Merge pull request #306 from redskyops/redskyops0.1.2

charts/redskyops/v0.1.2/Chart.yaml

+apiVersion: v1
+appVersion: v1.2.2
+description: |
+  An AIOps platform for deploying, scaling and managing containerized applications in Kubernetes environments.
+home: https://redskyops.dev/
+icon: file://../icon.png
+maintainers:
+- email: info@redskyops.dev
+  name: redskyops
+name: redskyops
+version: 0.1.2

charts/redskyops/v0.1.2/README.md

+# Red Sky Ops
+
+## Chart Repository
+
+The Red Sky Ops chart repository can be configured in Helm as follows:
+
+```sh
+helm repo add redsky https://redskyops.dev/charts/
+helm repo update
+```
+
+## Installing the Chart
+
+The Red Sky Ops manager can be installed using the Helm command:
+
+```sh
+helm install --namespace redsky-system --name redsky redsky/redskyops
+```
+
+The recommended namespace (`redsky-system`) and release name (`redsky`) are consistent with an install performed using the `redskyctl` tool (see the [install guide](https://redskyops.dev/docs/install/) for more information).
+
+## Configuration
+
+The following configuration options are available:
+
+| Parameter            | Description                                      |
+| -------------------- | ------------------------------------------------ |
+| `redskyImage`        | Docker image name                                |
+| `redskyTag`          | Docker image tag                                 |
+| `address`            | Fully qualified URL of the remote server         |
+| `oauth2ClientID`     | OAuth2 client identifier                         |
+| `oauth2ClientSecret` | OAuth2 client secret                             |
+| `oauth2TokenURL`     | Override default OAuth2 token URL                |
+| `rbac.create`        | Specify whether RBAC resources should be created |

charts/redskyops/v0.1.2/app-readme.md

+# Red Sky Ops
+
+Red Sky Ops is an AIOps platform for deploying and optimizing containerized applications in Kubernetes environments. It makes it easy for DevOps teams to manage the millions of possible combinations of application variables they're confronted when deploying applications. With Red Sky Ops, they can identify and implement the best settings for each application in any cloud environment. Red Sky Ops allows teams to streamline their application tuning process and have a centralized, organized view of their tuning results.
+
+**Installation Note:** 
+It is recommended that you launch using the name **"redsky"**.

charts/redskyops/v0.1.2/questions.yml

+labels:
+  io.cattle.role: cluster # options are cluster/project
+questions:
+- variable: defaultImage
+  default: true
+  description: "Use default Docker image"
+  label: Use Default Image
+  type: boolean
+  show_subquestion_if: false
+  group: "Container Images"
+  subquestions:
+  - variable: redskyImage
+    default: "gcr.io/redskyops/k8s-experiment"
+    description: "Docker image name"
+    type: string
+    label: Image Name
+  - variable: redskyTag
+    default: "1.2.2"
+    description: "Docker image tag"
+    type: string
+    label: Image Tag
+- variable: remoteServerEnabled
+  default: false
+  description: "Use a remote Red Sky Ops server"
+  label: Use Remote Server
+  type: boolean
+  show_subquestion_if: true
+  group: "Remote Server"
+  subquestions:
+  - variable: address
+    default: ""
+    description: "Fully qualified URL of the remote server"
+    type: string
+    label: Address
+  - variable: oauth2ClientID
+    default: ""
+    description: "OAuth2 client identifier"
+    type: string
+    label: Client ID
+  - variable: oauth2ClientSecret
+    default: ""
+    description: "OAuth2 client secret"
+    type: string
+    label: Client Secret

charts/redskyops/v0.1.2/templates/NOTES.txt

+Red Sky Ops is ready to run within your cluster.
+
+You may want to install the Red Sky Ops Tool (redskyctl) locally, see the install guide for more information:
+
+https://redskyops.dev/docs/install/

charts/redskyops/v0.1.2/templates/bootstrap_cluster_role.yaml

+{{- if .Values.rbac.create -}}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Release.Name }}-aggregate-to-patching
+  labels:
+    "redskyops.dev/aggregate-to-patching": "true"
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - patch
+      - get
+  - apiGroups:
+      - apps
+      - extensions
+    resources:
+      - deployments
+      - statefulsets
+    verbs:
+      - patch
+      - get
+{{- end -}}

charts/redskyops/v0.1.2/templates/deployment.yaml

+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    prometheus.io/port: "8443"
+    prometheus.io/scheme: https
+    prometheus.io/scrape: "true"
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+    control-plane: controller-manager
+  name: "{{ .Release.Name }}-controller-manager-metrics-service"
+spec:
+  ports:
+  - name: https
+    port: 8443
+    targetPort: https
+  selector:
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/name: redskyops
+    control-plane: controller-manager
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    checksum/config: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+    control-plane: controller-manager
+  name: "{{ .Release.Name }}-controller-manager"
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: {{ .Release.Name | quote }}
+      app.kubernetes.io/name: redskyops
+      control-plane: controller-manager
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: {{ .Release.Name | quote }}
+        app.kubernetes.io/name: redskyops
+        app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+        control-plane: controller-manager
+    spec:
+      containers:
+      - args:
+        - --secure-listen-address=0.0.0.0:8443
+        - --upstream=http://127.0.0.1:8080/
+        - --logtostderr=true
+        - --v=10
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0
+        name: kube-rbac-proxy
+        ports:
+        - containerPort: 8443
+          name: https
+      - args:
+        - --metrics-addr=127.0.0.1:8080
+        command:
+        - /manager
+        envFrom:
+        - secretRef:
+            name: "{{ .Release.Name }}-manager"
+        image: {{ .Values.redskyImage }}:{{ .Values.redskyTag }}
+        imagePullPolicy: {{ .Values.redskyImagePullPolicy }}
+        name: manager
+        resources:
+          limits:
+            cpu: 100m
+            memory: 30Mi
+          requests:
+            cpu: 100m
+            memory: 20Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 65532
+          runAsNonRoot: true
+          runAsUser: 65532
+      terminationGracePeriodSeconds: 10

charts/redskyops/v0.1.2/templates/rbac.yaml

+{{- if .Values.rbac.create -}}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  name: "{{ .Release.Name }}-manager-role"
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - list
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - list
+- apiGroups:
+  - ""
+  resources:
+  - services
+  verbs:
+  - list
+- apiGroups:
+  - batch
+  - extensions
+  resources:
+  - jobs
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - batch
+  - extensions
+  resources:
+  - jobs/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - redskyops.dev
+  resources:
+  - experiments
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - redskyops.dev
+  resources:
+  - experiments/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - redskyops.dev
+  resources:
+  - trials
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - redskyops.dev
+  resources:
+  - trials/status
+  verbs:
+  - get
+  - patch
+  - update
+---
+aggregationRule:
+  clusterRoleSelectors:
+  - matchLabels:
+      redskyops.dev/aggregate-to-patching: "true"
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  name: "{{ .Release.Name }}-patching-role"
+rules: []
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  name: "{{ .Release.Name }}-proxy-role"
+rules:
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  name: "{{ .Release.Name }}-manager-rolebinding"
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: "{{ .Release.Name }}-manager-role"
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: {{ .Release.Namespace | quote }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  name: "{{ .Release.Name }}-patching-rolebinding"
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: "{{ .Release.Name }}-patching-role"
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: {{ .Release.Namespace | quote }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  name: "{{ .Release.Name }}-proxy-rolebinding"
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: "{{ .Release.Name }}-proxy-role"
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: {{ .Release.Namespace | quote }}
+{{- end -}}

charts/redskyops/v0.1.2/templates/secret.yaml

+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Release.Name }}-manager
+  labels:
+    app.kubernetes.io/name: redskyops
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+    app.kubernetes.io/instance: {{ .Release.Name | quote }}
+    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
+    helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+type: Opaque
+data:
+  REDSKY_ADDRESS: {{ .Values.address | b64enc | quote }}
+  REDSKY_OAUTH2_CLIENT_ID: {{ .Values.oauth2ClientID | b64enc | quote }}
+  REDSKY_OAUTH2_CLIENT_SECRET: {{ .Values.oauth2ClientSecret | b64enc | quote }}
+  REDSKY_OAUTH2_TOKEN_URL: {{ .Values.oauth2TokenURL | b64enc | quote }}

charts/redskyops/v0.1.2/values.yaml

+# Override the Red Sky manager image name and tag
+redskyImage: "gcr.io/redskyops/k8s-experiment"
+redskyTag: "1.2.2"
+redskyImagePullPolicy: "Always"
+
+# Configure the Red Sky server address
+address: ""
+
+# Red Sky server client identifier and secret
+oauth2ClientID: ""
+oauth2ClientSecret: ""
+
+# Override the Red Sky server token URL, this is not typically necessary
+oauth2TokenURL: ""
+
+rbac:
+  # Specifies whether RBAC resources should be created
+  create: true