Update charts to 1.6.0 release of OpenEBS

charts/openebs/v1.6.0/Chart.yaml

 apiVersion: v1
-version: 1.5.0
+version: 1.6.0
 name: openebs
-appVersion: 1.5.0
+appVersion: 1.6.0
 description: Containerized Storage for Containers
 icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/openebs/icon/color/openebs-icon-color.png
 home: http://www.openebs.io/

charts/openebs/v1.6.0/README.md

@@ -38,34 +38,35 @@ The following table lists the configurable parameters of the OpenEBS chart and t
 | Parameter                               | Description                                   | Default                                   |
 | ----------------------------------------| --------------------------------------------- | ----------------------------------------- |
 | `rbac.create`                           | Enable RBAC Resources                         | `true`                                    |
+| `rbac.pspEnabled`                       | Create pod security policy resources          | `false`                                   |
 | `image.pullPolicy`                      | Container pull policy                         | `IfNotPresent`                            |
 | `apiserver.enabled`                     | Enable API Server                             | `true`                                    |
 | `apiserver.image`                       | Image for API Server                          | `quay.io/openebs/m-apiserver`             |
-| `apiserver.imageTag`                    | Image Tag for API Server                      | `1.5.0`                                   |
+| `apiserver.imageTag`                    | Image Tag for API Server                      | `1.6.0`                                   |
 | `apiserver.replicas`                    | Number of API Server Replicas                 | `1`                                       |
 | `apiserver.sparse.enabled`              | Create Sparse Pool based on Sparsefile        | `false`                                   |
 | `provisioner.enabled`                   | Enable Provisioner                            | `true`                                    |
 | `provisioner.image`                     | Image for Provisioner                         | `quay.io/openebs/openebs-k8s-provisioner` |
-| `provisioner.imageTag`                  | Image Tag for Provisioner                     | `1.5.0`                                   |
+| `provisioner.imageTag`                  | Image Tag for Provisioner                     | `1.6.0`                                   |
 | `provisioner.replicas`                  | Number of Provisioner Replicas                | `1`                                       |
 | `localprovisioner.enabled`              | Enable localProvisioner                       | `true`                                    |
 | `localprovisioner.image`                | Image for localProvisioner                    | `quay.io/openebs/provisioner-localpv`     |
-| `localprovisioner.imageTag`             | Image Tag for localProvisioner                | `1.5.0`                                   |
+| `localprovisioner.imageTag`             | Image Tag for localProvisioner                | `1.6.0`                                   |
 | `localprovisioner.replicas`             | Number of localProvisioner Replicas           | `1`                                       |
 | `localprovisioner.basePath`             | BasePath for hostPath volumes on Nodes        | `/var/openebs/local`                      |
 | `webhook.enabled`                       | Enable admission server                       | `true`                                    |
 | `webhook.image`                         | Image for admission server                    | `quay.io/openebs/admission-server`        |
-| `webhook.imageTag`                      | Image Tag for admission server                | `1.5.0`                                   |
+| `webhook.imageTag`                      | Image Tag for admission server                | `1.6.0`                                   |
 | `webhook.replicas`                      | Number of admission server Replicas           | `1`                                       |
 | `snapshotOperator.enabled`              | Enable Snapshot Provisioner                   | `true`                                    |
 | `snapshotOperator.provisioner.image`    | Image for Snapshot Provisioner                | `quay.io/openebs/snapshot-provisioner`    |
-| `snapshotOperator.provisioner.imageTag` | Image Tag for Snapshot Provisioner            | `1.5.0`                                   |
+| `snapshotOperator.provisioner.imageTag` | Image Tag for Snapshot Provisioner            | `1.6.0`                                   |
 | `snapshotOperator.controller.image`     | Image for Snapshot Controller                 | `quay.io/openebs/snapshot-controller`     |
-| `snapshotOperator.controller.imageTag`  | Image Tag for Snapshot Controller             | `1.5.0`                                   |
+| `snapshotOperator.controller.imageTag`  | Image Tag for Snapshot Controller             | `1.6.0`                                   |
 | `snapshotOperator.replicas`             | Number of Snapshot Operator Replicas          | `1`                                       |
 | `ndm.enabled`                           | Enable Node Disk Manager                      | `true`                                    |
 | `ndm.image`                             | Image for Node Disk Manager                   | `quay.io/openebs/node-disk-manager-amd64` |
-| `ndm.imageTag`                          | Image Tag for Node Disk Manager               | `v0.4.5`                                  |
+| `ndm.imageTag`                          | Image Tag for Node Disk Manager               | `v0.4.6`                                  |
 | `ndm.sparse.path`                       | Directory where Sparse files are created      | `/var/openebs/sparse`                     |
 | `ndm.sparse.size`                       | Size of the sparse file in bytes              | `10737418240`                             |
 | `ndm.sparse.count`                      | Number of sparse files to be created          | `0`                                       |
@@ -76,23 +77,23 @@ The following table lists the configurable parameters of the OpenEBS chart and t
 | `ndm.probes.enableSeachest`             | Enable Seachest probe for NDM                 | `false`                                   |
 | `ndmOperator.enabled`                   | Enable NDM Operator                           | `true`                                    |
 | `ndmOperator.image`                     | Image for NDM Operator                        | `quay.io/openebs/node-disk-operator-amd64`|
-| `ndmOperator.imageTag`                  | Image Tag for NDM Operator                    | `v0.4.5`                                  |
+| `ndmOperator.imageTag`                  | Image Tag for NDM Operator                    | `v0.4.6`                                  |
 | `jiva.image`                            | Image for Jiva                                | `quay.io/openebs/jiva`                    |
-| `jiva.imageTag`                         | Image Tag for Jiva                            | `1.5.0`                                   |
+| `jiva.imageTag`                         | Image Tag for Jiva                            | `1.6.0`                                   |
 | `jiva.replicas`                         | Number of Jiva Replicas                       | `3`                                       |
 | `jiva.defaultStoragePath`               | hostpath used by default Jiva StorageClass    | `/var/openebs`                            |
 | `cstor.pool.image`                      | Image for cStor Pool                          | `quay.io/openebs/cstor-pool`              |
-| `cstor.pool.imageTag`                   | Image Tag for cStor Pool                      | `1.5.0`                                   |
+| `cstor.pool.imageTag`                   | Image Tag for cStor Pool                      | `1.6.0`                                   |
 | `cstor.poolMgmt.image`                  | Image for cStor Pool  Management              | `quay.io/openebs/cstor-pool-mgmt`         |
-| `cstor.poolMgmt.imageTag`               | Image Tag for cStor Pool Management           | `1.5.0`                                   |
+| `cstor.poolMgmt.imageTag`               | Image Tag for cStor Pool Management           | `1.6.0`                                   |
 | `cstor.target.image`                    | Image for cStor Target                        | `quay.io/openebs/cstor-istgt`             |
-| `cstor.target.imageTag`                 | Image Tag for cStor Target                    | `1.5.0`                                   |
+| `cstor.target.imageTag`                 | Image Tag for cStor Target                    | `1.6.0`                                   |
 | `cstor.volumeMgmt.image`                | Image for cStor Volume  Management            | `quay.io/openebs/cstor-volume-mgmt`       |
-| `cstor.volumeMgmt.imageTag`             | Image Tag for cStor Volume Management         | `1.5.0`                                   |
+| `cstor.volumeMgmt.imageTag`             | Image Tag for cStor Volume Management         | `1.6.0`                                   |
 | `helper.image`                          | Image for helper                              | `quay.io/openebs/linux-utils`             |
-| `helper.imageTag`                       | Image Tag for helper                          | `1.5.0`                                   |
+| `helper.imageTag`                       | Image Tag for helper                          | `1.6.0`                                   |
 | `policies.monitoring.image`             | Image for Prometheus Exporter                 | `quay.io/openebs/m-exporter`              |
-| `policies.monitoring.imageTag`          | Image Tag for Prometheus Exporter             | `1.5.0`                                   |
+| `policies.monitoring.imageTag`          | Image Tag for Prometheus Exporter             | `1.6.0`                                   |
 | `analytics.enabled`                     | Enable sending stats to Google Analytics      | `true`                                    |
 | `analytics.pingInterval`                | Duration(hours) between sending ping stat     | `24h`                                     |
 | `defaultStorageConfig.enabled`          | Enable default storage class installation     | `true`                                   |

charts/openebs/v1.6.0/questions.yml

@@ -18,7 +18,7 @@ questions:
     type: string
     label: API Server Image
   - variable: apiserver.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of API Server image"
     type: string
     label: Image Tag For OpenEBS API Server Image
@@ -28,7 +28,7 @@ questions:
     type: string
     label: Provisioner Image
   - variable: provisioner.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of Provisioner image"
     type: string
     label: Image Tag For Provisioner Image
@@ -38,7 +38,7 @@ questions:
     type: string
     label: Snapshot Controller Image
   - variable: snapshotOperator.controller.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of Snapshot Controller image"
     type: string
     label: Image Tag For OpenEBS Snapshot Controller Image
@@ -48,7 +48,7 @@ questions:
     type: string
     label: Snapshot Provisioner Image
   - variable: snapshotOperator.provisioner.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of Snapshot Provisioner image"
     type: string
     label: Image Tag For OpenEBS Snapshot Provisioner Image
@@ -58,7 +58,7 @@ questions:
     type: string
     label: Node Disk Manager Image
   - variable: ndm.imageTag
-    default: "v0.4.5"
+    default: "v0.4.6"
     description: "The image tag of NDM image"
     type: string
     label: Image Tag For Node Disk Manager Image
@@ -68,7 +68,7 @@ questions:
     type: string
     label: Node Disk Operator Image
   - variable: ndo.imageTag
-    default: "v0.4.5"
+    default: "v0.4.6"
     description: "The image tag of NDO image"
     type: string
     label: Image Tag For Node Disk Manager Image
@@ -78,7 +78,7 @@ questions:
     type: string
     label: Jiva Storage Engine Image
   - variable: jiva.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of Jiva image"
     type: string
     label: Image Tag For OpenEBS Jiva Storage Engine Image
@@ -88,7 +88,7 @@ questions:
     type: string
     label: cStor Storage Engine Pool Image
   - variable: cstor.pool.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of cStor Storage Engine Pool image"
     type: string
     label: Image Tag For OpenEBS cStor Storage Engine Pool Image
@@ -98,7 +98,7 @@ questions:
     type: string
     label: cStor Storage Engine Pool Management Image
   - variable: cstor.poolMgmt.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of cStor Storage Engine Pool Management image"
     type: string
     label: Image Tag For OpenEBS cStor Storage Engine Pool Management Image
@@ -108,7 +108,7 @@ questions:
     type: string
     label: cStor Storage Engine Target Image
   - variable: cstor.target.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of cStor Storage Engine Target image"
     type: string
     label: Image Tag For OpenEBS cStor Storage Engine Target Image
@@ -118,7 +118,7 @@ questions:
     type: string
     label: cStor Storage Engine Target Management Image
   - variable: cstor.volumeMgmt.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of cStor Storage Engine Target Management image"
     type: string
     label: Image Tag For OpenEBS cStor Storage Engine Target Management Image
@@ -129,7 +129,7 @@ questions:
     label: Monitoring Exporter Image
     show_if: "policies.monitoring.enabled=true&&defaultImage=false"
   - variable: policies.monitoring.imageTag
-    default: "1.5.0"
+    default: "1.6.0"
     description: "The image tag of OpenEBS Exporter"
     type: string
     label: Image Tag For OpenEBS Exporter Image

charts/openebs/v1.6.0/templates/clusterrole.yaml

@@ -43,7 +43,7 @@ rules:
   resources: [ "castemplates", "runtasks"]
   verbs: ["*" ]
 - apiGroups: ["*"]
-  resources: [ "cstorpools", "cstorpools/finalizers", "cstorvolumereplicas", "cstorvolumes", "cstorvolumeclaims"]
+  resources: [ "cstorpools", "cstorpools/finalizers", "cstorvolumereplicas", "cstorvolumes", "cstorvolumeclaims", "cstorvolumepolicies"]
   verbs: ["*" ]
 - apiGroups: ["*"]
   resources: [ "cstorpoolinstances", "cstorpoolinstances/finalizers"]

charts/openebs/v1.6.0/templates/psp-clusterrole.yaml

+{{- if and .Values.rbac.create .Values.rbac.pspEnabled }}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ template "openebs.fullname" . }}-psp
+  labels:
+    app: {{ template "openebs.name" . }}
+rules:
+- apiGroups: ['extensions']
+  resources: ['podsecuritypolicies']
+  verbs:     ['use']
+  resourceNames:
+  - {{ template "openebs.fullname" . }}-psp
+{{- end }}

charts/openebs/v1.6.0/templates/psp-clusterrolebinding.yaml

+{{- if and .Values.rbac.create .Values.rbac.pspEnabled }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ template "openebs.fullname" . }}-psp
+  labels:
+    app: {{ template "openebs.name" . }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ template "openebs.fullname" . }}-psp
+subjects:
+  - kind: ServiceAccount
+    name: {{ template "openebs.serviceAccountName" . }}
+    namespace: {{ $.Release.Namespace }}
+{{- end }}
+

charts/openebs/v1.6.0/templates/psp.yaml

+{{- if and .Values.rbac.create .Values.rbac.pspEnabled }}
+apiVersion: policy/v1beta1
+kind: PodSecurityPolicy
+metadata:
+  name: {{ template "openebs.fullname" . }}-psp
+  namespace: {{ $.Release.Namespace }}
+  labels:
+    app: {{ template "openebs.name" . }}
+spec:
+  privileged: true
+  allowPrivilegeEscalation: true
+  allowedCapabilities: ['*']
+  volumes: ['*']
+  hostNetwork: true
+  hostPorts:
+  - min: 0
+    max: 65535
+  hostIPC: true
+  hostPID: true
+  runAsUser:
+    rule: 'RunAsAny'
+  seLinux:
+    rule: 'RunAsAny'
+  supplementalGroups:
+    rule: 'RunAsAny'
+  fsGroup:
+    rule: 'RunAsAny'
+{{- end }}

charts/openebs/v1.6.0/values.yaml

@@ -5,6 +5,7 @@
 rbac:
   # Specifies whether RBAC resources should be created
   create: true
+  pspEnabled: false
 
 serviceAccount:
   create: true
@@ -12,7 +13,7 @@ serviceAccount:
 
 release:
   # "openebs.io/version" label for control plane components
-  version: "1.5.0"
+  version: "1.6.0"
 
 image:
   pullPolicy: IfNotPresent
@@ -20,7 +21,7 @@ image:
 apiserver:
   enabled: true
   image: "quay.io/openebs/m-apiserver"
-  imageTag: "1.5.0"
+  imageTag: "1.6.0"
   replicas: 1
   ports:
     externalPort: 5656
@@ -40,7 +41,7 @@ defaultStorageConfig:
 provisioner:
   enabled: true
   image: "quay.io/openebs/openebs-k8s-provisioner"
-  imageTag: "1.5.0"
+  imageTag: "1.6.0"
   replicas: 1
   nodeSelector: {}
   tolerations: []
@@ -52,7 +53,7 @@ provisioner:
 localprovisioner:
   enabled: true
   image: "quay.io/openebs/provisioner-localpv"
-  imageTag: "1.5.0"
+  imageTag: "1.6.0"
   replicas: 1
   basePath: "/var/openebs/local"
   nodeSelector: {}
@@ -66,10 +67,10 @@ snapshotOperator:
   enabled: true
   controller:
     image: "quay.io/openebs/snapshot-controller"
-    imageTag: "1.5.0"
+    imageTag: "1.6.0"
   provisioner:
     image: "quay.io/openebs/snapshot-provisioner"
-    imageTag: "1.5.0"
+    imageTag: "1.6.0"
   replicas: 1
   upgradeStrategy: "Recreate"
   nodeSelector: {}
@@ -82,7 +83,7 @@ snapshotOperator:
 ndm:
   enabled: true
   image: "quay.io/openebs/node-disk-manager-amd64"
-  imageTag: "v0.4.5"
+  imageTag: "v0.4.6"
   sparse:
     path: "/var/openebs/sparse"
     size: "10737418240"
@@ -102,7 +103,7 @@ ndm:
 ndmOperator:
   enabled: true
   image: "quay.io/openebs/node-disk-operator-amd64"
-  imageTag: "v0.4.5"
+  imageTag: "v0.4.6"
   replicas: 1
   upgradeStrategy: Recreate
   nodeSelector: {}
@@ -115,7 +116,7 @@ ndmOperator:
 webhook:
   enabled: true
   image: "quay.io/openebs/admission-server"
-  imageTag: "1.5.0"
+  imageTag: "1.6.0"
   failurePolicy: Ignore
   replicas: 1
   nodeSelector: {}
@@ -124,33 +125,33 @@ webhook:
 
 jiva:
   image: "quay.io/openebs/jiva"
-  imageTag: "1.5.0"
+  imageTag: "1.6.0"
   replicas: 3
   defaultStoragePath: "/var/openebs"
 
 cstor:
   pool:
     image: "quay.io/openebs/cstor-pool"
-    imageTag: "1.5.0"
+    imageTag: "1.6.0"
   poolMgmt:
     image: "quay.io/openebs/cstor-pool-mgmt"
-    imageTag: "1.5.0"
+    imageTag: "1.6.0"
   target:
     image: "quay.io/openebs/cstor-istgt"
-    imageTag: "1.5.0"
+    imageTag: "1.6.0"
   volumeMgmt:
     image: "quay.io/openebs/cstor-volume-mgmt"
-    imageTag: "1.5.0"
+    imageTag: "1.6.0"
 
 helper:
   image: "quay.io/openebs/linux-utils"
-  imageTag: "1.5.0"
+  imageTag: "1.6.0"
 
 policies:
   monitoring:
     enabled: true
     image: "quay.io/openebs/m-exporter"
-    imageTag: "1.5.0"
+    imageTag: "1.6.0"
 
 analytics:
   enabled: true