Skip to content

Commit eb1ca8a

Browse files
paurosellopaurosello
committed
latest version
1 parent c652336 commit eb1ca8a

File tree

251 files changed

+13688
-6
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

251 files changed

+13688
-6
lines changed

‎demo-helm/charts/cert-manager/.helmignore

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Patterns to ignore when building packages.
2+
# This supports shell glob matching, relative path matching, and
3+
# negation (prefixed with !). Only one pattern per line.
4+
.DS_Store
5+
# Common VCS dirs
6+
.git/
7+
.gitignore
8+
.bzr/
9+
.bzrignore
10+
.hg/
11+
.hgignore
12+
.svn/
13+
# Common backup files
14+
*.swp
15+
*.bak
16+
*.tmp
17+
*~
18+
# Various IDEs
19+
.project
20+
.idea/
21+
*.tmproj

‎demo-helm/charts/cert-manager/Chart.yaml

+16
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
appVersion: v0.8.1
2+
description: A Helm chart for cert-manager
3+
home: https://github.com/jetstack/cert-manager
4+
icon: https://raw.githubusercontent.com/jetstack/cert-manager/master/logo/logo.png
5+
keywords:
6+
- cert-manager
7+
- kube-lego
8+
- letsencrypt
9+
- tls
10+
maintainers:
11+
- email: [email protected]
12+
name: munnerz
13+
name: cert-manager
14+
sources:
15+
- https://github.com/jetstack/cert-manager
16+
version: v0.8.1

‎demo-helm/charts/cert-manager/OWNERS

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
approvers:
2+
- munnerz
3+
- simonswine
4+
- kragniz
5+
reviewers:
6+
- munnerz
7+
- unguiculus
8+
- kragniz

‎demo-helm/charts/cert-manager/README.md

+143
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,143 @@
1+
# cert-manager
2+
3+
cert-manager is a Kubernetes addon to automate the management and issuance of
4+
TLS certificates from various issuing sources.
5+
6+
It will ensure certificates are valid and up to date periodically, and attempt
7+
to renew certificates at an appropriate time before expiry.
8+
9+
## Prerequisites
10+
11+
- Kubernetes 1.7+
12+
13+
## Installing the Chart
14+
15+
Full installation instructions, including details on how to configure extra
16+
functionality in cert-manager can be found in the [getting started docs](https://docs.cert-manager.io/en/latest/getting-started/).
17+
18+
To install the chart with the release name `my-release`:
19+
20+
```console
21+
## IMPORTANT: you MUST install the cert-manager CRDs **before** installing the
22+
## cert-manager Helm chart
23+
$ kubectl apply \
24+
-f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.8/deploy/manifests/00-crds.yaml
25+
26+
## If you are installing on openshift :
27+
$ oc create \
28+
-f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.7/deploy/manifests/00-crds.yaml
29+
30+
## IMPORTANT: if the cert-manager namespace **already exists**, you MUST ensure
31+
## it has an additional label on it in order for the deployment to succeed
32+
$ kubectl label namespace cert-manager certmanager.k8s.io/disable-validation="true"
33+
34+
## For openshift:
35+
$ oc label namespace cert-manager certmanager.k8s.io/disable-validation=true
36+
37+
## Add the Jetstack Helm repository
38+
$ helm repo add jetstack https://charts.jetstack.io
39+
40+
41+
## Install the cert-manager helm chart
42+
$ helm install --name my-release --namespace cert-manager jetstack/cert-manager
43+
```
44+
45+
In order to begin issuing certificates, you will need to set up a ClusterIssuer
46+
or Issuer resource (for example, by creating a 'letsencrypt-staging' issuer).
47+
48+
More information on the different types of issuers and how to configure them
49+
can be found in our documentation:
50+
51+
https://docs.cert-manager.io/en/latest/tasks/issuers/index.html
52+
53+
For information on how to configure cert-manager to automatically provision
54+
Certificates for Ingress resources, take a look at the `ingress-shim`
55+
documentation:
56+
57+
https://docs.cert-manager.io/en/latest/tasks/issuing-certificates/ingress-shim.html
58+
59+
> **Tip**: List all releases using `helm list`
60+
61+
## Upgrading the Chart
62+
63+
Special considerations may be required when upgrading the Helm chart, and these
64+
are documented in our full [upgrading guide](https://docs.cert-manager.io/en/latest/tasks/upgrading/index.html).
65+
Please check here before perform upgrades!
66+
67+
## Uninstalling the Chart
68+
69+
To uninstall/delete the `my-release` deployment:
70+
71+
```console
72+
$ helm delete my-release
73+
```
74+
75+
The command removes all the Kubernetes components associated with the chart and deletes the release.
76+
77+
## Configuration
78+
79+
The following table lists the configurable parameters of the cert-manager chart and their default values.
80+
81+
| Parameter | Description | Default |
82+
| --------- | ----------- | ------- |
83+
| `global.imagePullSecrets` | Reference to one or more secrets to be used when pulling images | `[]` |
84+
| `global.rbac.create` | If `true`, create and use RBAC resources (includes sub-charts) | `true` |
85+
| `image.repository` | Image repository | `quay.io/jetstack/cert-manager-controller` |
86+
| `image.tag` | Image tag | `v0.8.1` |
87+
| `image.pullPolicy` | Image pull policy | `IfNotPresent` |
88+
| `replicaCount` | Number of cert-manager replicas | `1` |
89+
| `clusterResourceNamespace` | Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources | Same namespace as cert-manager pod
90+
| `leaderElection.Namespace` | Override the namespace used to store the ConfigMap for leader election | Same namespace as cert-manager pod
91+
| `extraArgs` | Optional flags for cert-manager | `[]` |
92+
| `extraEnv` | Optional environment variables for cert-manager | `[]` |
93+
| `serviceAccount.create` | If `true`, create a new service account | `true` |
94+
| `serviceAccount.name` | Service account to be used. If not set and `serviceAccount.create` is `true`, a name is generated using the fullname template | |
95+
| `resources` | CPU/memory resource requests/limits | |
96+
| `securityContext.enabled` | Enable security context | `false` |
97+
| `securityContext.fsGroup` | Group ID for the container | `1001` |
98+
| `securityContext.runAsUser` | User ID for the container | `1001` |
99+
| `nodeSelector` | Node labels for pod assignment | `{}` |
100+
| `affinity` | Node affinity for pod assignment | `{}` |
101+
| `tolerations` | Node tolerations for pod assignment | `[]` |
102+
| `ingressShim.defaultIssuerName` | Optional default issuer to use for ingress resources | |
103+
| `ingressShim.defaultIssuerKind` | Optional default issuer kind to use for ingress resources | |
104+
| `ingressShim.defaultACMEChallengeType` | Optional default challenge type to use for ingresses using ACME issuers | |
105+
| `ingressShim.defaultACMEDNS01ChallengeProvider` | Optional default DNS01 challenge provider to use for ingresses using ACME issuers with DNS01 | |
106+
| `podAnnotations` | Annotations to add to the cert-manager pod | `{}` |
107+
| `podDnsPolicy` | Optional cert-manager pod [DNS policy](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pods-dns-policy) | |
108+
| `podDnsConfig` | Optional cert-manager pod [DNS configurations](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pods-dns-config) | |
109+
| `podLabels` | Labels to add to the cert-manager pod | `{}` |
110+
| `priorityClassName`| Priority class name for cert-manager and webhook pods | `""` |
111+
| `http_proxy` | Value of the `HTTP_PROXY` environment variable in the cert-manager pod | |
112+
| `https_proxy` | Value of the `HTTPS_PROXY` environment variable in the cert-manager pod | |
113+
| `no_proxy` | Value of the `NO_PROXY` environment variable in the cert-manager pod | |
114+
| `webhook.enabled` | Toggles whether the validating webhook component should be installed | `true` |
115+
| `webhook.replicaCount` | Number of cert-manager webhook replicas | `1` |
116+
| `webhook.podAnnotations` | Annotations to add to the webhook pods | `{}` |
117+
| `webhook.extraArgs` | Optional flags for cert-manager webhook component | `[]` |
118+
| `webhook.resources` | CPU/memory resource requests/limits for the webhook pods | |
119+
| `webhook.image.repository` | Webhook image repository | `quay.io/jetstack/cert-manager-webhook` |
120+
| `webhook.image.tag` | Webhook image tag | `v0.8.1` |
121+
| `webhook.image.pullPolicy` | Webhook image pull policy | `IfNotPresent` |
122+
| `webhook.injectAPIServerCA` | if true, the apiserver's CABundle will be automatically injected into the ValidatingWebhookConfiguration resource | `true` |
123+
| `cainjector.enabled` | Toggles whether the cainjector component should be installed (required for the webhook component to work) | `true` |
124+
| `cainjector.replicaCount` | Number of cert-manager cainjector replicas | `1` |
125+
| `cainjector.podAnnotations` | Annotations to add to the cainjector pods | `{}` |
126+
| `cainjector.extraArgs` | Optional flags for cert-manager cainjector component | `[]` |
127+
| `cainjector.resources` | CPU/memory resource requests/limits for the cainjector pods | |
128+
| `cainjector.image.repository` | cainjector image repository | `quay.io/jetstack/cert-manager-cainjector` |
129+
| `cainjector.image.tag` | cainjector image tag | `v0.8.1` |
130+
| `cainjector.image.pullPolicy` | cainjector image pull policy | `IfNotPresent` |
131+
132+
Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
133+
134+
Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,
135+
136+
```console
137+
$ helm install --name my-release -f values.yaml .
138+
```
139+
> **Tip**: You can use the default [values.yaml](values.yaml)
140+
141+
## Contributing
142+
143+
This chart is maintained at [github.com/jetstack/cert-manager](https://github.com/jetstack/cert-manager/tree/master/deploy/charts/cert-manager).

‎demo-helm/charts/cert-manager/cainjector/.helmignore

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Patterns to ignore when building packages.
2+
# This supports shell glob matching, relative path matching, and
3+
# negation (prefixed with !). Only one pattern per line.
4+
.DS_Store
5+
# Common VCS dirs
6+
.git/
7+
.gitignore
8+
.bzr/
9+
.bzrignore
10+
.hg/
11+
.hgignore
12+
.svn/
13+
# Common backup files
14+
*.swp
15+
*.bak
16+
*.tmp
17+
*~
18+
# Various IDEs
19+
.project
20+
.idea/
21+
*.tmproj

‎demo-helm/charts/cert-manager/cainjector/Chart.yaml

+17
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
name: cainjector
2+
apiVersion: v1
3+
# The version and appVersion fields are set automatically by the release tool
4+
version: v0.1.0
5+
appVersion: v0.1.0
6+
description: A Helm chart for deploying the cert-manager cainjector component
7+
home: https://github.com/jetstack/cert-manager
8+
sources:
9+
- https://github.com/jetstack/cert-manager
10+
keywords:
11+
- cert-manager
12+
- kube-lego
13+
- letsencrypt
14+
- tls
15+
maintainers:
16+
- name: munnerz
17+
email: [email protected]

‎demo-helm/charts/cert-manager/cainjector/templates/NOTES.txt

Whitespace-only changes.

‎demo-helm/charts/cert-manager/cainjector/templates/_helpers.tpl

+32
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
{{/* vim: set filetype=mustache: */}}
2+
{{/*
3+
Expand the name of the chart.
4+
*/}}
5+
{{- define "cainjector.name" -}}
6+
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
7+
{{- end -}}
8+
9+
{{/*
10+
Create a default fully qualified app name.
11+
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
12+
If release name contains chart name it will be used as a full name.
13+
*/}}
14+
{{- define "cainjector.fullname" -}}
15+
{{- if .Values.fullnameOverride -}}
16+
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
17+
{{- else -}}
18+
{{- $name := default .Chart.Name .Values.nameOverride -}}
19+
{{- if contains $name .Release.Name -}}
20+
{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
21+
{{- else -}}
22+
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
23+
{{- end -}}
24+
{{- end -}}
25+
{{- end -}}
26+
27+
{{/*
28+
Create chart name and version as used by the chart label.
29+
*/}}
30+
{{- define "cainjector.chart" -}}
31+
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
32+
{{- end -}}

‎demo-helm/charts/cert-manager/cainjector/templates/deployment.yaml

+69
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,69 @@
1+
apiVersion: apps/v1beta1
2+
kind: Deployment
3+
metadata:
4+
name: {{ include "cainjector.fullname" . }}
5+
namespace: {{ .Release.Namespace | quote }}
6+
labels:
7+
app: {{ include "cainjector.name" . }}
8+
chart: {{ include "cainjector.chart" . }}
9+
release: {{ .Release.Name }}
10+
heritage: {{ .Release.Service }}
11+
spec:
12+
replicas: {{ .Values.replicaCount }}
13+
selector:
14+
matchLabels:
15+
app: {{ include "cainjector.name" . }}
16+
release: {{ .Release.Name }}
17+
{{- with .Values.strategy }}
18+
strategy:
19+
{{- . | toYaml | nindent 4 }}
20+
{{- end }}
21+
template:
22+
metadata:
23+
labels:
24+
app: {{ include "cainjector.name" . }}
25+
release: {{ .Release.Name }}
26+
annotations:
27+
{{- if .Values.podAnnotations }}
28+
{{ toYaml .Values.podAnnotations | indent 8 }}
29+
{{- end }}
30+
spec:
31+
serviceAccountName: {{ include "cainjector.fullname" . }}
32+
{{- if .Values.global.priorityClassName }}
33+
priorityClassName: {{ .Values.global.priorityClassName | quote }}
34+
{{- end }}
35+
containers:
36+
- name: {{ .Chart.Name }}
37+
image: "{{ .Values.image.repository }}:{{ default .Chart.AppVersion .Values.image.tag }}"
38+
imagePullPolicy: {{ .Values.image.pullPolicy }}
39+
args:
40+
{{- if .Values.global.logLevel }}
41+
- --v={{ .Values.global.logLevel }}
42+
{{- end }}
43+
{{- if .Values.global.leaderElection.namespace }}
44+
- --leader-election-namespace={{ .Values.global.leaderElection.namespace }}
45+
{{- else }}
46+
- --leader-election-namespace=$(POD_NAMESPACE)
47+
{{- end }}
48+
{{- if .Values.extraArgs }}
49+
{{ toYaml .Values.extraArgs | indent 10 }}
50+
{{- end }}
51+
env:
52+
- name: POD_NAMESPACE
53+
valueFrom:
54+
fieldRef:
55+
fieldPath: metadata.namespace
56+
resources:
57+
{{ toYaml .Values.resources | indent 12 }}
58+
{{- with .Values.nodeSelector }}
59+
nodeSelector:
60+
{{ toYaml . | indent 8 }}
61+
{{- end }}
62+
{{- with .Values.affinity }}
63+
affinity:
64+
{{ toYaml . | indent 8 }}
65+
{{- end }}
66+
{{- with .Values.tolerations }}
67+
tolerations:
68+
{{ toYaml . | indent 8 }}
69+
{{- end }}

‎demo-helm/charts/cert-manager/cainjector/templates/rbac.yaml

+45
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
{{- if .Values.global.rbac.create -}}
2+
apiVersion: rbac.authorization.k8s.io/v1beta1
3+
kind: ClusterRole
4+
metadata:
5+
name: {{ template "cainjector.fullname" . }}
6+
labels:
7+
app: {{ template "cainjector.name" . }}
8+
chart: {{ template "cainjector.chart" . }}
9+
release: {{ .Release.Name }}
10+
heritage: {{ .Release.Service }}
11+
rules:
12+
- apiGroups: ["certmanager.k8s.io"]
13+
resources: ["certificates"]
14+
verbs: ["get", "list", "watch"]
15+
- apiGroups: [""]
16+
resources: ["secrets"]
17+
verbs: ["get", "list", "watch"]
18+
- apiGroups: [""]
19+
resources: ["configmaps", "events"]
20+
verbs: ["*"]
21+
- apiGroups: ["admissionregistration.k8s.io"]
22+
resources: ["validatingwebhookconfigurations", "mutatingwebhookconfigurations"]
23+
verbs: ["*"]
24+
- apiGroups: ["apiregistration.k8s.io"]
25+
resources: ["apiservices"]
26+
verbs: ["*"]
27+
---
28+
apiVersion: rbac.authorization.k8s.io/v1beta1
29+
kind: ClusterRoleBinding
30+
metadata:
31+
name: {{ template "cainjector.fullname" . }}
32+
labels:
33+
app: {{ template "cainjector.name" . }}
34+
chart: {{ template "cainjector.chart" . }}
35+
release: {{ .Release.Name }}
36+
heritage: {{ .Release.Service }}
37+
roleRef:
38+
apiGroup: rbac.authorization.k8s.io
39+
kind: ClusterRole
40+
name: {{ template "cainjector.fullname" . }}
41+
subjects:
42+
- name: {{ include "cainjector.fullname" . }}
43+
namespace: {{ .Release.Namespace | quote }}
44+
kind: ServiceAccount
45+
{{- end -}}

‎demo-helm/charts/cert-manager/cainjector/templates/serviceaccount.yaml

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
apiVersion: v1
2+
kind: ServiceAccount
3+
metadata:
4+
name: {{ include "cainjector.fullname" . }}
5+
namespace: {{ .Release.Namespace | quote }}
6+
labels:
7+
app: {{ include "cainjector.name" . }}
8+
chart: {{ include "cainjector.chart" . }}
9+
release: {{ .Release.Name }}
10+
heritage: {{ .Release.Service }}
11+
{{- if .Values.global.imagePullSecrets }}
12+
imagePullSecrets: {{ toYaml .Values.global.imagePullSecrets | nindent 2 }}
13+
{{- end }}

0 commit comments

Comments
 (0)