Skip to content

Commit ae3344a

Browse files
Merge pull request #57 from signadot/release-v0.14.0
Release v0.14.0
2 parents 6fd623a + 266c3a3 commit ae3344a

18 files changed

+1049
-76
lines changed

signadot/operator/Chart.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,10 @@ type: application
66
# This is the chart version. This version number should be incremented each time you make changes
77
# to the chart and its templates, including the app version.
88
# Versions are expected to follow Semantic Versioning (https://semver.org/)
9-
version: "0.13.3"
9+
version: "0.14.0"
1010

1111
# This is the version number of the application being deployed. This version number should be
1212
# incremented each time you make changes to the application. Versions are not expected to
1313
# follow Semantic Versioning. They should reflect the version the application is using.
1414
# It is recommended to use it with quotes.
15-
appVersion: "0.13.3"
15+
appVersion: "0.14.0"

signadot/operator/README.md

+44-33
Original file line numberDiff line numberDiff line change
@@ -77,41 +77,43 @@ their name. Additionally, the `execpod-` images are for compatibility with old
7777
style resources and are not needed in an installation which uses the new
7878
[resource plugins](https://www.signadot.com/docs/resourceplugins).
7979

80-
| Name | Description | Default |
81-
| ------------------------------------- | ------------------------------------------------------- | -------------- |
82-
| `operator.image` | Operator image override | `signadot/operator:vX.Y.Z` |
83-
| `operator.imagePullPolicy` | Operator image pull policy | `IfNotPresent` |
84-
| `agent.image` | Agent image override | `signadot/agent:vX.Y.Z` |
85-
| `agent.imagePullPolicy` | Agent image pull policy | `IfNotPresent` |
86-
| `routeServer.image` | Route Server image override | `signadot/route-server:vX.Y.Z` |
87-
| `routeServer.imagePullPolicy` | Route Server image pull policy | `IfNotPresent` |
88-
| `ioContextServer.image` | IO Context Server image override | `signadot/io-context-server:vX.Y.Z` |
89-
| `ioContextServer.imagePullPolicy` | IO Context Server image pull policy | `IfNotPresent` |
90-
| `kubeRBACProxy.image` | Kube-rbac-proxy image override | `""` |
91-
| `kubeRBACProxy.imagePullPolicy` | Kube-rbac-proxy image pull policy | `IfNotPresent` |
92-
| `routeInit.image` | Route Init container image override | `signadot/route-sidecar-init:vX.Y.Z` |
93-
| `routeInit.legacy.image` | Route Init container image override (legacy version) | `signadot/sd-init-networking:latest` |
94-
| `routeInit.imagePullPolicy` | Route Init container image pull policy | `IfNotPresent` |
95-
| `routeInit.imagePullSecret` | Route Init container image pull secret | `""` |
96-
| `routeSidecar.image` | Route Sidecar container image override | `signadot/route-sidecar:vX.Y.Z` |
97-
| `routeSidecar.legacy.image` | Route Sidecar container image override (legacy version) | `signadot/route-sidecar-legacy:vX.Y.Z` |
98-
| `routeSidecar.imagePullPolicy` | Route Sidecar container image pull policy | `IfNotPresent` |
99-
| `routeSidecar.imagePullSecret` | Route Sidecar container image pull secret | `""` |
100-
| `ioInit.image` | IO Init container image override | `signadot/io-init:vX.Y.Z` |
101-
| `ioInit.imagePullPolicy` | IO Init container image pull policy | `IfNotPresent` |
102-
| `ioInit.imagePullSecret` | IO Init container image pull secret | `""` |
80+
| Name | Description | Default |
81+
| ------------------------------------- | ------------------------------------------------------- | -------------------------------------- |
82+
| `operator.image` | Operator image override | `signadot/operator:vX.Y.Z` |
83+
| `operator.imagePullPolicy` | Operator image pull policy | `IfNotPresent` |
84+
| `agent.image` | Agent image override | `signadot/agent:vX.Y.Z` |
85+
| `agent.imagePullPolicy` | Agent image pull policy | `IfNotPresent` |
86+
| `routeServer.image` | Route Server image override | `signadot/route-server:vX.Y.Z` |
87+
| `routeServer.imagePullPolicy` | Route Server image pull policy | `IfNotPresent` |
88+
| `ioContextServer.image` | IO Context Server image override | `signadot/io-context-server:vX.Y.Z` |
89+
| `ioContextServer.imagePullPolicy` | IO Context Server image pull policy | `IfNotPresent` |
90+
| `kubeRBACProxy.image` | Kube-rbac-proxy image override | `""` |
91+
| `kubeRBACProxy.imagePullPolicy` | Kube-rbac-proxy image pull policy | `IfNotPresent` |
92+
| `routeInit.image` | Route Init container image override | `signadot/route-sidecar-init:vX.Y.Z` |
93+
| `routeInit.legacy.image` | Route Init container image override (legacy version) | `signadot/sd-init-networking:latest` |
94+
| `routeInit.imagePullPolicy` | Route Init container image pull policy | `IfNotPresent` |
95+
| `routeInit.imagePullSecret` | Route Init container image pull secret | `""` |
96+
| `routeSidecar.image` | Route Sidecar container image override | `signadot/route-sidecar:vX.Y.Z` |
97+
| `routeSidecar.legacy.image` | Route Sidecar container image override (legacy version) | `signadot/route-sidecar-legacy:vX.Y.Z` |
98+
| `routeSidecar.imagePullPolicy` | Route Sidecar container image pull policy | `IfNotPresent` |
99+
| `routeSidecar.imagePullSecret` | Route Sidecar container image pull secret | `""` |
100+
| `ioInit.image` | IO Init container image override | `signadot/io-init:vX.Y.Z` |
101+
| `ioInit.imagePullPolicy` | IO Init container image pull policy | `IfNotPresent` |
102+
| `ioInit.imagePullSecret` | IO Init container image pull secret | `""` |
103103
| `ioSidecar.image` | IO Sidecar container image override | `signadot/io-sidecar:vX.Y.Z` |
104-
| `ioSidecar.imagePullPolicy` | IO Sidecar container image pull policy | `IfNotPresent` |
105-
| `ioSidecar.imagePullSecret` | IO Sidecar container image pull secret | `""` |
106-
| `execpodSidecar.image` | ExecPod Sidecar container image override | `signadot/execpod-sidecar:vX.Y.Z` |
107-
| `execpodSidecar.imagePullPolicy` | ExecPod Sidecar container image pull policy | `IfNotPresent` |
108-
| `execpodSidecar.imagePullSecret` | ExecPod Sidecar container image pull secret | `""` |
104+
| `ioSidecar.imagePullPolicy` | IO Sidecar container image pull policy | `IfNotPresent` |
105+
| `ioSidecar.imagePullSecret` | IO Sidecar container image pull secret | `""` |
106+
| `execpodSidecar.image` | ExecPod Sidecar container image override | `signadot/execpod-sidecar:vX.Y.Z` |
107+
| `execpodSidecar.imagePullPolicy` | ExecPod Sidecar container image pull policy | `IfNotPresent` |
108+
| `execpodSidecar.imagePullSecret` | ExecPod Sidecar container image pull secret | `""` |
109109
| `tunnel.api.image` | Tunnel API image override | `signadot/tunnel-api:vX.Y.Z` |
110-
| `tunnel.api.imagePullPolicy` | Tunnel API image pull policy | `IfNotPresent` |
111-
| `tunnel.proxy.image` | Tunnel Proxy image override | `signadot/tunnel-proxy:vX.Y.Z` |
112-
| `tunnel.proxy.imagePullPolicy` | Tunnel Proxy image pull policy | `IfNotPresent` |
113-
| `tunnel.auditor.init.image` | Tunnel Auditor init image override | `signadot/tunnel-auditor-init:vX.Y.Z` |
114-
| `tunnel.auditor.init.imagePullPolicy` | Tunnel Auditor init image pull policy | `IfNotPresent` |
110+
| `tunnel.api.imagePullPolicy` | Tunnel API image pull policy | `IfNotPresent` |
111+
| `tunnel.proxy.image` | Tunnel Proxy image override | `signadot/tunnel-proxy:vX.Y.Z` |
112+
| `tunnel.proxy.imagePullPolicy` | Tunnel Proxy image pull policy | `IfNotPresent` |
113+
| `tunnel.auditor.image` | Tunnel Auditor image override | `envoyproxy/envoy:v1.26.1` |
114+
| `tunnel.auditor.imagePullPolicy` | Tunnel Auditor image pull policy | `IfNotPresent` |
115+
| `tunnel.auditor.init.image` | Tunnel Auditor init image override | `signadot/tunnel-auditor-init:vX.Y.Z` |
116+
| `tunnel.auditor.init.imagePullPolicy` | Tunnel Auditor init image pull policy | `IfNotPresent` |
115117

116118
### Tunnel parameters
117119

@@ -132,3 +134,12 @@ style resources and are not needed in an installation which uses the new
132134
| `tunnel.auditor.inboundRulesLuaScript` | All inbound traffic (from cluster to workstation) will pass thru this script (if defined) in the Envoy auditor, check [HTTP Lua filter](https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/lua_filter#stream-handle-api) documentation for details | `""` |
133135
| `tunnel.auditor.outboundRulesLuaScript` | All outbound traffic (from workstation to cluster) will pass thru this script (if defined) in the Envoy auditor, check [HTTP Lua filter](https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/lua_filter#stream-handle-api) documentation for details | `""` |
134136
| | | |
137+
### Istio Parameters
138+
139+
When Istio is enabled (`istio.enabled: true`), the Signadot Operator manipulates Istio VirtualServices by applying new HTTPRoutes where appropriate to direct traffic to sandboxed workloads. You can configure the operator to add labels and annotations to these objects when they are in use by the operator. Note that these labels and annotations are only added when the object comes into use. This can be useful for temporarily disabling CI sync, amongst other possibilities.
140+
141+
| Name | Description | Default |
142+
| ----------------------------- | --------------------------------------------------------- | ------- |
143+
| `istio.enabled` | Enable Istio integration | `false` |
144+
| `istio.additionalAnnotations` | Annotations to add to istio VirtualServices if not present | `{}` |
145+
| `istio.additionalLabels` | Labels to add to istio VirtualServices if not present | `{}` |

signadot/operator/templates/agent-deployment.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ spec:
4848
secretKeyRef:
4949
key: token
5050
name: cluster-agent
51-
image: {{ with .Values }}{{ with .agent }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/agent:v0.13.3{{- end }}{{- else -}}signadot/agent:v0.13.3{{- end }}{{- else -}}signadot/agent:v0.13.3{{- end }}
51+
image: {{ with .Values }}{{ with .agent }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/agent:v0.14.0{{- end }}{{- else -}}signadot/agent:v0.14.0{{- end }}{{- else -}}signadot/agent:v0.14.0{{- end }}
5252
imagePullPolicy: {{ with .Values }}{{ with .agent }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
5353
livenessProbe:
5454
httpGet:

0 commit comments

Comments
 (0)