home/charts
2
0
Fork 0
mirror of https://github.com/wahyd4/charts.git synced 2026-08-09 05:06:29 +10:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/kubeapps] Bump chart version to 7.8.0 (#8981)

Browse Source 
* Kubeapps: bump chart to 7.8.0

Signed-off-by: Rafa Castelblanque <rcastelblanq@vmware.com>

* Revert changes in versions. Update readme

Signed-off-by: Antonio Gamez Diaz <agamez@vmware.com>

* Revert some readme changes

Signed-off-by: Antonio Gamez Diaz <agamez@vmware.com>

* Update app description

Signed-off-by: Antonio Gamez Diaz <agamez@vmware.com>

* [bitnami/kubeapps] Update components versions

Signed-off-by: Bitnami Containers <containers@bitnami.com>

Co-authored-by: Antonio Gamez Diaz <agamez@vmware.com>
Co-authored-by: Bitnami Containers <containers@bitnami.com>
This commit is contained in:
Rafa Castelblanque
2022-02-17 12:13:40 +01:00
committed by GitHub
co-authored by Antonio Gamez Diaz Bitnami Containers
parent 07c8fac2ee
commit 17dd9dc6b8
15 changed files with 247 additions and 135 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/kubeapps/.helmignore
+3
View File
@@ -1,3 +1,6 @@
# Copyright 2021-2022 the Kubeapps contributors.
# SPDX-License-Identifier: Apache-2.0
# Patterns to ignore when building packages.
# This supports shell glob matching, relative path matching, and
# negation (prefixed with !). Only one pattern per line.
bitnami/kubeapps/Chart.lock
+1 -1
View File
@@ -9,4 +9,4 @@ dependencies:
repository: https://charts.bitnami.com/bitnami
version: 15.7.6
digest: sha256:f225a14382bc93090ee52dff0a1b5228a430e6f1a49e1b32e1a57990199fd26f
generated: "2022-02-09T12:03:30.549249422Z"
generated: "2022-02-10T16:23:19.494542064+11:00"
bitnami/kubeapps/Chart.yaml
+3 -3
View File
@@ -1,7 +1,7 @@
annotations:
category: Infrastructure
apiVersion: v2
appVersion: 2.4.2
appVersion: 2.4.3
dependencies:
- name: common
repository: https://charts.bitnami.com/bitnami
@@ -21,7 +21,7 @@ dependencies:
condition: redis.enabled
description: Kubeapps is a web-based UI for launching and managing applications on Kubernetes. It allows users to deploy trusted applications and operators to control users access to the cluster.
home: https://kubeapps.com
icon: https://raw.githubusercontent.com/kubeapps/kubeapps/master/docs/img/logo.png
icon: https://raw.githubusercontent.com/kubeapps/kubeapps/main/docs/img/logo.png
keywords:
- helm
- dashboard
@@ -33,4 +33,4 @@ maintainers:
name: kubeapps
sources:
- https://github.com/kubeapps/kubeapps
version: 7.7.4
version: 7.8.0
bitnami/kubeapps/README.md
+114 -104
View File
@@ -16,7 +16,7 @@ kubectl create namespace kubeapps
helm install kubeapps --namespace kubeapps bitnami/kubeapps
```
> Check out the [getting started](https://github.com/kubeapps/kubeapps/blob/master/docs/user/getting-started.md) to start deploying apps with Kubeapps.
> Check out the [getting started](https://github.com/kubeapps/kubeapps/blob/main/docs/user/getting-started.md) to start deploying apps with Kubeapps.
## Introduction
@@ -30,12 +30,12 @@ With Kubeapps you can:
- Inspect, upgrade and delete applications installed in the cluster
- Browse and deploy [Helm](https://github.com/helm/helm) charts from public or private chart repositories (including [VMware Marketplace���](https://marketplace.cloud.vmware.com) and [Bitnami Application Catalog](https://bitnami.com/application-catalog))
- Browse and deploy [Kubernetes Operators](https://operatorhub.io/)
- Secure authentication to Kubeapps using a [standalone OAuth2/OIDC provider](https://github.com/kubeapps/kubeapps/blob/master/docs/user/using-an-OIDC-provider.md) or [using Pinniped](https://github.com/kubeapps/kubeapps/blob/master/docs/user/using-an-OIDC-provider-with-pinniped.md)
- Secure authorization based on Kubernetes [Role-Based Access Control](https://github.com/kubeapps/kubeapps/blob/master/docs/user/access-control.md)
- Secure authentication to Kubeapps using a [standalone OAuth2/OIDC provider](https://github.com/kubeapps/kubeapps/blob/main/docs/user/using-an-OIDC-provider.md) or [using Pinniped](https://github.com/kubeapps/kubeapps/blob/main/docs/user/using-an-OIDC-provider-with-pinniped.md)
- Secure authorization based on Kubernetes [Role-Based Access Control](https://github.com/kubeapps/kubeapps/blob/main/docs/user/access-control.md)
**_Note:_** Kubeapps 2.0 and onwards supports Helm 3 only. While only the Helm 3 API is supported, in most cases, charts made for Helm 2 will still work.
It also packages the [Bitnami PostgreSQL chart](https://github.com/bitnami/charts/tree/master/bitnami/postgresql) which is required for bootstrapping a deployment for the database requirements of the Kubeapps application.
It also packages the [Bitnami PostgreSQL chart](https://github.com/bitnami/charts/tree/master/bitnami/postgresql), which is required for bootstrapping a deployment for the database requirements of the Kubeapps application.
## Prerequisites
@@ -108,7 +108,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| ------------------------------------------------ | ----------------------------------------------------------------------------------------- | ---------------------- |
| `frontend.image.registry` | NGINX image registry | `docker.io` |
| `frontend.image.repository` | NGINX image repository | `bitnami/nginx` |
| `frontend.image.tag` | NGINX image tag (immutable tags are recommended) | `1.21.5-debian-10-r12` |
| `frontend.image.tag` | NGINX image tag (immutable tags are recommended) | `1.21.6-debian-10-r13` |
| `frontend.image.pullPolicy` | NGINX image pull policy | `IfNotPresent` |
| `frontend.image.pullSecrets` | NGINX image pull secrets | `[]` |
| `frontend.image.debug` | Enable image debug mode | `false` |
@@ -176,7 +176,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| ------------------------------------------------- | -------------------------------------------------------------------------------------------- | ---------------------------- |
| `dashboard.image.registry` | Dashboard image registry | `docker.io` |
| `dashboard.image.repository` | Dashboard image repository | `bitnami/kubeapps-dashboard` |
| `dashboard.image.tag` | Dashboard image tag (immutable tags are recommended) | `2.4.2-debian-10-r37` |
| `dashboard.image.tag` | Dashboard image tag (immutable tags are recommended) | `2.4.2-debian-10-r66` |
| `dashboard.image.pullPolicy` | Dashboard image pull policy | `IfNotPresent` |
| `dashboard.image.pullSecrets` | Dashboard image pull secrets | `[]` |
| `dashboard.image.debug` | Enable image debug mode | `false` |
@@ -242,18 +242,22 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| ----------------------------------------------------- | ----------------------------------------------------------------------------------------- | ------------------------------------------- |
| `apprepository.image.registry` | Kubeapps AppRepository Controller image registry | `docker.io` |
| `apprepository.image.repository` | Kubeapps AppRepository Controller image repository | `bitnami/kubeapps-apprepository-controller` |
| `apprepository.image.tag` | Kubeapps AppRepository Controller image tag (immutable tags are recommended) | `2.4.2-scratch-r0` |
| `apprepository.image.tag` | Kubeapps AppRepository Controller image tag (immutable tags are recommended) | `2.4.2-scratch-r1` |
| `apprepository.image.pullPolicy` | Kubeapps AppRepository Controller image pull policy | `IfNotPresent` |
| `apprepository.image.pullSecrets` | Kubeapps AppRepository Controller image pull secrets | `[]` |
| `apprepository.syncImage.registry` | Kubeapps Asset Syncer image registry | `docker.io` |
| `apprepository.syncImage.repository` | Kubeapps Asset Syncer image repository | `bitnami/kubeapps-asset-syncer` |
| `apprepository.syncImage.tag` | Kubeapps Asset Syncer image tag (immutable tags are recommended) | `2.4.2-scratch-r0` |
| `apprepository.syncImage.tag` | Kubeapps Asset Syncer image tag (immutable tags are recommended) | `2.4.2-scratch-r1` |
| `apprepository.syncImage.pullPolicy` | Kubeapps Asset Syncer image pull policy | `IfNotPresent` |
| `apprepository.syncImage.pullSecrets` | Kubeapps Asset Syncer image pull secrets | `[]` |
| `apprepository.globalReposNamespaceSuffix` | Suffix for the namespace of global repos. Defaults to empty for backwards compatibility. | `""` |
| `apprepository.initialRepos` | Initial chart repositories to configure | `[]` |
| `apprepository.customAnnotations` | Custom annotations be added to each AppRepository-generated CronJob, Job and Pod | `{}` |
| `apprepository.customLabels` | Custom labels be added to each AppRepository-generated CronJob, Job and Pod | `{}` |
| `apprepository.initialReposProxy` | Proxy configuration to access chart repositories | `{}` |
| `apprepository.initialReposProxy.enabled` | Enables the proxy | `false` |
| `apprepository.initialReposProxy.httpProxy` | URL for the http proxy | `""` |
| `apprepository.initialReposProxy.httpsProxy` | URL for the https proxy | `""` |
| `apprepository.initialReposProxy.noProxy` | URL to exclude from using the proxy | `""` |
| `apprepository.crontab` | Schedule for syncing App repositories (default to 10 minutes) | `""` |
| `apprepository.watchAllNamespaces` | Watch all namespaces to support separate AppRepositories per namespace | `true` |
| `apprepository.replicaCount` | Number of AppRepository Controller replicas to deploy | `1` |
@@ -288,7 +292,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `kubeops.enabled` | Specifies whether this component should be installed. | `true` |
| `kubeops.image.registry` | Kubeops image registry | `docker.io` |
| `kubeops.image.repository` | Kubeops image repository | `bitnami/kubeapps-kubeops` |
| `kubeops.image.tag` | Kubeops image tag (immutable tags are recommended) | `2.4.2-scratch-r0` |
| `kubeops.image.tag` | Kubeops image tag (immutable tags are recommended) | `2.4.2-scratch-r1` |
| `kubeops.image.pullPolicy` | Kubeops image pull policy | `IfNotPresent` |
| `kubeops.image.pullSecrets` | Kubeops image pull secrets | `[]` |
| `kubeops.namespaceHeaderName` | Additional header name for trusted namespaces | `""` |
@@ -348,7 +352,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `assetsvc.enabled` | Specifies whether this deprecated component should be installed. | `false` |
| `assetsvc.image.registry` | Kubeapps Assetsvc image registry | `docker.io` |
| `assetsvc.image.repository` | Kubeapps Assetsvc image repository | `bitnami/kubeapps-assetsvc` |
| `assetsvc.image.tag` | Kubeapps Assetsvc image tag (immutable tags are recommended) | `2.4.2-scratch-r0` |
| `assetsvc.image.tag` | Kubeapps Assetsvc image tag (immutable tags are recommended) | `2.4.2-scratch-r1` |
| `assetsvc.image.pullPolicy` | Kubeapps Assetsvc image pull policy | `IfNotPresent` |
| `assetsvc.image.pullSecrets` | Kubeapps Assetsvc image pull secrets | `[]` |
| `assetsvc.replicaCount` | Number of Assetsvc replicas to deploy | `1` |
@@ -403,7 +407,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `authProxy.enabled` | Specifies whether Kubeapps should configure OAuth login/logout | `false` |
| `authProxy.image.registry` | OAuth2 Proxy image registry | `docker.io` |
| `authProxy.image.repository` | OAuth2 Proxy image repository | `bitnami/oauth2-proxy` |
| `authProxy.image.tag` | OAuth2 Proxy image tag (immutable tags are recommended) | `7.2.1-debian-10-r17` |
| `authProxy.image.tag` | OAuth2 Proxy image tag (immutable tags are recommended) | `7.2.1-debian-10-r49` |
| `authProxy.image.pullPolicy` | OAuth2 Proxy image pull policy | `IfNotPresent` |
| `authProxy.image.pullSecrets` | OAuth2 Proxy image pull secrets | `[]` |
| `authProxy.external` | Use an external Auth Proxy instead of deploying its own one | `false` |
@@ -436,7 +440,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `pinnipedProxy.enabled` | Specifies whether Kubeapps should configure Pinniped Proxy | `false` |
| `pinnipedProxy.image.registry` | Pinniped Proxy image registry | `docker.io` |
| `pinnipedProxy.image.repository` | Pinniped Proxy image repository | `bitnami/kubeapps-pinniped-proxy` |
| `pinnipedProxy.image.tag` | Pinniped Proxy image tag (immutable tags are recommended) | `2.4.2-debian-10-r39` |
| `pinnipedProxy.image.tag` | Pinniped Proxy image tag (immutable tags are recommended) | `2.4.2-debian-10-r69` |
| `pinnipedProxy.image.pullPolicy` | Pinniped Proxy image pull policy | `IfNotPresent` |
| `pinnipedProxy.image.pullSecrets` | Pinniped Proxy image pull secrets | `[]` |
| `pinnipedProxy.defaultPinnipedNamespace` | Specify the (default) namespace in which pinniped concierge is installed | `pinniped-concierge` |
@@ -459,11 +463,11 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| ------------------------- | ----------------------------------------------------------------------------- | ---------------------- |
| `allowNamespaceDiscovery` | Allow users to discover available namespaces (only the ones they have access) | `true` |
| `clusters` | List of clusters that Kubeapps can target for deployments | `[]` |
| `featureFlags` | Feature flags (used to switch on development features) | `{}` |
| `featureFlags.operators` | Enable ingress record generation for Kubeapps | `false` |
| `rbac.create` | Specifies whether RBAC resources should be created | `true` |
| `testImage.registry` | NGINX image registry | `docker.io` |
| `testImage.repository` | NGINX image repository | `bitnami/nginx` |
| `testImage.tag` | NGINX image tag (immutable tags are recommended) | `1.21.5-debian-10-r12` |
| `testImage.tag` | NGINX image tag (immutable tags are recommended) | `1.21.6-debian-10-r13` |
| `testImage.pullPolicy` | NGINX image pull policy | `IfNotPresent` |
| `testImage.pullSecrets` | NGINX image pull secrets | `[]` |
@@ -486,62 +490,67 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
### kubeappsapis parameters
| Name | Description | Value |
| -------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------- | ----------------------- |
| `kubeappsapis.enabledPlugins` | Enabled plugins for the Kubeapps-APIs service | `["helm"]` |
| `kubeappsapis.pluginConfig.core.packages.v1alpha1.versionsInSummary.major` | Number of major versions to display in the summary | `3` |
| `kubeappsapis.pluginConfig.core.packages.v1alpha1.versionsInSummary.minor` | Number of minor versions to display in the summary | `3` |
| `kubeappsapis.pluginConfig.core.packages.v1alpha1.versionsInSummary.patch` | Number of patch versions to display in the summary | `3` |
| `kubeappsapis.pluginConfig.core.packages.v1alpha1.timeoutSeconds` | Value to wait for Kubernetes commands to complete | `300` |
| `kubeappsapis.image.registry` | Kubeapps-APIs image registry | `docker.io` |
| `kubeappsapis.image.repository` | Kubeapps-APIs image repository | `bitnami/kubeapps-apis` |
| `kubeappsapis.image.tag` | Kubeapps-APIs image tag (immutable tags are recommended) | `2.4.2-debian-10-r39` |
| `kubeappsapis.image.pullPolicy` | Kubeapps-APIs image pull policy | `IfNotPresent` |
| `kubeappsapis.image.pullSecrets` | Kubeapps-APIs image pull secrets | `[]` |
| `kubeappsapis.replicaCount` | Number of frontend replicas to deploy | `2` |
| `kubeappsapis.terminationGracePeriodSeconds` | The grace time period for sig term | `300` |
| `kubeappsapis.extraEnvVars` | Array with extra environment variables to add to the KubeappsAPIs container | `[]` |
| `kubeappsapis.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for the KubeappsAPIs container | `""` |
| `kubeappsapis.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for the KubeappsAPIs container | `""` |
| `kubeappsapis.containerPort` | KubeappsAPIs HTTP container port | `50051` |
| `kubeappsapis.resources.limits.cpu` | The CPU limits for the KubeappsAPIs container | `250m` |
| `kubeappsapis.resources.limits.memory` | The memory limits for the KubeappsAPIs container | `256Mi` |
| `kubeappsapis.resources.requests.cpu` | The requested CPU for the KubeappsAPIs container | `25m` |
| `kubeappsapis.resources.requests.memory` | The requested memory for the KubeappsAPIs container | `32Mi` |
| `kubeappsapis.podSecurityContext.enabled` | Enabled KubeappsAPIs pods' Security Context | `true` |
| `kubeappsapis.podSecurityContext.fsGroup` | Set KubeappsAPIs pod's Security Context fsGroup | `1001` |
| `kubeappsapis.containerSecurityContext.enabled` | Enabled KubeappsAPIs containers' Security Context | `true` |
| `kubeappsapis.containerSecurityContext.runAsUser` | Set KubeappsAPIs container's Security Context runAsUser | `1001` |
| `kubeappsapis.containerSecurityContext.runAsNonRoot` | Set KubeappsAPIs container's Security Context runAsNonRoot | `true` |
| `kubeappsapis.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `kubeappsapis.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `60` |
| `kubeappsapis.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `kubeappsapis.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `kubeappsapis.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `kubeappsapis.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `kubeappsapis.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `kubeappsapis.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `0` |
| `kubeappsapis.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `kubeappsapis.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `kubeappsapis.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `kubeappsapis.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `kubeappsapis.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
| `kubeappsapis.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
| `kubeappsapis.lifecycleHooks` | Custom lifecycle hooks for KubeappsAPIs containers | `{}` |
| `kubeappsapis.podLabels` | Extra labels for KubeappsAPIs pods | `{}` |
| `kubeappsapis.podAnnotations` | Annotations for KubeappsAPIs pods | `{}` |
| `kubeappsapis.podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `kubeappsapis.podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `kubeappsapis.nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `kubeappsapis.nodeAffinityPreset.key` | Node label key to match. Ignored if `affinity` is set | `""` |
| `kubeappsapis.nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set | `[]` |
| `kubeappsapis.affinity` | Affinity for pod assignment | `{}` |
| `kubeappsapis.nodeSelector` | Node labels for pod assignment | `{}` |
| `kubeappsapis.tolerations` | Tolerations for pod assignment | `[]` |
| `kubeappsapis.priorityClassName` | Priority class name for KubeappsAPIs pods | `""` |
| `kubeappsapis.hostAliases` | Custom host aliases for KubeappsAPIs pods | `[]` |
| `kubeappsapis.service.port` | KubeappsAPIs service HTTP port | `8080` |
| `kubeappsapis.service.annotations` | Additional custom annotations for KubeappsAPIs service | `{}` |
| Name | Description | Value |
| ----------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------- | ----------------------- |
| `kubeappsapis.enabledPlugins` | Enabled plugins for the Kubeapps-APIs service | `["helm","resources"]` |
| `kubeappsapis.pluginConfig.core.packages.v1alpha1.versionsInSummary.major` | Number of major versions to display in the summary | `3` |
| `kubeappsapis.pluginConfig.core.packages.v1alpha1.versionsInSummary.minor` | Number of minor versions to display in the summary | `3` |
| `kubeappsapis.pluginConfig.core.packages.v1alpha1.versionsInSummary.patch` | Number of patch versions to display in the summary | `3` |
| `kubeappsapis.pluginConfig.core.packages.v1alpha1.timeoutSeconds` | Value to wait for Kubernetes commands to complete | `300` |
| `kubeappsapis.pluginConfig.kappController.packages.v1alpha1.defaultUpgradePolicy` | Default upgrade policy generating version constraints | `none` |
| `kubeappsapis.pluginConfig.kappController.packages.v1alpha1.defaultPrereleasesVersionSelection` | Default policy for allowing prereleases containing one of the identifiers | `nil` |
| `kubeappsapis.pluginConfig.kappController.packages.v1alpha1.defaultAllowDowngrades` | Default policy for allowing applications to be downgraded to previous versions | `false` |
| `kubeappsapis.image.registry` | Kubeapps-APIs image registry | `docker.io` |
| `kubeappsapis.image.repository` | Kubeapps-APIs image repository | `bitnami/kubeapps-apis` |
| `kubeappsapis.image.tag` | Kubeapps-APIs image tag (immutable tags are recommended) | `2.4.2-debian-10-r68` |
| `kubeappsapis.image.pullPolicy` | Kubeapps-APIs image pull policy | `IfNotPresent` |
| `kubeappsapis.image.pullSecrets` | Kubeapps-APIs image pull secrets | `[]` |
| `kubeappsapis.replicaCount` | Number of frontend replicas to deploy | `2` |
| `kubeappsapis.qps` | KubeappsAPIs Kubernetes API client QPS limit | `50.0` |
| `kubeappsapis.burst` | KubeappsAPIs Kubernetes API client Burst limit | `100` |
| `kubeappsapis.terminationGracePeriodSeconds` | The grace time period for sig term | `300` |
| `kubeappsapis.extraEnvVars` | Array with extra environment variables to add to the KubeappsAPIs container | `[]` |
| `kubeappsapis.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for the KubeappsAPIs container | `""` |
| `kubeappsapis.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for the KubeappsAPIs container | `""` |
| `kubeappsapis.containerPort` | KubeappsAPIs HTTP container port | `50051` |
| `kubeappsapis.resources.limits.cpu` | The CPU limits for the KubeappsAPIs container | `250m` |
| `kubeappsapis.resources.limits.memory` | The memory limits for the KubeappsAPIs container | `256Mi` |
| `kubeappsapis.resources.requests.cpu` | The requested CPU for the KubeappsAPIs container | `25m` |
| `kubeappsapis.resources.requests.memory` | The requested memory for the KubeappsAPIs container | `32Mi` |
| `kubeappsapis.podSecurityContext.enabled` | Enabled KubeappsAPIs pods' Security Context | `true` |
| `kubeappsapis.podSecurityContext.fsGroup` | Set KubeappsAPIs pod's Security Context fsGroup | `1001` |
| `kubeappsapis.containerSecurityContext.enabled` | Enabled KubeappsAPIs containers' Security Context | `true` |
| `kubeappsapis.containerSecurityContext.runAsUser` | Set KubeappsAPIs container's Security Context runAsUser | `1001` |
| `kubeappsapis.containerSecurityContext.runAsNonRoot` | Set KubeappsAPIs container's Security Context runAsNonRoot | `true` |
| `kubeappsapis.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `kubeappsapis.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `60` |
| `kubeappsapis.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `kubeappsapis.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `kubeappsapis.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `kubeappsapis.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `kubeappsapis.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `kubeappsapis.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `0` |
| `kubeappsapis.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `kubeappsapis.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `kubeappsapis.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `kubeappsapis.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `kubeappsapis.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
| `kubeappsapis.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
| `kubeappsapis.lifecycleHooks` | Custom lifecycle hooks for KubeappsAPIs containers | `{}` |
| `kubeappsapis.podLabels` | Extra labels for KubeappsAPIs pods | `{}` |
| `kubeappsapis.podAnnotations` | Annotations for KubeappsAPIs pods | `{}` |
| `kubeappsapis.podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `kubeappsapis.podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `kubeappsapis.nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `kubeappsapis.nodeAffinityPreset.key` | Node label key to match. Ignored if `affinity` is set | `""` |
| `kubeappsapis.nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set | `[]` |
| `kubeappsapis.affinity` | Affinity for pod assignment | `{}` |
| `kubeappsapis.nodeSelector` | Node labels for pod assignment | `{}` |
| `kubeappsapis.tolerations` | Tolerations for pod assignment | `[]` |
| `kubeappsapis.priorityClassName` | Priority class name for KubeappsAPIs pods | `""` |
| `kubeappsapis.hostAliases` | Custom host aliases for KubeappsAPIs pods | `[]` |
| `kubeappsapis.service.port` | KubeappsAPIs service HTTP port | `8080` |
| `kubeappsapis.service.annotations` | Additional custom annotations for KubeappsAPIs service | `{}` |
### Redis&trade; chart configuration
@@ -551,10 +560,10 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `redis.redisPassword` | Password used in Redis&trade; | `""` |
| `redis.enabled` | Enable the Redis&trade; deployment when deploying Kubeapps APIs. | `false` |
| `redis.master.extraFlags` | Array with additional command line flags for Redis&trade; master | `["--maxmemory 200mb","--maxmemory-policy allkeys-lru"]` |
| `redis.master.disableCommands` | Array with commands to disable on Redis&trade | `[]` |
| `redis.master.disableCommands` | Array with commands to deactivate on Redis&trade | `[]` |
| `redis.replica.replicaCount` | Number of Redis&trade; replicas to deploy | `1` |
| `redis.replica.extraFlags` | Array with additional command line flags for Redis&trade; replicas | `["--maxmemory 200mb","--maxmemory-policy allkeys-lru"]` |
| `redis.replica.disableCommands` | Array with commands to disable on Redis&trade | `[]` |
| `redis.replica.disableCommands` | Array with commands to deactivate on Redis&trade | `[]` |
Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
@@ -581,11 +590,11 @@ By default, Kubeapps will track the [Bitnami Application Catalog](https://github
### Enabling Operators
Since v1.9.0 (and by default since v2.0), Kubeapps supports to deploy and manage Operators within its dashboard. More information about how to enable and use this feature can be found in [this guide](https://github.com/kubeapps/kubeapps/blob/master/docs/user/operators.md).
Since v1.9.0 (and by default since v2.0), Kubeapps supports deploying and managing Operators within its dashboard. More information about how to enable and use this feature can be found in [this guide](https://github.com/kubeapps/kubeapps/blob/main/docs/user/operators.md).
### Exposing Externally
> **Note**: The Kubeapps frontend sets up a proxy to the Kubernetes API service which means that when exposing the Kubeapps service to a network external to the Kubernetes cluster (perhaps on an internal or public network), the Kubernetes API will also be exposed for authenticated requests from that network. It is highly recommended that you [use an OAuth2/OIDC provider with Kubeapps](https://github.com/kubeapps/kubeapps/blob/master/docs/user/using-an-OIDC-provider.md) to ensure that your authentication proxy is exposed rather than the Kubeapps frontend. This ensures that only the configured users trusted by your Identity Provider will be able to reach the Kubeapps frontend and therefore the Kubernetes API. Kubernetes service token authentication should only be used for users for demonstration purposes only, not production environments.
> **Note**: The Kubeapps frontend sets up a proxy to the Kubernetes API service which means that when exposing the Kubeapps service to a network external to the Kubernetes cluster (perhaps on an internal or public network), the Kubernetes API will also be exposed for authenticated requests from that network. It is highly recommended that you [use an OAuth2/OIDC provider with Kubeapps](https://github.com/kubeapps/kubeapps/blob/main/docs/user/using-an-OIDC-provider.md) to ensure that your authentication proxy is exposed rather than the Kubeapps frontend. This ensures that only the configured users trusted by your Identity Provider will be able to reach the Kubeapps frontend and therefore the Kubernetes API. Kubernetes service token authentication should only be used for users for demonstration purposes only, not production environments.
#### LoadBalancer Service
@@ -616,11 +625,11 @@ For annotations, please see [this document](https://github.com/kubernetes/ingres
This chart will facilitate the creation of TLS secrets for use with the ingress controller, however, this is not required. There are four common use cases:
- Helm generates/manages certificate secrets based on the parameters.
- User generates/manages certificates separately.
- The user generates/manages certificates separately.
- Helm creates self-signed certificates and generates/manages certificate secrets.
- An additional tool (like [cert-manager](https://github.com/jetstack/cert-manager/)) manages the secrets for the application.
In the first two cases, it's needed a certificate and a key. We would expect them to look like this:
In the first two cases, it is needed a certificate and a key. We would expect them to look like this:
- certificate files should look like (and there can be more than one certificate if there is a certificate chain)
@@ -705,16 +714,16 @@ kubectl delete namespace kubeapps
### How to install Kubeapps for demo purposes?
Install Kubeapps for exclusively **demo purposes** by simply following the [getting started](https://github.com/kubeapps/kubeapps/blob/master/docs/user/getting-started.md) docs.
Install Kubeapps for exclusively **demo purposes** by simply following the [getting started](https://github.com/kubeapps/kubeapps/blob/main/docs/user/getting-started.md) docs.
### How to install Kubeapps in production scenarios?
For any user-facing installation, you should [configure an OAuth2/OIDC provider](https://github.com/kubeapps/kubeapps/blob/master/docs/user/using-an-OIDC-provider.md) to enable secure user authentication with Kubeapps and the cluster.
Please also refer to the [Access Control](https://github.com/kubeapps/kubeapps/blob/master/docs/user/access-control.md) documentation to configure fine-grained access control for users.
For any user-facing installation, you should [configure an OAuth2/OIDC provider](https://github.com/kubeapps/kubeapps/blob/main/docs/user/using-an-OIDC-provider.md) to enable secure user authentication with Kubeapps and the cluster.
Please also refer to the [Access Control](https://github.com/kubeapps/kubeapps/blob/main/docs/user/access-control.md) documentation to configure fine-grained access control for users.
### How to use Kubeapps?
Have a look at the [dashboard documentation](https://github.com/kubeapps/kubeapps/blob/master/docs/user/dashboard.md) for knowing how to use the Kubeapps dashboard: deploying applications, listing and removing the applications running in your cluster and adding new repositories.
Have a look at the [dashboard documentation](https://github.com/kubeapps/kubeapps/blob/main/docs/user/dashboard.md) for knowing how to use the Kubeapps dashboard: deploying applications, listing and removing the applications running in your cluster and adding new repositories.
### How to configure Kubeapps with Ingress
@@ -741,7 +750,7 @@ helm install kubeapps bitnami/kubeapps \
--set ingress.annotations."kubernetes\.io/ingress\.class"=nginx # or your preferred ingress controller
```
Besides, if you are using the OAuth2/OIDC login (more information at the [using an OIDC provider documentation](https://github.com/kubeapps/kubeapps/blob/master/docs/user/using-an-OIDC-provider.md)), you will need, also, to configure the different URLs:
Besides, if you are using the OAuth2/OIDC login (more information at the [using an OIDC provider documentation](https://github.com/kubeapps/kubeapps/blob/main/docs/user/using-an-OIDC-provider.md)), you will need, also, to configure the different URLs:
```bash
helm install kubeapps bitnami/kubeapps \
@@ -754,19 +763,19 @@ helm install kubeapps bitnami/kubeapps \
### Can Kubeapps install apps into more than one cluster?
Yes! Kubeapps 2.0+ supports multicluster environments. Have a look at the [Kubeapps dashboard documentation](https://github.com/kubeapps/kubeapps/blob/master/docs/user/deploying-to-multiple-clusters.md) to know more.
Yes! Kubeapps 2.0+ supports multicluster environments. Have a look at the [Kubeapps dashboard documentation](https://github.com/kubeapps/kubeapps/blob/main/docs/user/deploying-to-multiple-clusters.md) to know more.
### Can Kubeapps be installed without Internet connection?
Yes! Follow the [offline installation documentation](https://github.com/kubeapps/kubeapps/blob/master/docs/user/offline-installation.md) to discover how to perform an installation in an air-gapped scenario.
Yes! Follow the [offline installation documentation](https://github.com/kubeapps/kubeapps/blob/main/docs/user/offline-installation.md) to discover how to perform an installation in an air-gapped scenario.
### Does Kubeapps support private repositories?
Of course! Have a look at the [private app repositories documentation](https://github.com/kubeapps/kubeapps/blob/master/docs/user/private-app-repository.md) to learn how to configure a private repository in Kubeapps.
Of course! Have a look at the [private app repositories documentation](https://github.com/kubeapps/kubeapps/blob/main/docs/user/private-app-repository.md) to learn how to configure a private repository in Kubeapps.
### Is there any API documentation?
Yes! But it is not definitive and is still subject to change. Check out the [latest API online documentation](https://app.swaggerhub.com/apis/kubeapps/Kubeapps) or download the Kubeapps [OpenAPI Specification yaml file](https://github.com/kubeapps/kubeapps/blob/master/dashboard/public/openapi.yaml) from the repository.
Yes! But it is not definitive and is still subject to change. Check out the [latest API online documentation](https://app.swaggerhub.com/apis/kubeapps/Kubeapps) or download the Kubeapps [OpenAPI Specification yaml file](https://github.com/kubeapps/kubeapps/blob/main/dashboard/public/openapi.yaml) from the repository.
### Why can't I configure global private repositories?
@@ -780,13 +789,14 @@ You could alternatively ensure that the `imagePullSecret` is available in all na
### Does Kubeapps support Operators?
Yes! You can get started by following the [operators documentation](https://github.com/kubeapps/kubeapps/blob/master/docs/user/operators.md).
Yes! You can get started by following the [operators documentation](https://github.com/kubeapps/kubeapps/blob/main/docs/user/operators.md).
### Slow response when listing namespaces
Kubeapps uses the currently logged-in user credential to retrieve the list of all namespaces. If the user doesn't have permission to list namespaces, the backend will try again with its own service account to list all namespaces and then iterate through each namespace to check if the user has permissions to get secrets for each namespace (to verify if they should be allowed to use that namespace or not and hence whether it is included in the selector). This can lead to a slow response if the number of namespaces on the cluster is large.
Kubeapps uses the currently logged-in user credential to retrieve the list of all namespaces. If the user does not have permission to list namespaces, the backend will try again with its own service account. It will list all the namespaces and then will iterate through each namespace to check if the user has permissions to get secrets for each one.
This can lead to a slow response if the number of namespaces on the cluster is large.
To reduce this time, you can increase the number of checks that Kubeapps will perform in parallel (per connection) setting the value: `kubeops.burst=<desired_number>` and `kubeops.QPS=<desired_number>`. The default value, if not set, is 15 burst requests and 10 QPS afterwards.
To reduce this response time, you can increase the number of checks that Kubeapps will perform in parallel (per connection) setting the value: `kubeappsapis.burst=<desired_number>` and `kubeappsapis.QPS=<desired_number>`.
### More questions?
@@ -802,7 +812,7 @@ When starting the application with the `--set enableIPv6=true` option, the Nginx
nginx: [emerg] socket() [::]:8080 failed (97: Address family not supported by protocol)
```
This usually means that your cluster is not compatible with IPv6. To disable it, install kubeapps with the flag: `--set enableIPv6=false`.
This usually means that your cluster is not compatible with IPv6. To deactivate it, install kubeapps with the flag: `--set enableIPv6=false`.
### Forbidden error while installing the Chart
@@ -818,7 +828,7 @@ Or:
Error: namespaces "kubeapps" is forbidden: User "system:serviceaccount:kube-system:default" cannot get namespaces in the namespace "kubeapps"
```
It is possible, though uncommon, that your cluster does not have Role-Based Access Control (RBAC) enabled. To check if your cluster has RBAC you can execute:
It is possible, though uncommon, that your cluster does not have Role-Based Access Control (RBAC) enabled. To check if your cluster has RBAC you can run the following command:
```bash
kubectl api-versions
@@ -853,7 +863,7 @@ helm del --purge kubeapps
3. (Optional) Delete the App Repositories CRD:
> **Warning**: Don't execute this step if you have more than one Kubeapps installation in your cluster.
> **Warning**: Do not run this step if you have more than one Kubeapps installation in your cluster.
```bash
kubectl delete crd apprepositories.kubeapps.com
@@ -861,7 +871,7 @@ kubectl delete crd apprepositories.kubeapps.com
4. (Optional) Clean the Kubeapps namespace:
> **Warning**: Don't execute this step if you have workloads other than Kubeapps in the `kubeapps` namespace.
> **Warning**: Do not run this step if you have workloads other than Kubeapps in the `kubeapps` namespace.
```bash
kubectl delete namespace kubeapps
@@ -889,11 +899,11 @@ In this release, no breaking changes were included in Kubeapps (version 2.3.2).
Most of these standardizations simply add new parameters that allow to add more customizations such as adding custom env. variables, volumes or sidecar containers. That said, some of them include breaking changes:
- Chart labels were adapted to follow the [Helm charts standard labels](https://helm.sh/docs/chart_best_practices/labels/#standard-labels).
- `securityContext.*` parameters are deprecated in favor of `XXX.podSecurityContext.*` and `XXX.containerSecurityContext.*`, where XXX is placeholder you need to replace with the actual component(s). For instance, to modify the container security context for "kubeops" use `kubeops.podSecurityContext` and `kubeops.containerSecurityContext` parameters.
- `securityContext.*` parameters are deprecated in favor of `XXX.podSecurityContext.*` and `XXX.containerSecurityContext.*`, where _XXX_ is placeholder you need to replace with the actual component(s). For instance, to modify the container security context for "kubeops" use `kubeops.podSecurityContext` and `kubeops.containerSecurityContext` parameters.
### Upgrading to 2.3.1
Kubeapps 2.3.1 (Chart version 6.0.0) introduces some breaking changes. Helm specific functionality has been removed in order to support other installation methods (like using YAML manifests, [`kapp`](https://carvel.dev/kapp) or `kustomize`(https://kustomize.io/)). Because of that, there are some steps required before upgrading from a previous version:
Kubeapps 2.3.1 (Chart version 6.0.0) introduces some breaking changes. Helm-specific functionality has been removed in order to support other installation methods (like using YAML manifests, [`kapp`](https://carvel.dev/kapp) or [`kustomize`](https://kustomize.io/)). Because of that, there are some steps required before upgrading from a previous version:
1. Kubeapps will no longer create a database secret for you automatically but rather will rely on the default behavior of the PostgreSQL chart. If you try to upgrade Kubeapps and you installed it without setting a password, you will get the following error:
@@ -903,7 +913,7 @@ PASSWORDS ERROR: you must provide your current passwords when upgrade the releas
'postgresql.postgresqlPassword' must not be empty, please add '--set postgresql.postgresqlPassword=$POSTGRESQL_PASSWORD' to the command. To get the current value:
```
The error gives you generic instructions for retrieving the PostgreSQL password, but if you have installed a Kubeapps version prior to 2.3.1, the name of the secret will differ. Execute:
The error gives you generic instructions for retrieving the PostgreSQL password, but if you have installed a Kubeapps version prior to 2.3.1, the name of the secret will differ. Run the following command:
```console
export POSTGRESQL_PASSWORD=$(kubectl get secret --namespace "kubeapps" kubeapps-db -o jsonpath="{.data.postgresql-password}" | base64 --decode)
@@ -913,7 +923,7 @@ export POSTGRESQL_PASSWORD=$(kubectl get secret --namespace "kubeapps" kubeapps-
Make sure that you have stored the password in the variable `$POSTGRESQL_PASSWORD` before continuing with the next issue.
2. The chart initialRepos are no longer installed using [Helm hooks](https://helm.sh/docs/topics/charts_hooks/) which caused these repos to not be handled by Helm after the first installation. Now they will be tracked for every update but if you don't delete the existing ones, it will fail to update with:
2. The chart `initialRepos` are no longer installed using [Helm hooks](https://helm.sh/docs/topics/charts_hooks/), which caused these repos not to be handled by Helm after the first installation. Now they will be tracked for every update. However, if you do not delete the existing ones, it will fail to update with:
```console
Error: UPGRADE FAILED: rendered manifests contain a resource that already exists. Unable to continue with update: AppRepository "bitnami" in namespace "kubeapps" exists and cannot be imported into the current release: invalid ownership metadata; annotation validation error: missing key "meta.helm.sh/release-name": must be set to "kubeapps"; annotation validation error: missing key "meta.helm.sh/release-namespace": must be set to "kubeapps"
@@ -945,15 +955,15 @@ $ helm upgrade kubeapps bitnami/kubeapps -n kubeapps --set postgresql.postgresql
- Move dependency information from the _requirements.yaml_ to the _Chart.yaml_
- After running `helm dependency update`, a _Chart.lock_ file is generated containing the same structure used in the previous _requirements.lock_
- The different fields present in the _Chart.yaml_ file has been ordered alphabetically in a homogeneous way for all the Bitnami Helm Charts
- In the case of PostgreSQL subchart, apart from the same changes that are described in this section, there are also other major changes due to the master/slave nomenclature was replaced by primary/readReplica. [Here](https://github.com/bitnami/charts/pull/4385) you can find more information about the changes introduced.
- In the case of PostgreSQL subchart, apart from the same changes that are described in this section, there are also other major changes due to the _master/slave_ nomenclature was replaced by _primary/readReplica_. [Here](https://github.com/bitnami/charts/pull/4385) you can find more information about the changes introduced.
**Considerations when upgrading to this version**
- If you want to upgrade to this version using Helm 2, this scenario is not supported as this version doesn't support Helm 2 anymore
- If you want to upgrade to this version using Helm 2, this scenario is not supported as this version does not support Helm 2 anymore
- If you installed the previous version with Helm 2 and wants to upgrade to this version with Helm 3, please refer to the [official Helm documentation](https://helm.sh/docs/topics/v2_v3_migration/#migration-use-cases) about migrating from Helm 2 to 3
- If you want to upgrade to this version from a previous one installed with Helm 3, you shouldn't face any issues related to the new `apiVersion`. Due to the PostgreSQL major version bump, it's necessary to remove the existing statefulsets:
- If you want to upgrade to this version from a previous one installed with Helm 3, you should not face any issues related to the new `apiVersion`. Due to the PostgreSQL major version bump, it is necessary to remove the existing statefulsets:
> Note: The command below assumes that Kubeapps has been deployed in the kubeapps namespace using "kubeapps" as release name, if that's not the case, adapt the command accordingly.
> Note: The command below assumes that Kubeapps has been deployed in the kubeapps namespace using "kubeapps" as release name, if that is not the case, adapt the command accordingly.
```console
$ kubectl delete statefulset -n kubeapps kubeapps-postgresql-master kubeapps-postgresql-slave
@@ -973,15 +983,15 @@ Kubeapps 2.0 (Chart version 4.0.0) introduces some breaking changes:
- MongoDB&reg; is no longer supported. Since 2.0, the only database supported is PostgreSQL.
- PostgreSQL chart dependency has been upgraded to a new major version.
Due to the last point, it's necessary to run a command before upgrading to Kubeapps 2.0:
Due to the last point, it is necessary to run a command before upgrading to Kubeapps 2.0:
> Note: The command below assumes that Kubeapps has been deployed in the kubeapps namespace using "kubeapps" as release name, if that's not the case, adapt the command accordingly.
> Note: The command below assumes that Kubeapps has been deployed in the kubeapps namespace using "kubeapps" as release name, if that is not the case, adapt the command accordingly.
```bash
kubectl delete statefulset -n kubeapps kubeapps-postgresql-master kubeapps-postgresql-slave
```
After that you should be able to upgrade Kubeapps as always and the database will be repopulated.
After that, you should be able to upgrade Kubeapps as always and the database will be repopulated.
## License
bitnami/kubeapps/templates/_helpers.tpl
+24
View File
@@ -192,6 +192,7 @@ Compile all warnings into a single message, and call fail.
{{- define "kubeapps.validateValues" -}}
{{- $messages := list -}}
{{- $messages := append $messages (include "kubeapps.validateValues.ingress.tls" .) -}}
{{- $messages := append $messages (include "kubeapps.validateValues.kubeappsapis.enabledPlugins" .) -}}
{{- $messages := without $messages "" -}}
{{- $message := join "\n" $messages -}}
@@ -216,6 +217,29 @@ kubeapps: ingress.tls
{{- end -}}
{{- end -}}
{{/*
# Validate values of common mistakes in kubeappsapis.enabledPlugins
*/}}
{{- define "kubeapps.validateValues.kubeappsapis.enabledPlugins" -}}
{{- if has "flux" .Values.kubeappsapis.enabledPlugins }}
kubeapps: kubeappsapis.enabledPlugins
You enter "flux", perhaps you meant "fluxv2"?
{{- end -}}
{{- if has "kapp_controller" .Values.kubeappsapis.enabledPlugins }}
kubeapps: kubeappsapis.enabledPlugins
You enter "kapp_controller", perhaps you meant "kapp-controller"?
{{- end -}}
{{- if and (has "fluxv2" .Values.kubeappsapis.enabledPlugins) (not .Values.redis.enabled) }}
kubeapps: kubeappsapis.enabledPlugins
If you enable the "fluxv2" plugin, you must also set redis.enabled=true
{{- end -}}
{{- if and (has "fluxv2" .Values.kubeappsapis.enabledPlugins) (has "helm" .Values.kubeappsapis.enabledPlugins) }}
kubeapps: kubeappsapis.enabledPlugins
Please choose just one of the flux2 and helm plugins, since they both operate on Helm releases.
{{- end -}}
{{- end -}}
{{/*
Check if there are rolling tags in the images
*/}}
bitnami/kubeapps/templates/apprepository/apprepositories-secret.yaml
+6 -2
View File
@@ -7,7 +7,7 @@ metadata:
{{- if .namespace }}
namespace: {{ .namespace | quote }}
{{- else }}
namespace: {{ $.Release.Namespace | quote }}
namespace: {{ printf "%s%s" $.Release.Namespace $.Values.apprepository.globalReposNamespaceSuffix | quote }}
{{- end }}
labels: {{- include "common.labels.standard" $ | nindent 4 }}
{{- if $.Values.commonLabels }}
@@ -33,11 +33,15 @@ data:
{{- end }}
---
{{/* credentials are required in the release namespace for syncer jobs */}}
{{- if .namespace }}
{{- if or .namespace $.Values.apprepository.globalReposNamespaceSuffix }}
apiVersion: v1
kind: Secret
metadata:
{{- if .namespace }}
name: {{ printf "%s-apprepo-%s" .namespace .name }}
{{- else }}
name: {{ printf "%s%s-apprepo-%s" $.Release.Namespace $.Values.apprepository.globalReposNamespaceSuffix .name }}
{{- end }}
namespace: {{ $.Release.Namespace | quote }}
labels: {{- include "common.labels.standard" $ | nindent 4 }}
{{- if $.Values.commonLabels }}
bitnami/kubeapps/templates/apprepository/apprepositories.yaml
+1 -1
View File
@@ -6,7 +6,7 @@ metadata:
{{- if .namespace }}
namespace: {{ .namespace | quote }}
{{- else }}
namespace: {{ $.Release.Namespace | quote }}
namespace: {{ printf "%s%s" $.Release.Namespace $.Values.apprepository.globalReposNamespaceSuffix | quote }}
{{- end }}
labels: {{- include "common.labels.standard" $ | nindent 4 }}
{{- if $.Values.commonLabels }}
bitnami/kubeapps/templates/apprepository/deployment.yaml
+1
View File
@@ -76,6 +76,7 @@ spec:
{{- end }}
- --repo-sync-cmd=/asset-syncer
- --namespace={{ .Release.Namespace }}
- --global-repos-namespace={{ .Release.Namespace }}{{ .Values.apprepository.globalReposNamespaceSuffix }}
{{- if .Values.postgresql.existingSecret }}
- --database-secret-name={{ .Values.postgresql.existingSecret }}
{{- else }}
bitnami/kubeapps/templates/apprepository/rbac.yaml
+15
View File
@@ -130,6 +130,7 @@ metadata:
name: "kubeapps:{{ .Release.Namespace }}:apprepositories-read"
labels: {{- include "common.labels.standard" . | nindent 4 }}
app.kubernetes.io/component: apprepository
rbac.authorization.k8s.io/aggregate-to-view: "true"
{{- if .Values.commonLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" . ) | nindent 4 }}
{{- end }}
@@ -174,6 +175,7 @@ metadata:
name: "kubeapps:{{ .Release.Namespace }}:apprepositories-write"
labels: {{- include "common.labels.standard" . | nindent 4 }}
app.kubernetes.io/component: apprepository
rbac.authorization.k8s.io/aggregate-to-edit: "true"
{{- if .Values.commonLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" . ) | nindent 4 }}
{{- end }}
@@ -214,4 +216,17 @@ rules:
verbs:
- get
- update
---
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: RoleBinding
metadata:
name: "kubeapps:{{ .Release.Namespace }}:global-repos-read"
namespace: "{{ .Release.Namespace }}{{ .Values.apprepository.globalReposNamespaceSuffix }}"
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: "kubeapps:{{ .Release.Namespace }}:apprepositories-read"
subjects:
- kind: Group
name: system:authenticated
{{- end -}}
bitnami/kubeapps/templates/dashboard/configmap.yaml
+1
View File
@@ -69,6 +69,7 @@ data:
{
"kubeappsCluster": "{{ template "kubeapps.kubeappsCluster" . -}}",
"kubeappsNamespace": "{{ .Release.Namespace }}",
"globalReposNamespace": "{{ .Release.Namespace }}{{ .Values.apprepository.globalReposNamespaceSuffix }}",
"appVersion": "v{{ .Chart.AppVersion }}",
"authProxyEnabled": {{ .Values.authProxy.enabled }},
"oauthLoginURI": {{ .Values.authProxy.oauthLoginURI | quote }},
bitnami/kubeapps/templates/frontend/configmap.yaml
+6 -1
View File
@@ -13,7 +13,7 @@ metadata:
{{- end }}
data:
k8s-api-proxy.conf: |-
# Disable buffering for log streaming
# Deactivate buffering for log streaming
proxy_buffering off;
# Hide Www-Authenticate to prevent it triggering a basic auth prompt in
# the browser with some clusters
@@ -61,10 +61,14 @@ data:
return 200 "healthy\n";
}
# Only proxy to k8s API endpoints if operators are enabled.
{{- if $.Values.featureFlags.operators }}
# Ensure each cluster can be reached (should only be
# used with an auth-proxy where k8s credentials never leave
# the cluster). See clusters option.
{{- range .Values.clusters }}
location ~* /api/clusters/{{ .name }} {
{{/* We need to split the API service URL(s) into the base url and the path segment so
those configurations using a path can be appropriately rewritten below while
@@ -101,6 +105,7 @@ data:
{{- end }}
include "./server_blocks/k8s-api-proxy.conf";
}
{{- end }}
{{- end }}
location ~* /apis {
bitnami/kubeapps/templates/kubeappsapis/deployment.yaml
+8 -1
View File
@@ -32,7 +32,7 @@ spec:
{{- if .Values.kubeappsapis.hostAliases }}
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.hostAliases "context" $) | nindent 8 }}
{{- end }}
# Increase termination timeout to let remaining operations to finish before killing the pods
# Increase termination timeout to let remaining operations to finish before ending the pods
# This is because new releases/upgrades/deletions are synchronous operations
{{- if .Values.kubeappsapis.affinity }}
affinity: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.affinity "context" $) | nindent 8 }}
@@ -81,6 +81,13 @@ spec:
{{- if .Values.pinnipedProxy.enabled }}
- --pinniped-proxy-url=http://{{ template "kubeapps.pinniped-proxy.fullname" . }}.{{ .Release.Namespace }}:{{ .Values.pinnipedProxy.containerPort }}
{{- end }}
- --global-repos-namespace={{ .Release.Namespace }}{{ .Values.apprepository.globalReposNamespaceSuffix }}
{{- if .Values.kubeappsapis.qps }}
- --kube-api-qps={{ .Values.kubeappsapis.qps }}
{{- end }}
{{- if .Values.kubeappsapis.burst }}
- --kube-api-burst={{ .Values.kubeappsapis.burst }}
{{- end }}
env:
- name: GOGC
value: "50" # default is 100. 50 means increasing x2 the frequency of GC
bitnami/kubeapps/templates/kubeops/deployment.yaml
+1 -1
View File
@@ -33,7 +33,7 @@ spec:
{{- if .Values.kubeops.hostAliases }}
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.kubeops.hostAliases "context" $) | nindent 8 }}
{{- end }}
# Increase termination timeout to let remaining operations to finish before killing the pods
# Increase termination timeout to let remaining operations to finish before ending the pods
# This is because new releases/upgrades/deletions are synchronous operations
{{- if .Values.kubeops.affinity }}
affinity: {{- include "common.tplvalues.render" (dict "value" .Values.kubeops.affinity "context" $) | nindent 8 }}
bitnami/kubeapps/templates/shared/global-repos-namespace.yaml
+7
View File
@@ -0,0 +1,7 @@
{{- if .Values.apprepository.globalReposNamespaceSuffix }}
apiVersion: v1
kind: Namespace
metadata:
name: "{{ .Release.Namespace }}{{ .Values.apprepository.globalReposNamespaceSuffix }}"
---
{{- end }}
bitnami/kubeapps/values.yaml
+56 -21
View File
@@ -153,7 +153,7 @@ frontend:
image:
registry: docker.io
repository: bitnami/nginx
tag: 1.21.6-debian-10-r13
tag: 1.21.6-debian-10-r21
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -417,7 +417,7 @@ dashboard:
image:
registry: docker.io
repository: bitnami/kubeapps-dashboard
tag: 2.4.2-debian-10-r66
tag: 2.4.3-debian-10-r0
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -443,7 +443,7 @@ dashboard:
##
customStyle: ""
## @param dashboard.customAppViews Package names to signal a custom app view
## ref: https://github.com/kubeapps/kubeapps/blob/master/docs/developer/custom-app-view-support.md
## ref: https://github.com/kubeapps/kubeapps/blob/main/docs/developer/custom-app-view-support.md
## e.g:
## customAppViews:
## - plugin: helm
@@ -451,7 +451,7 @@ dashboard:
## repository: bitnami
customAppViews: []
## @param dashboard.customComponents Custom Form components injected into the BasicDeploymentForm
## ref: https://github.com/kubeapps/kubeapps/blob/master/docs/developer/custom-form-component-support.md
## ref: https://github.com/kubeapps/kubeapps/blob/main/docs/developer/custom-form-component-support.md
##
customComponents: ""
## @param dashboard.remoteComponentsUrl Remote URL that can be used to load custom components vs loading from the local filesystem
@@ -461,7 +461,7 @@ dashboard:
##
skipAvailablePackageDetails: false
## @param dashboard.customLocale Custom translations injected to the Dashboard to customize the strings used in Kubeapps
## ref: https://github.com/kubeapps/kubeapps/blob/master/docs/developer/translate-kubeapps.md
## ref: https://github.com/kubeapps/kubeapps/blob/main/docs/developer/translate-kubeapps.md
## e.g:
## customLocale:
## "Kubeapps": "My Dashboard"
@@ -680,7 +680,7 @@ apprepository:
image:
registry: docker.io
repository: bitnami/kubeapps-apprepository-controller
tag: 2.4.2-scratch-r1
tag: 2.4.3-scratch-r1
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -705,7 +705,7 @@ apprepository:
syncImage:
registry: docker.io
repository: bitnami/kubeapps-asset-syncer
tag: 2.4.2-scratch-r1
tag: 2.4.3-scratch-r1
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -719,6 +719,9 @@ apprepository:
## - myRegistryKeySecretName
##
pullSecrets: []
## @param apprepository.globalReposNamespaceSuffix Suffix for the namespace of global repos. Defaults to empty for backwards compatibility.
##
globalReposNamespaceSuffix: ""
## @param apprepository.initialRepos [array] Initial chart repositories to configure
## e.g:
## initialRepos:
@@ -756,13 +759,18 @@ apprepository:
initialRepos:
- name: bitnami
url: https://charts.bitnami.com/bitnami
## @param apprepository.customAnnotations [object] Custom annotations be added to each AppRepository-generated CronJob, Job and Pod
## @param apprepository.customAnnotations Custom annotations be added to each AppRepository-generated CronJob, Job and Pod
##
customAnnotations: {}
## @param apprepository.customLabels [object] Custom labels be added to each AppRepository-generated CronJob, Job and Pod
## @param apprepository.customLabels Custom labels be added to each AppRepository-generated CronJob, Job and Pod
##
customLabels: {}
## @param apprepository.initialReposProxy [object] Proxy configuration to access chart repositories
## Proxy configuration to access chart repositories
##
## @param apprepository.initialReposProxy.enabled Enables the proxy
## @param apprepository.initialReposProxy.httpProxy URL for the http proxy
## @param apprepository.initialReposProxy.httpsProxy URL for the https proxy
## @param apprepository.initialReposProxy.noProxy URL to exclude from using the proxy
##
initialReposProxy:
enabled: false
@@ -892,7 +900,7 @@ kubeops:
image:
registry: docker.io
repository: bitnami/kubeapps-kubeops
tag: 2.4.2-scratch-r1
tag: 2.4.3-scratch-r1
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -1110,7 +1118,7 @@ assetsvc:
image:
registry: docker.io
repository: bitnami/kubeapps-assetsvc
tag: 2.4.2-scratch-r1
tag: 2.4.3-scratch-r1
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -1290,7 +1298,7 @@ assetsvc:
## @section Auth Proxy parameters
## Auth Proxy configuration for OIDC support
## ref: https://github.com/kubeapps/kubeapps/blob/master/docs/user/using-an-OIDC-provider.md
## ref: https://github.com/kubeapps/kubeapps/blob/main/docs/user/using-an-OIDC-provider.md
##
authProxy:
## @param authProxy.enabled Specifies whether Kubeapps should configure OAuth login/logout
@@ -1307,7 +1315,7 @@ authProxy:
image:
registry: docker.io
repository: bitnami/oauth2-proxy
tag: 7.2.1-debian-10-r49
tag: 7.2.1-debian-10-r56
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -1420,7 +1428,7 @@ pinnipedProxy:
image:
registry: docker.io
repository: bitnami/kubeapps-pinniped-proxy
tag: 2.4.2-debian-10-r69
tag: 2.4.3-debian-10-r4
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -1513,9 +1521,14 @@ allowNamespaceDiscovery: true
clusters:
- name: default
domain: cluster.local
## @param featureFlags Feature flags (used to switch on development features)
## @skip featureFlags Feature flags (used to switch on development features)
##
featureFlags: {}
featureFlags:
## @param featureFlags.operators Enable ingress record generation for Kubeapps
##
operators: false
## RBAC configuration
##
rbac:
@@ -1534,7 +1547,7 @@ rbac:
testImage:
registry: docker.io
repository: bitnami/nginx
tag: 1.21.6-debian-10-r13
tag: 1.21.6-debian-10-r21
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -1605,6 +1618,7 @@ kubeappsapis:
##
enabledPlugins:
- helm
- resources
pluginConfig:
core:
packages:
@@ -1618,6 +1632,21 @@ kubeappsapis:
patch: 3
## @param kubeappsapis.pluginConfig.core.packages.v1alpha1.timeoutSeconds Value to wait for Kubernetes commands to complete
timeoutSeconds: 300
kappController:
packages:
v1alpha1:
## @param kubeappsapis.pluginConfig.kappController.packages.v1alpha1.defaultUpgradePolicy Default upgrade policy generating version constraints
## enum: [ "major", "minor", "patch", "none" ]
defaultUpgradePolicy: none
## @param kubeappsapis.pluginConfig.kappController.packages.v1alpha1.defaultPrereleasesVersionSelection Default policy for allowing prereleases containing one of the identifiers
## ref: https://carvel.dev/kapp-controller/docs/latest/package-consumer-concepts/#prereleases
## e.g:
# defaultPrereleasesVersionSelection:
# - rc
defaultPrereleasesVersionSelection: null
## @param kubeappsapis.pluginConfig.kappController.packages.v1alpha1.defaultAllowDowngrades Default policy for allowing applications to be downgraded to previous versions
## ref: https://carvel.dev/kapp-controller/docs/latest/package-consumer-concepts/#downgrading
defaultAllowDowngrades: false
## Bitnami Kubeapps-APIs image
## ref: https://hub.docker.com/r/bitnami/kubeapps-apis/tags/
## @param kubeappsapis.image.registry Kubeapps-APIs image registry
@@ -1629,7 +1658,7 @@ kubeappsapis:
image:
registry: docker.io
repository: bitnami/kubeapps-apis
tag: 2.4.2-debian-10-r68
tag: 2.4.3-debian-10-r7
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -1646,6 +1675,12 @@ kubeappsapis:
## @param kubeappsapis.replicaCount Number of frontend replicas to deploy
##
replicaCount: 2
## @param kubeappsapis.qps KubeappsAPIs Kubernetes API client QPS limit
##
qps: "50.0"
## @param kubeappsapis.burst KubeappsAPIs Kubernetes API client Burst limit
##
burst: "100"
## @param kubeappsapis.terminationGracePeriodSeconds The grace time period for sig term
## ref: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#hook-handler-execution
##
@@ -1839,7 +1874,7 @@ redis:
- "--maxmemory-policy allkeys-lru"
## ref https://stackoverflow.com/questions/22815364/flushall-and-flushdb-commands-on-redis-return-unk-command
## Redis official Helm chart by default disables FLUSHDB and FLUSHALL commands
## @param redis.master.disableCommands Array with commands to disable on Redis&trade
## @param redis.master.disableCommands Array with commands to deactivate on Redis&trade
disableCommands: []
replica:
## @param redis.replica.replicaCount Number of Redis&trade; replicas to deploy
@@ -1856,5 +1891,5 @@ redis:
- "--maxmemory-policy allkeys-lru"
## ref https://stackoverflow.com/questions/22815364/flushall-and-flushdb-commands-on-redis-return-unk-command
## Redis official Helm chart by default disables FLUSHDB and FLUSHALL commands
## @param redis.replica.disableCommands Array with commands to disable on Redis&trade
## @param redis.replica.disableCommands Array with commands to deactivate on Redis&trade
disableCommands: []