Update KLT Helm chart (#96)

Co-authored-by: thisthat <[email protected]>
Co-authored-by: Giovanni Liva <[email protected]>

charts/keptn-lifecycle-toolkit/Chart.yaml

@@ -41,10 +41,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.2
+version: 0.2.3
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v0.7.0" # x-release-please-version
+appVersion: "v0.7.1" # x-release-please-version

charts/keptn-lifecycle-toolkit/doc.yaml

@@ -1,3 +1,4 @@
+# yamllint disable rule:line-length
 ## @section Keptn Scheduler
 ## @extra scheduler.scheduler.containerSecurityContext Sets security context
 ## @skip scheduler.scheduler.containerSecurityContext.allowPrivilegeEscalation
@@ -11,7 +12,7 @@
 ## @param scheduler.scheduler.env.otelCollectorUrl sets url for open telemetry collector
 
 ## @param scheduler.scheduler.image.repository set image repository for scheduler
-## @param scheduler.scheduler.image.tag set image tag for scheduler
+## @param scheduler.scheduler.image.tag set image tag for scheduler <!---x-release-please-version-->
 ## @param scheduler.scheduler.imagePullPolicy set image pull policy for scheduler
 
 ## @extra scheduler.scheduler.livenessProbe customizable liveness probe for the scheduler
@@ -65,9 +66,12 @@
 ## @skip     certificateOperator.manager.containerSecurityContext.seccompProfile.type
 
 ## @param     certificateOperator.manager.image.repository specify repo for manager image
-## @param     certificateOperator.manager.image.tag select tag for manager container
+## @param     certificateOperator.manager.image.tag select tag for manager container <!---x-release-please-version-->
 ## @param     certificateOperator.manager.imagePullPolicy select image pull policy for manager container
 
+## @param     certificateOperator.manager.env.labelSelectorKey specify the label selector to find resources to generate certificates for
+## @param     certificateOperator.manager.env.labelSelectorValue specify the value for the label selector
+
 ## @extra     certificateOperator.manager.livenessProbe custom RBAC proxy liveness probe
 ## @skip     certificateOperator.manager.livenessProbe.httpGet.path
 ## @skip     certificateOperator.manager.livenessProbe.httpGet.port
@@ -118,6 +122,7 @@
 ## @param   lifecycleOperator.manager.containerSecurityContext.seccompProfile.type
 
 ## @param   lifecycleOperator.manager.env.keptnAppControllerLogLevel sets the log level of Keptn App Controller
+## @param   lifecycleOperator.manager.env.keptnAppCreationRequestControllerLogLevel sets the log level of Keptn App Creation Request Controller
 ## @param   lifecycleOperator.manager.env.keptnAppVersionControllerLogLevel sets the log level of Keptn AppVersion Controller
 ## @param   lifecycleOperator.manager.env.keptnEvaluationControllerLogLevel sets the log level of Keptn Evaluation Controller
 ## @param   lifecycleOperator.manager.env.keptnTaskControllerLogLevel sets the log level of Keptn Task Controller
@@ -127,11 +132,11 @@
 ## @param   lifecycleOperator.manager.env.optionsControllerLogLevel sets the log level of Keptn Options Controller
 
 ## @param   lifecycleOperator.manager.env.otelCollectorUrl Sets the URL for the open telemetry collector
-## @param   lifecycleOperator.manager.env.functionRunnerImage specify image for task runtime
+## @param   lifecycleOperator.manager.env.functionRunnerImage specify image for task runtime <!---x-release-please-version-->
 
-## @param   lifecycleOperator.manager.image.repository specify registry for manager image 
-## @param   lifecycleOperator.manager.image.tag  select tag for manager image 
-## @param   lifecycleOperator.manager.imagePullPolicy specify pull policy for manager image 
+## @param   lifecycleOperator.manager.image.repository specify registry for manager image
+## @param   lifecycleOperator.manager.image.tag  select tag for manager image <!---x-release-please-version-->
+## @param   lifecycleOperator.manager.imagePullPolicy specify pull policy for manager image
 
 ## @extra  lifecycleOperator.manager.livenessProbe custom livenessprobe for manager container
 ## @skip   lifecycleOperator.manager.livenessProbe.httpGet.path
@@ -192,10 +197,15 @@
 ## @extra   metricsOperator.manager.containerSecurityContext Sets security context privileges
 ## @param   metricsOperator.manager.containerSecurityContext.allowPrivilegeEscalation
 ## @param   metricsOperator.manager.containerSecurityContext.capabilities.drop
+## @param   metricsOperator.manager.containerSecurityContext.privileged
+## @param   metricsOperator.manager.containerSecurityContext.runAsGroup
+## @param   metricsOperator.manager.containerSecurityContext.runAsNonRoot
+## @param   metricsOperator.manager.containerSecurityContext.runAsUser
+## @param   metricsOperator.manager.containerSecurityContext.seccompProfile.type
 
 
 ## @param   metricsOperator.manager.image.repository specify registry for manager image
-## @param   metricsOperator.manager.image.tag  select tag for manager image
+## @param   metricsOperator.manager.image.tag  select tag for manager image <!---x-release-please-version-->
 
 ## @param   metricsOperator.manager.env.exposeKeptnMetrics enable metrics exporter
 ## @param   metricsOperator.manager.env.metricsControllerLogLevel sets the log level of Metrics Controller

charts/keptn-lifecycle-toolkit/templates/_helpers.tpl

@@ -48,7 +48,6 @@ Selector labels
 {{- define "chart.selectorLabels" -}}
 app.kubernetes.io/name: {{ include "chart.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
-app.kubernetes.io/part-of: keptn-lifecycle-toolkit
 {{- end }}
 
 {{/*

charts/keptn-lifecycle-toolkit/templates/certificate-operator-leader-election-rbac.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/created-by: certificate-operator
-    app.kubernetes.io/part-of: certificate-operator
+    app.kubernetes.io/part-of: keptn-lifecycle-toolkit
   {{- include "chart.labels" . | nindent 4 }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io

charts/keptn-lifecycle-toolkit/templates/certificate-operator-rbac.yaml

@@ -12,12 +12,18 @@ rules:
   - secrets
   verbs:
   - create
-  - delete
-  - get
   - list
+  - watch
+- apiGroups:
+  - ""
+  resourceNames:
+  - klt-certs
+  resources:
+  - secrets
+  verbs:
+  - get
   - patch
   - update
-  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -74,7 +80,7 @@ metadata:
   labels:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/created-by: certificate-operator
-    app.kubernetes.io/part-of: certificate-operator
+    app.kubernetes.io/part-of: keptn-lifecycle-toolkit
   {{- include "chart.labels" . | nindent 4 }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io

charts/keptn-lifecycle-toolkit/templates/certificate-operator-role-binding-rbac.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/component: rbac
     app.kubernetes.io/created-by: certificate-operator
-    app.kubernetes.io/part-of: certificate-operator
+    app.kubernetes.io/part-of: keptn-lifecycle-toolkit
   {{- include "chart.labels" . | nindent 4 }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io

charts/keptn-lifecycle-toolkit/templates/deployment.yaml

@@ -7,7 +7,7 @@ metadata:
     app.kuberentes.io/instance: certificate-operator
     app.kubernetes.io/component: rbac
     app.kubernetes.io/created-by: certificate-operator
-    app.kubernetes.io/part-of: certificate-operator
+    app.kubernetes.io/part-of: keptn-lifecycle-toolkit
   {{- include "chart.labels" . | nindent 4 }}
 ---
 apiVersion: v1
@@ -42,7 +42,7 @@ metadata:
   labels:
     app.kubernetes.io/component: manager
     app.kubernetes.io/created-by: certificate-operator
-    app.kubernetes.io/part-of: certificate-operator
+    app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     control-plane: certificate-operator
   {{- include "chart.labels" . | nindent 4 }}
 spec:
@@ -69,6 +69,10 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+        - name: LABEL_SELECTOR_KEY
+          value: {{ .Values.certificateOperator.manager.env.labelSelectorKey | quote }}
+        - name: LABEL_SELECTOR_VALUE
+          value: {{ .Values.certificateOperator.manager.env.labelSelectorValue | quote }}
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: {{ .Values.kubernetesClusterDomain }}
         image: {{ .Values.certificateOperator.manager.image.repository }}:{{ .Values.certificateOperator.manager.image.tag
@@ -134,6 +138,7 @@ metadata:
   labels:
     app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     control-plane: lifecycle-operator
+    keptn.sh/inject-cert: "true"
   {{- include "chart.labels" . | nindent 4 }}
 spec:
   replicas: {{ .Values.lifecycleOperator.replicas }}
@@ -170,13 +175,16 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.name
-        - name: OTEL_COLLECTOR_URL
-          value: {{ .Values.lifecycleOperator.manager.env.otelCollectorUrl | quote }}
         - name: FUNCTION_RUNNER_IMAGE
           value: {{ .Values.lifecycleOperator.manager.env.functionRunnerImage | quote }}
+        - name: OTEL_COLLECTOR_URL
+          value: {{ .Values.lifecycleOperator.manager.env.otelCollectorUrl | quote }}
         - name: KEPTN_APP_CONTROLLER_LOG_LEVEL
           value: {{ .Values.lifecycleOperator.manager.env.keptnAppControllerLogLevel | quote
             }}
+        - name: KEPTN_APP_CREATION_REQUEST_CONTROLLER_LOG_LEVEL
+          value: {{ .Values.lifecycleOperator.manager.env.keptnAppCreationRequestControllerLogLevel
+            | quote }}
         - name: KEPTN_APP_VERSION_CONTROLLER_LOG_LEVEL
           value: {{ .Values.lifecycleOperator.manager.env.keptnAppVersionControllerLogLevel
             | quote }}
@@ -281,6 +289,7 @@ metadata:
   labels:
     app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     control-plane: metrics-operator
+    keptn.sh/inject-cert: "true"
   {{- include "chart.labels" . | nindent 4 }}
 spec:
   replicas: {{ .Values.metricsOperator.replicas }}
@@ -341,6 +350,16 @@ spec:
             }}
           capabilities: {{- include "tplvalues.render" (dict "value" .Values.metricsOperator.manager.containerSecurityContext.capabilities
             "context" $) | nindent 12 }}
+          privileged: {{ .Values.metricsOperator.manager.containerSecurityContext.privileged
+            }}
+          runAsGroup: {{ .Values.metricsOperator.manager.containerSecurityContext.runAsGroup
+            }}
+          runAsNonRoot: {{ .Values.metricsOperator.manager.containerSecurityContext.runAsNonRoot
+            }}
+          runAsUser: {{ .Values.metricsOperator.manager.containerSecurityContext.runAsUser
+            }}
+          seccompProfile: {{- include "tplvalues.render" (dict "value" .Values.metricsOperator.manager.containerSecurityContext.seccompProfile
+            "context" $) | nindent 12 }}
         volumeMounts:
         - mountPath: /tmp/k8s-webhook-server/serving-certs/
           name: certs-dir

charts/keptn-lifecycle-toolkit/templates/keptnapp-crd.yaml

@@ -3,10 +3,11 @@ kind: CustomResourceDefinition
 metadata:
   name: keptnapps.lifecycle.keptn.sh
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.11.4
   labels:
     app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     crdGroup: lifecycle.keptn.sh
+    keptn.sh/inject-cert: "true"
   {{- include "chart.labels" . | nindent 4 }}
 spec:
   conversion:

charts/keptn-lifecycle-toolkit/templates/keptnappcreationrequest-crd.yaml

@@ -0,0 +1,63 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: keptnappcreationrequests.lifecycle.keptn.sh
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.11.4
+  labels:
+    app.kubernetes.io/part-of: keptn-lifecycle-toolkit
+    crdGroup: lifecycle.keptn.sh
+    keptn.sh/inject-cert: "true"
+  {{- include "chart.labels" . | nindent 4 }}
+spec:
+  group: lifecycle.keptn.sh
+  names:
+    kind: KeptnAppCreationRequest
+    listKind: KeptnAppCreationRequestList
+    plural: keptnappcreationrequests
+    singular: keptnappcreationrequest
+  scope: Namespaced
+  versions:
+  - name: v1alpha3
+    schema:
+      openAPIV3Schema:
+        description: KeptnAppCreationRequest is the Schema for the keptnappcreationrequests
+          API
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: KeptnAppCreationRequestSpec defines the desired state of KeptnAppCreationRequest
+            properties:
+              appName:
+                description: AppName is the name of the KeptnApp the KeptnAppCreationRequest
+                  should create if no user-defined object with that name is found.
+                type: string
+            required:
+            - appName
+            type: object
+          status:
+            description: KeptnAppCreationRequestStatus defines the observed state of
+              KeptnAppCreationRequest
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []

charts/keptn-lifecycle-toolkit/templates/keptnappversion-crd.yaml

@@ -3,10 +3,11 @@ kind: CustomResourceDefinition
 metadata:
   name: keptnappversions.lifecycle.keptn.sh
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.11.4
   labels:
     app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     crdGroup: lifecycle.keptn.sh
+    keptn.sh/inject-cert: "true"
   {{- include "chart.labels" . | nindent 4 }}
 spec:
   conversion:

charts/keptn-lifecycle-toolkit/templates/keptnconfig-crd.yaml

@@ -3,10 +3,11 @@ kind: CustomResourceDefinition
 metadata:
   name: keptnconfigs.options.keptn.sh
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.11.4
   labels:
     app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     crdGroup: lifecycle.keptn.sh
+    keptn.sh/inject-cert: "true"
   {{- include "chart.labels" . | nindent 4 }}
 spec:
   group: options.keptn.sh
@@ -41,11 +42,11 @@ spec:
                 description: OTelCollectorUrl can be used to set the Open Telemetry
                   collector that the operator should use
                 type: string
-              keptnAppCreationRequestTimeout:
+              keptnAppCreationRequestTimeoutSeconds:
                 default: 30
-                description: KeptnAppCreationRequestTimeout is used to set the interval
-                  in which automatic app discovery searches for workload to put into
-                  the same auto-generated KeptnApp
+                description: KeptnAppCreationRequestTimeoutSeconds is used to set the
+                  interval in which automatic app discovery searches for workload to
+                  put into the same auto-generated KeptnApp
                 type: integer
             type: object
           status:

charts/keptn-lifecycle-toolkit/templates/keptnevaluation-crd.yaml

@@ -3,10 +3,11 @@ kind: CustomResourceDefinition
 metadata:
   name: keptnevaluations.lifecycle.keptn.sh
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.11.4
   labels:
     app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     crdGroup: lifecycle.keptn.sh
+    keptn.sh/inject-cert: "true"
   {{- include "chart.labels" . | nindent 4 }}
 spec:
   group: lifecycle.keptn.sh

charts/keptn-lifecycle-toolkit/templates/keptnevaluationdefinition-crd.yaml

@@ -3,10 +3,11 @@ kind: CustomResourceDefinition
 metadata:
   name: keptnevaluationdefinitions.lifecycle.keptn.sh
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.11.4
   labels:
     app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     crdGroup: lifecycle.keptn.sh
+    keptn.sh/inject-cert: "true"
   {{- include "chart.labels" . | nindent 4 }}
 spec:
   group: lifecycle.keptn.sh

charts/keptn-lifecycle-toolkit/templates/keptnevaluationprovider-crd.yaml

@@ -3,10 +3,11 @@ kind: CustomResourceDefinition
 metadata:
   name: keptnevaluationproviders.lifecycle.keptn.sh
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.11.4
   labels:
     app.kubernetes.io/part-of: keptn-lifecycle-toolkit
     crdGroup: lifecycle.keptn.sh
+    keptn.sh/inject-cert: "true"
   {{- include "chart.labels" . | nindent 4 }}
 spec:
   conversion: