Commit da95f348 by Prachi Damle

Changes done to support private image registry for airgap case, nodeSelector to…

Changes done to support private image registry for airgap case, nodeSelector to filter out Windows node review changes adding Rancher min version to questions.yaml Review changes
parent 06de7715
apiVersion: v1
description: A Helm chart for Gatekeeper
name: gatekeeper-operator
name: rancher-gatekeeper-operator
keywords:
- open policy agent
version: v3.1.0-beta.7
version: v0.1.0
home: https://github.com/open-policy-agent/gatekeeper
sources:
- https://github.com/open-policy-agent/gatekeeper.git
......
rancher_min_version: 2.4.0-rc1
\ No newline at end of file
......@@ -42,3 +42,11 @@ app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
{{- end }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
{{- end -}}
{{- define "system_default_registry" -}}
{{- if .Values.global.systemDefaultRegistry -}}
{{- printf "%s/" .Values.global.systemDefaultRegistry -}}
{{- else -}}
{{- "" -}}
{{- end -}}
{{- end -}}
......@@ -485,7 +485,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.name
image: '{{ .Values.image.repository }}:{{ .Values.image.release }}'
image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
imagePullPolicy: '{{ .Values.image.pullPolicy }}'
livenessProbe:
httpGet:
......@@ -517,7 +517,7 @@ spec:
- mountPath: /certs
name: cert
readOnly: true
nodeSelector:
nodeSelector:
{{ toYaml .Values.nodeSelector | indent 8 }}
affinity:
{{ toYaml .Values.affinity | indent 8 }}
......
......@@ -3,10 +3,10 @@ auditInterval: 60
constraintViolationsLimit: 20
auditFromCache: false
image:
repository: quay.io/open-policy-agent/gatekeeper
release: v3.1.0-beta.7
repository: rancher/opa-gatekeeper
tag: v3.1.0-beta.7
pullPolicy: IfNotPresent
nodeSelector: {}
nodeSelector: {"beta.kubernetes.io/os": "linux"}
tolerations: []
resources:
limits:
......@@ -15,3 +15,5 @@ resources:
requests:
cpu: 100m
memory: 256Mi
global:
systemDefaultRegistry: ""
\ No newline at end of file
apiVersion: v1
kind: Service
metadata:
name: gatekeeper-webhook-service
namespace: gatekeeper-system
spec:
selector:
app: GATEKEEPER_APP_LABEL
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: configs.config.gatekeeper.sh
annotations:
helm.sh/hook: crd-install
helm.sh/hook-delete-policy: before-hook-creation
status: null
spec:
names:
shortNames:
- config # add shortName to CRD until https://github.com/kubernetes-sigs/kubebuilder/issues/404 is solved
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: constrainttemplates.templates.gatekeeper.sh
annotations:
helm.sh/hook: crd-install
helm.sh/hook-delete-policy: before-hook-creation
status: null
spec:
names:
shortNames:
- constraints # add shortName to CRD until https://github.com/kubernetes-sigs/kubebuilder/issues/404 is solved
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: gatekeeper-controller-manager
namespace: gatekeeper-system
spec:
replicas: HELMSUBST_DEPLOYMENT_REPLICAS
selector:
matchLabels:
app: gatekeeper-operator
release: RELEASE_NAME
template:
spec:
containers:
- name: manager
args:
- --audit-interval={{ .Values.auditInterval }}
- --port=8443
- --logtostderr
- --constraint-violations-limit={{ .Values.constraintViolationsLimit }}
- --audit-from-cache={{ .Values.auditFromCache }}
- --exempt-namespace=gatekeeper-system
imagePullPolicy: "{{ .Values.image.pullPolicy }}"
image: "{{ .Values.image.repository }}:{{ .Values.image.release }}"
resources: HELMSUBST_DEPLOYMENT_CONTAINER_RESOURCES
nodeSelector: HELMSUBST_DEPLOYMENT_POD_SCHEDULING
commonLabels:
app: '{{ template "gatekeeper-operator.name" . }}'
chart: '{{ template "gatekeeper-operator.name" . }}'
release: '{{ .Release.Name }}'
heritage: '{{ .Release.Service }}'
resources:
- _temp.yaml
patchesStrategicMerge:
- helm-modifications.yaml
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment