong] fix Job securityContext indentation (#19887)

Add an additional level of indentation to Job securityContexts.
Previously, the context would render incorrectly, e.g.

securityContext:
runAsUser: 1000

It should now render as:

securityContext:
  runAsUser: 1000

Signed-off-by: Travis Raines <[email protected]>

* [stable/kong] 0.34.2 ci consolidation and readme fixes (#19854)

* [stable/kong] typos in readme and change Kong Enterprise section

Signed-off-by: Harry Bagdi <[email protected]>

* remove ci test, it is a duplicate of defautl-values.yaml

Signed-off-by: Harry Bagdi <[email protected]>

* remove ci test, it is another duplicate of defautl-values.yaml

Signed-off-by: Harry Bagdi <[email protected]>

* [stable/kong] consolidate various CI tests

We get a lot of flaky tests. Some of those are likely cause by the CI
process itself but re…
dargolith pushed a commit to dargolith/charts that referenced this pull request Jan 10, 2020
arturrez pushed a commit to arturrez/stable-charts that referenced this pull request Jan 28, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). lgtm Indicates that a PR is ready to be merged. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants