kube-ui-server.yaml

{{ $defaults := printf `
registryFQDN: %s
ace-user-roles:
  enabled: true
  enableClusterRoles:
    ace: true
    appcatalog: true
    catalog: true
    cert-manager: true
    kubedb-ui: true
    kubedb: true
    kubestash: true
    kubevault: true
    license-proxyserver: true
    metrics: true
    prometheus: true
    secrets-store: true
    stash: true
    virtual-secrets: true
`
  (include "registry.ghcr" $)
  | fromYaml }}

{{ $vals := dig "kube-ui-server" "values" (dict) .Values.helm.releases }}
{{ $vals = mergeOverwrite $defaults $vals }}

apiVersion: ui.k8s.appscode.com/v1alpha1
kind: Feature
metadata:
  name: kube-ui-server
  labels:
    app.kubernetes.io/part-of: opscenter-core
spec:
  title: Kube UI Server
  description: |
    Kube UI Server provides the APIs to interact with your cluster from the dashboard.
  icons:
  - src: https://cdn.appscode.com/k8s/icons/menu/cluster.svg
    type: image/svg+xml
  featureSet: opscenter-core
  featureBlock: kube-ui-server
  recommended: true
  {{- if eq (include "clustermanager.openshift" $) "true" }}
  requirements:
    features:
      - aceshifter
  {{- end }}
  readinessChecks:
    workloads:
    - group: apps
      version: v1
      kind: Deployment
      selector:
        app.kubernetes.io/name: kube-ui-server
        app.kubernetes.io/instance: kube-ui-server

spec:
  ignoreDifferences:
  - jsonPointers:
    - /data
    kind: Secret
    name: kube-ui-server-apiserver-cert
    namespace: {{ printf "{{ .Release.Namespace }}" }}
  - group: apiregistration.k8s.io
    kind: APIService
    name: v1alpha1.core.k8s.appscode.com
    jsonPointers:
    - /spec/caBundle
  - group: apiregistration.k8s.io
    kind: APIService
    name: v1alpha1.cost.k8s.appscode.com
    jsonPointers:
    - /spec/caBundle
  - group: apiregistration.k8s.io
    kind: APIService
    name: v1alpha1.identity.k8s.appscode.com
    jsonPointers:
    - /spec/caBundle
  - group: apiregistration.k8s.io
    kind: APIService
    name: v1alpha1.meta.k8s.appscode.com
    jsonPointers:
    - /spec/caBundle
  - group: apiregistration.k8s.io
    kind: APIService
    name: v1alpha1.offline.licenses.appscode.com
    jsonPointers:
    - /spec/caBundle
  - group: apiregistration.k8s.io
    kind: APIService
    name: v1alpha1.policy.k8s.appscode.com
    jsonPointers:
    - /spec/caBundle
  - group: apiregistration.k8s.io
    kind: APIService
    name: v1alpha1.reports.scanner.appscode.com
    jsonPointers:
    - /spec/caBundle
  - group: apps
    kind: Deployment
    name: kube-ui-server
    namespace: {{ printf "{{ .Release.Namespace }}" }}
    jsonPointers:
    - /spec/template/metadata/annotations/checksum~1apiregistration.yaml

  chart:
    name: kube-ui-server
    namespace: kubeops
    createNamespace: {{ $.Values.helm.createNamespace }}
    version: {{ dig "kube-ui-server" "version" "" $.Values.helm.releases }}
    sourceRef:
      kind: HelmRepository
      name: appscode-charts-oci
      namespace: {{ .Release.Namespace }}
  valuesFrom:
    - kind: Secret
      name: ace-features-cred
      valuesKey: kube-ui-server.yaml
      optional: true
  {{- if eq (include "clustermanager.openshift" $) "true" }}
    - kind: ConfigMap
      name: ace-openshift-scc
      valuesKey: kube-ui-server.yaml
  {{- end }}
{{- with $vals }}
  {{- dict "values" . | toYaml | nindent 2 }}
{{- end }}