Merge branch 'main' into EVEREST-1180

Author: mayankshah1607

.github/workflows/everest-pr-checks.yaml

@@ -86,13 +86,15 @@ jobs:
           helm install everest ./charts/everest \
             --create-namespace \
             --namespace everest-system \
-            --set dbNamespace.enabled=true
+            --set dbNamespace.enabled=true \
+            --set pmm.enabled=true
 
           # Wait for system components
           kubectl wait --for=condition=available --timeout=60s deployment/everest-server -n everest-system
           kubectl wait --for=condition=available --timeout=60s deployment/everest-operator -n everest-system
           kubectl wait --for=condition=available --timeout=60s deployment/kube-state-metrics -n everest-monitoring
           kubectl wait --for=condition=available --timeout=60s deployment/vm-operator -n everest-monitoring
+          kubectl wait --for=condition=ready pods --timeout=120s -n everest-system -l app.kubernetes.io/name=pmm
 
           # Wait for default DB namespace.
           kubectl wait --for=condition=available --timeout=60s deployment/percona-postgresql-operator -n everest

charts/everest/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: common
   repository: file://charts/common
-  version: 0.0.14
+  version: 0.0.15
 - name: everest-db-namespace
   repository: file://charts/everest-db-namespace
   version: 0.0.0
@@ -10,6 +10,9 @@ dependencies:
   version: 5.27.0
 - name: victoria-metrics-operator
   repository: https://victoriametrics.github.io/helm-charts
-  version: 0.37.0
-digest: sha256:b219948462cc632aa1b2b1bd80e7831c9cbfd9aa22d38a1eaa6e61c70bfe563c
-generated: "2024-12-18T15:46:21.983602+05:30"
+  version: 0.43.0
+- name: pmm
+  repository: https://percona.github.io/percona-helm-charts
+  version: 1.3.21
+digest: sha256:20f0ec5c5d290dc959ce1d15b88240a02f795ceceb7a3e904d83e4cc34498496
+generated: "2025-04-10T16:12:11.785878+05:30"

charts/everest/Chart.yaml

@@ -30,6 +30,10 @@ dependencies:
     condition: "kube-state-metrics.enabled"
   - name: victoria-metrics-operator
     alias: monitoring
-    version: 0.37.0
+    version: 0.43.0
     repository: "https://victoriametrics.github.io/helm-charts"
     condition: "monitoring.enabled"
+  - name: pmm
+    repository: "https://percona.github.io/percona-helm-charts"
+    condition: "pmm.enabled"
+    version: 1.3.*

charts/everest/Makefile

@@ -22,6 +22,7 @@ add-repos:
 	$(HELM) version
 	$(HELM) repo add prometheus-community https://prometheus-community.github.io/helm-charts
 	$(HELM) repo add vm https://victoriametrics.github.io/helm-charts
+	$(HELM) repo add percona https://percona.github.io/percona-helm-charts/
 
 deps: add-repos
 	$(HELM) dependency update .

charts/everest/README.md

@@ -146,6 +146,11 @@ The following table shows the configurable parameters of the Percona Everest cha
 | createMonitoringResources | bool | `true` | If set, creates resources for Kubernetes monitoring. |
 | dbNamespace.enabled | bool | `true` | If set, deploy the database operators in `everest` namespace. The namespace may be overridden by setting `dbNamespace.namespaceOverride`. |
 | dbNamespace.namespaceOverride | string | `"everest"` | If `dbNamespace.enabled` is `true`, deploy the database operators in this namespace. |
+| ingress.annotations | object | `{}` | Additional annotations for the ingress resource. |
+| ingress.enabled | bool | `false` | Enable ingress for Everest server |
+| ingress.hosts | list | `[{"host":"chart-example.local","paths":[{"path":"/","pathType":"ImplementationSpecific"}]}]` | List of hosts and their paths for the ingress resource. |
+| ingress.ingressClassName | string | `""` | Ingress class name. This is used to specify which ingress controller should handle this ingress. |
+| ingress.tls | list | `[]` | Each entry in the list specifies a TLS certificate and the hosts it applies to. |
 | namespaceOverride | string | `""` | Namespace override. Defaults to the value of .Release.Namespace. |
 | olm.catalogSourceImage | string | `"perconalab/everest-catalog"` | Image to use for Everest CatalogSource. |
 | olm.image | string | `"quay.io/operator-framework/olm@sha256:1b6002156f568d722c29138575733591037c24b4bfabc67946f268ce4752c3e6"` | Image to use for the OLM components. |
@@ -156,11 +161,15 @@ The following table shows the configurable parameters of the Percona Everest cha
 | olm.packageserver.tls.tlsKey | string | `""` | Client key for the PackageServer APIService. Overrides the tls.type setting. |
 | olm.packageserver.tls.type | string | `"helm"` | Type of TLS certificates. Supported values are "helm" and "cert-manager". For production setup, it is recommended to use "cert-manager". |
 | operator.enableLeaderElection | bool | `true` | Enable leader election for the operator. |
+| operator.env | list | `[]` | Additional environment variables to pass to the operator deployment. |
 | operator.healthProbeAddr | string | `":8081"` | Health probe address for the operator. |
 | operator.image | string | `"perconalab/everest-operator"` | Image to use for the Everest operator container. |
 | operator.metricsAddr | string | `"127.0.0.1:8080"` | Metrics address for the operator. |
 | operator.resources | object | `{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"5m","memory":"64Mi"}}` | Resources to allocate for the operator container. |
+| pmm | object | `{"enabled":false,"nameOverride":"pmm"}` | PMM settings. |
+| pmm.enabled | bool | `false` | If set, deploys PMM in the release namespace. |
 | server.apiRequestsRateLimit | int | `100` | Set the allowed number of requests per second. |
+| server.env | list | `[]` | Additional environment variables to pass to the server deployment. |
 | server.image | string | `"perconalab/everest"` | Image to use for the server container. |
 | server.initialAdminPassword | string | `""` | The initial password configured for the admin user. If unset, a random password is generated. It is strongly recommended to reset the admin password after installation. |
 | server.jwtKey | string | `""` | Key for signing JWT tokens. This needs to be an RSA private key. This is created during installation only. To update the key after installation, you need to manually update the `everest-jwt` Secret or use everestctl. |
@@ -170,6 +179,10 @@ The following table shows the configurable parameters of the Percona Everest cha
 | server.rbac.enabled | bool | `false` | If set, enables RBAC for Everest. |
 | server.rbac.policy | string | `"g, admin, role:admin\n"` | RBAC policy configuration. Ignored if `rbac.enabled` is false. |
 | server.resources | object | `{"limits":{"cpu":"200m","memory":"500Mi"},"requests":{"cpu":"100m","memory":"20Mi"}}` | Resources to allocate for the server container. |
+| server.service | object | `{"name":"everest","port":8080,"type":"ClusterIP"}` | Service configuration for the server. |
+| server.service.name | string | `"everest"` | Name of the service for everest |
+| server.service.port | int | `8080` | Port to expose on the service. |
+| server.service.type | string | `"ClusterIP"` | Type of service to create. |
 | server.tls.certificate.additionalHosts | list | `[]` | Certificate Subject Alternate Names (SANs) |
 | server.tls.certificate.create | bool | `false` | Create a Certificate resource (requires cert-manager to be installed) If set, creates a Certificate resource instead of a Secret. The Certificate uses the Secret name provided by `tls.secret.name` The Everest server pod will come up only after cert-manager has reconciled the Certificate resource. |
 | server.tls.certificate.domain | string | `""` | Certificate primary domain (commonName) |

charts/everest/charts/common/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: common
 description: A library chart for Everest containing common resources.
 type: library
-version: 0.0.14
+version: 0.0.15
 appVersion: "0.0.3"
 maintainers:
   - name: mayankshah1607

charts/everest/charts/common/README.md

@@ -1,6 +1,6 @@
 # common
 
-![Version: 0.0.14](https://img.shields.io/badge/Version-0.0.14-informational?style=flat-square) ![Type: library](https://img.shields.io/badge/Type-library-informational?style=flat-square) ![AppVersion: 0.0.3](https://img.shields.io/badge/AppVersion-0.0.3-informational?style=flat-square)
+![Version: 0.0.15](https://img.shields.io/badge/Version-0.0.15-informational?style=flat-square) ![Type: library](https://img.shields.io/badge/Type-library-informational?style=flat-square) ![AppVersion: 0.0.3](https://img.shields.io/badge/AppVersion-0.0.3-informational?style=flat-square)
 
 A library chart for Everest containing common resources.
 

charts/everest/charts/common/templates/_operators_installer.yaml.tpl

@@ -86,32 +86,32 @@ spec:
             - -c
             - |
               kubectl label namespace {{ .namespace }} app.kubernetes.io/managed-by=everest --overwrite
-              subs=$(kubectl -n {{ .namespace }} get subscription -o jsonpath='{.items[*].metadata.name}')
+              subs=$(kubectl -n {{ .namespace }} get subscriptions.operators.coreos.com -o jsonpath='{.items[*].metadata.name}')
               for sub in $subs
               do
                 # We do not want to touch already installed operators, otherwise bad things can happen.
-                installedCSV=$(kubectl -n {{ .namespace }} get sub $sub -o jsonpath='{.status.installedCSV}')
+                installedCSV=$(kubectl -n {{ .namespace }} get subscriptions.operators.coreos.com $sub -o jsonpath='{.status.installedCSV}')
                 if [ "$installedCSV" != "" ]; then
                   echo "Operator $sub already installed. Skip..."
                   continue
                 fi
 
                 echo "Waiting for InstallPlan to be created for Subscription $sub"
-                kubectl wait --for=jsonpath='.status.installplan.name' sub/$sub -n {{ .namespace }} --timeout=600s
+                kubectl wait --for=jsonpath='.status.installplan.name' subscriptions.operators.coreos.com/$sub -n {{ .namespace }} --timeout=600s
 
-                ip=$(kubectl -n {{ .namespace }} get sub $sub -o jsonpath='{.status.installplan.name}')
+                ip=$(kubectl -n {{ .namespace }} get subscriptions.operators.coreos.com $sub -o jsonpath='{.status.installplan.name}')
                 echo "InstallPlan $ip created for Subscription $sub"
 
                 echo "Approving InstallPlan $ip"
-                kubectl -n {{ .namespace }} patch installplan $ip --type='json' -p='[{"op": "replace", "path": "/spec/approved", "value": true}]'
+                kubectl -n {{ .namespace }} patch installplans.operators.coreos.com $ip --type='json' -p='[{"op": "replace", "path": "/spec/approved", "value": true}]'
 
                 echo "Waiting for InstallPlan to be complete $ip"
-                kubectl wait --for=jsonpath='.status.phase'=Complete installplan/$ip -n {{ .namespace }} --timeout=600s
+                kubectl wait --for=jsonpath='.status.phase'=Complete installplans.operators.coreos.com/$ip -n {{ .namespace }} --timeout=600s
 
-                csv=$(kubectl get sub $sub -n {{ .namespace }} -o jsonpath='{.status.installedCSV}')
+                csv=$(kubectl get subscriptions.operators.coreos.com $sub -n {{ .namespace }} -o jsonpath='{.status.installedCSV}')
 
                 echo "Waiting for CSV $csv to succeed"
-                kubectl wait --for=jsonpath='.status.phase'=Succeeded csv/$csv -n {{ .namespace }} --timeout=600s
+                kubectl wait --for=jsonpath='.status.phase'=Succeeded clusterserviceversions.operators.coreos.com/$csv -n {{ .namespace }} --timeout=600s
               done
       dnsPolicy: ClusterFirst
       restartPolicy: OnFailure

charts/everest/charts/everest-db-namespace/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: file://../common
-  version: 0.0.14
-digest: sha256:61216b351bbcb7f96c3fe64d857053392bb347aa177b139c661f51673ba4954e
-generated: "2024-12-18T15:46:26.617364+05:30"
+  version: 0.0.15
+digest: sha256:707d2c42aa47e16a9ae8649184489d1ca7b5bfec62e2f08653ca7910ec860235
+generated: "2025-02-28T17:55:16.967068+05:30"