Skip to content
This repository was archived by the owner on Apr 17, 2025. It is now read-only.

Commit 4aa86ce

Browse files
zfrhvzfrhv
committed
regenerated charts/hnc/templates
Signed-off-by: Zakhar Pecherichny <[email protected]>
1 parent d04cc02 commit 4aa86ce

9 files changed

+133
-4
lines changed

‎charts/hnc/templates/hnc-admin-role.yaml renamed to ‎charts/hnc/templates/hnc-admin.yaml

+4-2
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,13 @@ kind: ClusterRole
33
metadata:
44
labels:
55
rbac.authorization.k8s.io/aggregate-to-admin: "true"
6-
name: '{{ include "hnc.fullname" . }}-admin-role'
6+
name: '{{ include "hnc.fullname" . }}-admin'
77
rules:
88
- apiGroups:
99
- hnc.x-k8s.io
1010
resources:
11-
- '*'
11+
- hierarchicalresourcequotas
12+
- subnamespaceanchors
13+
- hierarchyconfigurations
1214
verbs:
1315
- '*'

‎charts/hnc/templates/hnc-controller-manager-ha.yaml

+3
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,9 @@ spec:
2323
{{- if .Values.hrq.enabled }}
2424
- --enable-hrq
2525
{{- end }}
26+
{{- if $hncIncludeNamespacesRegex}}
27+
- --included-namespace-regex={{ $hncIncludeNamespacesRegex }}
28+
{{- end }}
2629
{{- range $hncExcludeNamespace := .Values.hncExcludeNamespaces}}
2730
- --excluded-namespace={{ $hncExcludeNamespace }}
2831
{{- end }}

‎charts/hnc/templates/hnc-controller-manager.yaml

+3
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,9 @@ spec:
2222
{{- if .Values.hrq.enabled }}
2323
- --enable-hrq
2424
{{- end }}
25+
{{- if $hncIncludeNamespacesRegex}}
26+
- --included-namespace-regex={{ $hncIncludeNamespacesRegex }}
27+
{{- end }}
2528
{{- range $hncExcludeNamespace := .Values.hncExcludeNamespaces}}
2629
- --excluded-namespace={{ $hncExcludeNamespace }}
2730
{{- end }}

‎charts/hnc/templates/hnc-edit.yaml

+14
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
6+
name: '{{ include "hnc.fullname" . }}-edit'
7+
rules:
8+
- apiGroups:
9+
- hnc.x-k8s.io
10+
resources:
11+
- hierarchicalresourcequotas
12+
- subnamespaceanchors
13+
verbs:
14+
- '*'

‎charts/hnc/templates/hnc-resourcelist-apiextension.yaml

+65
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
1+
apiVersion: apps/v1
2+
kind: Deployment
3+
metadata:
4+
labels:
5+
app: resourcelist-apiextension
6+
name: {{ include "hnc.fullname" . }}-resourcelist-apiextension
7+
namespace: {{ include "hnc.namespace" . }}
8+
spec:
9+
replicas: 1
10+
selector:
11+
matchLabels:
12+
app: resourcelist-apiextension
13+
template:
14+
metadata:
15+
labels:
16+
app: resourcelist-apiextension
17+
spec:
18+
containers:
19+
- args:
20+
{{- if .Values.hrq.enabled }}
21+
- --enable-hrq
22+
{{- end }}
23+
{{- if $hncIncludeNamespacesRegex}}
24+
- --included-namespace-regex={{ $hncIncludeNamespacesRegex }}
25+
{{- end }}
26+
{{- range $hncExcludeNamespace := .Values.hncExcludeNamespaces}}
27+
- --excluded-namespace={{ $hncExcludeNamespace }}
28+
{{- end }}
29+
- --cert=/certs/tls.crt
30+
- --key=/certs/tls.key
31+
command:
32+
- /apiextension
33+
image: hnc-manager:latest
34+
{{- with .Values.imagePullPolicy }}
35+
imagePullPolicy: IfNotPresent
36+
{{- end }}
37+
name: resourcelist
38+
ports:
39+
- containerPort: 7443
40+
name: server
41+
protocol: TCP
42+
securityContext:
43+
allowPrivilegeEscalation: false
44+
capabilities:
45+
drop:
46+
- ALL
47+
readOnlyRootFilesystem: true
48+
runAsNonRoot: true
49+
seccompProfile:
50+
type: RuntimeDefault
51+
volumeMounts:
52+
- mountPath: /certs
53+
name: certs
54+
securityContext:
55+
fsGroup: 2000
56+
runAsNonRoot: true
57+
runAsUser: 1000
58+
volumes:
59+
- name: certs
60+
secret:
61+
defaultMode: 420
62+
secretName: hnc-resourcelist-apiextension
63+
nodeSelector: {{- toYaml . | nindent 8}}
64+
affinity: {{- toYaml . | nindent 8}}
65+
tolerations: {{- toYaml . | nindent 8}}

‎charts/hnc/templates/hnc-resourcelist.yaml

+14
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
labels:
5+
app: resourcelist
6+
name: '{{ include "hnc.fullname" . }}-resourcelist'
7+
namespace: '{{ include "hnc.namespace" . }}'
8+
spec:
9+
ports:
10+
- port: 7443
11+
protocol: TCP
12+
targetPort: 7443
13+
selector:
14+
app: resourcelist

‎charts/hnc/templates/hnc-view.yaml

+15
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
rbac.authorization.k8s.io/aggregate-to-view: "true"
6+
name: '{{ include "hnc.fullname" . }}-view'
7+
rules:
8+
- apiGroups:
9+
- hnc.x-k8s.io
10+
resources:
11+
- '*'
12+
verbs:
13+
- get
14+
- list
15+
- watch

‎charts/hnc/templates/v1alpha2.resources.hnc.x-k8s.io.yaml

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
apiVersion: apiregistration.k8s.io/v1
2+
kind: APIService
3+
metadata:
4+
name: '{{ include "hnc.fullname" . }}-v1alpha2.resources.hnc.x-k8s.io'
5+
spec:
6+
group: resources.hnc.x-k8s.io
7+
groupPriorityMinimum: 10
8+
service:
9+
name: hnc-resourcelist
10+
namespace: hnc-system
11+
port: 7443
12+
version: v1alpha2
13+
versionPriority: 10

‎charts/hnc/values.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
image:
2-
repository: gcr.io/k8s-staging-multitenancy/hnc-manager
3-
tag: v1.1.0
2+
repository: /hnc-manager
3+
tag: latest
44
imagePullPolicy: {}
55
# Regex of namespaces for HNC to manage
66
# example include everything except openshift.*

0 commit comments

Comments
 (0)