Skip to content

Commit 949aefb

Browse files
foxishfoxish
authored
Merge pull request #71 from signadot/base-for-v0.19.2
Base for release v0.19.2
2 parents 9cb1b78 + 3b00c9a commit 949aefb

21 files changed

+597
-236
lines changed

‎signadot/operator/Chart.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,10 @@ type: application
66
# This is the chart version. This version number should be incremented each time you make changes
77
# to the chart and its templates, including the app version.
88
# Versions are expected to follow Semantic Versioning (https://semver.org/)
9-
version: "0.19.1"
9+
version: "0.19.2"
1010

1111
# This is the version number of the application being deployed. This version number should be
1212
# incremented each time you make changes to the application. Versions are not expected to
1313
# follow Semantic Versioning. They should reflect the version the application is using.
1414
# It is recommended to use it with quotes.
15-
appVersion: "0.19.1"
15+
appVersion: "0.19.2"

‎signadot/operator/README.md

+198-58
Large diffs are not rendered by default.

‎signadot/operator/templates/_helpers.tpl

+2
Original file line numberDiff line numberDiff line change
@@ -5,12 +5,14 @@ cluster config template
55
{{- define "compileClusterConfig" -}}
66
{{- $allowedNamespaces := (include "getAllowedNamespaces" . | fromJsonArray) -}}
77
allowedNamespaces: {{ if gt (len $allowedNamespaces) 0 }}{{ printf "\n" }}{{ toYaml $allowedNamespaces | indent 2}}{{- else -}}[]{{- end }}
8+
allowOrphanedResources: {{ if hasKey .Values "allowOrphanedResources" -}}{{ toString .Values.allowOrphanedResources }}{{- else -}}false{{- end }}
89
routing:
910
istio:
1011
enabled: {{ if and (hasKey .Values "istio") (hasKey .Values.istio "enabled") -}}{{ toString .Values.istio.enabled }}{{- else -}}false{{- end }}
1112
enableHostRouting: {{ if and (hasKey .Values "istio") (hasKey .Values.istio "enableDeprecatedHostRouting") -}}{{ toString .Values.istio.enableDeprecatedHostRouting }}{{- else -}}false{{- end }}
1213
linkerd:
1314
enabled: {{ if and (hasKey .Values "linkerd") (hasKey .Values.linkerd "enabled") -}}{{ toString .Values.linkerd.enabled }}{{- else -}}false{{- end }}
15+
iptablesMode: {{ if and (hasKey .Values "routing") (hasKey .Values.routing "iptablesMode") -}}{{ .Values.routing.iptablesMode }}{{- else -}}legacy{{- end }}
1416
customHeaders: {{ with .Values }}{{ with .routing }}{{ with .customHeaders }}{{ printf "\n" }}{{ toYaml . | indent 4}}{{- else -}}[]{{- end }}{{- else -}}[]{{- end }}{{- else -}}[]{{- end }}
1517
sandboxTrafficManager:
1618
enabled: {{ if and (hasKey .Values "sandboxTrafficManager") (hasKey .Values.sandboxTrafficManager "enabled") -}}{{ toString .Values.sandboxTrafficManager.enabled }}{{- else -}}true{{- end }}

‎signadot/operator/templates/agent-deployment.yaml

+7-1
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,8 @@ spec:
2222
selector:
2323
matchLabels:
2424
app: signadot-agent
25+
strategy:
26+
type: Recreate
2527
template:
2628
metadata:
2729
annotations:
@@ -59,7 +61,7 @@ spec:
5961
secretKeyRef:
6062
key: token
6163
name: cluster-agent
62-
image: {{ with .Values }}{{ with .agent }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/agent:v0.19.1{{- end }}{{- else -}}signadot/agent:v0.19.1{{- end }}{{- else -}}signadot/agent:v0.19.1{{- end }}
64+
image: {{ with .Values }}{{ with .agent }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/agent:v0.19.2{{- end }}{{- else -}}signadot/agent:v0.19.2{{- end }}{{- else -}}signadot/agent:v0.19.2{{- end }}
6365
imagePullPolicy: {{ with .Values }}{{ with .agent }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
6466
livenessProbe:
6567
httpGet:
@@ -72,5 +74,9 @@ spec:
7274
httpGet:
7375
path: /healthz
7476
port: 8088
77+
{{- with .Values }}{{- with .agent }}{{- with .resources }}
78+
resources:
79+
{{ toYaml . | indent 10 }}
80+
{{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}
7581
serviceAccountName: agent
7682
{{ end }}

‎signadot/operator/templates/agent-metrics-service.yaml

+2
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# This file is generated. Do not edit.
2+
{{ if not .Values.disableAgent }}
23
apiVersion: v1
34
kind: Service
45
metadata:
@@ -28,3 +29,4 @@ spec:
2829
selector:
2930
app: signadot-agent
3031
type: ClusterIP
32+
{{ end }}

‎signadot/operator/templates/allowed_namespaces.yaml

+20
Original file line numberDiff line numberDiff line change
@@ -17,3 +17,23 @@ subjects:
1717
name: signadot-controller-manager
1818
namespace: signadot
1919
{{ end }}
20+
{{ if not .Values.disableAgent }}
21+
# Bind the ClusterRole containing agent permissions to the agent's
22+
# ServiceAccount only in the specified namespaces.
23+
{{ range $namespace := $allowedNamespaces }}
24+
---
25+
apiVersion: rbac.authorization.k8s.io/v1
26+
kind: RoleBinding
27+
metadata:
28+
name: signadot-agent-namespaced
29+
namespace: {{ $namespace | quote }}
30+
roleRef:
31+
apiGroup: rbac.authorization.k8s.io
32+
kind: ClusterRole
33+
name: signadot-agent-namespaced
34+
subjects:
35+
- kind: ServiceAccount
36+
name: agent
37+
namespace: signadot
38+
{{ end }}
39+
{{ end }}

‎signadot/operator/templates/forkedworkloads.signadot.com-customresourcedefinition.yaml

+2
Original file line numberDiff line numberDiff line change
@@ -71,6 +71,8 @@ spec:
7171
- kind
7272
- name
7373
type: object
74+
disableSandboxTrafficManager:
75+
type: boolean
7476
patches:
7577
description: List of patches to be applied to the baseline workload
7678
items:

‎signadot/operator/templates/io-context-server-deployment.yaml

+5-1
Original file line numberDiff line numberDiff line change
@@ -40,9 +40,13 @@ spec:
4040
- /app/io-context-server
4141
- -tls=secretns=signadot
4242
- -port=8443
43-
image: {{ with .Values }}{{ with .ioContextServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-context-server:v0.19.1{{- end }}{{- else -}}signadot/io-context-server:v0.19.1{{- end }}{{- else -}}signadot/io-context-server:v0.19.1{{- end }}
43+
image: {{ with .Values }}{{ with .ioContextServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-context-server:v0.19.2{{- end }}{{- else -}}signadot/io-context-server:v0.19.2{{- end }}{{- else -}}signadot/io-context-server:v0.19.2{{- end }}
4444
imagePullPolicy: {{ with .Values }}{{ with .ioContextServer }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
4545
name: io-context-server
4646
ports:
4747
- containerPort: 8443
48+
{{- with .Values }}{{- with .ioContextServer }}{{- with .resources }}
49+
resources:
50+
{{ toYaml . | indent 10 }}
51+
{{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}
4852
serviceAccountName: io-context-server

‎signadot/operator/templates/jobs.signadot.com-customresourcedefinition.yaml

+6-1
Original file line numberDiff line numberDiff line change
@@ -151,11 +151,16 @@ spec:
151151
trafficManager:
152152
description: Traffic manager settings
153153
properties:
154+
enabled:
155+
description: Explicitly enable traffic manager in runner pods
156+
for this job.
157+
type: boolean
154158
injectRoutingKey:
155159
default: Disabled
156160
description: |-
157161
Enable the automatic insertion of routing key headers for HTTP and gRPC
158-
(H2C) traffic
162+
(H2C) traffic. The "auto" value will overwrite the value of the Enabled
163+
field, setting it to true.
159164
enum:
160165
- Disabled
161166
- Auto

‎signadot/operator/templates/routeserver-deployment.yaml

+5-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ spec:
3636
{{- end }}
3737
spec:
3838
containers:
39-
- image: {{ with .Values }}{{ with .routeServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-server:v0.19.1{{- end }}{{- else -}}signadot/route-server:v0.19.1{{- end }}{{- else -}}signadot/route-server:v0.19.1{{- end }}
39+
- image: {{ with .Values }}{{ with .routeServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-server:v0.19.2{{- end }}{{- else -}}signadot/route-server:v0.19.2{{- end }}{{- else -}}signadot/route-server:v0.19.2{{- end }}
4040
imagePullPolicy: {{ with .Values }}{{ with .routeServer }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
4141
name: routeserver
4242
ports:
@@ -48,4 +48,8 @@ spec:
4848
name: http-legacy
4949
- containerPort: 9090
5050
name: http-metrics
51+
{{- with .Values }}{{- with .routeServer }}{{- with .resources }}
52+
resources:
53+
{{ toYaml . | indent 10 }}
54+
{{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}
5155
serviceAccountName: routeserver

‎signadot/operator/templates/signadot-agent-clusterrole.yaml

-42
Original file line numberDiff line numberDiff line change
@@ -38,51 +38,9 @@ rules:
3838
- apiGroups:
3939
- ""
4040
resources:
41-
- pods
42-
- pods/log
43-
- services
4441
- namespaces
4542
verbs:
4643
- get
4744
- list
4845
- watch
49-
- apiGroups:
50-
- ""
51-
- events.k8s.io
52-
resources:
53-
- events
54-
verbs:
55-
- get
56-
- list
57-
- watch
58-
- create
59-
- update
60-
- delete
61-
- apiGroups:
62-
- apps
63-
resources:
64-
- deployments
65-
- replicasets
66-
verbs:
67-
- get
68-
- list
69-
- watch
70-
- apiGroups:
71-
- argoproj.io
72-
resources:
73-
- rollouts
74-
verbs:
75-
- get
76-
- list
77-
- watch
78-
- apiGroups:
79-
- ""
80-
resourceNames:
81-
- signadot-cluster-config
82-
resources:
83-
- configmaps
84-
verbs:
85-
- get
86-
- list
87-
- watch
8846
{{ end }}

‎signadot/operator/templates/signadot-agent-namespaced-clusterrole.yaml

+55
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
# This file is generated. Do not edit.
2+
{{ if not .Values.disableAgent }}
3+
apiVersion: rbac.authorization.k8s.io/v1
4+
kind: ClusterRole
5+
metadata:
6+
annotations:
7+
{{- range $key, $val := .Values.commonAnnotations }}
8+
{{ $key | quote }}: {{ $val | quote }}
9+
{{- end }}
10+
labels:
11+
{{- range $key, $val := .Values.commonLabels }}
12+
{{ $key | quote }}: {{ $val | quote }}
13+
{{- end }}
14+
name: signadot-agent-namespaced
15+
rules:
16+
- apiGroups:
17+
- ""
18+
resources:
19+
- pods
20+
- pods/log
21+
- services
22+
verbs:
23+
- get
24+
- list
25+
- watch
26+
- apiGroups:
27+
- ""
28+
- events.k8s.io
29+
resources:
30+
- events
31+
verbs:
32+
- get
33+
- list
34+
- watch
35+
- create
36+
- update
37+
- delete
38+
- apiGroups:
39+
- apps
40+
resources:
41+
- deployments
42+
- replicasets
43+
verbs:
44+
- get
45+
- list
46+
- watch
47+
- apiGroups:
48+
- argoproj.io
49+
resources:
50+
- rollouts
51+
verbs:
52+
- get
53+
- list
54+
- watch
55+
{{ end }}

‎signadot/operator/templates/signadot-agent-namespaced-clusterrolebinding.yaml

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
# This file is generated. Do not edit.
2+
{{ if and (not .Values.allowedNamespaces) (not .Values.disableAgent) }}
3+
apiVersion: rbac.authorization.k8s.io/v1
4+
kind: ClusterRoleBinding
5+
metadata:
6+
annotations:
7+
{{- range $key, $val := .Values.commonAnnotations }}
8+
{{ $key | quote }}: {{ $val | quote }}
9+
{{- end }}
10+
labels:
11+
{{- range $key, $val := .Values.commonLabels }}
12+
{{ $key | quote }}: {{ $val | quote }}
13+
{{- end }}
14+
name: signadot-agent-namespaced
15+
roleRef:
16+
apiGroup: rbac.authorization.k8s.io
17+
kind: ClusterRole
18+
name: signadot-agent-namespaced
19+
subjects:
20+
- kind: ServiceAccount
21+
name: agent
22+
namespace: signadot
23+
{{ end }}

‎signadot/operator/templates/signadot-agent-role.yaml

+27
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
# This file is generated. Do not edit.
2+
{{ if not .Values.disableAgent }}
3+
apiVersion: rbac.authorization.k8s.io/v1
4+
kind: Role
5+
metadata:
6+
annotations:
7+
{{- range $key, $val := .Values.commonAnnotations }}
8+
{{ $key | quote }}: {{ $val | quote }}
9+
{{- end }}
10+
labels:
11+
{{- range $key, $val := .Values.commonLabels }}
12+
{{ $key | quote }}: {{ $val | quote }}
13+
{{- end }}
14+
name: signadot-agent
15+
namespace: signadot
16+
rules:
17+
- apiGroups:
18+
- ""
19+
resourceNames:
20+
- signadot-cluster-config
21+
resources:
22+
- configmaps
23+
verbs:
24+
- get
25+
- list
26+
- watch
27+
{{ end }}

‎signadot/operator/templates/signadot-agent-rolebinding.yaml

+24
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
# This file is generated. Do not edit.
2+
{{ if not .Values.disableAgent }}
3+
apiVersion: rbac.authorization.k8s.io/v1
4+
kind: RoleBinding
5+
metadata:
6+
annotations:
7+
{{- range $key, $val := .Values.commonAnnotations }}
8+
{{ $key | quote }}: {{ $val | quote }}
9+
{{- end }}
10+
labels:
11+
{{- range $key, $val := .Values.commonLabels }}
12+
{{ $key | quote }}: {{ $val | quote }}
13+
{{- end }}
14+
name: signadot-agent
15+
namespace: signadot
16+
roleRef:
17+
apiGroup: rbac.authorization.k8s.io
18+
kind: Role
19+
name: signadot-agent
20+
subjects:
21+
- kind: ServiceAccount
22+
name: agent
23+
namespace: signadot
24+
{{ end }}

‎signadot/operator/templates/signadot-controller-manager-deployment.yaml

+13-16
Original file line numberDiff line numberDiff line change
@@ -81,26 +81,26 @@ spec:
8181
- name: SANDBOX_TRAFFICMANAGER_SIDECAR_IMAGE_PULL_SECRET
8282
value: {{ with .Values }}{{ with .sandboxTrafficManager }}{{ with .sidecar }}{{ with .imagePullSecret }}{{ . }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}
8383
- name: SIDECAR_INIT_IMAGE
84-
value: {{ with .Values }}{{ with .routeInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-init:v0.19.1{{- end }}{{- else -}}signadot/route-sidecar-init:v0.19.1{{- end }}{{- else -}}signadot/route-sidecar-init:v0.19.1{{- end }}
84+
value: {{ with .Values }}{{ with .routeInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-init:v0.19.2{{- end }}{{- else -}}signadot/route-sidecar-init:v0.19.2{{- end }}{{- else -}}signadot/route-sidecar-init:v0.19.2{{- end }}
8585
- name: LEGACY_SIDECAR_INIT_IMAGE
8686
value: {{ with .Values }}{{ with .routeInit }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}
8787
- name: ROUTE_SIDECAR_IMAGE
88-
value: {{ with .Values }}{{ with .routeSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar:v0.19.1{{- end }}{{- else -}}signadot/route-sidecar:v0.19.1{{- end }}{{- else -}}signadot/route-sidecar:v0.19.1{{- end }}
88+
value: {{ with .Values }}{{ with .routeSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar:v0.19.2{{- end }}{{- else -}}signadot/route-sidecar:v0.19.2{{- end }}{{- else -}}signadot/route-sidecar:v0.19.2{{- end }}
8989
- name: LEGACY_ROUTE_SIDECAR_IMAGE
90-
value: {{ with .Values }}{{ with .routeSidecar }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-legacy:v0.19.1{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.19.1{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.19.1{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.19.1{{- end }}
90+
value: {{ with .Values }}{{ with .routeSidecar }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-legacy:v0.19.2{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.19.2{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.19.2{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.19.2{{- end }}
9191
- name: IO_INIT_IMAGE
92-
value: {{ with .Values }}{{ with .ioInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-init:v0.19.1{{- end }}{{- else -}}signadot/io-init:v0.19.1{{- end }}{{- else -}}signadot/io-init:v0.19.1{{- end }}
92+
value: {{ with .Values }}{{ with .ioInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-init:v0.19.2{{- end }}{{- else -}}signadot/io-init:v0.19.2{{- end }}{{- else -}}signadot/io-init:v0.19.2{{- end }}
9393
- name: IO_SIDECAR_IMAGE
94-
value: {{ with .Values }}{{ with .ioSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-sidecar:v0.19.1{{- end }}{{- else -}}signadot/io-sidecar:v0.19.1{{- end }}{{- else -}}signadot/io-sidecar:v0.19.1{{- end }}
94+
value: {{ with .Values }}{{ with .ioSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-sidecar:v0.19.2{{- end }}{{- else -}}signadot/io-sidecar:v0.19.2{{- end }}{{- else -}}signadot/io-sidecar:v0.19.2{{- end }}
9595
- name: JOB_EXECUTOR_INIT_IMAGE
96-
value: {{ with .Values }}{{ with .jobExecutorInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/job-executor-init:v0.19.1{{- end }}{{- else -}}signadot/job-executor-init:v0.19.1{{- end }}{{- else -}}signadot/job-executor-init:v0.19.1{{- end }}
96+
value: {{ with .Values }}{{ with .jobExecutorInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/job-executor-init:v0.19.2{{- end }}{{- else -}}signadot/job-executor-init:v0.19.2{{- end }}{{- else -}}signadot/job-executor-init:v0.19.2{{- end }}
9797
- name: JOB_EXECUTOR_PROXY_IMAGE
98-
value: {{ with .Values }}{{ with .jobExecutorProxy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/job-executor-proxy:v0.19.1{{- end }}{{- else -}}signadot/job-executor-proxy:v0.19.1{{- end }}{{- else -}}signadot/job-executor-proxy:v0.19.1{{- end }}
98+
value: {{ with .Values }}{{ with .jobExecutorProxy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/job-executor-proxy:v0.19.2{{- end }}{{- else -}}signadot/job-executor-proxy:v0.19.2{{- end }}{{- else -}}signadot/job-executor-proxy:v0.19.2{{- end }}
9999
- name: SANDBOX_TRAFFICMANAGER_INIT_IMAGE
100-
value: {{ with .Values }}{{ with .sandboxTrafficManager }}{{ with .init }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/sandbox-traffic-manager-init:v0.19.1{{- end }}{{- else -}}signadot/sandbox-traffic-manager-init:v0.19.1{{- end }}{{- else -}}signadot/sandbox-traffic-manager-init:v0.19.1{{- end }}{{- else -}}signadot/sandbox-traffic-manager-init:v0.19.1{{- end }}
100+
value: {{ with .Values }}{{ with .sandboxTrafficManager }}{{ with .init }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/sandbox-traffic-manager-init:v0.19.2{{- end }}{{- else -}}signadot/sandbox-traffic-manager-init:v0.19.2{{- end }}{{- else -}}signadot/sandbox-traffic-manager-init:v0.19.2{{- end }}{{- else -}}signadot/sandbox-traffic-manager-init:v0.19.2{{- end }}
101101
- name: SANDBOX_TRAFFICMANAGER_SIDECAR_IMAGE
102-
value: {{ with .Values }}{{ with .sandboxTrafficManager }}{{ with .sidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/sandbox-traffic-manager-sidecar:v0.19.1{{- end }}{{- else -}}signadot/sandbox-traffic-manager-sidecar:v0.19.1{{- end }}{{- else -}}signadot/sandbox-traffic-manager-sidecar:v0.19.1{{- end }}{{- else -}}signadot/sandbox-traffic-manager-sidecar:v0.19.1{{- end }}
103-
image: {{ with .Values }}{{ with .operator }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/operator:v0.19.1{{- end }}{{- else -}}signadot/operator:v0.19.1{{- end }}{{- else -}}signadot/operator:v0.19.1{{- end }}
102+
value: {{ with .Values }}{{ with .sandboxTrafficManager }}{{ with .sidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/sandbox-traffic-manager-sidecar:v0.19.2{{- end }}{{- else -}}signadot/sandbox-traffic-manager-sidecar:v0.19.2{{- end }}{{- else -}}signadot/sandbox-traffic-manager-sidecar:v0.19.2{{- end }}{{- else -}}signadot/sandbox-traffic-manager-sidecar:v0.19.2{{- end }}
103+
image: {{ with .Values }}{{ with .operator }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/operator:v0.19.2{{- end }}{{- else -}}signadot/operator:v0.19.2{{- end }}{{- else -}}signadot/operator:v0.19.2{{- end }}
104104
imagePullPolicy: {{ with .Values }}{{ with .operator }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
105105
livenessProbe:
106106
httpGet:
@@ -119,13 +119,10 @@ spec:
119119
port: 8081
120120
initialDelaySeconds: 5
121121
periodSeconds: 10
122+
{{- with .Values }}{{- with .operator }}{{- with .resources }}
122123
resources:
123-
limits:
124-
cpu: {{ with .Values }}{{ with .operator }}{{ with .cpu }}{{ . | quote}}{{- else -}}100m{{- end }}{{- else -}}100m{{- end }}{{- else -}}100m{{- end }}
125-
memory: {{ with .Values }}{{ with .operator }}{{ with .memory }}{{ . | quote}}{{- else -}}512Mi{{- end }}{{- else -}}512Mi{{- end }}{{- else -}}512Mi{{- end }}
126-
requests:
127-
cpu: {{ with .Values }}{{ with .operator }}{{ with .cpu }}{{ . | quote}}{{- else -}}100m{{- end }}{{- else -}}100m{{- end }}{{- else -}}100m{{- end }}
128-
memory: {{ with .Values }}{{ with .operator }}{{ with .memory }}{{ . | quote}}{{- else -}}512Mi{{- end }}{{- else -}}512Mi{{- end }}{{- else -}}512Mi{{- end }}
124+
{{ toYaml . | indent 10 }}
125+
{{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}
129126
securityContext:
130127
allowPrivilegeEscalation: false
131128
volumeMounts:

‎signadot/operator/templates/signadotsandboxes.signadot.com-customresourcedefinition.yaml

+2
Original file line numberDiff line numberDiff line change
@@ -209,6 +209,8 @@ spec:
209209
type: string
210210
type: array
211211
type: object
212+
disableSandboxTrafficManager:
213+
type: boolean
212214
externalWorkloads:
213215
description: |-
214216
This is the list of externally controlled workloads this sandbox will route

0 commit comments

Comments
 (0)