-
Notifications
You must be signed in to change notification settings - Fork 43
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
updating scoop template #230
base: main
Are you sure you want to change the base?
Changes from 1 commit
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,9 @@ | ||
apiVersion: v1 | ||
name: dt-scoop | ||
description: Chart to deploy scoop | ||
type: application | ||
version: 0.1.2 | ||
appVersion: "1.16.0" | ||
maintainers: | ||
- email: [email protected] | ||
name: Devops-Team DEVTRON |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,32 @@ | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRole | ||
metadata: | ||
annotations: | ||
rbac.authorization.kubernetes.io/autoupdate: "true" | ||
name: read-only-cluster-role-scoop | ||
rules: | ||
- apiGroups: | ||
- '*' | ||
resources: | ||
- '*' | ||
verbs: | ||
- get | ||
- list | ||
- watch | ||
- apiGroups: | ||
- extensions | ||
resources: | ||
- '*' | ||
Check warning Code scanning / SonarCloud Wildcards should not be used to define RBAC permissions Medium
Do not use wildcards when defining RBAC permissions. See more on SonarCloud
|
||
verbs: | ||
- get | ||
- list | ||
- watch | ||
- apiGroups: | ||
- apps | ||
resources: | ||
- '*' | ||
Check warning Code scanning / SonarCloud Wildcards should not be used to define RBAC permissions Medium
Do not use wildcards when defining RBAC permissions. See more on SonarCloud
|
||
verbs: | ||
- get | ||
- list | ||
- watch | ||
--- |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,12 @@ | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRoleBinding | ||
metadata: | ||
name: read-only-user-crb-scoop | ||
roleRef: | ||
apiGroup: rbac.authorization.k8s.io | ||
kind: ClusterRole | ||
name: read-only-cluster-role-scoop | ||
subjects: | ||
- kind: ServiceAccount | ||
name: scoop-sa | ||
namespace: {{ $.Values.scoopnamespace | default .Release.Namespace }} |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,14 @@ | ||
{{- if $.Values.ConfigMap.enabled }} | ||
apiVersion: v1 | ||
kind: ConfigMap | ||
metadata: | ||
name: {{ $.Values.ConfigMap.name }} | ||
namespace: {{ $.Values.scoopnamespace | default .Release.Namespace }} | ||
{{- if $.Values.ConfigMap.data }} | ||
data: | ||
{{ toYaml $.Values.ConfigMap.data | indent 2 }} | ||
{{- end }} | ||
{{- end}} | ||
|
||
|
||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,77 @@ | ||
|
||
apiVersion: apps/v1 | ||
kind: Deployment | ||
metadata: | ||
name: scoop-deployment | ||
labels: | ||
{{- if $.Values.labels }} | ||
{{ toYaml $.Values.labels | nindent 4 }} | ||
{{- end }} | ||
namespace: {{ $.Values.scoopnamespace | default .Release.Namespace }} | ||
spec: | ||
selector: | ||
matchLabels: | ||
app: scoop-chart | ||
{{- if $.Values.scoop.replicacount }} | ||
replicas: {{ $.Values.scoop.replicacount}} | ||
{{- end }} | ||
minReadySeconds: 60 | ||
template: | ||
metadata: | ||
labels: | ||
app: scoop-chart | ||
YashasviDevtron marked this conversation as resolved.
Show resolved
Hide resolved
|
||
{{- if $.Values.labels }} | ||
YashasviDevtron marked this conversation as resolved.
Show resolved
Hide resolved
|
||
{{ toYaml $.Values.labels | indent 4 }} | ||
{{- end }} | ||
spec: | ||
Check warning Code scanning / SonarCloud Service account tokens should not be mounted in pods Medium
Set automountServiceAccountToken to false for this specification of kind Deployment. See more on SonarCloud
|
||
serviceAccountName: scoop-sa | ||
terminationGracePeriodSeconds: 30 | ||
|
||
{{- if $.Values.scoop.imagePullSecrets }} | ||
imagePullSecrets: | ||
- name: {{ $.Values.scoop.imagePullSecrets }} | ||
{{- end }} | ||
restartPolicy: Always | ||
|
||
{{- if $.Values.volumes }} | ||
volumes: | ||
{{ toYaml $.Values.volumes | indent 8 }} | ||
{{- end }} | ||
|
||
containers: | ||
- name: scoop-chart | ||
Check warning Code scanning / SonarCloud Memory limits should be enforced Medium
Specify a memory limit for this container. See more on SonarCloud
|
||
image: {{ $.Values.scoop.imagename }} | ||
imagePullPolicy: IfNotPresent | ||
ports: | ||
- name: app | ||
containerPort: 8080 | ||
protocol: TCP | ||
{{- if $.Values.env }} | ||
env: | ||
{{ toYaml $.Values.env | indent 12 }} | ||
{{- end }} | ||
|
||
{{- if or $.Values.ConfigMap.enabled $.Values.secrets.enabled }} | ||
envFrom: | ||
{{- if $.Values.ConfigMap.enabled }} | ||
- configMapRef: | ||
name: {{ $.Values.ConfigMap.name }} | ||
{{- end }} | ||
|
||
{{- if $.Values.secrets.enabled }} | ||
- SecretRef: | ||
name: {{ $.Values.secrets.name }} | ||
{{- end }} | ||
{{- end }} | ||
|
||
{{- if $.Values.resources }} | ||
resources: | ||
{{ toYaml $.Values.resources | indent 12 }} | ||
{{- end }} | ||
|
||
{{- if $.Values.volumeMounts }} | ||
volumeMounts: | ||
{{ toYaml $.Values.volumeMounts | indent 12 }} | ||
{{- end }} | ||
revisionHistoryLimit: 3 | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,13 @@ | ||
{{- if $.Values.secrets.enabled }} | ||
apiVersion: v1 | ||
kind: Secret | ||
metadata: | ||
name: {{ $.Values.secrets.name }} | ||
namespace: {{ $.Values.scoopnamespace | default .Release.Namespace }} | ||
type: Opaque | ||
{{- if $.Values.secrets.data }} | ||
data: | ||
{{ toYaml $.Values.secrets.data | indent 2 }} | ||
{{- end }} | ||
{{- end }} | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
apiVersion: v1 | ||
kind: Service | ||
metadata: | ||
name: scoop-service | ||
labels: | ||
app: scoop-chart | ||
{{- if $.Values.labels }} | ||
{{ toYaml .Values.labels | indent 2 }} | ||
{{- end }} | ||
namespace: {{ $.Values.scoopnamespace | default .Release.Namespace }} | ||
spec: | ||
{{- with $.Values.service.type }} | ||
type: {{ $.Values.service.type }} | ||
{{- end }} | ||
ports: | ||
{{- with $.Values.service.port }} | ||
- port: {{ $.Values.service.port }} | ||
{{- end }} | ||
targetPort: 8080 | ||
protocol: TCP | ||
name: app | ||
selector: | ||
app: scoop-chart | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,10 @@ | ||
apiVersion: v1 | ||
kind: ServiceAccount | ||
metadata: | ||
name: scoop-sa | ||
namespace: {{ $.Values.scoopnamespace | default .Release.Namespace }} | ||
|
||
|
||
|
||
|
||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,78 @@ | ||
# This is a YAML-formatted file. | ||
# Declare variables to be passed into your templates. | ||
|
||
scoopnamespace: "monitoring" | ||
YashasviDevtron marked this conversation as resolved.
Show resolved
Hide resolved
|
||
# namespace where all the resource will be present | ||
service: | ||
type: ClusterIP | ||
port: 80 | ||
|
||
scoop: | ||
replicacount: 1 | ||
imagePullSecrets: devtron-image-pull | ||
imagename: "" | ||
YashasviDevtron marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
|
||
env: | ||
- name: X-PASS-KEY | ||
value: "random-string" | ||
- name: PASS_KEY | ||
value: "random-string" | ||
# X_PASS_KEY and PASS_KEY (should be same) is used for authentication | ||
- name: RETENTION | ||
value: "10080" | ||
# period till which cache will be stored | ||
|
||
# id of the cluster where scoop needs to get implemented | ||
- name: CLUSTER_ID | ||
value: "40" | ||
|
||
# url to which scoop sends the metrics | ||
- name: ORCHESTRATOR_URL | ||
value: "" | ||
|
||
#token of the orchestrator url | ||
- name: TOKEN | ||
value: "" | ||
# sotring the cache of specified namespaces. If you do not specify it, by default, it will store the cache of all the namespaces. | ||
# - name: CACHED_NAMESPACES | ||
# value: monitoring | ||
|
||
|
||
# Set enable to false, if you don't want to pass any configMapSecret | ||
ConfigMap: | ||
name: scoop-config | ||
enabled: true | ||
data: [] | ||
#: "key1value-1" | ||
#key2: "keyvalue2" | ||
|
||
|
||
# Set enable to false if you don't want to pass the values of secret.yaml from SecretRef | ||
secrets: | ||
name: scoop-secret | ||
enabled: true | ||
data: [] | ||
|
||
|
||
volumes: | ||
# - name: log-volume | ||
# emptyDir: {} | ||
|
||
|
||
volumeMounts: [] | ||
# - name: log-volume | ||
# mountPath: /var/log | ||
|
||
resources: {} | ||
# We usually recommend not to specify default resources and to leave this as a conscious | ||
# choice for the user. If you do want to specify resources, uncomment the following | ||
# lines, adjust them as necessary, and remove the curly braces after 'resources:'. | ||
#limits: | ||
#cpu: 1 | ||
#memory: 200Mi | ||
#requests: | ||
#cpu: 0.10 | ||
#memory: 100Mi | ||
|
||
|
Check warning
Code scanning / SonarCloud
Wildcards should not be used to define RBAC permissions Medium