""
|
-| fullnameOverride | | ""
|
-| deploymentType | | ""
|
-| offlineInstaller | | false
|
-| image.proxies.appscode | r.appscode.com | r.appscode.com
|
-| image.proxies.dockerHub | company/bin:tag | ""
|
-| image.proxies.dockerLibrary | alpine, nginx etc. | ""
|
-| image.proxies.ghcr | ghcr.io/company/bin:tag | ghcr.io
|
-| image.proxies.quay | quay.io/company/bin:tag | quay.io
|
-| image.proxies.kubernetes | registry.k8s.io/bin:tag | registry.k8s.io
|
-| image.proxies.microsoft | | mcr.microsoft.com
|
-| registry.credentials | | {}
|
-| registry.certs | username: "abc" password: "xyz" | {}
|
-| registry.imagePullSecrets | ca.crt: "***" | []
|
-| helm.createNamespace | | true
|
-| helm.repositories.appscode-charts-oci.url | | oci://ghcr.io/appscode-charts
|
-| helm.releases.ace.enabled | | false
|
-| helm.releases.ace.version | | "v2024.10.24"
|
-| helm.releases.cert-manager.enabled | | true
|
-| helm.releases.cert-manager.version | | "v1.15.2"
|
-| helm.releases.cert-manager-csi-driver-cacerts.enabled | | true
|
-| helm.releases.cert-manager-csi-driver-cacerts.version | | "v2024.10.17"
|
-| helm.releases.external-dns-operator.enabled | | true
|
-| helm.releases.external-dns-operator.version | | "v2024.4.19"
|
-| helm.releases.flux2.enabled | | false
|
-| helm.releases.flux2.version | | "2.13.0"
|
-| helm.releases.gateway-api.enabled | | true
|
-| helm.releases.gateway-api.version | | "v1.1.0"
|
-| helm.releases.kubedb.enabled | | true
|
-| helm.releases.kubedb.version | | "v2024.9.30"
|
-| helm.releases.kubedb.values | | {"kubedb-autoscaler":{"enabled":true},"kubedb-catalog":{"enabled":true},"kubedb-dashboard":{"enabled":false},"kubedb-kubestash-catalog":{"enabled":true},"kubedb-metrics":{"enabled":false},"kubedb-ops-manager":{"enabled":true},"kubedb-provisioner":{"enabled":true},"kubedb-schema-manager":{"enabled":false},"sidekick":{"enabled":false}}
|
-| helm.releases.kubestash.enabled | | true
|
-| helm.releases.kubestash.version | | "v2024.9.30"
|
-| helm.releases.kube-ui-server.enabled | | true
|
-| helm.releases.kube-ui-server.version | | "v2024.10.17"
|
-| helm.releases.license-proxyserver.enabled | | true
|
-| helm.releases.license-proxyserver.version | | "v2024.10.7"
|
-| helm.releases.opscenter-features.enabled | | true
|
-| helm.releases.opscenter-features.version | | "v2024.10.24"
|
-| helm.releases.panopticon.enabled | | true
|
-| helm.releases.panopticon.version | | "v2024.10.7"
|
-| helm.releases.panopticon.values | | {"monitoring":{"agent":"prometheus.io/operator","enabled":true,"serviceMonitor":{"labels":{"release":"kube-prometheus-stack"}}}}
|
-| helm.releases.reloader.enabled | | true
|
-| helm.releases.reloader.version | | "1.0.79"
|
-| helm.releases.stash-presets.enabled | | false
|
-| helm.releases.stash-presets.version | | "v2024.10.24"
|
-| helm.releases.cluster-manager-spoke.enabled | | false
|
-| helm.releases.cluster-manager-spoke.version | | "v2024.9.30"
|
-| helm.releases.spoke-cluster-addons.enabled | | false
|
-| helm.releases.spoke-cluster-addons.version | | "v2024.7.10"
|
-| helm.releases.vcluster.enabled | | false
|
-| helm.releases.vcluster.version | | "0.20.0"
|
-| selfManagement.createCAPICluster | | false
|
-| selfManagement.import | | true
|
-| selfManagement.targetIPs | |
|
-| selfManagement.enableFeatures | | []
|
-| selfManagement.disableFeatures | | []
|
+| Parameter | Description | Default |
+|-------------------------------------------------------|----------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| nameOverride | | ""
|
+| fullnameOverride | | ""
|
+| deploymentType | | ""
|
+| offlineInstaller | | false
|
+| image.proxies.appscode | r.appscode.com | r.appscode.com
|
+| image.proxies.dockerHub | company/bin:tag | ""
|
+| image.proxies.dockerLibrary | alpine, nginx etc. | ""
|
+| image.proxies.ghcr | ghcr.io/company/bin:tag | ghcr.io
|
+| image.proxies.quay | quay.io/company/bin:tag | quay.io
|
+| image.proxies.kubernetes | registry.k8s.io/bin:tag | registry.k8s.io
|
+| image.proxies.microsoft | | mcr.microsoft.com
|
+| registry.credentials | | {}
|
+| registry.certs | username: "abc" password: "xyz" | {}
|
+| registry.imagePullSecrets | ca.crt: "***" | []
|
+| helm.createNamespace | | true
|
+| helm.repositories.appscode-charts-oci.url | | oci://ghcr.io/appscode-charts
|
+| helm.releases.ace.enabled | | false
|
+| helm.releases.ace.version | | "v2024.10.24"
|
+| helm.releases.cert-manager.enabled | | true
|
+| helm.releases.cert-manager.version | | "v1.15.2"
|
+| helm.releases.cert-manager-csi-driver-cacerts.enabled | | true
|
+| helm.releases.cert-manager-csi-driver-cacerts.version | | "v2024.10.17"
|
+| helm.releases.external-dns-operator.enabled | | true
|
+| helm.releases.external-dns-operator.version | | "v2024.4.19"
|
+| helm.releases.flux2.enabled | | false
|
+| helm.releases.flux2.version | | "2.13.0"
|
+| helm.releases.gateway-api.enabled | | true
|
+| helm.releases.gateway-api.version | | "v1.1.0"
|
+| helm.releases.kubedb.enabled | | true
|
+| helm.releases.kubedb.version | | "v2024.9.30"
|
+| helm.releases.kubedb.values | | {"kubedb-autoscaler":{"enabled":true},"kubedb-catalog":{"enabled":true},"kubedb-dashboard":{"enabled":false},"kubedb-kubestash-catalog":{"enabled":true},"kubedb-metrics":{"enabled":false},"kubedb-ops-manager":{"enabled":true},"kubedb-provisioner":{"enabled":true},"kubedb-schema-manager":{"enabled":false},"sidekick":{"enabled":false}}
|
+| helm.releases.kubestash.enabled | | true
|
+| helm.releases.kubestash.version | | "v2024.9.30"
|
+| helm.releases.kube-ui-server.enabled | | true
|
+| helm.releases.kube-ui-server.version | | "v2024.10.17"
|
+| helm.releases.license-proxyserver.enabled | | true
|
+| helm.releases.license-proxyserver.version | | "v2024.10.7"
|
+| helm.releases.opscenter-features.enabled | | true
|
+| helm.releases.opscenter-features.version | | "v2024.10.24"
|
+| helm.releases.panopticon.enabled | | true
|
+| helm.releases.panopticon.version | | "v2024.10.7"
|
+| helm.releases.panopticon.values | | {"monitoring":{"agent":"prometheus.io/operator","enabled":true,"serviceMonitor":{"labels":{"release":"kube-prometheus-stack"}}}}
|
+| helm.releases.reloader.enabled | | true
|
+| helm.releases.reloader.version | | "1.0.79"
|
+| helm.releases.stash-presets.enabled | | false
|
+| helm.releases.stash-presets.version | | "v2024.10.24"
|
+| helm.releases.cluster-manager-spoke.enabled | | false
|
+| helm.releases.cluster-manager-spoke.version | | "v2024.9.30"
|
+| helm.releases.spoke-cluster-addons.enabled | | false
|
+| helm.releases.spoke-cluster-addons.version | | "v2024.7.10"
|
+| helm.releases.vcluster.enabled | | false
|
+| helm.releases.vcluster.version | | "0.20.0"
|
+| selfManagement.createCAPICluster | | false
|
+| selfManagement.import | | true
|
+| selfManagement.targetIPs | | []
|
+| selfManagement.enableFeatures | | []
|
+| selfManagement.disableFeatures | | []
|
+| precheck.enabled | | true
|
+| precheck.image.registry | Docker registry used to pull app container image | appscode
|
+| precheck.image.repository | App container image | b3
|
+| precheck.image.tag | Overrides the image tag whose default is the chart appVersion. | ""
|
+| precheck.image.pullPolicy | | Always
|
+| precheck.podAnnotations | | {}
|
+| precheck.podSecurityContext | | {}
|
+| precheck.securityContext | | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}
|
+| precheck.resources | | {}
|
+| precheck.nodeSelector | | {}
|
+| precheck.tolerations | | []
|
+| precheck.affinity | | {}
|
Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:
diff --git a/charts/ace-installer/templates/_helpers.tpl b/charts/ace-installer/templates/_helpers.tpl
index 48da6490..1d2daa34 100644
--- a/charts/ace-installer/templates/_helpers.tpl
+++ b/charts/ace-installer/templates/_helpers.tpl
@@ -111,3 +111,11 @@ Image Templates
{{- define "clustermanager.openshift" -}}
{{- ternary "true" "false" (.Capabilities.APIVersions.Has "project.openshift.io/v1/Project") -}}
{{- end }}
+
+{{/*
+Returns the registry used for app docker image
+*/}}
+{{- define "precheck.image.registry" -}}
+{{- list .Values.image.proxies.ghcr .Values.precheck.image.registry | compact | join "/" }}
+{{- end }}
+
diff --git a/charts/ace-installer/templates/precheck/config.yaml b/charts/ace-installer/templates/precheck/config.yaml
new file mode 100644
index 00000000..b08f0d76
--- /dev/null
+++ b/charts/ace-installer/templates/precheck/config.yaml
@@ -0,0 +1,38 @@
+{{- if .Values.precheck.enabled }}
+
+{{- $encodedLicenses := dig "license-proxyserver" "values" "encodedLicenses" (dict) .Values.helm.releases -}}
+{{- $licenses := dict -}}
+{{- range $k, $v := $encodedLicenses }}
+{{ $_ := set $licenses $k (b64dec $v) }}
+{{- end }}
+
+kind: Secret
+apiVersion: v1
+metadata:
+ name: {{ include "ace-installer.fullname" . }}-precheck-config
+ namespace: {{ .Release.Namespace }}
+ labels:
+ {{- include "ace-installer.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook-weight": "0"
+ "helm.sh/hook": pre-install,pre-upgrade,pre-rollback
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+stringData:
+ options.yaml: |
+ {{- with $licenses }}
+ licenses: {{ . | toJson }}
+ {{- end }}
+ {{- if .Values.registry }}
+ registry:
+ {{- .Values.registry | toYaml | nindent 6 }}
+ {{- if .Values.image }}
+ image:
+ {{- .Values.image | toYaml | nindent 8 }}
+ {{- end }}
+ {{- end }}
+ {{- if .Values.selfManagement }}
+ selfManagement:
+ {{- .Values.selfManagement | toYaml | nindent 6 }}
+ {{- end }}
+
+{{- end }}
diff --git a/charts/ace-installer/templates/precheck/job.yaml b/charts/ace-installer/templates/precheck/job.yaml
new file mode 100644
index 00000000..6d5fba4f
--- /dev/null
+++ b/charts/ace-installer/templates/precheck/job.yaml
@@ -0,0 +1,73 @@
+{{- if .Values.precheck.enabled }}
+
+apiVersion: batch/v1
+kind: Job
+metadata:
+ name: {{ include "ace-installer.fullname" . }}-precheck
+ namespace: {{ .Release.Namespace }}
+ annotations:
+ "helm.sh/hook-weight": "0"
+ "helm.sh/hook": pre-install,pre-upgrade,pre-rollback
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+ backoffLimit: 4
+ manualSelector: true
+ selector:
+ matchLabels:
+ {{- include "ace-installer.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ {{- with .Values.precheck.podAnnotations }}
+ annotations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ labels:
+ {{- include "ace-installer.selectorLabels" . | nindent 8 }}
+ spec:
+ serviceAccountName: {{ include "ace-installer.fullname" . }}-precheck
+ securityContext:
+ {{- toYaml .Values.precheck.podSecurityContext | nindent 8 }}
+ containers:
+ - name: {{ .Chart.Name }}
+ securityContext:
+ {{- toYaml .Values.precheck.securityContext | nindent 12 }}
+ image: "{{ include "precheck.image.registry" . }}/{{ .Values.precheck.image.repository }}:{{ .Values.precheck.image.tag | default .Chart.AppVersion }}"
+ imagePullPolicy: Always
+ args:
+ - installer
+ - validate
+ - --options=/data/installer/options.yaml
+ resources:
+ {{- toYaml .Values.precheck.resources | nindent 12 }}
+ volumeMounts:
+ - name: tmp
+ mountPath: /tmp
+ - name: data
+ mountPath: /data
+ - name: installer-options
+ mountPath: /data/installer/options.yaml
+ subPath: options.yaml
+ volumes:
+ - name: tmp
+ emptyDir: {}
+ - name: data
+ emptyDir: {}
+ - name: installer-options
+ secret:
+ defaultMode: 420
+ secretName: {{ include "ace-installer.fullname" . }}-precheck-config
+ {{- with .Values.precheck.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.precheck.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.precheck.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ restartPolicy: Never
+
+{{- end }}
diff --git a/charts/ace-installer/templates/precheck/rbac.yaml b/charts/ace-installer/templates/precheck/rbac.yaml
new file mode 100644
index 00000000..785caa1e
--- /dev/null
+++ b/charts/ace-installer/templates/precheck/rbac.yaml
@@ -0,0 +1,49 @@
+{{- if .Values.precheck.enabled }}
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: {{ include "ace-installer.fullname" . }}-precheck
+ labels:
+ {{- include "ace-installer.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook-weight": "0"
+ "helm.sh/hook": pre-install,pre-upgrade,pre-rollback
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+rules:
+ - apiGroups: [""]
+ resources: ["configmaps"]
+ resourceNames: ["cluster-info"]
+ verbs: ["get"]
+ - apiGroups: ["apps"]
+ resources: ["deployments"]
+ verbs: ["get", "list", "watch"]
+ - apiGroups: [""]
+ resources: ["services"]
+ verbs: ["get", "list", "watch"]
+ - apiGroups: ["storage.k8s.io"]
+ resources: ["storageclasses"]
+ verbs: ["get", "list", "watch"]
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: {{ include "ace-installer.fullname" . }}-precheck
+ labels:
+ {{- include "ace-installer.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook-weight": "0"
+ "helm.sh/hook": pre-install,pre-upgrade,pre-rollback
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: {{ include "ace-installer.fullname" . }}-precheck
+subjects:
+ - kind: ServiceAccount
+ name: {{ include "ace-installer.fullname" . }}-precheck
+ namespace: {{ .Release.Namespace }}
+
+{{- end }}
diff --git a/charts/ace-installer/templates/precheck/serviceaccount.yaml b/charts/ace-installer/templates/precheck/serviceaccount.yaml
new file mode 100644
index 00000000..e3e67d15
--- /dev/null
+++ b/charts/ace-installer/templates/precheck/serviceaccount.yaml
@@ -0,0 +1,13 @@
+{{- if .Values.precheck.enabled }}
+
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "ace-installer.fullname" . }}-precheck
+ namespace: {{ .Release.Namespace }}
+ annotations:
+ "helm.sh/hook-weight": "0"
+ "helm.sh/hook": pre-install,pre-upgrade,pre-rollback
+ "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+
+{{- end }}
diff --git a/charts/ace-installer/values.openapiv3_schema.yaml b/charts/ace-installer/values.openapiv3_schema.yaml
index 4eddccc3..961b1d5d 100644
--- a/charts/ace-installer/values.openapiv3_schema.yaml
+++ b/charts/ace-installer/values.openapiv3_schema.yaml
@@ -89,6 +89,677 @@ properties:
type: string
offlineInstaller:
type: boolean
+ precheck:
+ properties:
+ affinity:
+ properties:
+ nodeAffinity:
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ preference:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchFields:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ type: object
+ x-kubernetes-map-type: atomic
+ weight:
+ format: int32
+ type: integer
+ required:
+ - preference
+ - weight
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ requiredDuringSchedulingIgnoredDuringExecution:
+ properties:
+ nodeSelectorTerms:
+ items:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchFields:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ type: object
+ x-kubernetes-map-type: atomic
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - nodeSelectorTerms
+ type: object
+ x-kubernetes-map-type: atomic
+ type: object
+ podAffinity:
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchLabels:
+ additionalProperties:
+ type: string
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ matchLabelKeys:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ mismatchLabelKeys:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ namespaceSelector:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchLabels:
+ additionalProperties:
+ type: string
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ namespaces:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ topologyKey:
+ type: string
+ required:
+ - topologyKey
+ type: object
+ weight:
+ format: int32
+ type: integer
+ required:
+ - podAffinityTerm
+ - weight
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchLabels:
+ additionalProperties:
+ type: string
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ matchLabelKeys:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ mismatchLabelKeys:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ namespaceSelector:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchLabels:
+ additionalProperties:
+ type: string
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ namespaces:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ topologyKey:
+ type: string
+ required:
+ - topologyKey
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ type: object
+ podAntiAffinity:
+ properties:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ podAffinityTerm:
+ properties:
+ labelSelector:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchLabels:
+ additionalProperties:
+ type: string
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ matchLabelKeys:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ mismatchLabelKeys:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ namespaceSelector:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchLabels:
+ additionalProperties:
+ type: string
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ namespaces:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ topologyKey:
+ type: string
+ required:
+ - topologyKey
+ type: object
+ weight:
+ format: int32
+ type: integer
+ required:
+ - podAffinityTerm
+ - weight
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ requiredDuringSchedulingIgnoredDuringExecution:
+ items:
+ properties:
+ labelSelector:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchLabels:
+ additionalProperties:
+ type: string
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ matchLabelKeys:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ mismatchLabelKeys:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ namespaceSelector:
+ properties:
+ matchExpressions:
+ items:
+ properties:
+ key:
+ type: string
+ operator:
+ type: string
+ values:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ matchLabels:
+ additionalProperties:
+ type: string
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ namespaces:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ topologyKey:
+ type: string
+ required:
+ - topologyKey
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ type: object
+ type: object
+ enabled:
+ type: boolean
+ image:
+ properties:
+ pullPolicy:
+ type: string
+ registry:
+ type: string
+ repository:
+ type: string
+ tag:
+ type: string
+ required:
+ - pullPolicy
+ - registry
+ - repository
+ - tag
+ type: object
+ nodeSelector:
+ additionalProperties:
+ type: string
+ type: object
+ podAnnotations:
+ additionalProperties:
+ type: string
+ type: object
+ podSecurityContext:
+ properties:
+ appArmorProfile:
+ properties:
+ localhostProfile:
+ type: string
+ type:
+ type: string
+ required:
+ - type
+ type: object
+ fsGroup:
+ format: int64
+ type: integer
+ fsGroupChangePolicy:
+ type: string
+ runAsGroup:
+ format: int64
+ type: integer
+ runAsNonRoot:
+ type: boolean
+ runAsUser:
+ format: int64
+ type: integer
+ seLinuxOptions:
+ properties:
+ level:
+ type: string
+ role:
+ type: string
+ type:
+ type: string
+ user:
+ type: string
+ type: object
+ seccompProfile:
+ properties:
+ localhostProfile:
+ type: string
+ type:
+ type: string
+ required:
+ - type
+ type: object
+ supplementalGroups:
+ items:
+ format: int64
+ type: integer
+ type: array
+ x-kubernetes-list-type: atomic
+ sysctls:
+ items:
+ properties:
+ name:
+ type: string
+ value:
+ type: string
+ required:
+ - name
+ - value
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
+ windowsOptions:
+ properties:
+ gmsaCredentialSpec:
+ type: string
+ gmsaCredentialSpecName:
+ type: string
+ hostProcess:
+ type: boolean
+ runAsUserName:
+ type: string
+ type: object
+ type: object
+ resources:
+ properties:
+ claims:
+ items:
+ properties:
+ name:
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
+ limits:
+ additionalProperties:
+ anyOf:
+ - type: integer
+ - type: string
+ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+ x-kubernetes-int-or-string: true
+ type: object
+ requests:
+ additionalProperties:
+ anyOf:
+ - type: integer
+ - type: string
+ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+ x-kubernetes-int-or-string: true
+ type: object
+ type: object
+ securityContext:
+ properties:
+ allowPrivilegeEscalation:
+ type: boolean
+ appArmorProfile:
+ properties:
+ localhostProfile:
+ type: string
+ type:
+ type: string
+ required:
+ - type
+ type: object
+ capabilities:
+ properties:
+ add:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ drop:
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ type: object
+ privileged:
+ type: boolean
+ procMount:
+ type: string
+ readOnlyRootFilesystem:
+ type: boolean
+ runAsGroup:
+ format: int64
+ type: integer
+ runAsNonRoot:
+ type: boolean
+ runAsUser:
+ format: int64
+ type: integer
+ seLinuxOptions:
+ properties:
+ level:
+ type: string
+ role:
+ type: string
+ type:
+ type: string
+ user:
+ type: string
+ type: object
+ seccompProfile:
+ properties:
+ localhostProfile:
+ type: string
+ type:
+ type: string
+ required:
+ - type
+ type: object
+ windowsOptions:
+ properties:
+ gmsaCredentialSpec:
+ type: string
+ gmsaCredentialSpecName:
+ type: string
+ hostProcess:
+ type: boolean
+ runAsUserName:
+ type: string
+ type: object
+ type: object
+ tolerations:
+ items:
+ properties:
+ effect:
+ type: string
+ key:
+ type: string
+ operator:
+ type: string
+ tolerationSeconds:
+ format: int64
+ type: integer
+ value:
+ type: string
+ type: object
+ type: array
+ required:
+ - affinity
+ - enabled
+ - image
+ - podAnnotations
+ - podSecurityContext
+ - resources
+ - securityContext
+ - tolerations
+ type: object
registry:
properties:
certs:
@@ -130,6 +801,7 @@ required:
- helm
- image
- nameOverride
+- precheck
- registry
- selfManagement
type: object
diff --git a/charts/ace-installer/values.yaml b/charts/ace-installer/values.yaml
index d83b583e..761a5fa9 100644
--- a/charts/ace-installer/values.yaml
+++ b/charts/ace-installer/values.yaml
@@ -136,6 +136,52 @@ helm:
selfManagement:
createCAPICluster: false
import: true
- targetIPs:
+ targetIPs: []
enableFeatures: []
disableFeatures: []
+
+precheck:
+ enabled: true
+
+ # Docker registry containing app image
+ image:
+ # Docker registry used to pull app container image
+ registry: appscode
+ # App container image
+ repository: b3
+ # Overrides the image tag whose default is the chart appVersion.
+ tag: ""
+ pullPolicy: Always
+
+ podAnnotations: {}
+
+ podSecurityContext: {}
+ # fsGroup: 2000
+
+ securityContext: # +doc-gen:break
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop: ["ALL"]
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ runAsUser: 65534
+ seccompProfile:
+ type: RuntimeDefault
+
+ resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+ nodeSelector: {}
+
+ tolerations: []
+
+ affinity: {}