-
Notifications
You must be signed in to change notification settings - Fork 5
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #242 from RADAR-base/update-minio
Updated Minio to latest version
- Loading branch information
Showing
14 changed files
with
192 additions
and
22 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,6 @@ | ||
| dependencies: | ||
| - name: common | ||
| repository: https://radar-base.github.io/radar-helm-charts | ||
| version: 2.2.2 | ||
| digest: sha256:f31efab5c07a4c4582f202eab8aafa300f2236941c00579f8f8c8152cffb0a54 | ||
| generated: "2024-07-18T09:17:13.244383343Z" | ||
| version: 2.20.5 | ||
| digest: sha256:a07de5441d415b0c47eff9b0f4f6659b283174e7fb522e605629a38fd2acce34 | ||
| generated: "2024-08-07T11:34:06.849310242Z" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,42 @@ | ||
| {{/* | ||
| Copyright Broadcom, Inc. All Rights Reserved. | ||
| SPDX-License-Identifier: APACHE-2.0 | ||
| */}} | ||
|
|
||
| {{/* vim: set filetype=mustache: */}} | ||
|
|
||
| {{/* | ||
| Return true if the detected platform is Openshift | ||
| Usage: | ||
| {{- include "common.compatibility.isOpenshift" . -}} | ||
| */}} | ||
| {{- define "common.compatibility.isOpenshift" -}} | ||
| {{- if .Capabilities.APIVersions.Has "security.openshift.io/v1" -}} | ||
| {{- true -}} | ||
| {{- end -}} | ||
| {{- end -}} | ||
|
|
||
| {{/* | ||
| Render a compatible securityContext depending on the platform. By default it is maintained as it is. In other platforms like Openshift we remove default user/group values that do not work out of the box with the restricted-v1 SCC | ||
| Usage: | ||
| {{- include "common.compatibility.renderSecurityContext" (dict "secContext" .Values.containerSecurityContext "context" $) -}} | ||
| */}} | ||
| {{- define "common.compatibility.renderSecurityContext" -}} | ||
| {{- $adaptedContext := .secContext -}} | ||
|
|
||
| {{- if (((.context.Values.global).compatibility).openshift) -}} | ||
| {{- if or (eq .context.Values.global.compatibility.openshift.adaptSecurityContext "force") (and (eq .context.Values.global.compatibility.openshift.adaptSecurityContext "auto") (include "common.compatibility.isOpenshift" .context)) -}} | ||
| {{/* Remove incompatible user/group values that do not work in Openshift out of the box */}} | ||
| {{- $adaptedContext = omit $adaptedContext "fsGroup" "runAsUser" "runAsGroup" -}} | ||
| {{- if not .secContext.seLinuxOptions -}} | ||
| {{/* If it is an empty object, we remove it from the resulting context because it causes validation issues */}} | ||
| {{- $adaptedContext = omit $adaptedContext "seLinuxOptions" -}} | ||
| {{- end -}} | ||
| {{- end -}} | ||
| {{- end -}} | ||
| {{/* Remove fields that are disregarded when running the container in privileged mode */}} | ||
| {{- if $adaptedContext.privileged -}} | ||
| {{- $adaptedContext = omit $adaptedContext "capabilities" "seLinuxOptions" -}} | ||
| {{- end -}} | ||
| {{- omit $adaptedContext "enabled" | toYaml -}} | ||
| {{- end -}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,50 @@ | ||
| {{/* | ||
| Copyright Broadcom, Inc. All Rights Reserved. | ||
| SPDX-License-Identifier: APACHE-2.0 | ||
| */}} | ||
|
|
||
| {{/* vim: set filetype=mustache: */}} | ||
|
|
||
| {{/* | ||
| Return a resource request/limit object based on a given preset. | ||
| These presets are for basic testing and not meant to be used in production | ||
| {{ include "common.resources.preset" (dict "type" "nano") -}} | ||
| */}} | ||
| {{- define "common.resources.preset" -}} | ||
| {{/* The limits are the requests increased by 50% (except ephemeral-storage and xlarge/2xlarge sizes)*/}} | ||
| {{- $presets := dict | ||
| "nano" (dict | ||
| "requests" (dict "cpu" "100m" "memory" "128Mi" "ephemeral-storage" "50Mi") | ||
| "limits" (dict "cpu" "150m" "memory" "192Mi" "ephemeral-storage" "2Gi") | ||
| ) | ||
| "micro" (dict | ||
| "requests" (dict "cpu" "250m" "memory" "256Mi" "ephemeral-storage" "50Mi") | ||
| "limits" (dict "cpu" "375m" "memory" "384Mi" "ephemeral-storage" "2Gi") | ||
| ) | ||
| "small" (dict | ||
| "requests" (dict "cpu" "500m" "memory" "512Mi" "ephemeral-storage" "50Mi") | ||
| "limits" (dict "cpu" "750m" "memory" "768Mi" "ephemeral-storage" "2Gi") | ||
| ) | ||
| "medium" (dict | ||
| "requests" (dict "cpu" "500m" "memory" "1024Mi" "ephemeral-storage" "50Mi") | ||
| "limits" (dict "cpu" "750m" "memory" "1536Mi" "ephemeral-storage" "2Gi") | ||
| ) | ||
| "large" (dict | ||
| "requests" (dict "cpu" "1.0" "memory" "2048Mi" "ephemeral-storage" "50Mi") | ||
| "limits" (dict "cpu" "1.5" "memory" "3072Mi" "ephemeral-storage" "2Gi") | ||
| ) | ||
| "xlarge" (dict | ||
| "requests" (dict "cpu" "1.0" "memory" "3072Mi" "ephemeral-storage" "50Mi") | ||
| "limits" (dict "cpu" "3.0" "memory" "6144Mi" "ephemeral-storage" "2Gi") | ||
| ) | ||
| "2xlarge" (dict | ||
| "requests" (dict "cpu" "1.0" "memory" "3072Mi" "ephemeral-storage" "50Mi") | ||
| "limits" (dict "cpu" "6.0" "memory" "12288Mi" "ephemeral-storage" "2Gi") | ||
| ) | ||
| }} | ||
| {{- if hasKey $presets .type -}} | ||
| {{- index $presets .type | toYaml -}} | ||
| {{- else -}} | ||
| {{- printf "ERROR: Preset key '%s' invalid. Allowed values are %s" .type (join "," (keys $presets)) | fail -}} | ||
| {{- end -}} | ||
| {{- end -}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,26 @@ | ||
| {{- /* | ||
| Copyright Broadcom, Inc. All Rights Reserved. | ||
| SPDX-License-Identifier: APACHE-2.0 | ||
| */}} | ||
|
|
||
| {{- if .Values.pdb.create }} | ||
| apiVersion: {{ include "common.capabilities.policy.apiVersion" . }} | ||
| kind: PodDisruptionBudget | ||
| metadata: | ||
| name: {{ include "common.names.fullname" . }} | ||
| namespace: {{ include "common.names.namespace" . | quote }} | ||
| labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }} | ||
| {{- if .Values.commonAnnotations }} | ||
| annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} | ||
| {{- end }} | ||
| spec: | ||
| {{- if .Values.pdb.minAvailable }} | ||
| minAvailable: {{ .Values.pdb.minAvailable }} | ||
| {{- end }} | ||
| {{- if or .Values.pdb.maxUnavailable ( not .Values.pdb.minAvailable ) }} | ||
| maxUnavailable: {{ .Values.pdb.maxUnavailable | default 1 }} | ||
| {{- end }} | ||
| {{- $podLabels := include "common.tplvalues.merge" ( dict "values" ( list .Values.podLabels .Values.commonLabels ) "context" . ) }} | ||
| selector: | ||
| matchLabels: {{- include "common.labels.matchLabels" ( dict "customLabels" $podLabels "context" $ ) | nindent 6 }} | ||
| {{- end }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,50 @@ | ||
| {{- /* | ||
| Copyright Broadcom, Inc. All Rights Reserved. | ||
| SPDX-License-Identifier: APACHE-2.0 | ||
| */}} | ||
|
|
||
| {{- if and .Values.provisioning.enabled .Values.provisioning.networkPolicy.enabled }} | ||
| kind: NetworkPolicy | ||
| apiVersion: {{ include "common.capabilities.networkPolicy.apiVersion" . }} | ||
| metadata: | ||
| name: {{ printf "%s-provisioning" (include "common.names.fullname" .) | trunc 63 | trimSuffix "-" }} | ||
| namespace: {{ include "common.names.namespace" . | quote }} | ||
| labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }} | ||
| {{- if .Values.commonAnnotations }} | ||
| annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} | ||
| {{- end }} | ||
| spec: | ||
| {{- $podLabels := include "common.tplvalues.merge" ( dict "values" ( list .Values.podLabels .Values.commonLabels ) "context" . ) }} | ||
| podSelector: | ||
| matchLabels: | ||
| app.kubernetes.io/component: minio-provisioning | ||
| policyTypes: | ||
| - Ingress | ||
| - Egress | ||
| {{- if .Values.provisioning.networkPolicy.allowExternalEgress }} | ||
| egress: | ||
| - {} | ||
| {{- else }} | ||
| egress: | ||
| # Allow dns resolution | ||
| - ports: | ||
| - port: 53 | ||
| protocol: UDP | ||
| # Allow outbound connections to other cluster pods | ||
| - ports: | ||
| - port: {{ .Values.containerPorts.api }} | ||
| - port: {{ .Values.containerPorts.console }} | ||
| - port: {{ .Values.service.ports.api }} | ||
| - port: {{ .Values.service.ports.console }} | ||
| to: | ||
| - podSelector: | ||
| matchLabels: {{- include "common.labels.matchLabels" ( dict "customLabels" $podLabels "context" $ ) | nindent 14 }} | ||
| {{- if .Values.provisioning.networkPolicy.extraEgress }} | ||
| {{- include "common.tplvalues.render" ( dict "value" .Values.dataCoord.networkPolicy.extraEgress "context" $ ) | nindent 4 }} | ||
| {{- end }} | ||
| {{- end }} | ||
| ingress: | ||
| {{- if .Values.provisioning.networkPolicy.extraIngress }} | ||
| {{- include "common.tplvalues.render" ( dict "value" .Values.initJob.networkPolicy.extraIngress "context" $ ) | nindent 4 }} | ||
| {{- end }} | ||
| {{- end }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters