[stable/pomerium] Scale out improvements #16338

travisgroth · 2019-08-14T23:03:50Z

What this PR does / why we need it:

Switch to a Headless service to support client side load balancing in the future
Allow independent replicaCount scaling of the different services

Checklist

[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]

DCO signed
Chart Version bumped
Variables are documented in the README.md
Title of the PR starts with chart name (e.g. [stable/chart])

travisgroth · 2019-08-15T12:25:13Z

@victornoel I've done some testing that the behavior switching to headless on the 0.2.x series works, but I'd appreciate another person testing if you have the time.

victornoel · 2019-08-15T12:34:10Z

@victornoel <https://github.com/victornoel> I've done some testing that the behavior switching to headless on the 0.2.x series works, but I'd appreciate another person testing if you have the time.

@travisgroth I won't be able to test until next week. I think the replica setting change is trivial, but I'm not clear about what `ClusterIP: None` exactly entails...

…

travisgroth · 2019-08-15T12:48:54Z

but I'm not clear about what ClusterIP: None
exactly entails

That changes us to a headless service. The DNS response inside the cluster will be IPs of the individual pods, which GRPC can handle correctly. I think this can wait a few days. Worst case, it rolls out with 0.3 where I'm more confident in the documented behavior.

victornoel · 2019-08-19T15:06:08Z

but I'm not clear about what ClusterIP: None
exactly entails

That changes us to a headless service. The DNS response inside the cluster will be IPs of the individual pods, which GRPC can handle correctly. I think this can wait a few days. Worst case, it rolls out with 0.3 where I'm more confident in the documented behavior.

@travisgroth and will this work as well for the authenticate service if it's behind an ingress for example? It means the ingress must know how to interpret DNS answers with multiple IPs… but maybe this is not a problem?
Or maybe we need different Service for gRPC than for HTTP?

Anyway, I think better understand why it is needed by gRPC: to be able to load-balance itself when it multiplex requests.

travisgroth · 2019-08-20T02:53:55Z

will this work as well for the authenticate service if it's behind an ingress for example

I was thinking that ingress controllers bypassed the service proxy to backend pods, but I realize that may not be true after looking around.

Or maybe we need different Service for gRPC than for HTTP?

This is likely the most correct call.

Anyway, I think better understand why it is needed by gRPC: to be able to load-balance itself when it multiplex requests.

Yes. gRPC will only open one connection per endpoint, and the kube proxy load balancing is connection based. So, in the current architecture, all requests from a given Proxy will be pinned to a single authorize or authenticate pod. While the traffic is fairly light, this makes scale out impossible. Exposing the pods directly to gRPC allows the proxy to at least connect to all upstreams and manage its own failover.

As a further step, v0.3.0 will have client side load balancing support enabled. This will allow Proxy to actively utilize all upstream service connections it sees via DNS and enable true scale out.

I'm going to refactor with a separate gRPC service for authenticate. That should be compatible with the widest number of setups.

stable/pomerium/templates/_helpers.tpl

stable/pomerium/README.md

victornoel · 2019-08-26T08:11:08Z

@travisgroth so this is meant to be merged when 0.3.0 is released or do you want to do it earlier?

travisgroth · 2019-08-27T02:09:56Z

@victornoel it could go before, but I think the 0.3 release is imminent so it's fine to wait. I'll do the bump in another PR and then rebase this on top.

travisgroth · 2019-09-02T21:58:21Z

@victornoel I've rebased on top of the pomerium v0.3.0 PR so this should be good to go now.

victornoel · 2019-09-04T06:45:52Z

@victornoel I've rebased on top of the pomerium v0.3.0 PR so this should be good to go now.

Sorry, haven't had the time to test it, if you feel confident, I think this can be merged, but if you can wait a bit more, I can try a deployment with it soon.

victornoel · 2019-09-04T16:53:46Z

stable/pomerium/templates/authenticate-internal-service.yaml

+    - port: 443
+      targetPort: https
+      protocol: TCP
+      name: https


@travisgroth is that desired that there are no 9090 port on this one?

Yes - no need for the metrics port on both services. Keeping it on the main service makes any auto discovered names a little cleaner.

victornoel · 2019-09-04T17:02:16Z

@travisgroth I couldn't make it work… I regenerated the certificates (key and cert) via generateTLS and used them as-is, but I still got errors in the logs like this:

{"level":"error","addr":":443","time":"2019-09-04T17:00:39Z","message":"http: TLS handshake error from 10.242.0.164:36576: remote error: tls: bad certificate"}

I'm not sure what I missed, because if I use the previous values I had for those (also generated via generateTLS in the past), it works with chart 1.3.2…

travisgroth · 2019-09-05T01:51:09Z

@travisgroth I couldn't make it work…

Hm. Thanks. Okay let me do another round of testing myself.

Can you share any non-policy and non-secret values from your test setup?

victornoel · 2019-09-05T12:48:49Z

@travisgroth here it is with comments in it:

pomerium:
  authenticate:
    idp:
      # I set it myself in my secret
      clientID: REPLACE_ME
      # I set it myself in my secret
      clientSecret: REPLACE_ME
      provider: google
      # I set that to have helm generate the env var in the deployment
      # See https://github.com/pomerium/pomerium-helm/issues/7
      serviceAccount: "true"
      url: ""
    redirectUrl: ""
    tls:
      cert: ""
      defaultIPList: []
      defaultSANList: []
      key: ""
  authorize:
    tls:
      cert: ""
      defaultIPList: []
      defaultSANList: []
      key: ""
  config:
    # I set it myself in my secret
    cookieSecret: ""
    # I generate my own config
    existingConfig: pomerium
    existingPolicy: ""
    # I normally generate my own secret but commented this to generate the certs
    # existingSecret: pomerium
    extraOpts:
      default_upstream_timeout: 5m
    # I normally set that to false, but enabled it to generate the certificates
    generateTLS: true
    policy: {}
    rootDomain: xxx.com
    # I set it myself in my secret
    sharedSecret: ""
  extraArgs: {}
  extraEnv: {}
  extraVolumes: {}
  global: {}
  image:
    pullPolicy: IfNotPresent
    repository: pomerium/pomerium
    tag: v0.3.0
  ingress:
    annotations:
      kubernetes.io/ingress.class: contour
    enabled: false
    secret:
      cert: ""
      key: ""
      name: ""
    secretName: ""
  metrics:
    enabled: false
    port: 9090
  podAnnotations: {}
  podLabels: {}
  priorityClassName: ""
  proxy:
    authenticateInternalUrl: ""
    # I generate myself the ingress for this url (as well as for the policied routes)
    authenticateServiceUrl: https://auth.cluster.aks.xxx.com
    authorizeInternalUrl: ""
    authorizeServiceUrl: ""
    tls:
      cert: ""
      defaultIPList: []
      defaultSANList: []
      key: ""
  replicaCount: 1
  resources: {}
  service:
    annotations:
      contour.heptio.com/upstream-protocol.tls: https
    externalPort: 443
    labels: {}
    type: ClusterIP
  serviceMonitor:
    enabled: false
    labels:
      release: prometheus
    namespace: ""
  tracing:
    debug: false
    enabled: false
    jaeger:
      agent_endpoint: ""
      collector_endpoint: ""
    provider: ""

travisgroth · 2019-09-05T22:31:34Z

I can't reproduce. I've tested with:

generateTLS on 1.3.2 -> generateTLS on 2.0.0
1.3.2 with existingSecret -> 2.0.0 on existing secret
generateTLS on 2.0.0

I don't see anything obvious in those configs that might cause a TLS issue with the changes introduced.

Which service is logging that error?

It sounds like a pod isn't working with the right set of certs - were they all restarted correctly after updating certs?

travisgroth · 2019-09-06T00:14:37Z

Correction - can reproduce. I remember why this needed to be a full major version: it changes the name of the internal authenticate service. Without regenerating the SSL certs, it will have issues. I must have grabbed the wrong secret when testing the upgrade path. If you regenerate fresh from helm, it should work.

Given some recent changes upstream, it's probably not worth this severe of a breaking change now.

Some of this change is still worth making, but it is significantly simpler if don't bother with AuthN. I'll make the appropriate updates.

travisgroth · 2019-09-06T00:15:36Z

/hold

victornoel · 2019-09-06T06:45:49Z

Correction - can reproduce. I remember why this needed to be a full major version: it changes the name of the internal authenticate service. Without regenerating the SSL certs, it will have issues. I must have grabbed the wrong secret when testing the upgrade path. If you regenerate fresh from helm, it should work.

I don't understand, I did re-generate the certs, and it is the re-generated certs that doesn't work for me. Last time I generated the certs was when generateTLS was introduced

My suspicion is that the generated certs are not exactly correct for my configuration and they were before, so when I generate them, something is amiss. If I had generated them at the time of 1.3.2 same problem would have happened. I will also investigate this a bit more on my side.

victornoel · 2019-09-06T06:58:36Z

Suprisingly enough, the SN of my current working certificate for authenticate (so with chart 1.3.2) is:

DNS:%!s(<nil>).xxx.com, DNS:pomerium-authenticate.proxy.svc.cluster.local

victornoel · 2019-09-06T07:04:40Z

And the new one (with this PR) that doesn't work, is:

DNS:authenticate.xxx.com, DNS:pomerium-authenticate-internal.proxy.svc.cluster.local

Honestly I'm not 100% sure I am not the one doing something wrong :)

travisgroth · 2019-09-06T10:08:56Z

DNS:authenticate.xxx.com, DNS:pomerium-authenticate-internal.proxy.svc.cluster.local

Yep that's what you should get on a fresh install. No worries, I think the simpler version will be more predictable to test :)

- Switch to a headless Authorize service to support client side load balancing - Allow independent replicaCount scaling of the different services - Add upgrading/changelog documentation and ToC Signed-off-by: Travis Groth <tgroth@gmail.com>

travisgroth · 2019-09-09T12:52:51Z

/hold cancel

@victornoel simplified this down to just authorize and the replica changes. Ready for review.

victornoel · 2019-09-09T17:01:49Z

@travisgroth with pomerium/pomerium#290 (for v0.4.0), authorize will be the only service exposing a grpc endpoint then, and, proxy and authenticate will only be HTTPS and thus with the present PR, the chart will be complete with respect to ClusterIP: None option.
Did I get everything right?

travisgroth · 2019-09-09T22:47:32Z

Yes, that's the plan.

…

On Sep 9, 2019, at 1:01 PM, Victor Noël ***@***.***> wrote: @travisgroth <https://github.com/travisgroth> with pomerium/pomerium#290 <pomerium/pomerium#290> (for v0.4.0), authorize will be the only service exposing a grpc endpoint then, and, proxy and authenticate will only be HTTPS and thus with the present PR, the chart will be complete with respect to ClusterIP: None option. Did I get everything right? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#16338?email_source=notifications&email_token=ABPJKIR5EKQFDR7NGBNU3CLQIZ6QNA5CNFSM4ILZVRYKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD6IKMNQ#issuecomment-529573430>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABPJKIVKMVFD3ROV36VFMRLQIZ6QNANCNFSM4ILZVRYA>.

victornoel · 2019-09-10T05:47:49Z

/lgtm

…

k8s-ci-robot · 2019-09-10T05:47:51Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: travisgroth, victornoel

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~stable/pomerium/OWNERS~~ [travisgroth]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

- Switch to a headless Authorize service to support client side load balancing - Allow independent replicaCount scaling of the different services - Add upgrading/changelog documentation and ToC Signed-off-by: Travis Groth <tgroth@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com>

- Switch to a headless Authorize service to support client side load balancing - Allow independent replicaCount scaling of the different services - Add upgrading/changelog documentation and ToC Signed-off-by: Travis Groth <tgroth@gmail.com>

… with a single OWNER (#16946) * Call for maintainers for charts with a single OWNER this PR is part of #13867 and #13869 Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/couchbase] Update to version 1.2.1 (#16905) Updates Operator and Admission controller Signed-off-by: Tommie McAfee <tommie@couchbase.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Update Express Gateway Images to v1.16.8 (#16942) Signed-off-by: eg-bot <kevin+eg-bot@lunchbadger.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves (#16824) * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves Signed-off-by: Amal Soman <amalsoman10@gmail.com> * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves Signed-off-by: Amal Soman <amalsoman10@gmail.com> * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves Signed-off-by: Amal Soman <amalsoman10@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/gocd] Bump up GoCD Version to 19.8.0 (#16954) * Bump up GoCD Version to 19.8.0 Signed-off-by: GoCD Build User <go-cd@googlegroups.com> * Updated Changelog. Signed-off-by: GoCD Build User <go-cd@googlegroups.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phabricator] Release 7.0.5 updating components versions (#16952) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mariadb] Release 6.8.8 updating components versions (#16955) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * add support for deployment labels (#16958) Signed-off-by: omerlh <omerl@soluto.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/postgresql] Release 6.3.5 updating components versions (#16961) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phpmyadmin] Release 3.0.4 updating components versions (#16962) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mediawiki] Release 8.2.2 updating components versions (#16963) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/joomla] Release 6.1.4 updating components versions (#16965) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/suitecrm] Release 7.2.1 updating components versions (#16966) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redmine] Release 12.2.3 updating components versions (#16967) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prestashop] Release 8.2.1 updating components versions (#16968) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/parse] Release 9.2.2 updating components versions (#16969) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/ghost] Release 7.2.2 updating components versions (#16970) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/orangehrm] Release 6.2.2 updating components versions (#16971) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/drupal] Release 5.2.2 updating components versions (#16972) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/dokuwiki] Release 5.2.5 updating components versions (#16973) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/wordpress] Release 7.3.3 updating components versions (#16974) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/moodle] Release 6.1.6 updating components versions (#16975) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/odoo] Fix Ingress secret for multiple hosts (#16976) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/concourse] Bump `imageTag` to match actual released version (#16983) Signed-off-by: pikesley <sam.pikesley@demandlogic.co.uk> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/openebs] Update charts to 1.2.0 release (#16959) - Updated README - Updated chart version 1.2.0 - Updated values.yaml - Updated ENV variales for openebs apiserver - Add tolerations for ndm daemonset - Add cstorpoolclusters rules in validatingWebhookConfigurations Signed-off-by: ChandanSagar <chandan.pradhan@mayadata.io> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/owncloud] Release 6.2.2 updating components versions (#16964) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/odoo] Release 11.1.3 (#16979) * [stable/odoo] Release 11.1.3 updating components versions Signed-off-by: Bitnami Containers <containers@bitnami.com> * Update postgresql dependency version Signed-off-by: tompizmor <tompizmor@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/suitecrm] Release 7.2.2 updating components versions (#16991) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/sematext-agent] simplify volumes and volume mounts (#16993) * simplify daemonset volumes Signed-off-by: rabbitstack <rabbitstack7@gmail.com> * bump chart version Signed-off-by: rabbitstack <rabbitstack7@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redmine] Update dependencies version (#16992) Signed-off-by: tompizmor <tompizmor@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] Add override for Kubernetes Version (#16994) * add override to sync_* and README Signed-off-by: afirth <afirth@users.noreply.github.com> * sync upstream dashboards and rules Signed-off-by: afirth <afirth@users.noreply.github.com> * delete old rules and dashboards no longer in upstream Signed-off-by: afirth <afirth@users.noreply.github.com> * update manually created dashboards Signed-off-by: afirth <afirth@users.noreply.github.com> * bump chart version Signed-off-by: afirth <afirth@users.noreply.github.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/memcached] Add updateStrategy configuration option (#16358) * [stable/memcached] Add updateStrategy configuration option Signed-off-by: Remington Reackhof <rreackhof@rmn.com> * [stable/memcached] Set specific keys for updateStrategy to follow convention Signed-off-by: Remington Reackhof <rreackhof@rmn.com> * [stable/memcached] Fix README to reflect updateStrategy.type value requirement Signed-off-by: Remington Reackhof <rreackhof@rmn.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/velero] fix restic DaemonSet template syntax (#16960) Signed-off-by: Mathias Merscher <Mathias.Merscher@dg-i.net> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] Add conditional for prometheus.ingress.hosts (#16977) * Add conditional for prometheus.ingress.hosts Signed-off-by: Tom Gehrke <t.gehrke@reply.de> * Bump patch version to 6.9.1 Signed-off-by: Tom Gehrke <t.gehrke@reply.de> * Add condition for alertmanager as well Signed-off-by: Tom Gehrke <t.gehrke@reply.de> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/pomerium] Scale out and docs improvements (#16338) - Switch to a headless Authorize service to support client side load balancing - Allow independent replicaCount scaling of the different services - Add upgrading/changelog documentation and ToC Signed-off-by: Travis Groth <tgroth@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/ghost] Release 7.2.3 updating components versions (#16999) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/weave-scope] Fix error messages by using new architecture (#16796) * Added cluster agent Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> * Fixed cluster agent Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> * Bump version Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> * Bump version Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> * Fix Readme Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phpmyadmin] Add miguelaeh to OWNERS (#17027) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/wordpress] Add miguelaeh to OWNERS (#17028) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/nats] Add miguelaeh to OWNERS (#17029) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/joomla] Add miguelaeh to OWNERS (#17030) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/testlink] Add miguelaeh to OWNERS (#17031) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/ghost] Add miguelaeh to OWNERS (#17032) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * fixes #14976 reopened due to regression in PR #14981 (v1.0.4) (#16785) Signed-off-by: Bertrand Gouny <bertrand.gouny@osixia.net> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] Add walCompression to CRD and bump chart version (#17004) * Add walCompression to CRD and bump chart version to 6.8.4 Signed-off-by: jan.steffen <jan.steffen@figo.io> * Add walCompression to CRD and bump chart version to 6.8.4 Signed-off-by: jan.steffen <jan.steffen@figo.io> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] walCompression of wrong type (#17046) * Bump chart to version 6.9.3 Signed-off-by: jan.steffen <jan.steffen@figo.io> * Remove quoting of walCompression in prometheus spec Signed-off-by: jan.steffen <jan.steffen@figo.io> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/traefik] add maxIdleConnsPerHost (#16531) Signed-off-by: Cameron Attard <cameron.attard@siteminder.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix haproxy check redis master configuration (#16709) Signed-off-by: Jeremy Xu <jeremyxu2010@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix spark-operator charts issue (#16910) Signed-off-by: TommyLike <hu.husheng@huawei.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/spring-cloud-data-flow] Update configs for additional vars (#17050) - add support for service labels/annotations, env var for cert trusting Signed-off-by: Chris Schaefer <cschaefer@pivotal.io> Signed-off-by: Marius Voila <myself@mariusv.com> * traefik: reduce rbac scope if one namespace is handled (#16111) Signed-off-by: Nandor Kracser <bonifaido@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix typo in title and better narrative (#15902) A better narrative for #15004, and fix typo in title Signed-off-by: Harry Zhang <lei.zhang@alibaba-inc.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/nginx-ingress] Add substitution for containerPorts from values (#17037) * [stable/nginx-ingress] Add substitution for containerPorts from values Use key-value range from .Values.controller.containerPort definition instead of mapping 1to1 http and https ports. It allows passing extra configuration to nginx-ingress, such as validation-webhook with its own port, and define this port in values. Without this option it’s not possible because of hardcoded http and https ports in deployment/daemonset templates. Does not break anything. Signed-off-by: Andrey Izotikov <andrsp@gmail.com> * [stable/nginx-ingress] Bump version to 1.20.0 Signed-off-by: Andrey Izotikov <andrsp@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/rabbitmq] Add miguelaeh to OWNERS (#17026) * [stable/rabbitmq] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mongodb] Add miguelaeh to OWNERS (#17021) * [stable/mongodb] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/external-dns] Add miguelaeh to OWNERS (#17023) * [stable/external-dns] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mariadb] Add miguelaeh to OWNERS (#17024) * [stable/mariadb] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/odoo] Add miguelaeh to OWNERS (#17005) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/dokuwiki] Add miguelaeh to OWNERS (#17006) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/drupal] Add miguelaeh to OWNERS (#17007) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/osclass] Add miguelaeh to OWNERS (#17008) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prestashop] Add miguelaeh to OWNERS (#17009) * [stable/prestashop] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redmine] Add miguelaeh to OWNERS (#17010) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mediawiki] Add miguelaeh to OWNERS (#17011) * [stable/mediawiki] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/kubewatch] Add miguelaeh to OWNERS (#17012) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phpbb] Add miguelaeh to OWNERS (#17013) * [stable/phpbb] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/orangehrm] Add miguelaeh to OWNERS (#17015) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/opencart] Add miguelaeh to OWNERS (#17016) * [stable/opencart] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/postgresql] Add miguelaeh to OWNERS (#17017) * [stable/postgresql] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/parse] Add miguelaeh to OWNERS (#17018) * [stable/parse] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/suitecrm] Add miguelaeh to OWNERS (#17019) * [stable/suitecrm] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/moodle] Add miguelaeh to OWNERS (#17020) * [stable/moodle] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/jasperreports] Add miguelaeh to OWNERS (#17022) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redis] Add miguelaeh to OWNERS (#17014) * [stable/redis] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Add command line parameters quoting in create connections script in Airflow chart (#17062) Signed-off-by: Mikhail Cherepnev <mikhail.cherepnev@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] Update kube-state-metrics to 2.3.1 and grafana to 3.8.11. (#17057) Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phabricator] Add miguelaeh to OWNERS (#17025) * [stable/phabricator] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/owncloud] Add miguelaeh to OWNERS (#17033) * [stable/owncloud] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/falco] Performs a rollingUpdate when you change rules or settings (#17065) Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [incubator/zookeeper] Fixes setting "zookeeper.log.threshold" option (#17066) Signed-off-by: Atanas Zhelev <azhelev+github@mailbox.org> Signed-off-by: Marius Voila <myself@mariusv.com> * Disable acme volume if kvprovider is configured) (#17067) Signed-off-by: florian kinder <florian.kinder@mcl.de> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix typo on `values.yml` for `environmentSecrets` (#17052) * should be `key` and not `value` * per `.secretKeyRef.key` in `stable/atlantis/templates/statefulset.yaml` Signed-off-by: Eddie Ramirez <eddieramirez@me.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Bump Ambassador to v0.78.0 (#17081) Signed-off-by: Shubham <shubham@linux.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator]: upgrade alertmanager (#17084) Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/traefik] backoff storeconfig job (#16513) Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/traefik] Updated acme storage location to be configurable (#16464) * [stable/traefik] Updated acme storage location to be configurable Signed-off-by: Ryan Orth <ryanorth@workfront.com> * Fixed wrong version update Signed-off-by: Ryan Orth <ryanorth@workfront.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix space issue in volume mount (#17087) Update spacing issue in deployment, fixed README, and updated values to have a better example. Signed-off-by: James Ritter <jamesritter15@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/influxdb] Add support for Azure to backup job (#16722) Signed-off-by: Tomasz Glowka <glowka.tom@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/blackbox-exporter]: upgrade (#17083) * [stable/blackbox-exporter]: upgrade Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * [stable/blackbox-exporter]: upgrade Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/grafana] Support statefulset as persistence option (#17063) * [stable/grafana] make statefulset as persistence option Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> * [stable/grafana] up chart version Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> * [stable/grafana] fix name property of metadata Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> * [stable/grafana] fix grafana version Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> * Fix yaml lint error Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mariadb] Release 6.8.10 updating components versions (#17086) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Added pod label capability to ClamAV (#16793) Signed-off-by: Sherief Shahin <smshahin1611@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Allow configuration using values for nodeSelector setting (#17091) Signed-off-by: Adel Sachkov <adel.sachkov@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * fix: Add metrics labels and annotations only when enabled (#17060) Signed-off-by: Joe Jiang <happiness9721@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/openEBS] Feature fix typo (#17098) * correct typo of localProvisioner to localprovisioner Signed-off-by: olivier beyler <olivier.beyler@orange.com> * bump chart version Signed-off-by: olivier beyler <olivier.beyler@orange.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/ambassador] Major upgrades to Ambassador Pro (#16904) * Upgrade Ambassador Pro to 0.7.0 - Ambassador Pro 0.7.0 introduces Ambassador certified builds that require - A license key - Use an image from the quay.io/datawire/ambassador_pro repository - templates/deployment.yaml has been formatted in a backwards compatible way so all Ambassador Pro images before 0.7.0 will still use Ambassador OSS repo. Signed-off-by: Noah Krause <krausenoah@gmail.com> * Store license key in k8s secret by default Signed-off-by: Noah Krause <krausenoah@gmail.com> * Add deprecation warning for using prom exporter Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Major upgrades to Ambassador Pro installation - Introduces the performance tuned and certified build of open source Ambassador, Ambassador core - The license key is now stored and read from a Kubernetes secret by default - Added `.Values.pro.licenseKey.secret.enabled` `.Values.pro.licenseKey.secret.create` fields to allow multiple releases in the same namespace to use the same license key secret. - Introduces the ability to configure resource limits for both Ambassador Pro and it's redis instance - Introduces the ability to configure additional `AuthService` options (see [AuthService documentation](https://www.getambassador.io/reference/services/auth-service/)) - The ambassador-pro-auth `AuthService` and ambassador-pro-ratelimit `RateLimitService` and now created as CRDs when `.Values.crds.enabled: true` - Fixed misnamed selector for redis instance that failed in an edge case Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Expose annotations for redis deploy Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Minor updated to changelog and readme Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Whitespace cleanup Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Fix type error Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/k8s-spot-termination-handler] Update api version of daemonset (#16451) * use apps/v1 as apiVersion for daemonset Signed-off-by: Moritz Siuts <moritzs@moia.io> * Bump patch version of k8s-spot-termination-handler Signed-off-by: Moritz Siuts <moritzs@moia.io> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/parse] Release 9.2.4 updating components versions (#17104) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix svc for redis with sentinel (#17095) Signed-off-by: Alejandro Moreno <amoreno@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/jenkins] display error when admin user does not exist. (#16949) * Display error when admin user does not exist. Print an error message when `master.sidecars.configAutoReload.enabled` is `true`, but the admin user which is needed to configure the SSH key does not exist. Signed-off-by: Torsten Walter <mail@torstenwalter.de> * only configure ssh key if user exists Signed-off-by: Torsten Walter <mail@torstenwalter.de> Signed-off-by: Marius Voila <myself@mariusv.com> * [incubator/kafka] Adding the ability to define a pod disruption budget for brokers (#15345) * feature: adding the ability to define a pod disruption budget to the kafka brokers Signed-off-by: Kealan Murphy <kealan.murphy@aspect.com> * address PR comments Signed-off-by: Kealan Murphy <kealan.murphy@aspect.com> * bump chart version Signed-off-by: Murphy, Kealan <kealan.murphy@aspect.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Support frontend config values (#17074) Signed-off-by: Jordan Jennings <jordanjennings@users.noreply.github.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Update default dex app version to latest (#17117) Signed-off-by: Jordan Jennings <jordanjennings@users.noreply.github.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Change copyright to "The Helm Authors" (#16902) Signed-off-by: Matthew Fisher <matt.fisher@microsoft.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/nfs-server-provisioner] fix deployment when not creating storage class (#16331) * When a storage class is not created, mountOptions and parameters are also not included in the file Signed-off-by: Tomas Ostasevicius <t.ostasevicius@gmail.com> * Bump nfs-server-provisioner version Signed-off-by: Tomas Ostasevicius <t.ostasevicius@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [incubator/etcd] implement TLS/SSL for client and peers in etcd (#16741) * added TLS/SSL ability #16569 Signed-off-by:Moty Fux <moty.fux@gmail.com> Signed-off-by: Moty Fux <moty.fux@gmail.com> * removed hardcoded protocol and bumped version in Chart.yaml #16569 Signed-off-by:Moty Fux <moty.fux@gmail.com> Signed-off-by: Moty Fux <moty.fux@gmail.com> * added some comments in README.md #16569 Signed-off-by:Moty Fux <moty.fux@gmail.com> Signed-off-by: Moty Fux <moty.fux@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-rabbitmq-exporter] ServiceMonitor Port Bugfix (#15801) * Update and rename monitor.yaml to servicemonitor.yaml The service monitor currently tries to scrape the publish port, which isn't available on the Service. I've changed the endpoint port for the service monitor to scrape from the services' 'rabbitmq-exporter' port. I've also changed the name to servicemonitor.yaml to match other Helm charts. Signed-off-by: Jonny Ford <jonnyford1@gmail.com> * Update Chart.yaml bumped chart version, bugfix Signed-off-by: Jonny Ford <jonnyford1@gmail.com> * Update Chart.yaml Signed-off-by: Maor Friedman <maor.friedman@redhat.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/openldap] Add documentation for 'persistence.existingClaim' (#16922) Signed-off-by: Lunik <lunik@tiwabbit.fr> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/metabase] Increase livenessProbe timeout (#16877) Signed-off-by: Max Williams <max.williams@deliveryhero.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus] Added /nodes/metrics permission to prometheus server (#16394) This change allows prometheus to scrape nodes directly, instead of proxying all requests through the API server. Signed-off-by: Micah Hausler <mhausler@amazon.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/grafana] Fix indentation of pod template (#17130) * fix indentation of template Signed-off-by: Ramon Rüttimann <ramon.ruettimann@gmail.com> * bump chart version Signed-off-by: Ramon Rüttimann <ramon.ruettimann@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/jenkins] add master.JCasC.defaultConfig (#16929) * add master.JCasC.defaultConfig and configure location - JCasC configuration is stored in template `jenkins.casc.defaults` so that it can be used in `config.yaml` and `jcasc-config.yaml` depending on if configAutoReload is enabled or not - Jenkins Location (URL) is configured to provide a startin point for the config Signed-off-by: Torsten Walter <mail@torstenwalter.de> * improve JCasC default configuration JCasC default configuration includes: - Jenkins url - disableRememberMe: false - mode: NORMAL - numExecutors: {{ .Values.master.numExecutors }} - projectNamingStrategy: "standard" Signed-off-by: Torsten Walter <mail@torstenwalter.de> * JCasC kubernetes config Signed-off-by: Torsten Walter <mail@torstenwalter.de> * JCasC: crumbIssue and security.apiToken Signed-off-by: Torsten Walter <mail@torstenwalter.de> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phabricator] Release 7.0.7 updating components versions (#17131) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/rabbitmq] Metrics: use ipv4 to connect to rabbit. (#17092) * [stable/rabbitmq] Metrics: use ipv4 to connect to rabbit. Otherwise, it could try to access IPv6 which may not be available, causing: Get http://localhost:15672/api/nodes?sort=: dial tcp [::1]:15672: connect: cannot assign requested address Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr> * Make it configurable. Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/odoo] Release 11.1.5 updating components versions (#17141) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * bumping chart version Signed-off-by: Marius Voila <myself@mariusv.com>

… with a single OWNER (helm#16946) * Call for maintainers for charts with a single OWNER this PR is part of helm#13867 and helm#13869 Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/couchbase] Update to version 1.2.1 (helm#16905) Updates Operator and Admission controller Signed-off-by: Tommie McAfee <tommie@couchbase.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Update Express Gateway Images to v1.16.8 (helm#16942) Signed-off-by: eg-bot <kevin+eg-bot@lunchbadger.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves (helm#16824) * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves Signed-off-by: Amal Soman <amalsoman10@gmail.com> * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves Signed-off-by: Amal Soman <amalsoman10@gmail.com> * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves * [stable/redis-ha] Add a dedicated port in haproxy for redis slaves Signed-off-by: Amal Soman <amalsoman10@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/gocd] Bump up GoCD Version to 19.8.0 (helm#16954) * Bump up GoCD Version to 19.8.0 Signed-off-by: GoCD Build User <go-cd@googlegroups.com> * Updated Changelog. Signed-off-by: GoCD Build User <go-cd@googlegroups.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phabricator] Release 7.0.5 updating components versions (helm#16952) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mariadb] Release 6.8.8 updating components versions (helm#16955) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * add support for deployment labels (helm#16958) Signed-off-by: omerlh <omerl@soluto.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/postgresql] Release 6.3.5 updating components versions (helm#16961) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phpmyadmin] Release 3.0.4 updating components versions (helm#16962) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mediawiki] Release 8.2.2 updating components versions (helm#16963) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/joomla] Release 6.1.4 updating components versions (helm#16965) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/suitecrm] Release 7.2.1 updating components versions (helm#16966) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redmine] Release 12.2.3 updating components versions (helm#16967) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prestashop] Release 8.2.1 updating components versions (helm#16968) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/parse] Release 9.2.2 updating components versions (helm#16969) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/ghost] Release 7.2.2 updating components versions (helm#16970) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/orangehrm] Release 6.2.2 updating components versions (helm#16971) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/drupal] Release 5.2.2 updating components versions (helm#16972) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/dokuwiki] Release 5.2.5 updating components versions (helm#16973) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/wordpress] Release 7.3.3 updating components versions (helm#16974) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/moodle] Release 6.1.6 updating components versions (helm#16975) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/odoo] Fix Ingress secret for multiple hosts (helm#16976) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/concourse] Bump `imageTag` to match actual released version (helm#16983) Signed-off-by: pikesley <sam.pikesley@demandlogic.co.uk> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/openebs] Update charts to 1.2.0 release (helm#16959) - Updated README - Updated chart version 1.2.0 - Updated values.yaml - Updated ENV variales for openebs apiserver - Add tolerations for ndm daemonset - Add cstorpoolclusters rules in validatingWebhookConfigurations Signed-off-by: ChandanSagar <chandan.pradhan@mayadata.io> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/owncloud] Release 6.2.2 updating components versions (helm#16964) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/odoo] Release 11.1.3 (helm#16979) * [stable/odoo] Release 11.1.3 updating components versions Signed-off-by: Bitnami Containers <containers@bitnami.com> * Update postgresql dependency version Signed-off-by: tompizmor <tompizmor@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/suitecrm] Release 7.2.2 updating components versions (helm#16991) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/sematext-agent] simplify volumes and volume mounts (helm#16993) * simplify daemonset volumes Signed-off-by: rabbitstack <rabbitstack7@gmail.com> * bump chart version Signed-off-by: rabbitstack <rabbitstack7@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redmine] Update dependencies version (helm#16992) Signed-off-by: tompizmor <tompizmor@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] Add override for Kubernetes Version (helm#16994) * add override to sync_* and README Signed-off-by: afirth <afirth@users.noreply.github.com> * sync upstream dashboards and rules Signed-off-by: afirth <afirth@users.noreply.github.com> * delete old rules and dashboards no longer in upstream Signed-off-by: afirth <afirth@users.noreply.github.com> * update manually created dashboards Signed-off-by: afirth <afirth@users.noreply.github.com> * bump chart version Signed-off-by: afirth <afirth@users.noreply.github.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/memcached] Add updateStrategy configuration option (helm#16358) * [stable/memcached] Add updateStrategy configuration option Signed-off-by: Remington Reackhof <rreackhof@rmn.com> * [stable/memcached] Set specific keys for updateStrategy to follow convention Signed-off-by: Remington Reackhof <rreackhof@rmn.com> * [stable/memcached] Fix README to reflect updateStrategy.type value requirement Signed-off-by: Remington Reackhof <rreackhof@rmn.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/velero] fix restic DaemonSet template syntax (helm#16960) Signed-off-by: Mathias Merscher <Mathias.Merscher@dg-i.net> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] Add conditional for prometheus.ingress.hosts (helm#16977) * Add conditional for prometheus.ingress.hosts Signed-off-by: Tom Gehrke <t.gehrke@reply.de> * Bump patch version to 6.9.1 Signed-off-by: Tom Gehrke <t.gehrke@reply.de> * Add condition for alertmanager as well Signed-off-by: Tom Gehrke <t.gehrke@reply.de> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/pomerium] Scale out and docs improvements (helm#16338) - Switch to a headless Authorize service to support client side load balancing - Allow independent replicaCount scaling of the different services - Add upgrading/changelog documentation and ToC Signed-off-by: Travis Groth <tgroth@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/ghost] Release 7.2.3 updating components versions (helm#16999) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/weave-scope] Fix error messages by using new architecture (helm#16796) * Added cluster agent Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> * Fixed cluster agent Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> * Bump version Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> * Bump version Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> * Fix Readme Signed-off-by: Philipp <philipp.hellmich@bertelsmann.de> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phpmyadmin] Add miguelaeh to OWNERS (helm#17027) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/wordpress] Add miguelaeh to OWNERS (helm#17028) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/nats] Add miguelaeh to OWNERS (helm#17029) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/joomla] Add miguelaeh to OWNERS (helm#17030) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/testlink] Add miguelaeh to OWNERS (helm#17031) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/ghost] Add miguelaeh to OWNERS (helm#17032) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * fixes helm#14976 reopened due to regression in PR helm#14981 (v1.0.4) (helm#16785) Signed-off-by: Bertrand Gouny <bertrand.gouny@osixia.net> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] Add walCompression to CRD and bump chart version (helm#17004) * Add walCompression to CRD and bump chart version to 6.8.4 Signed-off-by: jan.steffen <jan.steffen@figo.io> * Add walCompression to CRD and bump chart version to 6.8.4 Signed-off-by: jan.steffen <jan.steffen@figo.io> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] walCompression of wrong type (helm#17046) * Bump chart to version 6.9.3 Signed-off-by: jan.steffen <jan.steffen@figo.io> * Remove quoting of walCompression in prometheus spec Signed-off-by: jan.steffen <jan.steffen@figo.io> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/traefik] add maxIdleConnsPerHost (helm#16531) Signed-off-by: Cameron Attard <cameron.attard@siteminder.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix haproxy check redis master configuration (helm#16709) Signed-off-by: Jeremy Xu <jeremyxu2010@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix spark-operator charts issue (helm#16910) Signed-off-by: TommyLike <hu.husheng@huawei.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/spring-cloud-data-flow] Update configs for additional vars (helm#17050) - add support for service labels/annotations, env var for cert trusting Signed-off-by: Chris Schaefer <cschaefer@pivotal.io> Signed-off-by: Marius Voila <myself@mariusv.com> * traefik: reduce rbac scope if one namespace is handled (helm#16111) Signed-off-by: Nandor Kracser <bonifaido@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix typo in title and better narrative (helm#15902) A better narrative for helm#15004, and fix typo in title Signed-off-by: Harry Zhang <lei.zhang@alibaba-inc.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/nginx-ingress] Add substitution for containerPorts from values (helm#17037) * [stable/nginx-ingress] Add substitution for containerPorts from values Use key-value range from .Values.controller.containerPort definition instead of mapping 1to1 http and https ports. It allows passing extra configuration to nginx-ingress, such as validation-webhook with its own port, and define this port in values. Without this option it’s not possible because of hardcoded http and https ports in deployment/daemonset templates. Does not break anything. Signed-off-by: Andrey Izotikov <andrsp@gmail.com> * [stable/nginx-ingress] Bump version to 1.20.0 Signed-off-by: Andrey Izotikov <andrsp@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/rabbitmq] Add miguelaeh to OWNERS (helm#17026) * [stable/rabbitmq] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mongodb] Add miguelaeh to OWNERS (helm#17021) * [stable/mongodb] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/external-dns] Add miguelaeh to OWNERS (helm#17023) * [stable/external-dns] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mariadb] Add miguelaeh to OWNERS (helm#17024) * [stable/mariadb] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/odoo] Add miguelaeh to OWNERS (helm#17005) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/dokuwiki] Add miguelaeh to OWNERS (helm#17006) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/drupal] Add miguelaeh to OWNERS (helm#17007) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/osclass] Add miguelaeh to OWNERS (helm#17008) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prestashop] Add miguelaeh to OWNERS (helm#17009) * [stable/prestashop] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redmine] Add miguelaeh to OWNERS (helm#17010) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mediawiki] Add miguelaeh to OWNERS (helm#17011) * [stable/mediawiki] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/kubewatch] Add miguelaeh to OWNERS (helm#17012) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phpbb] Add miguelaeh to OWNERS (helm#17013) * [stable/phpbb] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/orangehrm] Add miguelaeh to OWNERS (helm#17015) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/opencart] Add miguelaeh to OWNERS (helm#17016) * [stable/opencart] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/postgresql] Add miguelaeh to OWNERS (helm#17017) * [stable/postgresql] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/parse] Add miguelaeh to OWNERS (helm#17018) * [stable/parse] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/suitecrm] Add miguelaeh to OWNERS (helm#17019) * [stable/suitecrm] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/moodle] Add miguelaeh to OWNERS (helm#17020) * [stable/moodle] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/jasperreports] Add miguelaeh to OWNERS (helm#17022) Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/redis] Add miguelaeh to OWNERS (helm#17014) * [stable/redis] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Add command line parameters quoting in create connections script in Airflow chart (helm#17062) Signed-off-by: Mikhail Cherepnev <mikhail.cherepnev@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator] Update kube-state-metrics to 2.3.1 and grafana to 3.8.11. (helm#17057) Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phabricator] Add miguelaeh to OWNERS (helm#17025) * [stable/phabricator] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/owncloud] Add miguelaeh to OWNERS (helm#17033) * [stable/owncloud] Add miguelaeh to OWNERS Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> * Update Chart.yaml Signed-off-by: Miguel A. Cabrera Minagorri <macabrera@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/falco] Performs a rollingUpdate when you change rules or settings (helm#17065) Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [incubator/zookeeper] Fixes setting "zookeeper.log.threshold" option (helm#17066) Signed-off-by: Atanas Zhelev <azhelev+github@mailbox.org> Signed-off-by: Marius Voila <myself@mariusv.com> * Disable acme volume if kvprovider is configured) (helm#17067) Signed-off-by: florian kinder <florian.kinder@mcl.de> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix typo on `values.yml` for `environmentSecrets` (helm#17052) * should be `key` and not `value` * per `.secretKeyRef.key` in `stable/atlantis/templates/statefulset.yaml` Signed-off-by: Eddie Ramirez <eddieramirez@me.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Bump Ambassador to v0.78.0 (helm#17081) Signed-off-by: Shubham <shubham@linux.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-operator]: upgrade alertmanager (helm#17084) Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/traefik] backoff storeconfig job (helm#16513) Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/traefik] Updated acme storage location to be configurable (helm#16464) * [stable/traefik] Updated acme storage location to be configurable Signed-off-by: Ryan Orth <ryanorth@workfront.com> * Fixed wrong version update Signed-off-by: Ryan Orth <ryanorth@workfront.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix space issue in volume mount (helm#17087) Update spacing issue in deployment, fixed README, and updated values to have a better example. Signed-off-by: James Ritter <jamesritter15@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/influxdb] Add support for Azure to backup job (helm#16722) Signed-off-by: Tomasz Glowka <glowka.tom@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/blackbox-exporter]: upgrade (helm#17083) * [stable/blackbox-exporter]: upgrade Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> * [stable/blackbox-exporter]: upgrade Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/grafana] Support statefulset as persistence option (helm#17063) * [stable/grafana] make statefulset as persistence option Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> * [stable/grafana] up chart version Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> * [stable/grafana] fix name property of metadata Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> * [stable/grafana] fix grafana version Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> * Fix yaml lint error Signed-off-by: Oleg Blokhin <o.blohin@dodopizza.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/mariadb] Release 6.8.10 updating components versions (helm#17086) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Added pod label capability to ClamAV (helm#16793) Signed-off-by: Sherief Shahin <smshahin1611@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Allow configuration using values for nodeSelector setting (helm#17091) Signed-off-by: Adel Sachkov <adel.sachkov@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * fix: Add metrics labels and annotations only when enabled (helm#17060) Signed-off-by: Joe Jiang <happiness9721@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/openEBS] Feature fix typo (helm#17098) * correct typo of localProvisioner to localprovisioner Signed-off-by: olivier beyler <olivier.beyler@orange.com> * bump chart version Signed-off-by: olivier beyler <olivier.beyler@orange.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/ambassador] Major upgrades to Ambassador Pro (helm#16904) * Upgrade Ambassador Pro to 0.7.0 - Ambassador Pro 0.7.0 introduces Ambassador certified builds that require - A license key - Use an image from the quay.io/datawire/ambassador_pro repository - templates/deployment.yaml has been formatted in a backwards compatible way so all Ambassador Pro images before 0.7.0 will still use Ambassador OSS repo. Signed-off-by: Noah Krause <krausenoah@gmail.com> * Store license key in k8s secret by default Signed-off-by: Noah Krause <krausenoah@gmail.com> * Add deprecation warning for using prom exporter Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Major upgrades to Ambassador Pro installation - Introduces the performance tuned and certified build of open source Ambassador, Ambassador core - The license key is now stored and read from a Kubernetes secret by default - Added `.Values.pro.licenseKey.secret.enabled` `.Values.pro.licenseKey.secret.create` fields to allow multiple releases in the same namespace to use the same license key secret. - Introduces the ability to configure resource limits for both Ambassador Pro and it's redis instance - Introduces the ability to configure additional `AuthService` options (see [AuthService documentation](https://www.getambassador.io/reference/services/auth-service/)) - The ambassador-pro-auth `AuthService` and ambassador-pro-ratelimit `RateLimitService` and now created as CRDs when `.Values.crds.enabled: true` - Fixed misnamed selector for redis instance that failed in an edge case Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Expose annotations for redis deploy Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Minor updated to changelog and readme Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Whitespace cleanup Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> * Fix type error Signed-off-by: Noah Krause <noahkrause@Noahs-MacBook-Pro.local> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/k8s-spot-termination-handler] Update api version of daemonset (helm#16451) * use apps/v1 as apiVersion for daemonset Signed-off-by: Moritz Siuts <moritzs@moia.io> * Bump patch version of k8s-spot-termination-handler Signed-off-by: Moritz Siuts <moritzs@moia.io> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/parse] Release 9.2.4 updating components versions (helm#17104) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Fix svc for redis with sentinel (helm#17095) Signed-off-by: Alejandro Moreno <amoreno@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/jenkins] display error when admin user does not exist. (helm#16949) * Display error when admin user does not exist. Print an error message when `master.sidecars.configAutoReload.enabled` is `true`, but the admin user which is needed to configure the SSH key does not exist. Signed-off-by: Torsten Walter <mail@torstenwalter.de> * only configure ssh key if user exists Signed-off-by: Torsten Walter <mail@torstenwalter.de> Signed-off-by: Marius Voila <myself@mariusv.com> * [incubator/kafka] Adding the ability to define a pod disruption budget for brokers (helm#15345) * feature: adding the ability to define a pod disruption budget to the kafka brokers Signed-off-by: Kealan Murphy <kealan.murphy@aspect.com> * address PR comments Signed-off-by: Kealan Murphy <kealan.murphy@aspect.com> * bump chart version Signed-off-by: Murphy, Kealan <kealan.murphy@aspect.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Support frontend config values (helm#17074) Signed-off-by: Jordan Jennings <jordanjennings@users.noreply.github.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Update default dex app version to latest (helm#17117) Signed-off-by: Jordan Jennings <jordanjennings@users.noreply.github.com> Signed-off-by: Marius Voila <myself@mariusv.com> * Change copyright to "The Helm Authors" (helm#16902) Signed-off-by: Matthew Fisher <matt.fisher@microsoft.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/nfs-server-provisioner] fix deployment when not creating storage class (helm#16331) * When a storage class is not created, mountOptions and parameters are also not included in the file Signed-off-by: Tomas Ostasevicius <t.ostasevicius@gmail.com> * Bump nfs-server-provisioner version Signed-off-by: Tomas Ostasevicius <t.ostasevicius@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [incubator/etcd] implement TLS/SSL for client and peers in etcd (helm#16741) * added TLS/SSL ability helm#16569 Signed-off-by:Moty Fux <moty.fux@gmail.com> Signed-off-by: Moty Fux <moty.fux@gmail.com> * removed hardcoded protocol and bumped version in Chart.yaml helm#16569 Signed-off-by:Moty Fux <moty.fux@gmail.com> Signed-off-by: Moty Fux <moty.fux@gmail.com> * added some comments in README.md helm#16569 Signed-off-by:Moty Fux <moty.fux@gmail.com> Signed-off-by: Moty Fux <moty.fux@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus-rabbitmq-exporter] ServiceMonitor Port Bugfix (helm#15801) * Update and rename monitor.yaml to servicemonitor.yaml The service monitor currently tries to scrape the publish port, which isn't available on the Service. I've changed the endpoint port for the service monitor to scrape from the services' 'rabbitmq-exporter' port. I've also changed the name to servicemonitor.yaml to match other Helm charts. Signed-off-by: Jonny Ford <jonnyford1@gmail.com> * Update Chart.yaml bumped chart version, bugfix Signed-off-by: Jonny Ford <jonnyford1@gmail.com> * Update Chart.yaml Signed-off-by: Maor Friedman <maor.friedman@redhat.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/openldap] Add documentation for 'persistence.existingClaim' (helm#16922) Signed-off-by: Lunik <lunik@tiwabbit.fr> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/metabase] Increase livenessProbe timeout (helm#16877) Signed-off-by: Max Williams <max.williams@deliveryhero.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/prometheus] Added /nodes/metrics permission to prometheus server (helm#16394) This change allows prometheus to scrape nodes directly, instead of proxying all requests through the API server. Signed-off-by: Micah Hausler <mhausler@amazon.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/grafana] Fix indentation of pod template (helm#17130) * fix indentation of template Signed-off-by: Ramon Rüttimann <ramon.ruettimann@gmail.com> * bump chart version Signed-off-by: Ramon Rüttimann <ramon.ruettimann@gmail.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/jenkins] add master.JCasC.defaultConfig (helm#16929) * add master.JCasC.defaultConfig and configure location - JCasC configuration is stored in template `jenkins.casc.defaults` so that it can be used in `config.yaml` and `jcasc-config.yaml` depending on if configAutoReload is enabled or not - Jenkins Location (URL) is configured to provide a startin point for the config Signed-off-by: Torsten Walter <mail@torstenwalter.de> * improve JCasC default configuration JCasC default configuration includes: - Jenkins url - disableRememberMe: false - mode: NORMAL - numExecutors: {{ .Values.master.numExecutors }} - projectNamingStrategy: "standard" Signed-off-by: Torsten Walter <mail@torstenwalter.de> * JCasC kubernetes config Signed-off-by: Torsten Walter <mail@torstenwalter.de> * JCasC: crumbIssue and security.apiToken Signed-off-by: Torsten Walter <mail@torstenwalter.de> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/phabricator] Release 7.0.7 updating components versions (helm#17131) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/rabbitmq] Metrics: use ipv4 to connect to rabbit. (helm#17092) * [stable/rabbitmq] Metrics: use ipv4 to connect to rabbit. Otherwise, it could try to access IPv6 which may not be available, causing: Get http://localhost:15672/api/nodes?sort=: dial tcp [::1]:15672: connect: cannot assign requested address Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr> * Make it configurable. Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr> Signed-off-by: Marius Voila <myself@mariusv.com> * [stable/odoo] Release 11.1.5 updating components versions (helm#17141) Signed-off-by: Bitnami Containers <containers@bitnami.com> Signed-off-by: Marius Voila <myself@mariusv.com> * bumping chart version Signed-off-by: Marius Voila <myself@mariusv.com>

k8s-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Aug 14, 2019

helm-bot added Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Aug 14, 2019

k8s-ci-robot requested review from desimone and victornoel August 14, 2019 23:03

k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 14, 2019

helm-bot added Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). and removed Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). labels Aug 14, 2019

travisgroth marked this pull request as ready for review August 21, 2019 12:41

k8s-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Aug 21, 2019

victornoel reviewed Aug 21, 2019

View reviewed changes

stable/pomerium/templates/_helpers.tpl Outdated Show resolved Hide resolved

victornoel reviewed Aug 21, 2019

View reviewed changes

stable/pomerium/README.md Outdated Show resolved Hide resolved

helm-bot added Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). and removed Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). labels Aug 21, 2019

victornoel reviewed Sep 4, 2019

View reviewed changes

k8s-ci-robot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Sep 6, 2019

k8s-ci-robot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Sep 9, 2019

k8s-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Sep 10, 2019

k8s-ci-robot merged commit d07a5c1 into helm:master Sep 10, 2019

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[stable/pomerium] Scale out improvements #16338

[stable/pomerium] Scale out improvements #16338

travisgroth commented Aug 14, 2019 •

edited

Loading

travisgroth commented Aug 15, 2019

victornoel commented Aug 15, 2019 via email

travisgroth commented Aug 15, 2019

victornoel commented Aug 19, 2019

travisgroth commented Aug 20, 2019

victornoel commented Aug 26, 2019

travisgroth commented Aug 27, 2019

travisgroth commented Sep 2, 2019

victornoel commented Sep 4, 2019

victornoel Sep 4, 2019

travisgroth Sep 5, 2019

victornoel commented Sep 4, 2019

travisgroth commented Sep 5, 2019

victornoel commented Sep 5, 2019

travisgroth commented Sep 5, 2019

travisgroth commented Sep 6, 2019

travisgroth commented Sep 6, 2019

victornoel commented Sep 6, 2019

victornoel commented Sep 6, 2019

victornoel commented Sep 6, 2019

travisgroth commented Sep 6, 2019

travisgroth commented Sep 9, 2019

victornoel commented Sep 9, 2019

travisgroth commented Sep 9, 2019 via email

victornoel commented Sep 10, 2019 via email

k8s-ci-robot commented Sep 10, 2019

[stable/pomerium] Scale out improvements #16338

[stable/pomerium] Scale out improvements #16338

Conversation

travisgroth commented Aug 14, 2019 • edited Loading

What this PR does / why we need it:

Checklist

travisgroth commented Aug 15, 2019

victornoel commented Aug 15, 2019 via email

travisgroth commented Aug 15, 2019

victornoel commented Aug 19, 2019

travisgroth commented Aug 20, 2019

victornoel commented Aug 26, 2019

travisgroth commented Aug 27, 2019

travisgroth commented Sep 2, 2019

victornoel commented Sep 4, 2019

victornoel Sep 4, 2019

Choose a reason for hiding this comment

travisgroth Sep 5, 2019

Choose a reason for hiding this comment

victornoel commented Sep 4, 2019

travisgroth commented Sep 5, 2019

victornoel commented Sep 5, 2019

travisgroth commented Sep 5, 2019

travisgroth commented Sep 6, 2019

travisgroth commented Sep 6, 2019

victornoel commented Sep 6, 2019

victornoel commented Sep 6, 2019

victornoel commented Sep 6, 2019

travisgroth commented Sep 6, 2019

travisgroth commented Sep 9, 2019

victornoel commented Sep 9, 2019

travisgroth commented Sep 9, 2019 via email

victornoel commented Sep 10, 2019 via email

k8s-ci-robot commented Sep 10, 2019

travisgroth commented Aug 14, 2019 •

edited

Loading