From 193f520c52176a8c3abfbdd8366465084741a11d Mon Sep 17 00:00:00 2001 From: RealAnna <89971034+RealAnna@users.noreply.github.com> Date: Thu, 10 Aug 2023 12:43:55 +0200 Subject: [PATCH] ci: add helm template check (#1859) Signed-off-by: realanna Signed-off-by: RealAnna <89971034+RealAnna@users.noreply.github.com> Co-authored-by: Florian Bacher --- .../scripts/.helm-tests/default/result.yaml | 8100 +++++++++++++++++ .../scripts/.helm-tests/default/values.yaml | 245 + .github/scripts/helm-test.sh | 43 + .github/workflows/validate-helm-chart.yml | 5 +- .gitignore | 2 +- .yamllint | 6 +- .../hpa-controller-keptn-metrics-rbac.yaml | 4 +- 7 files changed, 8397 insertions(+), 8 deletions(-) create mode 100644 .github/scripts/.helm-tests/default/result.yaml create mode 100644 .github/scripts/.helm-tests/default/values.yaml create mode 100755 .github/scripts/helm-test.sh diff --git a/.github/scripts/.helm-tests/default/result.yaml b/.github/scripts/.helm-tests/default/result.yaml new file mode 100644 index 0000000000..28c777e7e1 --- /dev/null +++ b/.github/scripts/.helm-tests/default/result.yaml @@ -0,0 +1,8100 @@ +--- +# Source: klt/templates/deployment.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: certificate-operator + namespace: "helmtests" + labels: + app.kuberentes.io/instance: certificate-operator + app.kubernetes.io/component: rbac + app.kubernetes.io/created-by: certificate-operator + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +--- +# Source: klt/templates/deployment.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: keptn-scheduler + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +--- +# Source: klt/templates/deployment.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: lifecycle-operator + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +--- +# Source: klt/templates/deployment.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: metrics-operator + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +--- +# Source: klt/templates/lifecycle-manager-config.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: lifecycle-manager-config + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +data: + controller_manager_config.yaml: | + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: ":8081" + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: "6b866dd9.keptn.sh" + metrics: + bindAddress: "127.0.0.1:8080" + webhook: + port: 9443 +--- +# Source: klt/templates/metrics-manager-config.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: metrics-manager-config + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +data: + controller_manager_config.yaml: | + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: ":8081" + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: "3f8532ca.keptn.sh" + metrics: + bindAddress: "127.0.0.1:8080" + webhook: + port: 9443 +--- +# Source: klt/templates/scheduler-config.yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: scheduler-config + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +data: + scheduler-config.yaml: | + apiVersion: kubescheduler.config.k8s.io/v1beta3 + kind: KubeSchedulerConfiguration + leaderElection: + leaderElect: false + profiles: + - plugins: + permit: + enabled: + - name: KLCPermit + schedulerName: keptn-scheduler +--- +# Source: klt/templates/analysis-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: analyses.metrics.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: metrics.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: metrics.keptn.sh + names: + kind: Analysis + listKind: AnalysisList + plural: analyses + singular: analysis + scope: Namespaced + versions: + - name: v1alpha3 + schema: + openAPIV3Schema: + description: Analysis is the Schema for the analyses API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: AnalysisSpec defines the desired state of Analysis + properties: + analysisDefinition: + description: AnalysisDefinition refers to the AnalysisDefinition, a + CRD that stores the AnalysisValuesTemplates + properties: + name: + description: Name of the AnalysisDefinition + type: string + required: + - name + type: object + args: + additionalProperties: + type: string + description: Args corresponds to a map of key/value pairs that can be + used to substitute placeholders in the AnalysisValueTemplate query. + The placeholder must be the capitalized version of the key; i.e. for + args foo:bar the query could be "query:percentile(95)?scope=tag(my_foo_label:)". + type: object + timeframe: + description: Timeframe specifies the range for the corresponding query + in the AnalysisValueTemplate + properties: + from: + description: From is the time of start for the query, this field + follows RFC3339 time format + format: date-time + type: string + to: + description: To is the time of end for the query, this field follows + RFC3339 time format + format: date-time + type: string + required: + - from + - to + type: object + required: + - analysisDefinition + - timeframe + type: object + status: + type: string + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/analysisdefinition-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: analysisdefinitions.metrics.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: metrics.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: metrics.keptn.sh + names: + kind: AnalysisDefinition + listKind: AnalysisDefinitionList + plural: analysisdefinitions + singular: analysisdefinition + scope: Namespaced + versions: + - name: v1alpha3 + schema: + openAPIV3Schema: + description: AnalysisDefinition is the Schema for the analysisdefinitions APIs + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: AnalysisDefinitionSpec defines the desired state of AnalysisDefinition + properties: + objectives: + description: Objectives defines a list of objectives to evaluate for + an analysis + items: + description: Objective defines an objective for analysis + properties: + analysisValueTemplateRef: + description: AnalysisValueTemplateRef refers to the appropriate + AnalysisValueTemplate + properties: + name: + type: string + namespace: + type: string + required: + - name + - namespace + type: object + keyObjective: + default: false + description: KeyObjective defines if the objective fails when + the target is not met + type: boolean + target: + description: Target defines failure or warning criteria + properties: + failure: + description: Failure defines limits up to which an analysis + fails. + properties: + equalTo: + description: EqualTo represents '==' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + greaterThan: + description: GreaterThan represents '>' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + greaterThanOrEqual: + description: GreaterThanOrEqual represents '>=' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + lessThan: + description: LessThan represents '<' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + lessThanOrEqual: + description: LessThanOrEqual represents '<=' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + type: object + warning: + description: Warning defines limits where the result does + not pass or fail + properties: + equalTo: + description: EqualTo represents '==' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + greaterThan: + description: GreaterThan represents '>' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + greaterThanOrEqual: + description: GreaterThanOrEqual represents '>=' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + lessThan: + description: LessThan represents '<' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + lessThanOrEqual: + description: LessThanOrEqual represents '<=' operator + properties: + fixedValue: + anyOf: + - type: integer + - type: string + description: FixedValue defines the value for comparison + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + required: + - fixedValue + type: object + type: object + type: object + weight: + default: 1 + description: Weight can be used to emphasize the importance of + one Objective over the others + type: integer + required: + - analysisValueTemplateRef + type: object + type: array + totalScore: + description: TotalScore defines the required score for an analysis to + be successful + properties: + passPercentage: + description: PassPercentage defines the threshold to reach for an + analysis to pass. + maximum: 100 + minimum: 0 + type: integer + warningPercentage: + description: WarningPercentage defines the threshold to reach for + an analysis to pass with a 'warning' status. + maximum: 100 + minimum: 0 + type: integer + required: + - passPercentage + - warningPercentage + type: object + required: + - totalScore + type: object + status: + description: unused field + type: string + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/analysisvaluetemplate-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: analysisvaluetemplates.metrics.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: metrics.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: metrics.keptn.sh + names: + kind: AnalysisValueTemplate + listKind: AnalysisValueTemplateList + plural: analysisvaluetemplates + singular: analysisvaluetemplate + scope: Namespaced + versions: + - additionalPrinterColumns: + - jsonPath: .spec.provider.name + name: Provider + type: string + name: v1alpha3 + schema: + openAPIV3Schema: + description: AnalysisValueTemplate is the Schema for the analysisvaluetemplates + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec contains the specification for the AnalysisValueTemplate + properties: + provider: + description: Provider refers to the KeptnMetricsProvider which should + be used to retrieve the data + properties: + name: + description: Name defines the name of the referenced object + type: string + namespace: + description: Namespace defines the namespace of the referenced + object + type: string + required: + - name + type: object + query: + description: Query represents the query to be run. It can include + placeholders that are defined using the go template syntax. More + info on go templating - https://pkg.go.dev/text/template + type: string + required: + - provider + - query + type: object + status: + description: unused field + type: string + type: object + served: true + storage: true + subresources: + status: {} +--- +# Source: klt/templates/keptnapp-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnapps.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + conversion: + strategy: Webhook + webhook: + clientConfig: + service: + name: 'lifecycle-webhook-service' + namespace: 'helmtests' + path: /convert + conversionReviewVersions: + - v1 + group: lifecycle.keptn.sh + names: + kind: KeptnApp + listKind: KeptnAppList + plural: keptnapps + singular: keptnapp + scope: Namespaced + versions: + - name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnApp is the Schema for the keptnapps API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnAppSpec defines the desired state of KeptnApp + properties: + postDeploymentEvaluations: + items: + type: string + type: array + postDeploymentTasks: + items: + type: string + type: array + preDeploymentEvaluations: + items: + type: string + type: array + preDeploymentTasks: + items: + type: string + type: array + version: + type: string + workloads: + items: + properties: + name: + type: string + version: + type: string + required: + - name + - version + type: object + type: array + required: + - version + type: object + status: + description: KeptnAppStatus defines the observed state of KeptnApp + properties: + currentVersion: + type: string + type: object + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnApp is the Schema for the keptnapps API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnAppSpec defines the desired state of KeptnApp + properties: + postDeploymentEvaluations: + items: + type: string + type: array + postDeploymentTasks: + items: + type: string + type: array + preDeploymentEvaluations: + items: + type: string + type: array + preDeploymentTasks: + items: + type: string + type: array + revision: + default: 1 + type: integer + version: + type: string + workloads: + items: + properties: + name: + type: string + version: + type: string + required: + - name + - version + type: object + type: array + required: + - version + type: object + status: + description: KeptnAppStatus defines the observed state of KeptnApp + properties: + currentVersion: + type: string + type: object + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnApp is the Schema for the keptnapps API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnApp. + properties: + postDeploymentEvaluations: + description: PostDeploymentEvaluations is a list of all evaluations + to be performed during the post-deployment phase of the KeptnApp. + The items of this list refer to the names of KeptnEvaluationDefinitions + located in the same namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + postDeploymentTasks: + description: PostDeploymentTasks is a list of all tasks to be performed + during the post-deployment phase of the KeptnApp. The items of this + list refer to the names of KeptnTaskDefinitions located in the same + namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + preDeploymentEvaluations: + description: PreDeploymentEvaluations is a list of all evaluations to + be performed during the pre-deployment phase of the KeptnApp. The + items of this list refer to the names of KeptnEvaluationDefinitions + located in the same namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + preDeploymentTasks: + description: PreDeploymentTasks is a list of all tasks to be performed + during the pre-deployment phase of the KeptnApp. The items of this + list refer to the names of KeptnTaskDefinitions located in the same + namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + revision: + default: 1 + description: Revision can be modified to trigger another deployment + of a KeptnApp of the same version. This can be used for restarting + a KeptnApp which failed to deploy, e.g. due to a failed preDeploymentEvaluation/preDeploymentTask. + type: integer + version: + description: Version defines the version of the application. For automatically + created KeptnApps, the version is a function of all KeptnWorkloads + that are part of the KeptnApp. + type: string + workloads: + description: Workloads is a list of all KeptnWorkloads that are part + of the KeptnApp. + items: + description: KeptnWorkloadRef refers to a KeptnWorkload that is part + of a KeptnApp + properties: + name: + description: Name is the name of the KeptnWorkload. + type: string + version: + description: Version is the version of the KeptnWorkload. + type: string + required: + - name + - version + type: object + type: array + required: + - version + type: object + status: + description: Status describes the current state of the KeptnApp. + properties: + currentVersion: + description: CurrentVersion indicates the version that is currently + deployed or being reconciled. + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnappcreationrequest-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnappcreationrequests.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: lifecycle.keptn.sh + names: + kind: KeptnAppCreationRequest + listKind: KeptnAppCreationRequestList + plural: keptnappcreationrequests + singular: keptnappcreationrequest + scope: Namespaced + versions: + - name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnAppCreationRequest is the Schema for the keptnappcreationrequests + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnAppCreationRequest. + properties: + appName: + description: AppName is the name of the KeptnApp the KeptnAppCreationRequest + should create if no user-defined object with that name is found. + type: string + required: + - appName + type: object + status: + description: Status describes the current state of the KeptnAppCreationRequest. + type: string + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnappversion-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnappversions.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + conversion: + strategy: Webhook + webhook: + clientConfig: + service: + name: 'lifecycle-webhook-service' + namespace: 'helmtests' + path: /convert + conversionReviewVersions: + - v1 + group: lifecycle.keptn.sh + names: + kind: KeptnAppVersion + listKind: KeptnAppVersionList + plural: keptnappversions + shortNames: + - kav + singular: keptnappversion + scope: Namespaced + versions: + - additionalPrinterColumns: + - jsonPath: .spec.appName + name: AppName + type: string + - jsonPath: .spec.version + name: Version + type: string + - jsonPath: .status.currentPhase + name: Phase + type: string + - jsonPath: .status.preDeploymentStatus + name: PreDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.preDeploymentEvaluationStatus + name: PreDeploymentEvaluationStatus + priority: 1 + type: string + - jsonPath: .status.workloadOverallStatus + name: WorkloadOverallStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentStatus + name: PostDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentEvaluationStatus + name: PostDeploymentEvaluationStatus + priority: 1 + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnAppVersion is the Schema for the keptnappversions API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnAppVersionSpec defines the desired state of KeptnAppVersion + properties: + appName: + type: string + postDeploymentEvaluations: + items: + type: string + type: array + postDeploymentTasks: + items: + type: string + type: array + preDeploymentEvaluations: + items: + type: string + type: array + preDeploymentTasks: + items: + type: string + type: array + previousVersion: + type: string + traceId: + additionalProperties: + type: string + type: object + version: + type: string + workloads: + items: + properties: + name: + type: string + version: + type: string + required: + - name + - version + type: object + type: array + required: + - appName + - version + type: object + status: + description: KeptnAppVersionStatus defines the observed state of KeptnAppVersion + properties: + currentPhase: + type: string + endTime: + format: date-time + type: string + phaseTraceIDs: + additionalProperties: + additionalProperties: + type: string + description: MapCarrier is a TextMapCarrier that uses a map held in + memory as a storage medium for propagated key-value pairs. + type: object + type: object + postDeploymentEvaluationStatus: + default: Pending + type: string + postDeploymentEvaluationTaskStatus: + items: + properties: + endTime: + format: date-time + type: string + evaluationDefinitionName: + type: string + evaluationName: + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + postDeploymentStatus: + default: Pending + type: string + postDeploymentTaskStatus: + items: + properties: + endTime: + format: date-time + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + taskDefinitionName: + type: string + taskName: + type: string + type: object + type: array + preDeploymentEvaluationStatus: + default: Pending + type: string + preDeploymentEvaluationTaskStatus: + items: + properties: + endTime: + format: date-time + type: string + evaluationDefinitionName: + type: string + evaluationName: + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentStatus: + default: Pending + type: string + preDeploymentTaskStatus: + items: + properties: + endTime: + format: date-time + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + taskDefinitionName: + type: string + taskName: + type: string + type: object + type: array + startTime: + format: date-time + type: string + status: + default: Pending + type: string + workloadOverallStatus: + default: Pending + type: string + workloadStatus: + items: + properties: + status: + default: Pending + type: string + workload: + properties: + name: + type: string + version: + type: string + required: + - name + - version + type: object + type: object + type: array + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.appName + name: AppName + type: string + - jsonPath: .spec.version + name: Version + type: string + - jsonPath: .status.currentPhase + name: Phase + type: string + - jsonPath: .status.preDeploymentStatus + name: PreDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.preDeploymentEvaluationStatus + name: PreDeploymentEvaluationStatus + priority: 1 + type: string + - jsonPath: .status.workloadOverallStatus + name: WorkloadOverallStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentStatus + name: PostDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentEvaluationStatus + name: PostDeploymentEvaluationStatus + priority: 1 + type: string + name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnAppVersion is the Schema for the keptnappversions API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnAppVersionSpec defines the desired state of KeptnAppVersion + properties: + appName: + type: string + postDeploymentEvaluations: + items: + type: string + type: array + postDeploymentTasks: + items: + type: string + type: array + preDeploymentEvaluations: + items: + type: string + type: array + preDeploymentTasks: + items: + type: string + type: array + previousVersion: + type: string + revision: + default: 1 + type: integer + traceId: + additionalProperties: + type: string + type: object + version: + type: string + workloads: + items: + properties: + name: + type: string + version: + type: string + required: + - name + - version + type: object + type: array + required: + - appName + - version + type: object + status: + description: KeptnAppVersionStatus defines the observed state of KeptnAppVersion + properties: + currentPhase: + type: string + endTime: + format: date-time + type: string + phaseTraceIDs: + additionalProperties: + additionalProperties: + type: string + description: MapCarrier is a TextMapCarrier that uses a map held in + memory as a storage medium for propagated key-value pairs. + type: object + type: object + postDeploymentEvaluationStatus: + default: Pending + type: string + postDeploymentEvaluationTaskStatus: + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + postDeploymentStatus: + default: Pending + type: string + postDeploymentTaskStatus: + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentEvaluationStatus: + default: Pending + type: string + preDeploymentEvaluationTaskStatus: + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentStatus: + default: Pending + type: string + preDeploymentTaskStatus: + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + startTime: + format: date-time + type: string + status: + default: Pending + type: string + workloadOverallStatus: + default: Pending + type: string + workloadStatus: + items: + properties: + status: + default: Pending + type: string + workload: + properties: + name: + type: string + version: + type: string + required: + - name + - version + type: object + type: object + type: array + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.appName + name: AppName + type: string + - jsonPath: .spec.version + name: Version + type: string + - jsonPath: .status.currentPhase + name: Phase + type: string + - jsonPath: .status.preDeploymentStatus + name: PreDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.preDeploymentEvaluationStatus + name: PreDeploymentEvaluationStatus + priority: 1 + type: string + - jsonPath: .status.workloadOverallStatus + name: WorkloadOverallStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentStatus + name: PostDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentEvaluationStatus + name: PostDeploymentEvaluationStatus + priority: 1 + type: string + name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnAppVersion is the Schema for the keptnappversions API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnAppVersion. + properties: + appName: + description: AppName is the name of the KeptnApp. + type: string + postDeploymentEvaluations: + description: PostDeploymentEvaluations is a list of all evaluations + to be performed during the post-deployment phase of the KeptnApp. + The items of this list refer to the names of KeptnEvaluationDefinitions + located in the same namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + postDeploymentTasks: + description: PostDeploymentTasks is a list of all tasks to be performed + during the post-deployment phase of the KeptnApp. The items of this + list refer to the names of KeptnTaskDefinitions located in the same + namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + preDeploymentEvaluations: + description: PreDeploymentEvaluations is a list of all evaluations to + be performed during the pre-deployment phase of the KeptnApp. The + items of this list refer to the names of KeptnEvaluationDefinitions + located in the same namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + preDeploymentTasks: + description: PreDeploymentTasks is a list of all tasks to be performed + during the pre-deployment phase of the KeptnApp. The items of this + list refer to the names of KeptnTaskDefinitions located in the same + namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + previousVersion: + description: PreviousVersion is the version of the KeptnApp that has + been deployed prior to this version. + type: string + revision: + default: 1 + description: Revision can be modified to trigger another deployment + of a KeptnApp of the same version. This can be used for restarting + a KeptnApp which failed to deploy, e.g. due to a failed preDeploymentEvaluation/preDeploymentTask. + type: integer + traceId: + additionalProperties: + type: string + description: TraceId contains the OpenTelemetry trace ID. + type: object + version: + description: Version defines the version of the application. For automatically + created KeptnApps, the version is a function of all KeptnWorkloads + that are part of the KeptnApp. + type: string + workloads: + description: Workloads is a list of all KeptnWorkloads that are part + of the KeptnApp. + items: + description: KeptnWorkloadRef refers to a KeptnWorkload that is part + of a KeptnApp + properties: + name: + description: Name is the name of the KeptnWorkload. + type: string + version: + description: Version is the version of the KeptnWorkload. + type: string + required: + - name + - version + type: object + type: array + required: + - appName + - version + type: object + status: + description: Status describes the current state of the KeptnAppVersion. + properties: + currentPhase: + description: CurrentPhase indicates the current phase of the KeptnAppVersion. + type: string + endTime: + description: EndTime represents the time at which the deployment of + the KeptnAppVersion finished. + format: date-time + type: string + phaseTraceIDs: + additionalProperties: + additionalProperties: + type: string + description: MapCarrier is a TextMapCarrier that uses a map held in + memory as a storage medium for propagated key-value pairs. + type: object + description: PhaseTraceIDs contains the trace IDs of the OpenTelemetry + spans of each phase of the KeptnAppVersion. + type: object + postDeploymentEvaluationStatus: + default: Pending + description: PostDeploymentEvaluationStatus indicates the current status + of the KeptnAppVersion's PostDeploymentEvaluation phase. + type: string + postDeploymentEvaluationTaskStatus: + description: PostDeploymentEvaluationTaskStatus indicates the current + state of each postDeploymentEvaluation of the KeptnAppVersion. + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + description: EndTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + description: StartTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + postDeploymentStatus: + default: Pending + description: PostDeploymentStatus indicates the current status of the + KeptnAppVersion's PostDeployment phase. + type: string + postDeploymentTaskStatus: + description: PostDeploymentTaskStatus indicates the current state of + each postDeploymentTask of the KeptnAppVersion. + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + description: EndTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + description: StartTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentEvaluationStatus: + default: Pending + description: PreDeploymentEvaluationStatus indicates the current status + of the KeptnAppVersion's PreDeploymentEvaluation phase. + type: string + preDeploymentEvaluationTaskStatus: + description: PreDeploymentEvaluationTaskStatus indicates the current + state of each preDeploymentEvaluation of the KeptnAppVersion. + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + description: EndTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + description: StartTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentStatus: + default: Pending + description: PreDeploymentStatus indicates the current status of the + KeptnAppVersion's PreDeployment phase. + type: string + preDeploymentTaskStatus: + description: PreDeploymentTaskStatus indicates the current state of + each preDeploymentTask of the KeptnAppVersion. + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + description: EndTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + description: StartTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + startTime: + description: StartTime represents the time at which the deployment of + the KeptnAppVersion started. + format: date-time + type: string + status: + default: Pending + description: Status represents the overall status of the KeptnAppVersion. + type: string + workloadOverallStatus: + default: Pending + description: WorkloadOverallStatus indicates the current status of the + KeptnAppVersion's Workload deployment phase. + type: string + workloadStatus: + description: WorkloadStatus contains the current status of each KeptnWorkload + that is part of the KeptnAppVersion. + items: + properties: + status: + default: Pending + description: Status indicates the current status of the KeptnWorkload. + type: string + workload: + description: Workload refers to a KeptnWorkload that is part of + the KeptnAppVersion. + properties: + name: + description: Name is the name of the KeptnWorkload. + type: string + version: + description: Version is the version of the KeptnWorkload. + type: string + required: + - name + - version + type: object + type: object + type: array + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnconfig-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnconfigs.options.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: options.keptn.sh + names: + kind: KeptnConfig + listKind: KeptnConfigList + plural: keptnconfigs + singular: keptnconfig + scope: Namespaced + versions: + - name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnConfig is the Schema for the keptnconfigs API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnConfigSpec defines the desired state of KeptnConfig + properties: + OTelCollectorUrl: + description: OTelCollectorUrl can be used to set the Open Telemetry + collector that the lifecycle operator should use + type: string + cloudEventsEndpoint: + description: CloudEventsEndpoint can be used to set the endpoint where + Cloud Events should be posted by the lifecycle operator + type: string + keptnAppCreationRequestTimeoutSeconds: + default: 30 + description: KeptnAppCreationRequestTimeoutSeconds is used to set the + interval in which automatic app discovery searches for workload to + put into the same auto-generated KeptnApp + type: integer + type: object + status: + description: unused field + type: string + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnevaluation-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnevaluations.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: lifecycle.keptn.sh + names: + kind: KeptnEvaluation + listKind: KeptnEvaluationList + plural: keptnevaluations + shortNames: + - ke + singular: keptnevaluation + scope: Namespaced + versions: + - additionalPrinterColumns: + - jsonPath: .spec.appName + name: AppName + type: string + - jsonPath: .spec.appVersion + name: AppVersion + type: string + - jsonPath: .spec.workload + name: WorkloadName + type: string + - jsonPath: .spec.workloadVersion + name: WorkloadVersion + type: string + - jsonPath: .status.retryCount + name: RetryCount + type: string + - jsonPath: .status.evaluationStatus + name: EvaluationStatus + type: string + - jsonPath: .status.overallStatus + name: OverallStatus + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnEvaluation is the Schema for the keptnevaluations API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnEvaluationSpec defines the desired state of KeptnEvaluation + properties: + appName: + type: string + appVersion: + type: string + checkType: + type: string + evaluationDefinition: + type: string + failAction: + type: string + retries: + default: 10 + type: integer + retryInterval: + default: 5s + pattern: ^0|([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$ + type: string + workload: + type: string + workloadVersion: + type: string + required: + - evaluationDefinition + - workloadVersion + type: object + status: + description: KeptnEvaluationStatus defines the observed state of KeptnEvaluation + properties: + endTime: + format: date-time + type: string + evaluationStatus: + additionalProperties: + properties: + message: + type: string + status: + type: string + value: + type: string + required: + - status + - value + type: object + type: object + overallStatus: + default: Pending + type: string + retryCount: + default: 0 + type: integer + startTime: + format: date-time + type: string + required: + - evaluationStatus + - overallStatus + - retryCount + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.appName + name: AppName + type: string + - jsonPath: .spec.appVersion + name: AppVersion + type: string + - jsonPath: .spec.workload + name: WorkloadName + type: string + - jsonPath: .spec.workloadVersion + name: WorkloadVersion + type: string + - jsonPath: .status.retryCount + name: RetryCount + type: string + - jsonPath: .status.evaluationStatus + name: EvaluationStatus + type: string + - jsonPath: .status.overallStatus + name: OverallStatus + type: string + name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnEvaluation is the Schema for the keptnevaluations API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnEvaluationSpec defines the desired state of KeptnEvaluation + properties: + appName: + type: string + appVersion: + type: string + checkType: + type: string + evaluationDefinition: + type: string + failAction: + type: string + retries: + default: 10 + type: integer + retryInterval: + default: 5s + pattern: ^0|([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$ + type: string + workload: + type: string + workloadVersion: + type: string + required: + - evaluationDefinition + - workloadVersion + type: object + status: + description: KeptnEvaluationStatus defines the observed state of KeptnEvaluation + properties: + endTime: + format: date-time + type: string + evaluationStatus: + additionalProperties: + properties: + message: + type: string + status: + type: string + value: + type: string + required: + - status + - value + type: object + type: object + overallStatus: + default: Pending + type: string + retryCount: + default: 0 + type: integer + startTime: + format: date-time + type: string + required: + - evaluationStatus + - overallStatus + - retryCount + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.appName + name: AppName + type: string + - jsonPath: .spec.appVersion + name: AppVersion + type: string + - jsonPath: .spec.workload + name: WorkloadName + type: string + - jsonPath: .spec.workloadVersion + name: WorkloadVersion + type: string + - jsonPath: .status.retryCount + name: RetryCount + type: string + - jsonPath: .status.evaluationStatus + name: EvaluationStatus + type: string + - jsonPath: .status.overallStatus + name: OverallStatus + type: string + name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnEvaluation is the Schema for the keptnevaluations API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnEvaluation. + properties: + appName: + description: AppName defines the KeptnApp for which the KeptnEvaluation + is done. + type: string + appVersion: + description: AppVersion defines the version of the KeptnApp for which + the KeptnEvaluation is done. + type: string + checkType: + description: Type indicates whether the KeptnEvaluation is part of the + pre- or postDeployment phase. + type: string + evaluationDefinition: + description: EvaluationDefinition refers to the name of the KeptnEvaluationDefinition + which includes the objectives for the KeptnEvaluation. The KeptnEvaluationDefinition + can be located in the same namespace as the KeptnEvaluation, or in + the KLT namespace. + type: string + failAction: + type: string + retries: + default: 10 + description: Retries indicates how many times the KeptnEvaluation can + be attempted in the case of an error or missed evaluation objective, + before considering the KeptnEvaluation to be failed. + type: integer + retryInterval: + default: 5s + description: RetryInterval specifies the interval at which the KeptnEvaluation + is retried in the case of an error or a missed objective. + pattern: ^0|([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$ + type: string + workload: + description: Workload defines the KeptnWorkload for which the KeptnEvaluation + is done. + type: string + workloadVersion: + description: WorkloadVersion defines the version of the KeptnWorkload + for which the KeptnEvaluation is done. + type: string + required: + - evaluationDefinition + - workloadVersion + type: object + status: + description: Status describes the current state of the KeptnEvaluation. + properties: + endTime: + description: EndTime represents the time at which the KeptnEvaluation + finished. + format: date-time + type: string + evaluationStatus: + additionalProperties: + properties: + message: + description: Message contains additional information about the + evaluation of an objective. This can include explanations about + why an evaluation has failed (e.g. due to a missed objective), + or if there was any error during the evaluation of the objective. + type: string + status: + description: Status indicates the status of the objective being + evaluated. + type: string + value: + description: Value represents the value of the KeptnMetric being + evaluated. + type: string + required: + - status + - value + type: object + description: EvaluationStatus describes the status of each objective + of the KeptnEvaluationDefinition referenced by the KeptnEvaluation. + type: object + overallStatus: + default: Pending + description: OverallStatus describes the overall status of the KeptnEvaluation. + The Overall status is derived from the status of the individual objectives + of the KeptnEvaluationDefinition referenced by the KeptnEvaluation. + type: string + retryCount: + default: 0 + description: RetryCount indicates how many times the KeptnEvaluation + has been attempted already. + type: integer + startTime: + description: StartTime represents the time at which the KeptnEvaluation + started. + format: date-time + type: string + required: + - evaluationStatus + - overallStatus + - retryCount + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnevaluationdefinition-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnevaluationdefinitions.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: lifecycle.keptn.sh + names: + kind: KeptnEvaluationDefinition + listKind: KeptnEvaluationDefinitionList + plural: keptnevaluationdefinitions + shortNames: + - ked + singular: keptnevaluationdefinition + scope: Namespaced + versions: + - name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnEvaluationDefinition is the Schema for the keptnevaluationdefinitions + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnEvaluationDefinitionSpec defines the desired state of + KeptnEvaluationDefinition + properties: + objectives: + items: + properties: + evaluationTarget: + type: string + name: + type: string + query: + type: string + required: + - evaluationTarget + - name + - query + type: object + type: array + source: + type: string + required: + - objectives + - source + type: object + status: + description: unused field + type: string + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnEvaluationDefinition is the Schema for the keptnevaluationdefinitions + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnEvaluationDefinitionSpec defines the desired state of + KeptnEvaluationDefinition + properties: + objectives: + items: + properties: + evaluationTarget: + type: string + name: + type: string + query: + type: string + required: + - evaluationTarget + - name + - query + type: object + type: array + source: + type: string + required: + - objectives + - source + type: object + status: + description: unused field + type: string + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnEvaluationDefinition is the Schema for the keptnevaluationdefinitions + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnEvaluationDefinition. + properties: + objectives: + description: Objectives is a list of objectives that have to be met + for a KeptnEvaluation referencing this KeptnEvaluationDefinition to + be successful. + items: + properties: + evaluationTarget: + description: EvaluationTarget specifies the target value for the + references KeptnMetric. Needs to start with either '<' or '>', + followed by the target value (e.g. '<10'). + type: string + keptnMetricRef: + description: KeptnMetricRef references the KeptnMetric that should + be evaluated. + properties: + name: + description: Name is the name of the referenced KeptnMetric. + type: string + namespace: + description: Namespace is the namespace where the referenced + KeptnMetric is located. + type: string + required: + - name + type: object + required: + - evaluationTarget + - keptnMetricRef + type: object + type: array + required: + - objectives + type: object + status: + description: unused field + type: string + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnevaluationprovider-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnevaluationproviders.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + conversion: + strategy: Webhook + webhook: + clientConfig: + service: + name: 'lifecycle-webhook-service' + namespace: 'helmtests' + path: /convert + conversionReviewVersions: + - v1 + group: lifecycle.keptn.sh + names: + kind: KeptnEvaluationProvider + listKind: KeptnEvaluationProviderList + plural: keptnevaluationproviders + shortNames: + - kep + singular: keptnevaluationprovider + scope: Namespaced + versions: + - name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnEvaluationProvider is the Schema for the keptnevaluationproviders + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnEvaluationProviderSpec defines the desired state of KeptnEvaluationProvider + properties: + secretName: + type: string + targetServer: + type: string + required: + - targetServer + type: object + status: + description: unused field + type: string + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnEvaluationProvider is the Schema for the keptnevaluationproviders + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnEvaluationProviderSpec defines the desired state of KeptnEvaluationProvider + properties: + secretKeyRef: + description: SecretKeySelector selects a key of a Secret. + properties: + key: + description: The key of the secret to select from. Must be a valid + secret key. + type: string + name: + description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + TODO: Add other useful fields. apiVersion, kind, uid?' + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + targetServer: + type: string + required: + - targetServer + type: object + status: + description: unused field + type: string + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnEvaluationProvider is the Schema for the keptnevaluationproviders + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnEvaluationProviderSpec defines the desired state of KeptnEvaluationProvider + properties: + secretKeyRef: + description: SecretKeySelector selects a key of a Secret. + properties: + key: + description: The key of the secret to select from. Must be a valid + secret key. + type: string + name: + description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + TODO: Add other useful fields. apiVersion, kind, uid?' + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + targetServer: + type: string + required: + - targetServer + type: object + status: + description: unused field + type: string + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnmetric-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnmetrics.metrics.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.0 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: metrics.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + conversion: + strategy: Webhook + webhook: + clientConfig: + service: + name: 'metrics-webhook-service' + namespace: 'helmtests' + path: /convert + conversionReviewVersions: + - v1 + group: metrics.keptn.sh + names: + kind: KeptnMetric + listKind: KeptnMetricList + plural: keptnmetrics + singular: keptnmetric + scope: Namespaced + versions: + - additionalPrinterColumns: + - jsonPath: .spec.provider.name + name: Provider + type: string + - jsonPath: .spec.query + name: Query + type: string + - jsonPath: .status.value + name: Value + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnMetric is the Schema for the keptnmetrics API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnMetricSpec defines the desired state of KeptnMetric + properties: + fetchIntervalSeconds: + description: FetchIntervalSeconds represents the update frequency in + seconds that is used to update the metric + type: integer + provider: + description: Provider represents the provider object + properties: + name: + description: Name of the provider + type: string + required: + - name + type: object + query: + description: Query represents the query to be run + type: string + required: + - fetchIntervalSeconds + - provider + - query + type: object + status: + description: KeptnMetricStatus defines the observed state of KeptnMetric + properties: + lastUpdated: + description: LastUpdated represents the time when the status data was + last updated + format: date-time + type: string + rawValue: + description: RawValue represents the resulting value in raw format + format: byte + type: string + value: + description: Value represents the resulting value + type: string + required: + - lastUpdated + - rawValue + - value + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.provider.name + name: Provider + type: string + - jsonPath: .spec.query + name: Query + type: string + - jsonPath: .status.value + name: Value + type: string + name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnMetric is the Schema for the keptnmetrics API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnMetricSpec defines the desired state of KeptnMetric + properties: + fetchIntervalSeconds: + description: FetchIntervalSeconds represents the update frequency in + seconds that is used to update the metric + type: integer + provider: + description: Provider represents the provider object + properties: + name: + description: Name of the provider + type: string + required: + - name + type: object + query: + description: Query represents the query to be run + type: string + required: + - fetchIntervalSeconds + - provider + - query + type: object + status: + description: KeptnMetricStatus defines the observed state of KeptnMetric + properties: + lastUpdated: + description: LastUpdated represents the time when the status data was + last updated + format: date-time + type: string + rawValue: + description: RawValue represents the resulting value in raw format + format: byte + type: string + value: + description: Value represents the resulting value + type: string + required: + - lastUpdated + - rawValue + - value + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.provider.name + name: Provider + type: string + - jsonPath: .spec.query + name: Query + type: string + - jsonPath: .spec.range.interval + name: Interval + type: string + - jsonPath: .status.value + name: Value + type: string + name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnMetric is the Schema for the keptnmetrics API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnMetricSpec defines the desired state of KeptnMetric + properties: + fetchIntervalSeconds: + description: FetchIntervalSeconds represents the update frequency in + seconds that is used to update the metric + type: integer + provider: + description: Provider represents the provider object + properties: + name: + description: Name of the provider + type: string + required: + - name + type: object + query: + description: Query represents the query to be run + type: string + range: + description: Range represents the time range for which data is to be + queried + properties: + aggregation: + description: 'Aggregation defines as the type of aggregation function + to be applied on the data. Accepted values: p90, p95, p99, max, + min, avg, median' + enum: + - p90 + - p95 + - p99 + - max + - min + - avg + - median + type: string + interval: + default: 5m + description: Interval specifies the duration of the time interval + for the data query + type: string + step: + description: Step represents the query resolution step width for + the data query + type: string + type: object + required: + - fetchIntervalSeconds + - provider + - query + type: object + status: + description: KeptnMetricStatus defines the observed state of KeptnMetric + properties: + errMsg: + description: ErrMsg represents the error details when the query could + not be evaluated + type: string + lastUpdated: + description: LastUpdated represents the time when the status data was + last updated + format: date-time + type: string + rawValue: + description: RawValue represents the resulting value in raw format + format: byte + type: string + value: + description: Value represents the resulting value + type: string + required: + - lastUpdated + - rawValue + - value + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnmetricsprovider-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnmetricsproviders.metrics.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.0 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: metrics.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: metrics.keptn.sh + names: + kind: KeptnMetricsProvider + listKind: KeptnMetricsProviderList + plural: keptnmetricsproviders + shortNames: + - kmp + singular: keptnmetricsprovider + scope: Namespaced + versions: + - name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnMetricsProvider is the Schema for the keptnmetricsproviders + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnMetricsProviderSpec defines the desired state of KeptnMetricsProvider + properties: + secretKeyRef: + description: SecretKeySelector selects a key of a Secret. + properties: + key: + description: The key of the secret to select from. Must be a valid + secret key. + type: string + name: + description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + TODO: Add other useful fields. apiVersion, kind, uid?' + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + targetServer: + type: string + required: + - targetServer + type: object + status: + description: unused field + type: string + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnMetricsProvider is the Schema for the keptnmetricsproviders + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnMetricsProviderSpec defines the desired state of KeptnMetricsProvider + properties: + secretKeyRef: + description: SecretKeyRef defines an optional secret for access credentials + to the metrics provider. + properties: + key: + description: The key of the secret to select from. Must be a valid + secret key. + type: string + name: + description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + TODO: Add other useful fields. apiVersion, kind, uid?' + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + targetServer: + description: TargetServer defined the URL at which the metrics provider + is reachable with included port and protocol. + type: string + type: + description: Type represents the provider type. This can be one of prometheus, + dynatrace, datadog, dql. + pattern: prometheus|dynatrace|datadog|dql + type: string + required: + - targetServer + type: object + status: + description: unused field + type: string + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptntask-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptntasks.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: lifecycle.keptn.sh + names: + kind: KeptnTask + listKind: KeptnTaskList + plural: keptntasks + singular: keptntask + scope: Namespaced + versions: + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.appVersion + name: AppVersion + type: string + - jsonPath: .spec.workload + name: WorkloadName + type: string + - jsonPath: .spec.workloadVersion + name: WorkloadVersion + type: string + - jsonPath: .status.jobName + name: Job Name + type: string + - jsonPath: .status.status + name: Status + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnTask is the Schema for the keptntasks API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnTaskSpec defines the desired state of KeptnTask + properties: + app: + type: string + appVersion: + type: string + checkType: + type: string + context: + properties: + appName: + type: string + appVersion: + type: string + objectType: + type: string + taskType: + type: string + workloadName: + type: string + workloadVersion: + type: string + required: + - appName + - appVersion + - objectType + - taskType + - workloadName + - workloadVersion + type: object + parameters: + properties: + map: + additionalProperties: + type: string + type: object + type: object + secureParameters: + properties: + secret: + type: string + type: object + taskDefinition: + type: string + workload: + type: string + workloadVersion: + type: string + required: + - app + - appVersion + - context + - taskDefinition + - workload + - workloadVersion + type: object + status: + description: KeptnTaskStatus defines the observed state of KeptnTask + properties: + endTime: + format: date-time + type: string + jobName: + type: string + message: + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.appVersion + name: AppVersion + type: string + - jsonPath: .spec.workload + name: WorkloadName + type: string + - jsonPath: .spec.workloadVersion + name: WorkloadVersion + type: string + - jsonPath: .status.jobName + name: Job Name + type: string + - jsonPath: .status.status + name: Status + type: string + name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnTask is the Schema for the keptntasks API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnTaskSpec defines the desired state of KeptnTask + properties: + app: + type: string + appVersion: + type: string + checkType: + type: string + context: + properties: + appName: + type: string + appVersion: + type: string + objectType: + type: string + taskType: + type: string + workloadName: + type: string + workloadVersion: + type: string + required: + - appName + - appVersion + - objectType + - taskType + - workloadName + - workloadVersion + type: object + parameters: + properties: + map: + additionalProperties: + type: string + type: object + type: object + secureParameters: + properties: + secret: + type: string + type: object + taskDefinition: + type: string + workload: + type: string + workloadVersion: + type: string + required: + - app + - appVersion + - context + - taskDefinition + - workload + - workloadVersion + type: object + status: + description: KeptnTaskStatus defines the observed state of KeptnTask + properties: + endTime: + format: date-time + type: string + jobName: + type: string + message: + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.appVersion + name: AppVersion + type: string + - jsonPath: .spec.workload + name: WorkloadName + type: string + - jsonPath: .spec.workloadVersion + name: WorkloadVersion + type: string + - jsonPath: .status.jobName + name: Job Name + type: string + - jsonPath: .status.status + name: Status + type: string + name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnTask is the Schema for the keptntasks API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnTask. + properties: + app: + description: AppName defines the KeptnApp for which the KeptnTask is + executed. + type: string + appVersion: + description: AppVersion defines the version of the KeptnApp for which + the KeptnTask is executed. + type: string + checkType: + description: Type indicates whether the KeptnTask is part of the pre- + or postDeployment phase. + type: string + context: + description: Context contains contextual information about the task + execution. + properties: + appName: + description: AppName the name of the KeptnApp the KeptnTask is being + executed for. + type: string + appVersion: + description: AppVersion the version of the KeptnApp the KeptnTask + is being executed for. + type: string + objectType: + description: ObjectType indicates whether the KeptnTask is being + executed for a KeptnApp or KeptnWorkload. + type: string + taskType: + description: TaskType indicates whether the KeptnTask is part of + the pre- or postDeployment phase. + type: string + workloadName: + description: WorkloadName the name of the KeptnWorkload the KeptnTask + is being executed for. + type: string + workloadVersion: + description: WorkloadVersion the version of the KeptnWorkload the + KeptnTask is being executed for. + type: string + required: + - appName + - appVersion + - objectType + - taskType + - workloadName + - workloadVersion + type: object + parameters: + description: Parameters contains parameters that will be passed to the + job that executes the task. + properties: + map: + additionalProperties: + type: string + description: Inline contains the parameters that will be made available + to the job executing the KeptnTask via the 'DATA' environment + variable. The 'DATA' environment variable's content will be a + json encoded string containing all properties of the map provided. + type: object + type: object + retries: + default: 10 + description: Retries indicates how many times the KeptnTask can be attempted + in the case of an error before considering the KeptnTask to be failed. + format: int32 + type: integer + secureParameters: + description: SecureParameters contains secure parameters that will be + passed to the job that executes the task. These will be stored and + accessed as secrets in the cluster. + properties: + secret: + description: Secret contains the parameters that will be made available + to the job executing the KeptnTask via the 'SECRET_DATA' environment + variable. The 'SECRET_DATA' environment variable's content will + the same as value of the 'SECRET_DATA' key of the referenced secret. + type: string + type: object + taskDefinition: + description: TaskDefinition refers to the name of the KeptnTaskDefinition + which includes the specification for the task to be performed. The + KeptnTaskDefinition can be located in the same namespace as the KeptnTask, + or in the KLT namespace. + type: string + timeout: + default: 5m + description: Timeout specifies the maximum time to wait for the task + to be completed successfully. If the task does not complete successfully + within this time frame, it will be considered to be failed. + pattern: ^0|([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$ + type: string + workload: + description: Workload defines the KeptnWorkload for which the KeptnTask + is executed. + type: string + workloadVersion: + description: WorkloadVersion defines the version of the KeptnWorkload + for which the KeptnTask is executed. + type: string + required: + - app + - appVersion + - context + - taskDefinition + - workload + - workloadVersion + type: object + status: + description: Status describes the current state of the KeptnTask. + properties: + endTime: + description: EndTime represents the time at which the KeptnTask finished. + format: date-time + type: string + jobName: + description: JobName is the name of the Job executing the Task. + type: string + message: + description: Message contains information about unexpected errors encountered + during the execution of the KeptnTask. + type: string + reason: + description: Reason contains more information about the reason for the + last transition of the Job executing the KeptnTask. + type: string + startTime: + description: StartTime represents the time at which the KeptnTask started. + format: date-time + type: string + status: + default: Pending + description: Status represents the overall state of the KeptnTask. + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptntaskdefinition-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptntaskdefinitions.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: lifecycle.keptn.sh + names: + kind: KeptnTaskDefinition + listKind: KeptnTaskDefinitionList + plural: keptntaskdefinitions + singular: keptntaskdefinition + scope: Namespaced + versions: + - name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnTaskDefinition is the Schema for the keptntaskdefinitions + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnTaskDefinitionSpec defines the desired state of KeptnTaskDefinition + properties: + function: + properties: + configMapRef: + properties: + name: + type: string + type: object + functionRef: + properties: + name: + type: string + type: object + httpRef: + properties: + url: + type: string + type: object + inline: + properties: + code: + type: string + type: object + parameters: + properties: + map: + additionalProperties: + type: string + type: object + type: object + secureParameters: + properties: + secret: + type: string + type: object + type: object + type: object + status: + description: KeptnTaskDefinitionStatus defines the observed state of KeptnTaskDefinition + properties: + function: + description: 'INSERT ADDITIONAL STATUS FIELD - define observed state + of cluster Important: Run "make" to regenerate code after modifying + this file' + properties: + configMap: + description: 'INSERT ADDITIONAL STATUS FIELD - define observed state + of cluster Important: Run "make" to regenerate code after modifying + this file' + type: string + type: object + type: object + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnTaskDefinition is the Schema for the keptntaskdefinitions + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnTaskDefinitionSpec defines the desired state of KeptnTaskDefinition + properties: + function: + properties: + configMapRef: + properties: + name: + type: string + type: object + functionRef: + properties: + name: + type: string + type: object + httpRef: + properties: + url: + type: string + type: object + inline: + properties: + code: + type: string + type: object + parameters: + properties: + map: + additionalProperties: + type: string + type: object + type: object + secureParameters: + properties: + secret: + type: string + type: object + type: object + type: object + status: + description: KeptnTaskDefinitionStatus defines the observed state of KeptnTaskDefinition + properties: + function: + description: 'INSERT ADDITIONAL STATUS FIELD - define observed state + of cluster Important: Run "make" to regenerate code after modifying + this file' + properties: + configMap: + description: 'INSERT ADDITIONAL STATUS FIELD - define observed state + of cluster Important: Run "make" to regenerate code after modifying + this file' + type: string + type: object + type: object + type: object + served: true + storage: false + subresources: + status: {} + - name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnTaskDefinition is the Schema for the keptntaskdefinitions + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnTaskDefinition. + properties: + container: + description: Container contains the definition for the container that + is to be used in Job based on the KeptnTaskDefinitions. + properties: + args: + description: 'Arguments to the entrypoint. The container image''s + CMD is used if this is not provided. Variable references $(VAR_NAME) + are expanded using the container''s environment. If a variable + cannot be resolved, the reference in the input string will be + unchanged. Double $$ are reduced to a single $, which allows for + escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce + the string literal "$(VAR_NAME)". Escaped references will never + be expanded, regardless of whether the variable exists or not. + Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell' + items: + type: string + type: array + command: + description: 'Entrypoint array. Not executed within a shell. The + container image''s ENTRYPOINT is used if this is not provided. + Variable references $(VAR_NAME) are expanded using the container''s + environment. If a variable cannot be resolved, the reference in + the input string will be unchanged. Double $$ are reduced to a + single $, which allows for escaping the $(VAR_NAME) syntax: i.e. + "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". + Escaped references will never be expanded, regardless of whether + the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell' + items: + type: string + type: array + env: + description: List of environment variables to set in the container. + Cannot be updated. + items: + description: EnvVar represents an environment variable present + in a Container. + properties: + name: + description: Name of the environment variable. Must be a C_IDENTIFIER. + type: string + value: + description: 'Variable references $(VAR_NAME) are expanded + using the previously defined environment variables in the + container and any service environment variables. If a variable + cannot be resolved, the reference in the input string will + be unchanged. Double $$ are reduced to a single $, which + allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" + will produce the string literal "$(VAR_NAME)". Escaped references + will never be expanded, regardless of whether the variable + exists or not. Defaults to "".' + type: string + valueFrom: + description: Source for the environment variable's value. + Cannot be used if value is not empty. + properties: + configMapKeyRef: + description: Selects a key of a ConfigMap. + properties: + key: + description: The key to select. + type: string + name: + description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + TODO: Add other useful fields. apiVersion, kind, + uid?' + type: string + optional: + description: Specify whether the ConfigMap or its + key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + fieldRef: + description: 'Selects a field of the pod: supports metadata.name, + metadata.namespace, `metadata.labels['''']`, `metadata.annotations['''']`, + spec.nodeName, spec.serviceAccountName, status.hostIP, + status.podIP, status.podIPs.' + properties: + apiVersion: + description: Version of the schema the FieldPath is + written in terms of, defaults to "v1". + type: string + fieldPath: + description: Path of the field to select in the specified + API version. + type: string + required: + - fieldPath + type: object + x-kubernetes-map-type: atomic + resourceFieldRef: + description: 'Selects a resource of the container: only + resources limits and requests (limits.cpu, limits.memory, + limits.ephemeral-storage, requests.cpu, requests.memory + and requests.ephemeral-storage) are currently supported.' + properties: + containerName: + description: 'Container name: required for volumes, + optional for env vars' + type: string + divisor: + anyOf: + - type: integer + - type: string + description: Specifies the output format of the exposed + resources, defaults to "1" + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + resource: + description: 'Required: resource to select' + type: string + required: + - resource + type: object + x-kubernetes-map-type: atomic + secretKeyRef: + description: Selects a key of a secret in the pod's namespace + properties: + key: + description: The key of the secret to select from. Must + be a valid secret key. + type: string + name: + description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + TODO: Add other useful fields. apiVersion, kind, + uid?' + type: string + optional: + description: Specify whether the Secret or its key + must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + type: object + required: + - name + type: object + type: array + envFrom: + description: List of sources to populate environment variables in + the container. The keys defined within a source must be a C_IDENTIFIER. + All invalid keys will be reported as an event when the container + is starting. When a key exists in multiple sources, the value + associated with the last source will take precedence. Values defined + by an Env with a duplicate key will take precedence. Cannot be + updated. + items: + description: EnvFromSource represents the source of a set of ConfigMaps + properties: + configMapRef: + description: The ConfigMap to select from + properties: + name: + description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + TODO: Add other useful fields. apiVersion, kind, uid?' + type: string + optional: + description: Specify whether the ConfigMap must be defined + type: boolean + type: object + x-kubernetes-map-type: atomic + prefix: + description: An optional identifier to prepend to each key + in the ConfigMap. Must be a C_IDENTIFIER. + type: string + secretRef: + description: The Secret to select from + properties: + name: + description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names + TODO: Add other useful fields. apiVersion, kind, uid?' + type: string + optional: + description: Specify whether the Secret must be defined + type: boolean + type: object + x-kubernetes-map-type: atomic + type: object + type: array + image: + description: 'Container image name. More info: https://kubernetes.io/docs/concepts/containers/images + This field is optional to allow higher level config management + to default or override container images in workload controllers + like Deployments and StatefulSets.' + type: string + imagePullPolicy: + description: 'Image pull policy. One of Always, Never, IfNotPresent. + Defaults to Always if :latest tag is specified, or IfNotPresent + otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images' + type: string + lifecycle: + description: Actions that the management system should take in response + to container lifecycle events. Cannot be updated. + properties: + postStart: + description: 'PostStart is called immediately after a container + is created. If the handler fails, the container is terminated + and restarted according to its restart policy. Other management + of the container blocks until the hook completes. More info: + https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks' + properties: + exec: + description: Exec specifies the action to take. + properties: + command: + description: Command is the command line to execute + inside the container, the working directory for the + command is root ('/') in the container's filesystem. + The command is simply exec'd, it is not run inside + a shell, so traditional shell instructions ('|', etc) + won't work. To use a shell, you need to explicitly + call out to that shell. Exit status of 0 is treated + as live/healthy and non-zero is unhealthy. + items: + type: string + type: array + type: object + httpGet: + description: HTTPGet specifies the http request to perform. + properties: + host: + description: Host name to connect to, defaults to the + pod IP. You probably want to set "Host" in httpHeaders + instead. + type: string + httpHeaders: + description: Custom headers to set in the request. HTTP + allows repeated headers. + items: + description: HTTPHeader describes a custom header + to be used in HTTP probes + properties: + name: + description: The header field name. This will + be canonicalized upon output, so case-variant + names will be understood as the same header. + type: string + value: + description: The header field value + type: string + required: + - name + - value + type: object + type: array + path: + description: Path to access on the HTTP server. + type: string + port: + anyOf: + - type: integer + - type: string + description: Name or number of the port to access on + the container. Number must be in the range 1 to 65535. + Name must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + scheme: + description: Scheme to use for connecting to the host. + Defaults to HTTP. + type: string + required: + - port + type: object + tcpSocket: + description: Deprecated. TCPSocket is NOT supported as a + LifecycleHandler and kept for the backward compatibility. + There are no validation of this field and lifecycle hooks + will fail in runtime when tcp handler is specified. + properties: + host: + description: 'Optional: Host name to connect to, defaults + to the pod IP.' + type: string + port: + anyOf: + - type: integer + - type: string + description: Number or name of the port to access on + the container. Number must be in the range 1 to 65535. + Name must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + required: + - port + type: object + type: object + preStop: + description: 'PreStop is called immediately before a container + is terminated due to an API request or management event such + as liveness/startup probe failure, preemption, resource contention, + etc. The handler is not called if the container crashes or + exits. The Pod''s termination grace period countdown begins + before the PreStop hook is executed. Regardless of the outcome + of the handler, the container will eventually terminate within + the Pod''s termination grace period (unless delayed by finalizers). + Other management of the container blocks until the hook completes + or until the termination grace period is reached. More info: + https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks' + properties: + exec: + description: Exec specifies the action to take. + properties: + command: + description: Command is the command line to execute + inside the container, the working directory for the + command is root ('/') in the container's filesystem. + The command is simply exec'd, it is not run inside + a shell, so traditional shell instructions ('|', etc) + won't work. To use a shell, you need to explicitly + call out to that shell. Exit status of 0 is treated + as live/healthy and non-zero is unhealthy. + items: + type: string + type: array + type: object + httpGet: + description: HTTPGet specifies the http request to perform. + properties: + host: + description: Host name to connect to, defaults to the + pod IP. You probably want to set "Host" in httpHeaders + instead. + type: string + httpHeaders: + description: Custom headers to set in the request. HTTP + allows repeated headers. + items: + description: HTTPHeader describes a custom header + to be used in HTTP probes + properties: + name: + description: The header field name. This will + be canonicalized upon output, so case-variant + names will be understood as the same header. + type: string + value: + description: The header field value + type: string + required: + - name + - value + type: object + type: array + path: + description: Path to access on the HTTP server. + type: string + port: + anyOf: + - type: integer + - type: string + description: Name or number of the port to access on + the container. Number must be in the range 1 to 65535. + Name must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + scheme: + description: Scheme to use for connecting to the host. + Defaults to HTTP. + type: string + required: + - port + type: object + tcpSocket: + description: Deprecated. TCPSocket is NOT supported as a + LifecycleHandler and kept for the backward compatibility. + There are no validation of this field and lifecycle hooks + will fail in runtime when tcp handler is specified. + properties: + host: + description: 'Optional: Host name to connect to, defaults + to the pod IP.' + type: string + port: + anyOf: + - type: integer + - type: string + description: Number or name of the port to access on + the container. Number must be in the range 1 to 65535. + Name must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + required: + - port + type: object + type: object + type: object + livenessProbe: + description: 'Periodic probe of container liveness. Container will + be restarted if the probe fails. Cannot be updated. More info: + https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + properties: + exec: + description: Exec specifies the action to take. + properties: + command: + description: Command is the command line to execute inside + the container, the working directory for the command is + root ('/') in the container's filesystem. The command + is simply exec'd, it is not run inside a shell, so traditional + shell instructions ('|', etc) won't work. To use a shell, + you need to explicitly call out to that shell. Exit status + of 0 is treated as live/healthy and non-zero is unhealthy. + items: + type: string + type: array + type: object + failureThreshold: + description: Minimum consecutive failures for the probe to be + considered failed after having succeeded. Defaults to 3. Minimum + value is 1. + format: int32 + type: integer + grpc: + description: GRPC specifies an action involving a GRPC port. + This is a beta field and requires enabling GRPCContainerProbe + feature gate. + properties: + port: + description: Port number of the gRPC service. Number must + be in the range 1 to 65535. + format: int32 + type: integer + service: + description: "Service is the name of the service to place + in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). + \n If this is not specified, the default behavior is defined + by gRPC." + type: string + required: + - port + type: object + httpGet: + description: HTTPGet specifies the http request to perform. + properties: + host: + description: Host name to connect to, defaults to the pod + IP. You probably want to set "Host" in httpHeaders instead. + type: string + httpHeaders: + description: Custom headers to set in the request. HTTP + allows repeated headers. + items: + description: HTTPHeader describes a custom header to be + used in HTTP probes + properties: + name: + description: The header field name. This will be canonicalized + upon output, so case-variant names will be understood + as the same header. + type: string + value: + description: The header field value + type: string + required: + - name + - value + type: object + type: array + path: + description: Path to access on the HTTP server. + type: string + port: + anyOf: + - type: integer + - type: string + description: Name or number of the port to access on the + container. Number must be in the range 1 to 65535. Name + must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + scheme: + description: Scheme to use for connecting to the host. Defaults + to HTTP. + type: string + required: + - port + type: object + initialDelaySeconds: + description: 'Number of seconds after the container has started + before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + format: int32 + type: integer + periodSeconds: + description: How often (in seconds) to perform the probe. Default + to 10 seconds. Minimum value is 1. + format: int32 + type: integer + successThreshold: + description: Minimum consecutive successes for the probe to + be considered successful after having failed. Defaults to + 1. Must be 1 for liveness and startup. Minimum value is 1. + format: int32 + type: integer + tcpSocket: + description: TCPSocket specifies an action involving a TCP port. + properties: + host: + description: 'Optional: Host name to connect to, defaults + to the pod IP.' + type: string + port: + anyOf: + - type: integer + - type: string + description: Number or name of the port to access on the + container. Number must be in the range 1 to 65535. Name + must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + required: + - port + type: object + terminationGracePeriodSeconds: + description: Optional duration in seconds the pod needs to terminate + gracefully upon probe failure. The grace period is the duration + in seconds after the processes running in the pod are sent + a termination signal and the time when the processes are forcibly + halted with a kill signal. Set this value longer than the + expected cleanup time for your process. If this value is nil, + the pod's terminationGracePeriodSeconds will be used. Otherwise, + this value overrides the value provided by the pod spec. Value + must be non-negative integer. The value zero indicates stop + immediately via the kill signal (no opportunity to shut down). + This is a beta field and requires enabling ProbeTerminationGracePeriod + feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds + is used if unset. + format: int64 + type: integer + timeoutSeconds: + description: 'Number of seconds after which the probe times + out. Defaults to 1 second. Minimum value is 1. More info: + https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + format: int32 + type: integer + type: object + name: + description: Name of the container specified as a DNS_LABEL. Each + container in a pod must have a unique name (DNS_LABEL). Cannot + be updated. + type: string + ports: + description: List of ports to expose from the container. Not specifying + a port here DOES NOT prevent that port from being exposed. Any + port which is listening on the default "0.0.0.0" address inside + a container will be accessible from the network. Modifying this + array with strategic merge patch may corrupt the data. For more + information See https://github.com/kubernetes/kubernetes/issues/108255. + Cannot be updated. + items: + description: ContainerPort represents a network port in a single + container. + properties: + containerPort: + description: Number of port to expose on the pod's IP address. + This must be a valid port number, 0 < x < 65536. + format: int32 + type: integer + hostIP: + description: What host IP to bind the external port to. + type: string + hostPort: + description: Number of port to expose on the host. If specified, + this must be a valid port number, 0 < x < 65536. If HostNetwork + is specified, this must match ContainerPort. Most containers + do not need this. + format: int32 + type: integer + name: + description: If specified, this must be an IANA_SVC_NAME and + unique within the pod. Each named port in a pod must have + a unique name. Name for the port that can be referred to + by services. + type: string + protocol: + default: TCP + description: Protocol for port. Must be UDP, TCP, or SCTP. + Defaults to "TCP". + type: string + required: + - containerPort + type: object + type: array + x-kubernetes-list-map-keys: + - containerPort + - protocol + x-kubernetes-list-type: map + readinessProbe: + description: 'Periodic probe of container service readiness. Container + will be removed from service endpoints if the probe fails. Cannot + be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + properties: + exec: + description: Exec specifies the action to take. + properties: + command: + description: Command is the command line to execute inside + the container, the working directory for the command is + root ('/') in the container's filesystem. The command + is simply exec'd, it is not run inside a shell, so traditional + shell instructions ('|', etc) won't work. To use a shell, + you need to explicitly call out to that shell. Exit status + of 0 is treated as live/healthy and non-zero is unhealthy. + items: + type: string + type: array + type: object + failureThreshold: + description: Minimum consecutive failures for the probe to be + considered failed after having succeeded. Defaults to 3. Minimum + value is 1. + format: int32 + type: integer + grpc: + description: GRPC specifies an action involving a GRPC port. + This is a beta field and requires enabling GRPCContainerProbe + feature gate. + properties: + port: + description: Port number of the gRPC service. Number must + be in the range 1 to 65535. + format: int32 + type: integer + service: + description: "Service is the name of the service to place + in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). + \n If this is not specified, the default behavior is defined + by gRPC." + type: string + required: + - port + type: object + httpGet: + description: HTTPGet specifies the http request to perform. + properties: + host: + description: Host name to connect to, defaults to the pod + IP. You probably want to set "Host" in httpHeaders instead. + type: string + httpHeaders: + description: Custom headers to set in the request. HTTP + allows repeated headers. + items: + description: HTTPHeader describes a custom header to be + used in HTTP probes + properties: + name: + description: The header field name. This will be canonicalized + upon output, so case-variant names will be understood + as the same header. + type: string + value: + description: The header field value + type: string + required: + - name + - value + type: object + type: array + path: + description: Path to access on the HTTP server. + type: string + port: + anyOf: + - type: integer + - type: string + description: Name or number of the port to access on the + container. Number must be in the range 1 to 65535. Name + must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + scheme: + description: Scheme to use for connecting to the host. Defaults + to HTTP. + type: string + required: + - port + type: object + initialDelaySeconds: + description: 'Number of seconds after the container has started + before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + format: int32 + type: integer + periodSeconds: + description: How often (in seconds) to perform the probe. Default + to 10 seconds. Minimum value is 1. + format: int32 + type: integer + successThreshold: + description: Minimum consecutive successes for the probe to + be considered successful after having failed. Defaults to + 1. Must be 1 for liveness and startup. Minimum value is 1. + format: int32 + type: integer + tcpSocket: + description: TCPSocket specifies an action involving a TCP port. + properties: + host: + description: 'Optional: Host name to connect to, defaults + to the pod IP.' + type: string + port: + anyOf: + - type: integer + - type: string + description: Number or name of the port to access on the + container. Number must be in the range 1 to 65535. Name + must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + required: + - port + type: object + terminationGracePeriodSeconds: + description: Optional duration in seconds the pod needs to terminate + gracefully upon probe failure. The grace period is the duration + in seconds after the processes running in the pod are sent + a termination signal and the time when the processes are forcibly + halted with a kill signal. Set this value longer than the + expected cleanup time for your process. If this value is nil, + the pod's terminationGracePeriodSeconds will be used. Otherwise, + this value overrides the value provided by the pod spec. Value + must be non-negative integer. The value zero indicates stop + immediately via the kill signal (no opportunity to shut down). + This is a beta field and requires enabling ProbeTerminationGracePeriod + feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds + is used if unset. + format: int64 + type: integer + timeoutSeconds: + description: 'Number of seconds after which the probe times + out. Defaults to 1 second. Minimum value is 1. More info: + https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + format: int32 + type: integer + type: object + resources: + description: 'Compute Resources required by this container. Cannot + be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/' + properties: + claims: + description: "Claims lists the names of resources, defined in + spec.resourceClaims, that are used by this container. \n This + is an alpha field and requires enabling the DynamicResourceAllocation + feature gate. \n This field is immutable. It can only be set + for containers." + items: + description: ResourceClaim references one entry in PodSpec.ResourceClaims. + properties: + name: + description: Name must match the name of one entry in + pod.spec.resourceClaims of the Pod where this field + is used. It makes that resource available inside a container. + type: string + required: + - name + type: object + type: array + x-kubernetes-list-map-keys: + - name + x-kubernetes-list-type: map + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: 'Limits describes the maximum amount of compute + resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/' + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: 'Requests describes the minimum amount of compute + resources required. If Requests is omitted for a container, + it defaults to Limits if that is explicitly specified, otherwise + to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/' + type: object + type: object + securityContext: + description: 'SecurityContext defines the security options the container + should be run with. If set, the fields of SecurityContext override + the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/' + properties: + allowPrivilegeEscalation: + description: 'AllowPrivilegeEscalation controls whether a process + can gain more privileges than its parent process. This bool + directly controls if the no_new_privs flag will be set on + the container process. AllowPrivilegeEscalation is true always + when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN + Note that this field cannot be set when spec.os.name is windows.' + type: boolean + capabilities: + description: The capabilities to add/drop when running containers. + Defaults to the default set of capabilities granted by the + container runtime. Note that this field cannot be set when + spec.os.name is windows. + properties: + add: + description: Added capabilities + items: + description: Capability represent POSIX capabilities type + type: string + type: array + drop: + description: Removed capabilities + items: + description: Capability represent POSIX capabilities type + type: string + type: array + type: object + privileged: + description: Run container in privileged mode. Processes in + privileged containers are essentially equivalent to root on + the host. Defaults to false. Note that this field cannot be + set when spec.os.name is windows. + type: boolean + procMount: + description: procMount denotes the type of proc mount to use + for the containers. The default is DefaultProcMount which + uses the container runtime defaults for readonly paths and + masked paths. This requires the ProcMountType feature flag + to be enabled. Note that this field cannot be set when spec.os.name + is windows. + type: string + readOnlyRootFilesystem: + description: Whether this container has a read-only root filesystem. + Default is false. Note that this field cannot be set when + spec.os.name is windows. + type: boolean + runAsGroup: + description: The GID to run the entrypoint of the container + process. Uses runtime default if unset. May also be set in + PodSecurityContext. If set in both SecurityContext and PodSecurityContext, + the value specified in SecurityContext takes precedence. Note + that this field cannot be set when spec.os.name is windows. + format: int64 + type: integer + runAsNonRoot: + description: Indicates that the container must run as a non-root + user. If true, the Kubelet will validate the image at runtime + to ensure that it does not run as UID 0 (root) and fail to + start the container if it does. If unset or false, no such + validation will be performed. May also be set in PodSecurityContext. If + set in both SecurityContext and PodSecurityContext, the value + specified in SecurityContext takes precedence. + type: boolean + runAsUser: + description: The UID to run the entrypoint of the container + process. Defaults to user specified in image metadata if unspecified. + May also be set in PodSecurityContext. If set in both SecurityContext + and PodSecurityContext, the value specified in SecurityContext + takes precedence. Note that this field cannot be set when + spec.os.name is windows. + format: int64 + type: integer + seLinuxOptions: + description: The SELinux context to be applied to the container. + If unspecified, the container runtime will allocate a random + SELinux context for each container. May also be set in PodSecurityContext. If + set in both SecurityContext and PodSecurityContext, the value + specified in SecurityContext takes precedence. Note that this + field cannot be set when spec.os.name is windows. + properties: + level: + description: Level is SELinux level label that applies to + the container. + type: string + role: + description: Role is a SELinux role label that applies to + the container. + type: string + type: + description: Type is a SELinux type label that applies to + the container. + type: string + user: + description: User is a SELinux user label that applies to + the container. + type: string + type: object + seccompProfile: + description: The seccomp options to use by this container. If + seccomp options are provided at both the pod & container level, + the container options override the pod options. Note that + this field cannot be set when spec.os.name is windows. + properties: + localhostProfile: + description: localhostProfile indicates a profile defined + in a file on the node should be used. The profile must + be preconfigured on the node to work. Must be a descending + path, relative to the kubelet's configured seccomp profile + location. Must only be set if type is "Localhost". + type: string + type: + description: "type indicates which kind of seccomp profile + will be applied. Valid options are: \n Localhost - a profile + defined in a file on the node should be used. RuntimeDefault + - the container runtime default profile should be used. + Unconfined - no profile should be applied." + type: string + required: + - type + type: object + windowsOptions: + description: The Windows specific settings applied to all containers. + If unspecified, the options from the PodSecurityContext will + be used. If set in both SecurityContext and PodSecurityContext, + the value specified in SecurityContext takes precedence. Note + that this field cannot be set when spec.os.name is linux. + properties: + gmsaCredentialSpec: + description: GMSACredentialSpec is where the GMSA admission + webhook (https://github.com/kubernetes-sigs/windows-gmsa) + inlines the contents of the GMSA credential spec named + by the GMSACredentialSpecName field. + type: string + gmsaCredentialSpecName: + description: GMSACredentialSpecName is the name of the GMSA + credential spec to use. + type: string + hostProcess: + description: HostProcess determines if a container should + be run as a 'Host Process' container. This field is alpha-level + and will only be honored by components that enable the + WindowsHostProcessContainers feature flag. Setting this + field without the feature flag will result in errors when + validating the Pod. All of a Pod's containers must have + the same effective HostProcess value (it is not allowed + to have a mix of HostProcess containers and non-HostProcess + containers). In addition, if HostProcess is true then + HostNetwork must also be set to true. + type: boolean + runAsUserName: + description: The UserName in Windows to run the entrypoint + of the container process. Defaults to the user specified + in image metadata if unspecified. May also be set in PodSecurityContext. + If set in both SecurityContext and PodSecurityContext, + the value specified in SecurityContext takes precedence. + type: string + type: object + type: object + startupProbe: + description: 'StartupProbe indicates that the Pod has successfully + initialized. If specified, no other probes are executed until + this completes successfully. If this probe fails, the Pod will + be restarted, just as if the livenessProbe failed. This can be + used to provide different probe parameters at the beginning of + a Pod''s lifecycle, when it might take a long time to load data + or warm a cache, than during steady-state operation. This cannot + be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + properties: + exec: + description: Exec specifies the action to take. + properties: + command: + description: Command is the command line to execute inside + the container, the working directory for the command is + root ('/') in the container's filesystem. The command + is simply exec'd, it is not run inside a shell, so traditional + shell instructions ('|', etc) won't work. To use a shell, + you need to explicitly call out to that shell. Exit status + of 0 is treated as live/healthy and non-zero is unhealthy. + items: + type: string + type: array + type: object + failureThreshold: + description: Minimum consecutive failures for the probe to be + considered failed after having succeeded. Defaults to 3. Minimum + value is 1. + format: int32 + type: integer + grpc: + description: GRPC specifies an action involving a GRPC port. + This is a beta field and requires enabling GRPCContainerProbe + feature gate. + properties: + port: + description: Port number of the gRPC service. Number must + be in the range 1 to 65535. + format: int32 + type: integer + service: + description: "Service is the name of the service to place + in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). + \n If this is not specified, the default behavior is defined + by gRPC." + type: string + required: + - port + type: object + httpGet: + description: HTTPGet specifies the http request to perform. + properties: + host: + description: Host name to connect to, defaults to the pod + IP. You probably want to set "Host" in httpHeaders instead. + type: string + httpHeaders: + description: Custom headers to set in the request. HTTP + allows repeated headers. + items: + description: HTTPHeader describes a custom header to be + used in HTTP probes + properties: + name: + description: The header field name. This will be canonicalized + upon output, so case-variant names will be understood + as the same header. + type: string + value: + description: The header field value + type: string + required: + - name + - value + type: object + type: array + path: + description: Path to access on the HTTP server. + type: string + port: + anyOf: + - type: integer + - type: string + description: Name or number of the port to access on the + container. Number must be in the range 1 to 65535. Name + must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + scheme: + description: Scheme to use for connecting to the host. Defaults + to HTTP. + type: string + required: + - port + type: object + initialDelaySeconds: + description: 'Number of seconds after the container has started + before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + format: int32 + type: integer + periodSeconds: + description: How often (in seconds) to perform the probe. Default + to 10 seconds. Minimum value is 1. + format: int32 + type: integer + successThreshold: + description: Minimum consecutive successes for the probe to + be considered successful after having failed. Defaults to + 1. Must be 1 for liveness and startup. Minimum value is 1. + format: int32 + type: integer + tcpSocket: + description: TCPSocket specifies an action involving a TCP port. + properties: + host: + description: 'Optional: Host name to connect to, defaults + to the pod IP.' + type: string + port: + anyOf: + - type: integer + - type: string + description: Number or name of the port to access on the + container. Number must be in the range 1 to 65535. Name + must be an IANA_SVC_NAME. + x-kubernetes-int-or-string: true + required: + - port + type: object + terminationGracePeriodSeconds: + description: Optional duration in seconds the pod needs to terminate + gracefully upon probe failure. The grace period is the duration + in seconds after the processes running in the pod are sent + a termination signal and the time when the processes are forcibly + halted with a kill signal. Set this value longer than the + expected cleanup time for your process. If this value is nil, + the pod's terminationGracePeriodSeconds will be used. Otherwise, + this value overrides the value provided by the pod spec. Value + must be non-negative integer. The value zero indicates stop + immediately via the kill signal (no opportunity to shut down). + This is a beta field and requires enabling ProbeTerminationGracePeriod + feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds + is used if unset. + format: int64 + type: integer + timeoutSeconds: + description: 'Number of seconds after which the probe times + out. Defaults to 1 second. Minimum value is 1. More info: + https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes' + format: int32 + type: integer + type: object + stdin: + description: Whether this container should allocate a buffer for + stdin in the container runtime. If this is not set, reads from + stdin in the container will always result in EOF. Default is false. + type: boolean + stdinOnce: + description: Whether the container runtime should close the stdin + channel after it has been opened by a single attach. When stdin + is true the stdin stream will remain open across multiple attach + sessions. If stdinOnce is set to true, stdin is opened on container + start, is empty until the first client attaches to stdin, and + then remains open and accepts data until the client disconnects, + at which time stdin is closed and remains closed until the container + is restarted. If this flag is false, a container processes that + reads from stdin will never receive an EOF. Default is false + type: boolean + terminationMessagePath: + description: 'Optional: Path at which the file to which the container''s + termination message will be written is mounted into the container''s + filesystem. Message written is intended to be brief final status, + such as an assertion failure message. Will be truncated by the + node if greater than 4096 bytes. The total message length across + all containers will be limited to 12kb. Defaults to /dev/termination-log. + Cannot be updated.' + type: string + terminationMessagePolicy: + description: Indicate how the termination message should be populated. + File will use the contents of terminationMessagePath to populate + the container status message on both success and failure. FallbackToLogsOnError + will use the last chunk of container log output if the termination + message file is empty and the container exited with an error. + The log output is limited to 2048 bytes or 80 lines, whichever + is smaller. Defaults to File. Cannot be updated. + type: string + tty: + description: Whether this container should allocate a TTY for itself, + also requires 'stdin' to be true. Default is false. + type: boolean + volumeDevices: + description: volumeDevices is the list of block devices to be used + by the container. + items: + description: volumeDevice describes a mapping of a raw block device + within a container. + properties: + devicePath: + description: devicePath is the path inside of the container + that the device will be mapped to. + type: string + name: + description: name must match the name of a persistentVolumeClaim + in the pod + type: string + required: + - devicePath + - name + type: object + type: array + volumeMounts: + description: Pod volumes to mount into the container's filesystem. + Cannot be updated. + items: + description: VolumeMount describes a mounting of a Volume within + a container. + properties: + mountPath: + description: Path within the container at which the volume + should be mounted. Must not contain ':'. + type: string + mountPropagation: + description: mountPropagation determines how mounts are propagated + from the host to container and the other way around. When + not set, MountPropagationNone is used. This field is beta + in 1.10. + type: string + name: + description: This must match the Name of a Volume. + type: string + readOnly: + description: Mounted read-only if true, read-write otherwise + (false or unspecified). Defaults to false. + type: boolean + subPath: + description: Path within the volume from which the container's + volume should be mounted. Defaults to "" (volume's root). + type: string + subPathExpr: + description: Expanded path within the volume from which the + container's volume should be mounted. Behaves similarly + to SubPath but environment variable references $(VAR_NAME) + are expanded using the container's environment. Defaults + to "" (volume's root). SubPathExpr and SubPath are mutually + exclusive. + type: string + required: + - mountPath + - name + type: object + type: array + workingDir: + description: Container's working directory. If not specified, the + container runtime's default will be used, which might be configured + in the container image. Cannot be updated. + type: string + required: + - name + type: object + deno: + description: Deno contains the definition for the Deno function that + is to be executed in KeptnTasks based on the KeptnTaskDefinitions. + properties: + cmdParameters: + description: CmdParameters contains parameters that will be passed + to the command + type: string + configMapRef: + description: ConfigMapReference allows to reference a ConfigMap + containing the code of the function. When referencing a ConfigMap, + the code of the function must be available as a value of the 'code' + key of the referenced ConfigMap. + properties: + name: + description: Name is the name of the referenced ConfigMap. + type: string + type: object + functionRef: + description: FunctionReference allows to reference another KeptnTaskDefinition + which contains the source code of the function to be executes + for KeptnTasks based on this KeptnTaskDefinition. This can be + useful when you have multiple KeptnTaskDefinitions that should + execute the same logic, but each with different parameters. + properties: + name: + description: Name is the name of the referenced KeptnTaksDefinition. + type: string + type: object + httpRef: + description: HttpReference allows to point to an HTTP URL containing + the code of the function. + properties: + url: + description: Url is the URL containing the code of the function. + type: string + type: object + inline: + description: Inline allows to specify the code that should be executed + directly in the KeptnTaskDefinition, as a multi-line string. + properties: + code: + description: Code contains the code of the function. + type: string + type: object + parameters: + description: Parameters contains parameters that will be passed + to the job that executes the task as env variables. + properties: + map: + additionalProperties: + type: string + description: Inline contains the parameters that will be made + available to the job executing the KeptnTask via the 'DATA' + environment variable. The 'DATA' environment variable's content + will be a json encoded string containing all properties of + the map provided. + type: object + type: object + secureParameters: + description: SecureParameters contains secure parameters that will + be passed to the job that executes the task. These will be stored + and accessed as secrets in the cluster. + properties: + secret: + description: Secret contains the parameters that will be made + available to the job executing the KeptnTask via the 'SECRET_DATA' + environment variable. The 'SECRET_DATA' environment variable's + content will the same as value of the 'SECRET_DATA' key of + the referenced secret. + type: string + type: object + type: object + function: + description: Deprecated Function contains the definition for the function + that is to be executed in KeptnTasks based on the KeptnTaskDefinitions. + properties: + cmdParameters: + description: CmdParameters contains parameters that will be passed + to the command + type: string + configMapRef: + description: ConfigMapReference allows to reference a ConfigMap + containing the code of the function. When referencing a ConfigMap, + the code of the function must be available as a value of the 'code' + key of the referenced ConfigMap. + properties: + name: + description: Name is the name of the referenced ConfigMap. + type: string + type: object + functionRef: + description: FunctionReference allows to reference another KeptnTaskDefinition + which contains the source code of the function to be executes + for KeptnTasks based on this KeptnTaskDefinition. This can be + useful when you have multiple KeptnTaskDefinitions that should + execute the same logic, but each with different parameters. + properties: + name: + description: Name is the name of the referenced KeptnTaksDefinition. + type: string + type: object + httpRef: + description: HttpReference allows to point to an HTTP URL containing + the code of the function. + properties: + url: + description: Url is the URL containing the code of the function. + type: string + type: object + inline: + description: Inline allows to specify the code that should be executed + directly in the KeptnTaskDefinition, as a multi-line string. + properties: + code: + description: Code contains the code of the function. + type: string + type: object + parameters: + description: Parameters contains parameters that will be passed + to the job that executes the task as env variables. + properties: + map: + additionalProperties: + type: string + description: Inline contains the parameters that will be made + available to the job executing the KeptnTask via the 'DATA' + environment variable. The 'DATA' environment variable's content + will be a json encoded string containing all properties of + the map provided. + type: object + type: object + secureParameters: + description: SecureParameters contains secure parameters that will + be passed to the job that executes the task. These will be stored + and accessed as secrets in the cluster. + properties: + secret: + description: Secret contains the parameters that will be made + available to the job executing the KeptnTask via the 'SECRET_DATA' + environment variable. The 'SECRET_DATA' environment variable's + content will the same as value of the 'SECRET_DATA' key of + the referenced secret. + type: string + type: object + type: object + python: + description: Python contains the definition for the python function + that is to be executed in KeptnTasks based on the KeptnTaskDefinitions. + properties: + cmdParameters: + description: CmdParameters contains parameters that will be passed + to the command + type: string + configMapRef: + description: ConfigMapReference allows to reference a ConfigMap + containing the code of the function. When referencing a ConfigMap, + the code of the function must be available as a value of the 'code' + key of the referenced ConfigMap. + properties: + name: + description: Name is the name of the referenced ConfigMap. + type: string + type: object + functionRef: + description: FunctionReference allows to reference another KeptnTaskDefinition + which contains the source code of the function to be executes + for KeptnTasks based on this KeptnTaskDefinition. This can be + useful when you have multiple KeptnTaskDefinitions that should + execute the same logic, but each with different parameters. + properties: + name: + description: Name is the name of the referenced KeptnTaksDefinition. + type: string + type: object + httpRef: + description: HttpReference allows to point to an HTTP URL containing + the code of the function. + properties: + url: + description: Url is the URL containing the code of the function. + type: string + type: object + inline: + description: Inline allows to specify the code that should be executed + directly in the KeptnTaskDefinition, as a multi-line string. + properties: + code: + description: Code contains the code of the function. + type: string + type: object + parameters: + description: Parameters contains parameters that will be passed + to the job that executes the task as env variables. + properties: + map: + additionalProperties: + type: string + description: Inline contains the parameters that will be made + available to the job executing the KeptnTask via the 'DATA' + environment variable. The 'DATA' environment variable's content + will be a json encoded string containing all properties of + the map provided. + type: object + type: object + secureParameters: + description: SecureParameters contains secure parameters that will + be passed to the job that executes the task. These will be stored + and accessed as secrets in the cluster. + properties: + secret: + description: Secret contains the parameters that will be made + available to the job executing the KeptnTask via the 'SECRET_DATA' + environment variable. The 'SECRET_DATA' environment variable's + content will the same as value of the 'SECRET_DATA' key of + the referenced secret. + type: string + type: object + type: object + retries: + default: 10 + description: Retries specifies how many times a job executing the KeptnTaskDefinition + should be restarted in the case of an unsuccessful attempt. + format: int32 + type: integer + timeout: + default: 5m + description: Timeout specifies the maximum time to wait for the task + to be completed successfully. If the task does not complete successfully + within this time frame, it will be considered to be failed. + pattern: ^0|([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$ + type: string + type: object + status: + description: Status describes the current state of the KeptnTaskDefinition. + properties: + function: + description: Function contains status information of the function definition + for the task. + properties: + configMap: + description: ConfigMap indicates the ConfigMap in which the function + code is stored. + type: string + type: object + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnworkload-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnworkloads.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: lifecycle.keptn.sh + names: + kind: KeptnWorkload + listKind: KeptnWorkloadList + plural: keptnworkloads + singular: keptnworkload + scope: Namespaced + versions: + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.version + name: Version + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnWorkload is the Schema for the keptnworkloads API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnWorkloadSpec defines the desired state of KeptnWorkload + properties: + app: + type: string + postDeploymentEvaluations: + items: + type: string + type: array + postDeploymentTasks: + items: + type: string + type: array + preDeploymentEvaluations: + items: + type: string + type: array + preDeploymentTasks: + items: + type: string + type: array + resourceReference: + properties: + kind: + type: string + name: + type: string + uid: + description: UID is a type that holds unique ID values, including + UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being + a type captures intent and helps make sure that UIDs and names + do not get conflated. + type: string + required: + - kind + - name + - uid + type: object + version: + type: string + required: + - app + - resourceReference + - version + type: object + status: + description: KeptnWorkloadStatus defines the observed state of KeptnWorkload + properties: + currentVersion: + type: string + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.version + name: Version + type: string + name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnWorkload is the Schema for the keptnworkloads API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnWorkloadSpec defines the desired state of KeptnWorkload + properties: + app: + type: string + postDeploymentEvaluations: + items: + type: string + type: array + postDeploymentTasks: + items: + type: string + type: array + preDeploymentEvaluations: + items: + type: string + type: array + preDeploymentTasks: + items: + type: string + type: array + resourceReference: + properties: + kind: + type: string + name: + type: string + uid: + description: UID is a type that holds unique ID values, including + UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being + a type captures intent and helps make sure that UIDs and names + do not get conflated. + type: string + required: + - kind + - name + - uid + type: object + version: + type: string + required: + - app + - resourceReference + - version + type: object + status: + description: KeptnWorkloadStatus defines the observed state of KeptnWorkload + properties: + currentVersion: + type: string + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.version + name: Version + type: string + name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnWorkload is the Schema for the keptnworkloads API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnWorkload. + properties: + app: + description: AppName is the name of the KeptnApp containing the KeptnWorkload. + type: string + postDeploymentEvaluations: + description: PostDeploymentEvaluations is a list of all evaluations + to be performed during the post-deployment phase of the KeptnWorkload. + The items of this list refer to the names of KeptnEvaluationDefinitions + located in the same namespace as the KeptnWorkload, or in the KLT + namespace. + items: + type: string + type: array + postDeploymentTasks: + description: PostDeploymentTasks is a list of all tasks to be performed + during the post-deployment phase of the KeptnWorkload. The items of + this list refer to the names of KeptnTaskDefinitions located in the + same namespace as the KeptnWorkload, or in the KLT namespace. + items: + type: string + type: array + preDeploymentEvaluations: + description: PreDeploymentEvaluations is a list of all evaluations to + be performed during the pre-deployment phase of the KeptnWorkload. + The items of this list refer to the names of KeptnEvaluationDefinitions + located in the same namespace as the KeptnWorkload, or in the KLT + namespace. + items: + type: string + type: array + preDeploymentTasks: + description: PreDeploymentTasks is a list of all tasks to be performed + during the pre-deployment phase of the KeptnWorkload. The items of + this list refer to the names of KeptnTaskDefinitions located in the + same namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + resourceReference: + description: ResourceReference is a reference to the Kubernetes resource + (Deployment, DaemonSet, StatefulSet or ReplicaSet) the KeptnWorkload + is representing. + properties: + kind: + type: string + name: + type: string + uid: + description: UID is a type that holds unique ID values, including + UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being + a type captures intent and helps make sure that UIDs and names + do not get conflated. + type: string + required: + - kind + - name + - uid + type: object + version: + description: Version defines the version of the KeptnWorkload. + type: string + required: + - app + - resourceReference + - version + type: object + status: + description: Status describes the current state of the KeptnWorkload. + properties: + currentVersion: + description: CurrentVersion indicates the version that is currently + deployed or being reconciled. + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/keptnworkloadinstance-crd.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: keptnworkloadinstances.lifecycle.keptn.sh + annotations: + controller-gen.kubebuilder.io/version: v0.12.1 + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + crdGroup: lifecycle.keptn.sh + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + conversion: + strategy: Webhook + webhook: + clientConfig: + service: + name: 'lifecycle-webhook-service' + namespace: 'helmtests' + path: /convert + conversionReviewVersions: + - v1 + group: lifecycle.keptn.sh + names: + kind: KeptnWorkloadInstance + listKind: KeptnWorkloadInstanceList + plural: keptnworkloadinstances + shortNames: + - kwi + singular: keptnworkloadinstance + scope: Namespaced + versions: + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.workloadName + name: WorkloadName + type: string + - jsonPath: .spec.version + name: WorkloadVersion + type: string + - jsonPath: .status.currentPhase + name: Phase + type: string + - jsonPath: .status.preDeploymentStatus + name: PreDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.preDeploymentEvaluationStatus + name: PreDeploymentEvaluationStatus + priority: 1 + type: string + - jsonPath: .status.deploymentStatus + name: DeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentStatus + name: PostDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentEvaluationStatus + name: PostDeploymentEvaluationStatus + priority: 1 + type: string + name: v1alpha1 + schema: + openAPIV3Schema: + description: KeptnWorkloadInstance is the Schema for the keptnworkloadinstances + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnWorkloadInstanceSpec defines the desired state of KeptnWorkloadInstance + properties: + app: + type: string + postDeploymentEvaluations: + items: + type: string + type: array + postDeploymentTasks: + items: + type: string + type: array + preDeploymentEvaluations: + items: + type: string + type: array + preDeploymentTasks: + items: + type: string + type: array + previousVersion: + type: string + resourceReference: + properties: + kind: + type: string + name: + type: string + uid: + description: UID is a type that holds unique ID values, including + UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being + a type captures intent and helps make sure that UIDs and names + do not get conflated. + type: string + required: + - kind + - name + - uid + type: object + traceId: + additionalProperties: + type: string + type: object + version: + type: string + workloadName: + type: string + required: + - app + - resourceReference + - version + - workloadName + type: object + status: + description: KeptnWorkloadInstanceStatus defines the observed state of KeptnWorkloadInstance + properties: + currentPhase: + type: string + deploymentStatus: + default: Pending + type: string + endTime: + format: date-time + type: string + phaseTraceIDs: + additionalProperties: + additionalProperties: + type: string + description: MapCarrier is a TextMapCarrier that uses a map held in + memory as a storage medium for propagated key-value pairs. + type: object + type: object + postDeploymentEvaluationStatus: + default: Pending + type: string + postDeploymentEvaluationTaskStatus: + items: + properties: + endTime: + format: date-time + type: string + evaluationDefinitionName: + type: string + evaluationName: + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + postDeploymentStatus: + default: Pending + type: string + postDeploymentTaskStatus: + items: + properties: + endTime: + format: date-time + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + taskDefinitionName: + type: string + taskName: + type: string + type: object + type: array + preDeploymentEvaluationStatus: + default: Pending + type: string + preDeploymentEvaluationTaskStatus: + items: + properties: + endTime: + format: date-time + type: string + evaluationDefinitionName: + type: string + evaluationName: + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentStatus: + default: Pending + type: string + preDeploymentTaskStatus: + items: + properties: + endTime: + format: date-time + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + taskDefinitionName: + type: string + taskName: + type: string + type: object + type: array + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.workloadName + name: WorkloadName + type: string + - jsonPath: .spec.version + name: WorkloadVersion + type: string + - jsonPath: .status.currentPhase + name: Phase + type: string + - jsonPath: .status.preDeploymentStatus + name: PreDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.preDeploymentEvaluationStatus + name: PreDeploymentEvaluationStatus + priority: 1 + type: string + - jsonPath: .status.deploymentStatus + name: DeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentStatus + name: PostDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentEvaluationStatus + name: PostDeploymentEvaluationStatus + priority: 1 + type: string + name: v1alpha2 + schema: + openAPIV3Schema: + description: KeptnWorkloadInstance is the Schema for the keptnworkloadinstances + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: KeptnWorkloadInstanceSpec defines the desired state of KeptnWorkloadInstance + properties: + app: + type: string + postDeploymentEvaluations: + items: + type: string + type: array + postDeploymentTasks: + items: + type: string + type: array + preDeploymentEvaluations: + items: + type: string + type: array + preDeploymentTasks: + items: + type: string + type: array + previousVersion: + type: string + resourceReference: + properties: + kind: + type: string + name: + type: string + uid: + description: UID is a type that holds unique ID values, including + UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being + a type captures intent and helps make sure that UIDs and names + do not get conflated. + type: string + required: + - kind + - name + - uid + type: object + traceId: + additionalProperties: + type: string + type: object + version: + type: string + workloadName: + type: string + required: + - app + - resourceReference + - version + - workloadName + type: object + status: + description: KeptnWorkloadInstanceStatus defines the observed state of KeptnWorkloadInstance + properties: + currentPhase: + type: string + deploymentStatus: + default: Pending + type: string + endTime: + format: date-time + type: string + phaseTraceIDs: + additionalProperties: + additionalProperties: + type: string + description: MapCarrier is a TextMapCarrier that uses a map held in + memory as a storage medium for propagated key-value pairs. + type: object + type: object + postDeploymentEvaluationStatus: + default: Pending + type: string + postDeploymentEvaluationTaskStatus: + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + postDeploymentStatus: + default: Pending + type: string + postDeploymentTaskStatus: + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentEvaluationStatus: + default: Pending + type: string + preDeploymentEvaluationTaskStatus: + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentStatus: + default: Pending + type: string + preDeploymentTaskStatus: + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + startTime: + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - jsonPath: .spec.app + name: AppName + type: string + - jsonPath: .spec.workloadName + name: WorkloadName + type: string + - jsonPath: .spec.version + name: WorkloadVersion + type: string + - jsonPath: .status.currentPhase + name: Phase + type: string + - jsonPath: .status.preDeploymentStatus + name: PreDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.preDeploymentEvaluationStatus + name: PreDeploymentEvaluationStatus + priority: 1 + type: string + - jsonPath: .status.deploymentStatus + name: DeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentStatus + name: PostDeploymentStatus + priority: 1 + type: string + - jsonPath: .status.postDeploymentEvaluationStatus + name: PostDeploymentEvaluationStatus + priority: 1 + type: string + name: v1alpha3 + schema: + openAPIV3Schema: + description: KeptnWorkloadInstance is the Schema for the keptnworkloadinstances + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: Spec describes the desired state of the KeptnWorkloadInstance. + properties: + app: + description: AppName is the name of the KeptnApp containing the KeptnWorkload. + type: string + postDeploymentEvaluations: + description: PostDeploymentEvaluations is a list of all evaluations + to be performed during the post-deployment phase of the KeptnWorkload. + The items of this list refer to the names of KeptnEvaluationDefinitions + located in the same namespace as the KeptnWorkload, or in the KLT + namespace. + items: + type: string + type: array + postDeploymentTasks: + description: PostDeploymentTasks is a list of all tasks to be performed + during the post-deployment phase of the KeptnWorkload. The items of + this list refer to the names of KeptnTaskDefinitions located in the + same namespace as the KeptnWorkload, or in the KLT namespace. + items: + type: string + type: array + preDeploymentEvaluations: + description: PreDeploymentEvaluations is a list of all evaluations to + be performed during the pre-deployment phase of the KeptnWorkload. + The items of this list refer to the names of KeptnEvaluationDefinitions + located in the same namespace as the KeptnWorkload, or in the KLT + namespace. + items: + type: string + type: array + preDeploymentTasks: + description: PreDeploymentTasks is a list of all tasks to be performed + during the pre-deployment phase of the KeptnWorkload. The items of + this list refer to the names of KeptnTaskDefinitions located in the + same namespace as the KeptnApp, or in the KLT namespace. + items: + type: string + type: array + previousVersion: + description: PreviousVersion is the version of the KeptnWorkload that + has been deployed prior to this version. + type: string + resourceReference: + description: ResourceReference is a reference to the Kubernetes resource + (Deployment, DaemonSet, StatefulSet or ReplicaSet) the KeptnWorkload + is representing. + properties: + kind: + type: string + name: + type: string + uid: + description: UID is a type that holds unique ID values, including + UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being + a type captures intent and helps make sure that UIDs and names + do not get conflated. + type: string + required: + - kind + - name + - uid + type: object + traceId: + additionalProperties: + type: string + description: TraceId contains the OpenTelemetry trace ID. + type: object + version: + description: Version defines the version of the KeptnWorkload. + type: string + workloadName: + description: WorkloadName is the name of the KeptnWorkload. + type: string + required: + - app + - resourceReference + - version + - workloadName + type: object + status: + description: Status describes the current state of the KeptnWorkloadInstance. + properties: + currentPhase: + description: 'CurrentPhase indicates the current phase of the KeptnWorkloadInstance. + This can be: - PreDeploymentTasks - PreDeploymentEvaluations - Deployment + - PostDeploymentTasks - PostDeploymentEvaluations' + type: string + deploymentStatus: + default: Pending + description: DeploymentStatus indicates the current status of the KeptnWorkloadInstance's + Deployment phase. + type: string + endTime: + description: EndTime represents the time at which the deployment of + the KeptnWorkloadInstance finished. + format: date-time + type: string + phaseTraceIDs: + additionalProperties: + additionalProperties: + type: string + description: MapCarrier is a TextMapCarrier that uses a map held in + memory as a storage medium for propagated key-value pairs. + type: object + description: PhaseTraceIDs contains the trace IDs of the OpenTelemetry + spans of each phase of the KeptnWorkloadInstance + type: object + postDeploymentEvaluationStatus: + default: Pending + description: PostDeploymentEvaluationStatus indicates the current status + of the KeptnWorkloadInstance's PostDeploymentEvaluation phase. + type: string + postDeploymentEvaluationTaskStatus: + description: PostDeploymentEvaluationTaskStatus indicates the current + state of each postDeploymentEvaluation of the KeptnWorkloadInstance. + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + description: EndTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + description: StartTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + postDeploymentStatus: + default: Pending + description: PostDeploymentStatus indicates the current status of the + KeptnWorkloadInstance's PostDeployment phase. + type: string + postDeploymentTaskStatus: + description: PostDeploymentTaskStatus indicates the current state of + each postDeploymentTask of the KeptnWorkloadInstance. + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + description: EndTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + description: StartTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentEvaluationStatus: + default: Pending + description: PreDeploymentEvaluationStatus indicates the current status + of the KeptnWorkloadInstance's PreDeploymentEvaluation phase. + type: string + preDeploymentEvaluationTaskStatus: + description: PreDeploymentEvaluationTaskStatus indicates the current + state of each preDeploymentEvaluation of the KeptnWorkloadInstance. + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + description: EndTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + description: StartTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + preDeploymentStatus: + default: Pending + description: PreDeploymentStatus indicates the current status of the + KeptnWorkloadInstance's PreDeployment phase. + type: string + preDeploymentTaskStatus: + description: PreDeploymentTaskStatus indicates the current state of + each preDeploymentTask of the KeptnWorkloadInstance. + items: + properties: + definitionName: + description: DefinitionName is the name of the EvaluationDefinition/TaskDefiniton + type: string + endTime: + description: EndTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + name: + description: Name is the name of the Evaluation/Task + type: string + startTime: + description: StartTime represents the time at which the Item (Evaluation/Task) + started. + format: date-time + type: string + status: + default: Pending + type: string + type: object + type: array + startTime: + description: StartTime represents the time at which the deployment of + the KeptnWorkloadInstance started. + format: date-time + type: string + status: + default: Pending + description: Status represents the overall status of the KeptnWorkloadInstance. + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +# Source: klt/templates/certificate-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: certificate-operator-role + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - admissionregistration.k8s.io + resources: + - validatingwebhookconfigurations + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - get + - list + - watch +--- +# Source: klt/templates/keptn-scheduler-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: keptn-scheduler + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch +- apiGroups: + - "" + - events.k8s.io + resources: + - events + verbs: + - create + - patch + - update +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create +- apiGroups: + - coordination.k8s.io + resourceNames: + - kube-scheduler + resources: + - leases + verbs: + - get + - update +- apiGroups: + - "" + resources: + - endpoints + verbs: + - create +- apiGroups: + - "" + resourceNames: + - kube-scheduler + resources: + - endpoints + verbs: + - get + - update +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch + - patch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - watch + - update +- apiGroups: + - "" + resources: + - bindings + - pods/binding + verbs: + - create +- apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - replicationcontrollers + - services + verbs: + - get + - list + - watch +- apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - persistentvolumes + verbs: + - get + - list + - watch + - patch + - update +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - storage.k8s.io + resources: + - csinodes + - storageclasses + - csidrivers + - csistoragecapacities + verbs: + - get + - list + - watch +- apiGroups: + - scheduling.sigs.k8s.io + resources: + - podgroups + - elasticquotas + verbs: + - get + - list + - watch + - create + - delete + - update + - patch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnworkloadinstances + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get + - list + - watch +--- +# Source: klt/templates/lifecycle-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: lifecycle-operator-role + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - argoproj.io + resources: + - rollouts + verbs: + - get + - list + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - get + - list + - update + - watch +- apiGroups: + - batch + resources: + - jobs/status + verbs: + - get + - list +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - get + - list + - update + - watch +- apiGroups: + - "" + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - watch +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - secrets + verbs: + - get +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappcreationrequests + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappcreationrequests/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappcreationrequests/status + verbs: + - get + - patch + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnapps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnapps/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnapps/status + verbs: + - get + - patch + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappversion + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappversion/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappversion/status + verbs: + - get + - patch + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappversions + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappversions/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnappversions/status + verbs: + - get + - patch + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnevaluationdefinitions + verbs: + - get + - list + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnevaluationproviders + verbs: + - get + - list + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnevaluations + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnevaluations/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnevaluations/status + verbs: + - get + - patch + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptntaskdefinitions + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptntaskdefinitions/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptntaskdefinitions/status + verbs: + - get + - patch + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptntasks + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptntasks/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptntasks/status + verbs: + - get + - patch + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnworkloadinstances + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnworkloadinstances/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnworkloadinstances/status + verbs: + - get + - patch + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnworkloads + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnworkloads/finalizers + verbs: + - update +- apiGroups: + - lifecycle.keptn.sh + resources: + - keptnworkloads/status + verbs: + - get + - patch + - update +- apiGroups: + - metrics.keptn.sh + resources: + - keptnmetrics + verbs: + - get + - list + - watch +- apiGroups: + - options.keptn.sh + resources: + - keptnconfigs + verbs: + - get + - list + - watch +- apiGroups: + - options.keptn.sh + resources: + - keptnconfigs/status + verbs: + - get +--- +# Source: klt/templates/metrics-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: metrics-operator-role + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - secrets + verbs: + - get +- apiGroups: + - metrics.keptn.sh + resources: + - keptnmetrics + verbs: + - get + - list + - watch +- apiGroups: + - metrics.keptn.sh + resources: + - keptnmetrics/finalizers + verbs: + - update +- apiGroups: + - metrics.keptn.sh + resources: + - keptnmetrics/status + verbs: + - get + - patch + - update +- apiGroups: + - metrics.keptn.sh + resources: + - keptnmetricsproviders + verbs: + - get + - list + - watch +- apiGroups: + - metrics.keptn.sh + resources: + - providers + verbs: + - get + - list + - watch +--- +# Source: klt/templates/metrics-operator-server-resources-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: metrics-operator-server-resources + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - custom.metrics.k8s.io + resources: + - '*' + verbs: + - get + - list + - watch +--- +# Source: klt/templates/server-resources-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: release-name-klt-server-resources + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - custom.metrics.k8s.io + resources: + - '*' + verbs: + - '*' +--- +# Source: klt/templates/certificate-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: certificate-operator-rolebinding + namespace: "helmtests" + labels: + app.kubernetes.io/component: rbac + app.kubernetes.io/created-by: certificate-operator + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 'certificate-operator-role' +subjects: +- kind: ServiceAccount + name: 'certificate-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/hpa-controller-keptn-metrics-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: hpa-controller-keptn-metrics + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 'server-resources' +subjects: +- kind: ServiceAccount + name: horizontal-pod-autoscaler + namespace: 'helmtests' +--- +# Source: klt/templates/keptn-scheduler-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: keptn-scheduler + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 'keptn-scheduler' +subjects: +- kind: ServiceAccount + name: 'keptn-scheduler' + namespace: 'helmtests' +--- +# Source: klt/templates/lifecycle-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: lifecycle-operator-rolebinding + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 'lifecycle-operator-role' +subjects: +- kind: ServiceAccount + name: 'lifecycle-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/metrics-operator-hpa-controller-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: metrics-operator-hpa-controller + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 'metrics-operator-server-resources' +subjects: +- kind: ServiceAccount + name: horizontal-pod-autoscaler + namespace: 'helmtests' +--- +# Source: klt/templates/metrics-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: metrics-operator-rolebinding + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 'metrics-operator-role' +subjects: +- kind: ServiceAccount + name: 'metrics-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/system-auth-delegator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: system-auth-delegator + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: system:auth-delegator +subjects: +- kind: ServiceAccount + name: 'metrics-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/certificate-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: certificate-operator-role + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - create + - list + - watch +- apiGroups: + - "" + resourceNames: + - klt-certs + resources: + - secrets + verbs: + - get + - patch + - update +--- +# Source: klt/templates/leader-election-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: leader-election-role + namespace: "helmtests" + labels: + app.kubernetes.io/component: rbac + app.kubernetes.io/created-by: certificate-operator + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +--- +# Source: klt/templates/lifecycle-operator-leader-election-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: lifecycle-operator-leader-election-role + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +--- +# Source: klt/templates/metrics-operator-leader-election-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: metrics-operator-leader-election-role + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +--- +# Source: klt/templates/certificate-operator-leader-election-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: certificate-operator-leader-election-rolebinding + namespace: "helmtests" + labels: + app.kubernetes.io/component: rbac + app.kubernetes.io/created-by: certificate-operator + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 'leader-election-role' +subjects: +- kind: ServiceAccount + name: 'certificate-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/certificate-operator-role-binding-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: certificate-operator-role-binding + namespace: "helmtests" + labels: + app.kubernetes.io/component: rbac + app.kubernetes.io/created-by: certificate-operator + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 'certificate-operator-role' +subjects: +- kind: ServiceAccount + name: 'certificate-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/extension-apiserver-authentication-reader-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: extension-apiserver-authentication-reader + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 'extension-apiserver-authentication-reader' +subjects: +- kind: ServiceAccount + name: 'keptn-scheduler' + namespace: 'helmtests' +--- +# Source: klt/templates/lifecycle-operator-leader-election-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: lifecycle-operator-leader-election-rolebinding + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 'lifecycle-operator-leader-election-role' +subjects: +- kind: ServiceAccount + name: 'lifecycle-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/lifecycle-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: lifecycle-operator-rolebinding + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 'lifecycle-operator-role' +subjects: +- kind: ServiceAccount + name: 'lifecycle-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/metrics-operator-leader-election-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: metrics-operator-leader-election-rolebinding + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 'metrics-operator-leader-election-role' +subjects: +- kind: ServiceAccount + name: 'metrics-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/metrics-operator-rbac.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: metrics-operator-rolebinding + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 'metrics-operator-role' +subjects: +- kind: ServiceAccount + name: 'metrics-operator' + namespace: 'helmtests' +--- +# Source: klt/templates/lifecycle-operator-metrics-service.yaml +apiVersion: v1 +kind: Service +metadata: + name: lifecycle-operator-metrics-service + namespace: "helmtests" + labels: + control-plane: lifecycle-operator + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + type: ClusterIP + selector: + control-plane: lifecycle-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + ports: + - name: metrics + port: 2222 + protocol: TCP + targetPort: metrics +--- +# Source: klt/templates/lifecycle-webhook-service.yaml +apiVersion: v1 +kind: Service +metadata: + name: lifecycle-webhook-service + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + type: ClusterIP + selector: + control-plane: lifecycle-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + ports: + - port: 443 + protocol: TCP + targetPort: 9443 +--- +# Source: klt/templates/metrics-operator-service.yaml +apiVersion: v1 +kind: Service +metadata: + name: metrics-operator-service + namespace: "helmtests" + labels: + control-plane: metrics-operator + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + type: ClusterIP + selector: + control-plane: metrics-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + ports: + - name: https + port: 8443 + protocol: TCP + targetPort: https + - name: custom-metrics + port: 443 + targetPort: custom-metrics + - name: metrics + port: 9999 + protocol: TCP + targetPort: metrics +--- +# Source: klt/templates/metrics-webhook-service.yaml +apiVersion: v1 +kind: Service +metadata: + name: metrics-webhook-service + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + type: ClusterIP + selector: + control-plane: metrics-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + ports: + - port: 443 + protocol: TCP + targetPort: 9443 +--- +# Source: klt/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: certificate-operator + namespace: "helmtests" + labels: + app.kubernetes.io/component: manager + app.kubernetes.io/created-by: certificate-operator + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + control-plane: certificate-operator + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + replicas: 1 + selector: + matchLabels: + control-plane: certificate-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + template: + metadata: + labels: + control-plane: certificate-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + annotations: + kubectl.kubernetes.io/default-container: manager + spec: + containers: + - args: + - --leader-elect + command: + - /manager + env: + - name: NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: LABEL_SELECTOR_KEY + value: "keptn.sh/inject-cert" + - name: LABEL_SELECTOR_VALUE + value: "true" + - name: KUBERNETES_CLUSTER_DOMAIN + value: cluster.local + image: ghcr.io/keptn/certificate-operator:v0.8.1 + imagePullPolicy: Always + name: manager + resources: + limits: + cpu: 25m + memory: 64Mi + requests: + cpu: 5m + memory: 16Mi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsGroup: 65532 + runAsUser: 65532 + seccompProfile: + type: RuntimeDefault + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + imagePullSecrets: [] + securityContext: + runAsNonRoot: true + serviceAccountName: certificate-operator + terminationGracePeriodSeconds: 10 +--- +# Source: klt/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: lifecycle-operator + namespace: "helmtests" + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + control-plane: lifecycle-operator + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + replicas: 1 + selector: + matchLabels: + control-plane: lifecycle-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + template: + metadata: + labels: + control-plane: lifecycle-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + annotations: + kubectl.kubernetes.io/default-container: manager + metrics.dynatrace.com/port: "2222" + metrics.dynatrace.com/scrape: "true" + spec: + containers: + - args: + - --leader-elect + command: + - /manager + env: + - name: POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: FUNCTION_RUNNER_IMAGE + value: "ghcr.io/keptn/functions-runtime:v0.8.1" + - name: PYTHON_RUNNER_IMAGE + value: "ghcr.io/keptn/python-runtime:v0.8.1" + - name: OTEL_COLLECTOR_URL + value: "otel-collector:4317" + - name: KEPTN_APP_CONTROLLER_LOG_LEVEL + value: "0" + - name: KEPTN_APP_CREATION_REQUEST_CONTROLLER_LOG_LEVEL + value: "0" + - name: KEPTN_APP_VERSION_CONTROLLER_LOG_LEVEL + value: "0" + - name: KEPTN_EVALUATION_CONTROLLER_LOG_LEVEL + value: "0" + - name: KEPTN_TASK_CONTROLLER_LOG_LEVEL + value: "0" + - name: KEPTN_TASK_DEFINITION_CONTROLLER_LOG_LEVEL + value: "0" + - name: KEPTN_WORKLOAD_CONTROLLER_LOG_LEVEL + value: "0" + - name: KEPTN_WORKLOAD_INSTANCE_CONTROLLER_LOG_LEVEL + value: "0" + - name: OPTIONS_CONTROLLER_LOG_LEVEL + value: "0" + - name: KUBERNETES_CLUSTER_DOMAIN + value: cluster.local + image: ghcr.io/keptn/lifecycle-operator:v0.8.1 + imagePullPolicy: Always + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 2222 + name: metrics + protocol: TCP + resources: + limits: + cpu: 500m + memory: 128Mi + requests: + cpu: 5m + memory: 64Mi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + privileged: false + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs/ + name: certs-dir + - mountPath: /tmp/metrics-adapter/serving-certs + name: adapter-certs-dir + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + imagePullSecrets: [] + securityContext: + runAsNonRoot: true + serviceAccountName: lifecycle-operator + terminationGracePeriodSeconds: 10 + volumes: + - emptyDir: {} + name: certs-dir + - emptyDir: {} + name: adapter-certs-dir +--- +# Source: klt/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: metrics-operator + namespace: "helmtests" + labels: + app.kubernetes.io/part-of: keptn-lifecycle-toolkit + control-plane: metrics-operator + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + replicas: 1 + selector: + matchLabels: + control-plane: metrics-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + template: + metadata: + labels: + control-plane: metrics-operator + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + annotations: + kubectl.kubernetes.io/default-container: manager + spec: + containers: + - args: + - webhook-server + - --leader-elect + - --adapter-port=6443 + - --adapter-certs-dir=/tmp/metrics-adapter/serving-certs + - --v=10 + command: + - /manager + env: + - name: POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: EXPOSE_KEPTN_METRICS + value: "true" + - name: METRICS_CONTROLLER_LOG_LEVEL + value: "0" + - name: KUBERNETES_CLUSTER_DOMAIN + value: cluster.local + image: ghcr.io/keptn/metrics-operator:v0.8.1 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 9999 + name: metrics + protocol: TCP + - containerPort: 6443 + name: custom-metrics + protocol: TCP + resources: + limits: + cpu: 500m + memory: 128Mi + requests: + cpu: 10m + memory: 64Mi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + privileged: false + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs/ + name: certs-dir + - mountPath: /tmp/metrics-adapter/serving-certs + name: adapter-certs-dir + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + imagePullSecrets: [] + securityContext: + runAsNonRoot: true + serviceAccountName: metrics-operator + terminationGracePeriodSeconds: 10 + volumes: + - emptyDir: {} + name: certs-dir + - emptyDir: {} + name: adapter-certs-dir +--- +# Source: klt/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: scheduler + namespace: "helmtests" + labels: + component: scheduler + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + replicas: 1 + selector: + matchLabels: + component: scheduler + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + template: + metadata: + labels: + component: scheduler + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + spec: + containers: + - command: + - /bin/kube-scheduler + - --config=/etc/kubernetes/scheduler-config.yaml + env: + - name: OTEL_COLLECTOR_URL + value: "otel-collector:4317" + - name: KUBERNETES_CLUSTER_DOMAIN + value: cluster.local + image: ghcr.io/keptn/scheduler:v0.8.1 + imagePullPolicy: Always + name: scheduler + resources: + limits: + cpu: 300m + memory: 100Mi + requests: + cpu: 100m + memory: 20Mi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + privileged: false + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 65532 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /etc/kubernetes + name: scheduler-config + readOnly: true + livenessProbe: + httpGet: + path: /healthz + port: 10259 + scheme: HTTPS + initialDelaySeconds: 15 + readinessProbe: + httpGet: + path: /healthz + port: 10259 + scheme: HTTPS + imagePullSecrets: [] + serviceAccountName: keptn-scheduler + volumes: + - configMap: + name: scheduler-config + name: scheduler-config +--- +# Source: klt/templates/v1beta1.custom.metrics.k8s.io.yaml +apiVersion: apiregistration.k8s.io/v1 +kind: APIService +metadata: + name: v1beta1.custom.metrics.k8s.io + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: custom.metrics.k8s.io + groupPriorityMinimum: 100 + insecureSkipTLSVerify: true + service: + name: 'metrics-operator-service' + namespace: 'helmtests' + version: v1beta1 + versionPriority: 100 +--- +# Source: klt/templates/v1beta2.custom.metrics.k8s.io.yaml +apiVersion: apiregistration.k8s.io/v1 +kind: APIService +metadata: + name: v1beta2.custom.metrics.k8s.io + namespace: "helmtests" + labels: + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +spec: + group: custom.metrics.k8s.io + groupPriorityMinimum: 100 + insecureSkipTLSVerify: true + service: + name: 'metrics-operator-service' + namespace: 'helmtests' + version: v1beta2 + versionPriority: 200 +--- +# Source: klt/templates/lifecycle-mutating-webhook-configuration.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + name: lifecycle-mutating-webhook-configuration + annotations: + cert-manager.io/inject-ca-from: helmtests/ + labels: + keptn.sh/inject-cert: "true" + app.kubernetes.io/part-of: "keptn-lifecycle-toolkit" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +webhooks: +- admissionReviewVersions: + - v1 + clientConfig: + service: + name: 'lifecycle-webhook-service' + namespace: 'helmtests' + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.keptn.sh + namespaceSelector: + matchExpressions: + - key: control-plane + operator: NotIn + values: + - lifecycle-operator + - key: kubernetes.io/metadata.name + operator: NotIn + values: + - kube-system + - kube-public + - kube-node-lease + - cert-manager + - keptn-lifecycle-toolkit-system + - observability + - monitoring + - key: kubernetes.io/metadata.name + operator: NotIn + values: + - 'helmtests' + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + - UPDATE + resources: + - pods + sideEffects: None +--- +# Source: klt/templates/lifecycle-validating-webhook-configuration.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + name: lifecycle-validating-webhook-configuration + annotations: + cert-manager.io/inject-ca-from: helmtests/ + labels: + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +webhooks: +- admissionReviewVersions: + - v1 + clientConfig: + service: + name: 'lifecycle-webhook-service' + namespace: 'helmtests' + path: /validate-lifecycle-keptn-sh-v1alpha3-keptntaskdefinition + failurePolicy: Fail + name: vkeptntaskdefinition.kb.io + rules: + - apiGroups: + - lifecycle.keptn.sh + apiVersions: + - v1alpha3 + operations: + - CREATE + - UPDATE + resources: + - keptntaskdefinitions + sideEffects: None +--- +# Source: klt/templates/metrics-validating-webhook-configuration.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + name: metrics-validating-webhook-configuration + annotations: + cert-manager.io/inject-ca-from: helmtests/ + labels: + keptn.sh/inject-cert: "true" + helm.sh/chart: klt-0.2.5 + app.kubernetes.io/name: klt + app.kubernetes.io/instance: release-name + app.kubernetes.io/version: "v0.8.1" + app.kubernetes.io/managed-by: Helm +webhooks: +- admissionReviewVersions: + - v1 + clientConfig: + service: + name: 'metrics-webhook-service' + namespace: 'helmtests' + path: /validate-metrics-keptn-sh-v1alpha3-keptnmetric + failurePolicy: Fail + name: vkeptnmetric.kb.io + rules: + - apiGroups: + - metrics.keptn.sh + apiVersions: + - v1alpha3 + operations: + - CREATE + - UPDATE + resources: + - keptnmetrics + sideEffects: None diff --git a/.github/scripts/.helm-tests/default/values.yaml b/.github/scripts/.helm-tests/default/values.yaml new file mode 100644 index 0000000000..57efdc7524 --- /dev/null +++ b/.github/scripts/.helm-tests/default/values.yaml @@ -0,0 +1,245 @@ +certificateOperator: + manager: + containerSecurityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsGroup: 65532 + runAsUser: 65532 + seccompProfile: + type: RuntimeDefault + env: + labelSelectorKey: keptn.sh/inject-cert + labelSelectorValue: "true" + image: + repository: ghcr.io/keptn/certificate-operator + tag: v0.8.1 + imagePullPolicy: Always + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + limits: + cpu: 25m + memory: 64Mi + requests: + cpu: 5m + memory: 16Mi + nodeSelector: {} + replicas: 1 + tolerations: [] + topologySpreadConstraints: [] +imagePullSecrets: [] +kubernetesClusterDomain: cluster.local +lifecycleManagerConfig: + controllerManagerConfigYaml: + health: + healthProbeBindAddress: :8081 + leaderElection: + leaderElect: true + resourceName: 6b866dd9.keptn.sh + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +lifecycleOperator: + manager: + containerSecurityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + privileged: false + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + seccompProfile: + type: RuntimeDefault + env: + functionRunnerImage: ghcr.io/keptn/functions-runtime:v0.8.1 + keptnAppControllerLogLevel: "0" + keptnAppCreationRequestControllerLogLevel: "0" + keptnAppVersionControllerLogLevel: "0" + keptnEvaluationControllerLogLevel: "0" + keptnTaskControllerLogLevel: "0" + keptnTaskDefinitionControllerLogLevel: "0" + keptnWorkloadControllerLogLevel: "0" + keptnWorkloadInstanceControllerLogLevel: "0" + optionsControllerLogLevel: "0" + otelCollectorUrl: otel-collector:4317 + pythonRunnerImage: ghcr.io/keptn/python-runtime:v0.8.1 + image: + repository: ghcr.io/keptn/lifecycle-operator + tag: v0.8.1 + imagePullPolicy: Always + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + limits: + cpu: 500m + memory: 128Mi + requests: + cpu: 5m + memory: 64Mi + nodeSelector: {} + replicas: 1 + tolerations: [] + topologySpreadConstraints: [] +lifecycleOperatorMetricsService: + ports: + - name: metrics + port: 2222 + protocol: TCP + targetPort: metrics + type: ClusterIP +lifecycleWebhookService: + ports: + - port: 443 + protocol: TCP + targetPort: 9443 + type: ClusterIP +metricsManagerConfig: + controllerManagerConfigYaml: + health: + healthProbeBindAddress: :8081 + leaderElection: + leaderElect: true + resourceName: 3f8532ca.keptn.sh + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +metricsOperator: + manager: + containerSecurityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + privileged: false + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + seccompProfile: + type: RuntimeDefault + env: + exposeKeptnMetrics: "true" + metricsControllerLogLevel: "0" + image: + repository: ghcr.io/keptn/metrics-operator + tag: v0.8.1 + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + limits: + cpu: 500m + memory: 128Mi + requests: + cpu: 10m + memory: 64Mi + nodeSelector: {} + replicas: 1 + tolerations: [] + topologySpreadConstraints: [] +metricsOperatorService: + ports: + - name: https + port: 8443 + protocol: TCP + targetPort: https + - name: custom-metrics + port: 443 + targetPort: custom-metrics + - name: metrics + port: 9999 + protocol: TCP + targetPort: metrics + type: ClusterIP +metricsWebhookService: + ports: + - port: 443 + protocol: TCP + targetPort: 9443 + type: ClusterIP +scheduler: + nodeSelector: {} + replicas: 1 + scheduler: + containerSecurityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + privileged: false + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 65532 + seccompProfile: + type: RuntimeDefault + env: + otelCollectorUrl: otel-collector:4317 + image: + repository: ghcr.io/keptn/scheduler + tag: v0.8.1 + imagePullPolicy: Always + livenessProbe: + httpGet: + path: /healthz + port: 10259 + scheme: HTTPS + initialDelaySeconds: 15 + readinessProbe: + httpGet: + path: /healthz + port: 10259 + scheme: HTTPS + resources: + limits: + cpu: 300m + memory: 100Mi + requests: + cpu: 100m + memory: 20Mi + tolerations: [] + topologySpreadConstraints: [] +schedulerConfig: + schedulerConfigYaml: + leaderElection: + leaderElect: false + profiles: + - plugins: + permit: + enabled: + - name: KLCPermit + schedulerName: keptn-scheduler diff --git a/.github/scripts/helm-test.sh b/.github/scripts/helm-test.sh new file mode 100755 index 0000000000..8ebc030b40 --- /dev/null +++ b/.github/scripts/helm-test.sh @@ -0,0 +1,43 @@ +#!/bin/bash + +# Keptn Lifecycle Toolkit Helm Testing +# +# This script supports the comparison of standard values and expected templated results to helm chart +# it is used to make sure changes to the chart are intentional and produce expected outcomes + +echo "running Helm tests" + tests=$(find ./.github/scripts/.helm-tests -maxdepth 1 -mindepth 1 -type d ) + + errors=0 + successful=0 + failures="" + + for test in $tests + do + echo "Testing $test" + helm template --namespace helmtests -f $test/values.yaml ./helm/chart > $test/helm_tests_output.yaml + if [ $? -ne 0 ] + then + echo "Error: helm template failed for test in $test" + errors=$((errors + 1)) + failures+="\n test $test failed" + else + diff -u "$test/helm_tests_output.yaml" "$test/result.yaml" + if [ $? -ne 0 ] + then + echo "Error: test in $test not successful" + errors=$((errors + 1)) + failures+="\n test $test failed" + else + echo "Info: test in $test successful" + successful=$((successful + 1)) + fi + fi + done + + echo "run $((errors + successful)) tests: successful $successful, errors $errors" + echo -e $failures + if [ $errors -gt 0 ] + then + exit 1 + fi diff --git a/.github/workflows/validate-helm-chart.yml b/.github/workflows/validate-helm-chart.yml index e44d81a203..1184dd8ca6 100644 --- a/.github/workflows/validate-helm-chart.yml +++ b/.github/workflows/validate-helm-chart.yml @@ -32,7 +32,7 @@ jobs: npm install --location=global ./ cd .. - - name: Check Helm doc up to date + - name: Check if Helm doc is up to date run: | cd ./helm/chart/ cp ./README.md ./README-old.md @@ -49,3 +49,6 @@ jobs: echo "" echo "Helm values documentation is correct!" fi + + - name: Check if Helm template is up to date + run: ./.github/scripts/helm-test.sh diff --git a/.gitignore b/.gitignore index 653ba8c78e..a82fd8096c 100644 --- a/.gitignore +++ b/.gitignore @@ -49,4 +49,4 @@ node_modules readme-generator-for-helm/ /out.yaml /test.yaml -/helmchart.yaml +**helm_tests_output.yaml \ No newline at end of file diff --git a/.yamllint b/.yamllint index ecdd76fd14..e4980b4551 100644 --- a/.yamllint +++ b/.yamllint @@ -13,10 +13,8 @@ ignore: | lifecycle-operator/config/rbac/role.yaml metrics-operator/config/rbac/role.yaml klt-cert-manager/config/rbac/role.yaml - helm/chart/templates - helm/chart/rendered.yaml - helm/chart/values.yaml - helmchart.yaml + helm/chart + .github/scripts/.helm-tests rules: braces: enable diff --git a/helm/chart/templates/hpa-controller-keptn-metrics-rbac.yaml b/helm/chart/templates/hpa-controller-keptn-metrics-rbac.yaml index 2ddb4ad488..e0d409a36c 100644 --- a/helm/chart/templates/hpa-controller-keptn-metrics-rbac.yaml +++ b/helm/chart/templates/hpa-controller-keptn-metrics-rbac.yaml @@ -1,14 +1,14 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: {{ include "chart.fullname" . }}-hpa-controller-keptn-metrics + name: hpa-controller-keptn-metrics namespace: {{ .Release.Namespace | quote }} labels: {{- include "chart.labels" . | nindent 4 }} roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: '{{ include "chart.fullname" . }}-server-resources' + name: 'server-resources' subjects: - kind: ServiceAccount name: horizontal-pod-autoscaler