-
Notifications
You must be signed in to change notification settings - Fork 21
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #251 from mesosphere/stable-1.7.0
Stable 1.7.0 merge and release notes
- Loading branch information
Showing
15 changed files
with
1,467 additions
and
28 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
65 changes: 65 additions & 0 deletions
65
addons/awsebscsiprovisioner/0.5.x/awsebscsiprovisioner-2.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,65 @@ | ||
| --- | ||
| apiVersion: kubeaddons.mesosphere.io/v1beta1 | ||
| kind: ClusterAddon | ||
| metadata: | ||
| name: awsebscsiprovisioner | ||
| labels: | ||
| kubeaddons.mesosphere.io/name: awsebscsiprovisioner | ||
| kubeaddons.mesosphere.io/provides: storageclass | ||
| annotations: | ||
| catalog.kubeaddons.mesosphere.io/addon-revision: "0.5.0-2" | ||
| appversion.kubeaddons.mesosphere.io/awsebscsiprovisioner: "0.5.0" | ||
| values.chart.helm.kubeaddons.mesosphere.io/awsebscsiprovisioner: "https://raw.githubusercontent.com/mesosphere/charts/b6e53ee/stable/awsebscsiprovisioner/values.yaml" | ||
| spec: | ||
| namespace: kube-system | ||
| requires: | ||
| - matchLabels: | ||
| kubeaddons.mesosphere.io/name: defaultstorageclass-protection | ||
| kubernetes: | ||
| minSupportedVersion: v1.15.6 | ||
| cloudProvider: | ||
| - name: aws | ||
| enabled: true | ||
| chartReference: | ||
| version: 0.3.6 | ||
| chart: awsebscsiprovisioner | ||
| repo: https://mesosphere.github.io/charts/stable | ||
| values: | | ||
| --- | ||
| resizer: | ||
| enabled: false | ||
| snapshotter: | ||
| enabled: true | ||
| provisioner: | ||
| enableVolumeScheduling: true | ||
| storageclass: | ||
| isDefault: true | ||
| reclaimPolicy: Delete | ||
| volumeBindingMode: WaitForFirstConsumer | ||
| type: gp2 | ||
| fstype: ext4 | ||
| iopsPerGB: null | ||
| encrypted: false | ||
| kmsKeyId: null | ||
| allowedTopologies: [] | ||
| # - matchLabelExpressions: | ||
| # - key: topology.ebs.csi.aws.com/zone | ||
| # values: | ||
| # - us-west-2a | ||
| # - us-west-2b | ||
| # - us-west-2c | ||
| allowVolumeExpansion: true | ||
| # replicas of the CSI-Controller | ||
| replicas: 1 | ||
| statefulSetCSIController: | ||
| # if you want to use kube2iam or kiam roles define it here as podAnnotation for the CSI-Controller (statefulSet) | ||
| podAnnotations: {} | ||
| statefulSetCSISnapshotController: | ||
| # if you want to use kube2iam or kiam roles define it here as podAnnotation for the CSI-Snapshot-Controller (statefulSet) | ||
| podAnnotations: {} | ||
| # Extra volume tags to attach to each dynamically provisioned volume. | ||
| # --- | ||
| # extraVolumeTags: | ||
| # key1: value1 | ||
| # key2: value2 | ||
| extraVolumeTags: {} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,117 @@ | ||
| --- | ||
| apiVersion: kubeaddons.mesosphere.io/v1beta1 | ||
| kind: Addon | ||
| metadata: | ||
| name: dex | ||
| namespace: kubeaddons | ||
| labels: | ||
| kubeaddons.mesosphere.io/name: dex | ||
| annotations: | ||
| catalog.kubeaddons.mesosphere.io/addon-revision: "2.22.0-6" | ||
| appversion.kubeaddons.mesosphere.io/dex: "2.22.0" | ||
| values.chart.helm.kubeaddons.mesosphere.io/dex: "https://raw.githubusercontent.com/mesosphere/charts/1691f6b7f7faa5842a2a30d684839a68819d8682/stable/dex/values.yaml" | ||
| spec: | ||
| kubernetes: | ||
| minSupportedVersion: v1.15.6 | ||
| cloudProvider: | ||
| - name: aws | ||
| enabled: true | ||
| - name: azure | ||
| enabled: true | ||
| - name: gcp | ||
| enabled: true | ||
| - name: docker | ||
| enabled: true | ||
| - name: none | ||
| enabled: true | ||
| requires: | ||
| - matchLabels: | ||
| kubeaddons.mesosphere.io/provides: ingresscontroller | ||
| chartReference: | ||
| chart: dex | ||
| repo: https://mesosphere.github.io/charts/stable | ||
| version: 2.8.5 | ||
| values: | | ||
| --- | ||
| # Temporarily we're going to use our custom built container. Documentation | ||
| # for how to build a new version: https://github.com/mesosphere/dex/blob/v2.17.0-mesosphere/README.mesosphere.md | ||
| image: mesosphere/dex | ||
| imageTag: v2.22.0-2-g3657-d2iq | ||
| resources: | ||
| requests: | ||
| cpu: 100m | ||
| memory: 50Mi | ||
| deploymentAnnotations: | ||
| # The certificate can change because it was rotated or different cluster | ||
| # DNS name has been set. | ||
| secret.reloader.stakater.com/reload: "traefik-kubeaddons-certificate,ops-portal-credentials" | ||
| ingress: | ||
| enabled: true | ||
| annotations: | ||
| kubernetes.io/ingress.class: traefik | ||
| ingress.kubernetes.io/protocol: https | ||
| path: /dex | ||
| hosts: | ||
| - "" | ||
| https: true | ||
| ports: | ||
| web: | ||
| containerPort: 8080 | ||
| certs: | ||
| web: | ||
| create: false | ||
| secret: | ||
| tlsName: dex | ||
| config: | ||
| issuer: https://dex-kubeaddons.kubeaddons.svc.cluster.local:8080/dex | ||
| frontend: | ||
| issuer: Kubernetes | ||
| theme: d2iq | ||
| storage: | ||
| type: kubernetes | ||
| config: | ||
| inCluster: true | ||
| logger: | ||
| level: debug | ||
| web: | ||
| address: 0.0.0.0 | ||
| tlsCert: /etc/dex/tls/https/server/tls.crt | ||
| tlsKey: /etc/dex/tls/https/server/tls.key | ||
| grpc: | ||
| address: 0.0.0.0 | ||
| tlsCert: /etc/dex/tls/grpc/server/tls.crt | ||
| tlsKey: /etc/dex/tls/grpc/server/tls.key | ||
| tlsClientCA: /etc/dex/tls/grpc/ca/tls.crt | ||
| oauth2: | ||
| skipApprovalScreen: true | ||
| staticClients: | ||
| # `redirectURIs` and `secret` values are modified in `configureDexStaticClients` | ||
| - id: kube-apiserver | ||
| # This `id` must by in sync with `dex-k8s-authenticator.yaml` value as well as | ||
| # kube-apiserver flag `oidc-client-id`. | ||
| name: 'Kubernetes CLI authenticator' | ||
| redirectURIs: | ||
| - 'https://PUBLIC.URI/token/callback/kubernetes-cluster' | ||
| - 'https://PUBLIC.URI/token/callback' | ||
| - 'https://PUBLIC.URI/token/async/callback' | ||
| - id: traefik-forward-auth | ||
| name: 'Ops Portal authenticator' | ||
| redirectURIs: | ||
| - 'https://PUBLIC.URI/_oauth' | ||
| initContainers: | ||
| - name: initialize-dex | ||
| image: mesosphere/kubeaddons-addon-initializer:v0.2.3 | ||
| args: ["dex"] | ||
| env: | ||
| - name: "DEX_NAMESPACE" | ||
| value: "kubeaddons" | ||
| - name: "DEX_SECRET_NAME" | ||
| value: "dex-kubeaddons" | ||
| - name: "OPS_PORTAL_NAMESPACE" | ||
| value: "kubeaddons" | ||
| - name: "OPS_PORTAL_SECRET_NAME" | ||
| value: "ops-portal-credentials" | ||
| - name: "TRAEFIK_NAMESPACE" | ||
| value: "kubeaddons" | ||
| - name: "TRAEFIK_SERVICE_NAME" | ||
| value: "traefik-kubeaddons" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.