openstack
/
openstack-helm-infra
Code Issues Proposed changes

Undo octal-values restriction together with corresponding code 

Unrestrict octal values rule since benefits of file modes readability
exceed possible issues with yaml 1.2 adoption in future k8s versions.
These issues will be addressed when/if they occur.

Also ensure osh-infra is a required project for lint job, that matters
when running job against another project.

Change-Id: Ic5e327cf40c4b09c90738baff56419a6cef132da
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
This commit is contained in:
Andrii Ostapenko 2020-07-06 14:50:07 -05:00 committed by Andrii Ostapenko
parent 88b79920db
commit 824f168efc
120 changed files with 208 additions and 205 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
calico/templates/daemonset-calico-node.yaml
View File

@ -285,15 +285,15 @@ spec:
- name: calico-etc - name: calico-etc
configMap: configMap:
name: calico-etc name: calico-etc
defaultMode: 292 defaultMode: 0444
- name: calico-bird - name: calico-bird
configMap: configMap:
name: calico-bird name: calico-bird
defaultMode: 292 defaultMode: 0444
- name: calico-bin - name: calico-bin
configMap: configMap:
name: calico-bin name: calico-bin
defaultMode: 365 defaultMode: 0555
- name: calico-etcd-secrets - name: calico-etcd-secrets
secret: secret:
secretName: calico-etcd-secrets secretName: calico-etcd-secrets

2
calico/templates/deployment-calico-kube-controllers.yaml
View File

@ -172,5 +172,5 @@ spec:
- name: calico-etcd-secrets - name: calico-etcd-secrets
secret: secret:
secretName: calico-etcd-secrets secretName: calico-etcd-secrets
defaultMode: 256 defaultMode: 0400
{{- end }} {{- end }}

2
calico/templates/job-calico-settings.yaml
View File

@ -100,7 +100,7 @@ spec:
- name: calico-bin - name: calico-bin
configMap: configMap:
name: calico-bin name: calico-bin
defaultMode: 365 defaultMode: 0555
- name: calico-etcd-secrets - name: calico-etcd-secrets
secret: secret:
secretName: calico-etcd-secrets secretName: calico-etcd-secrets

4
ceph-client/templates/cronjob-checkPGs.yaml
View File

@ -129,11 +129,11 @@ spec:
- name: ceph-client-bin - name: ceph-client-bin
configMap: configMap:
name: ceph-client-bin name: ceph-client-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-client-etc - name: ceph-client-etc
configMap: configMap:
name: ceph-client-etc name: ceph-client-etc
defaultMode: 292 defaultMode: 0444
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring
secret: secret:
defaultMode: 420 defaultMode: 420

2
ceph-client/templates/cronjob-defragosds.yaml
View File

@ -106,5 +106,5 @@ spec:
- name: ceph-client-bin - name: ceph-client-bin
configMap: configMap:
name: ceph-client-bin name: ceph-client-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
ceph-client/templates/deployment-checkdns.yaml
View File

@ -115,5 +115,5 @@ spec:
- name: ceph-client-bin - name: ceph-client-bin
configMap: configMap:
name: ceph-client-bin name: ceph-client-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

4
ceph-client/templates/deployment-mds.yaml
View File

@ -147,11 +147,11 @@ spec:
- name: ceph-client-etc - name: ceph-client-etc
configMap: configMap:
name: ceph-client-etc name: ceph-client-etc
defaultMode: 292 defaultMode: 0444
- name: ceph-client-bin - name: ceph-client-bin
configMap: configMap:
name: ceph-client-bin name: ceph-client-bin
defaultMode: 365 defaultMode: 0555
- name: pod-var-lib-ceph - name: pod-var-lib-ceph
emptyDir: {} emptyDir: {}
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring

4
ceph-client/templates/deployment-mgr.yaml
View File

@ -184,11 +184,11 @@ spec:
- name: ceph-client-bin - name: ceph-client-bin
configMap: configMap:
name: ceph-client-bin name: ceph-client-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-client-etc - name: ceph-client-etc
configMap: configMap:
name: ceph-client-etc name: ceph-client-etc
defaultMode: 292 defaultMode: 0444
- name: pod-var-lib-ceph - name: pod-var-lib-ceph
emptyDir: {} emptyDir: {}
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring

4
ceph-client/templates/job-bootstrap.yaml
View File

@ -70,11 +70,11 @@ spec:
- name: ceph-client-bin - name: ceph-client-bin
configMap: configMap:
name: ceph-client-bin name: ceph-client-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-client-etc - name: ceph-client-etc
configMap: configMap:
name: ceph-client-etc name: ceph-client-etc
defaultMode: 292 defaultMode: 0444
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin }} secretName: {{ .Values.secrets.keyrings.admin }}

4
ceph-client/templates/job-rbd-pool.yaml
View File

@ -89,11 +89,11 @@ spec:
- name: ceph-client-etc - name: ceph-client-etc
configMap: configMap:
name: ceph-client-etc name: ceph-client-etc
defaultMode: 292 defaultMode: 0444
- name: ceph-client-bin - name: ceph-client-bin
configMap: configMap:
name: ceph-client-bin name: ceph-client-bin
defaultMode: 365 defaultMode: 0555
- name: pod-var-lib-ceph - name: pod-var-lib-ceph
emptyDir: {} emptyDir: {}
- name: pod-run - name: pod-run

4
ceph-client/templates/pod-helm-tests.yaml
View File

@ -81,12 +81,12 @@ spec:
- name: ceph-client-bin - name: ceph-client-bin
configMap: configMap:
name: ceph-client-bin name: ceph-client-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin }} secretName: {{ .Values.secrets.keyrings.admin }}
- name: ceph-client-etc - name: ceph-client-etc
configMap: configMap:
name: ceph-client-etc name: ceph-client-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

4
ceph-mon/templates/daemonset-mon.yaml
View File

@ -243,11 +243,11 @@ spec:
- name: ceph-mon-bin - name: ceph-mon-bin
configMap: configMap:
name: ceph-mon-bin name: ceph-mon-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-mon-etc - name: ceph-mon-etc
configMap: configMap:
name: ceph-mon-etc name: ceph-mon-etc
defaultMode: 292 defaultMode: 0444
- name: pod-var-lib-ceph - name: pod-var-lib-ceph
hostPath: hostPath:
path: {{ .Values.conf.storage.mon.directory }} path: {{ .Values.conf.storage.mon.directory }}

4
ceph-mon/templates/deployment-moncheck.yaml
View File

@ -114,11 +114,11 @@ spec:
- name: ceph-mon-etc - name: ceph-mon-etc
configMap: configMap:
name: ceph-mon-etc name: ceph-mon-etc
defaultMode: 292 defaultMode: 0444
- name: ceph-mon-bin - name: ceph-mon-bin
configMap: configMap:
name: ceph-mon-bin name: ceph-mon-bin
defaultMode: 365 defaultMode: 0555
- name: pod-var-lib-ceph - name: pod-var-lib-ceph
emptyDir: {} emptyDir: {}
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring

4
ceph-mon/templates/job-bootstrap.yaml
View File

@ -72,11 +72,11 @@ spec:
- name: ceph-mon-bin - name: ceph-mon-bin
configMap: configMap:
name: ceph-mon-bin name: ceph-mon-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-mon-etc - name: ceph-mon-etc
configMap: configMap:
name: ceph-mon-etc name: ceph-mon-etc
defaultMode: 292 defaultMode: 0444
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin }} secretName: {{ .Values.secrets.keyrings.admin }}

4
ceph-mon/templates/job-keyring.yaml
View File

@ -120,10 +120,10 @@ spec:
- name: ceph-mon-bin - name: ceph-mon-bin
configMap: configMap:
name: ceph-mon-bin name: ceph-mon-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-templates - name: ceph-templates
configMap: configMap:
name: ceph-templates name: ceph-templates
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}
{{- end }} {{- end }}

4
ceph-mon/templates/job-storage-admin-keys.yaml
View File

@ -117,9 +117,9 @@ spec:
- name: ceph-mon-bin - name: ceph-mon-bin
configMap: configMap:
name: ceph-mon-bin name: ceph-mon-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-templates - name: ceph-templates
configMap: configMap:
name: ceph-templates name: ceph-templates
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

4
ceph-osd/templates/daemonset-osd.yaml
View File

@ -436,11 +436,11 @@ spec:
- name: ceph-osd-bin - name: ceph-osd-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }}
defaultMode: 365 defaultMode: 0555
- name: ceph-osd-etc - name: ceph-osd-etc
configMap: configMap:
name: {{ $configMapName }} name: {{ $configMapName }}
defaultMode: 292 defaultMode: 0444
- name: ceph-bootstrap-osd-keyring - name: ceph-bootstrap-osd-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.osd }} secretName: {{ .Values.secrets.keyrings.osd }}

4
ceph-osd/templates/job-bootstrap.yaml
View File

@ -69,11 +69,11 @@ spec:
- name: ceph-osd-bin - name: ceph-osd-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }}
defaultMode: 365 defaultMode: 0555
- name: ceph-osd-etc - name: ceph-osd-etc
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }}
defaultMode: 292 defaultMode: 0444
- name: ceph-osd-admin-keyring - name: ceph-osd-admin-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin }} secretName: {{ .Values.secrets.keyrings.admin }}

4
ceph-osd/templates/job-post-apply.yaml
View File

@ -126,11 +126,11 @@ spec:
- name: ceph-osd-bin - name: ceph-osd-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }}
defaultMode: 365 defaultMode: 0555
- name: ceph-osd-etc - name: ceph-osd-etc
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }}
defaultMode: 292 defaultMode: 0444
- name: ceph-osd-admin-keyring - name: ceph-osd-admin-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin }} secretName: {{ .Values.secrets.keyrings.admin }}

4
ceph-osd/templates/pod-helm-tests.yaml
View File

@ -72,12 +72,12 @@ spec:
- name: ceph-osd-bin - name: ceph-osd-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }}
defaultMode: 365 defaultMode: 0555
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin }} secretName: {{ .Values.secrets.keyrings.admin }}
- name: ceph-osd-etc - name: ceph-osd-etc
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }}
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

2
ceph-provisioners/templates/deployment-cephfs-provisioner.yaml
View File

@ -197,5 +197,5 @@ spec:
- name: ceph-provisioners-bin - name: ceph-provisioners-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
ceph-provisioners/templates/deployment-rbd-provisioner.yaml
View File

@ -187,5 +187,5 @@ spec:
- name: ceph-provisioners-bin - name: ceph-provisioners-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

4
ceph-provisioners/templates/job-bootstrap.yaml
View File

@ -69,11 +69,11 @@ spec:
- name: ceph-provisioners-bin - name: ceph-provisioners-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }}
defaultMode: 365 defaultMode: 0555
- name: ceph-etc - name: ceph-etc
configMap: configMap:
name: {{ .Values.storageclass.rbd.ceph_configmap_name }} name: {{ .Values.storageclass.rbd.ceph_configmap_name }}
defaultMode: 292 defaultMode: 0444
- name: ceph-client-admin-keyring - name: ceph-client-admin-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin }} secretName: {{ .Values.secrets.keyrings.admin }}

2
ceph-provisioners/templates/job-cephfs-client-key.yaml
View File

@ -132,5 +132,5 @@ spec:
- name: ceph-provisioners-bin - name: ceph-provisioners-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
ceph-provisioners/templates/job-namespace-client-key-cleaner.yaml
View File

@ -97,5 +97,5 @@ spec:
- name: ceph-provisioners-bin-clients - name: ceph-provisioners-bin-clients
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
ceph-provisioners/templates/job-namespace-client-key.yaml
View File

@ -128,5 +128,5 @@ spec:
- name: ceph-provisioners-bin-clients - name: ceph-provisioners-bin-clients
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
ceph-provisioners/templates/pod-helm-tests.yaml
View File

@ -107,7 +107,7 @@ spec:
- name: ceph-provisioners-bin-clients - name: ceph-provisioners-bin-clients
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }}
defaultMode: 365 defaultMode: 0555
- name: pod-tmp - name: pod-tmp
emptyDir: {} emptyDir: {}
{{- end }} {{- end }}

4
ceph-rgw/templates/deployment-rgw.yaml
View File

@ -181,11 +181,11 @@ spec:
- name: ceph-rgw-bin - name: ceph-rgw-bin
configMap: configMap:
name: ceph-rgw-bin name: ceph-rgw-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-rgw-etc - name: ceph-rgw-etc
configMap: configMap:
name: ceph-rgw-etc name: ceph-rgw-etc
defaultMode: 292 defaultMode: 0444
- name: pod-var-lib-ceph - name: pod-var-lib-ceph
emptyDir: {} emptyDir: {}
- name: ceph-bootstrap-rgw-keyring - name: ceph-bootstrap-rgw-keyring

4
ceph-rgw/templates/job-bootstrap.yaml
View File

@ -118,11 +118,11 @@ spec:
- name: ceph-rgw-bin - name: ceph-rgw-bin
configMap: configMap:
name: ceph-rgw-bin name: ceph-rgw-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-rgw-etc - name: ceph-rgw-etc
configMap: configMap:
name: {{ .Values.ceph_client.configmap }} name: {{ .Values.ceph_client.configmap }}
defaultMode: 292 defaultMode: 0444
- name: ceph-rgw-admin-keyring - name: ceph-rgw-admin-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin | quote }} secretName: {{ .Values.secrets.keyrings.admin | quote }}

6
ceph-rgw/templates/job-rgw-storage-init.yaml
View File

@ -126,15 +126,15 @@ spec:
- name: ceph-rgw-bin - name: ceph-rgw-bin
configMap: configMap:
name: ceph-rgw-bin name: ceph-rgw-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-etc - name: ceph-etc
configMap: configMap:
name: {{ .Values.ceph_client.configmap }} name: {{ .Values.ceph_client.configmap }}
defaultMode: 292 defaultMode: 0444
- name: ceph-templates - name: ceph-templates
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-templates" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "ceph-templates" | quote }}
defaultMode: 292 defaultMode: 0444
- name: ceph-keyring - name: ceph-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin | quote }} secretName: {{ .Values.secrets.keyrings.admin | quote }}

4
ceph-rgw/templates/job-s3-admin.yaml
View File

@ -137,11 +137,11 @@ spec:
- name: ceph-rgw-bin - name: ceph-rgw-bin
configMap: configMap:
name: ceph-rgw-bin name: ceph-rgw-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-rgw-etc - name: ceph-rgw-etc
configMap: configMap:
name: ceph-rgw-etc name: ceph-rgw-etc
defaultMode: 292 defaultMode: 0444
- name: ceph-keyring - name: ceph-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin | quote }} secretName: {{ .Values.secrets.keyrings.admin | quote }}

4
ceph-rgw/templates/pod-helm-tests.yaml
View File

@ -104,12 +104,12 @@ spec:
- name: ceph-rgw-bin - name: ceph-rgw-bin
configMap: configMap:
name: ceph-rgw-bin name: ceph-rgw-bin
defaultMode: 365 defaultMode: 0555
- name: ceph-keyring - name: ceph-keyring
secret: secret:
secretName: {{ .Values.secrets.keyrings.admin | quote }} secretName: {{ .Values.secrets.keyrings.admin | quote }}
- name: ceph-rgw-etc - name: ceph-rgw-etc
configMap: configMap:
name: ceph-rgw-etc name: ceph-rgw-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

2
daemonjob-controller/templates/deployment.yaml
View File

@ -58,5 +58,5 @@ spec:
- name: hooks - name: hooks
configMap: configMap:
name: daemonjob-controller-bin name: daemonjob-controller-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
elastic-apm-server/templates/deployment.yaml
View File

@ -122,7 +122,7 @@ spec:
- name: elastic-apm-server-etc - name: elastic-apm-server-etc
configMap: configMap:
name: elastic-apm-server-etc name: elastic-apm-server-etc
defaultMode: 292 defaultMode: 0444
- name: data - name: data
hostPath: hostPath:
path: /var/lib/elastic-apm-server path: /var/lib/elastic-apm-server

2
elastic-filebeat/templates/daemonset.yaml
View File

@ -157,7 +157,7 @@ spec:
- name: filebeat-etc - name: filebeat-etc
configMap: configMap:
name: filebeat-etc name: filebeat-etc
defaultMode: 292 defaultMode: 0444
- name: data - name: data
hostPath: hostPath:
path: /var/lib/filebeat path: /var/lib/filebeat

2
elastic-metricbeat/templates/daemonset-node-metrics.yaml
View File

@ -168,7 +168,7 @@ spec:
path: /var/run/docker.sock path: /var/run/docker.sock
- name: metricbeat-etc - name: metricbeat-etc
configMap: configMap:
defaultMode: 292 defaultMode: 0444
name: metricbeat-etc name: metricbeat-etc
- name: data - name: data
emptyDir: {} emptyDir: {}

2
elastic-metricbeat/templates/deployment-modules.yaml
View File

@ -154,5 +154,5 @@ spec:
- name: metricbeat-etc - name: metricbeat-etc
configMap: configMap:
name: metricbeat-etc name: metricbeat-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

2
elastic-packetbeat/templates/daemonset.yaml
View File

@ -139,7 +139,7 @@ spec:
emptyDir: {} emptyDir: {}
- name: packetbeat-etc - name: packetbeat-etc
configMap: configMap:
defaultMode: 292 defaultMode: 0444
name: packetbeat-etc name: packetbeat-etc
{{ if $mounts_packetbeat.volumes }}{{ toYaml $mounts_packetbeat.volumes | indent 8 }}{{ end }} {{ if $mounts_packetbeat.volumes }}{{ toYaml $mounts_packetbeat.volumes | indent 8 }}{{ end }}
{{- end }} {{- end }}

4
elasticsearch/templates/cron-job-curator.yaml
View File

@ -86,9 +86,9 @@ spec:
- name: elastic-curator-bin - name: elastic-curator-bin
configMap: configMap:
name: elastic-curator-bin name: elastic-curator-bin
defaultMode: 365 defaultMode: 0555
- name: elastic-curator-etc - name: elastic-curator-etc
secret: secret:
secretName: elastic-curator-etc secretName: elastic-curator-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

2
elasticsearch/templates/cron-job-verify-repositories.yaml
View File

@ -83,5 +83,5 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

4
elasticsearch/templates/deployment-client.yaml
View File

@ -210,11 +210,11 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
- name: elasticsearch-etc - name: elasticsearch-etc
secret: secret:
secretName: elasticsearch-etc secretName: elasticsearch-etc
defaultMode: 292 defaultMode: 0444
- name: storage - name: storage
emptyDir: {} emptyDir: {}
{{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }} {{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }}

4
elasticsearch/templates/deployment-gateway.yaml
View File

@ -160,11 +160,11 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
- name: elasticsearch-etc - name: elasticsearch-etc
secret: secret:
secretName: elasticsearch-etc secretName: elasticsearch-etc
defaultMode: 292 defaultMode: 0444
- name: storage - name: storage
emptyDir: {} emptyDir: {}
{{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }} {{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }}

4
elasticsearch/templates/job-elasticsearch-template.yaml
View File

@ -85,10 +85,10 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
- name: elasticsearch-templates-etc - name: elasticsearch-templates-etc
secret: secret:
secretName: elasticsearch-templates-etc secretName: elasticsearch-templates-etc
defaultMode: 292 defaultMode: 0444
{{ if $mounts_elasticsearch_templates.volumes }}{{ toYaml $mounts_elasticsearch_templates.volumes | indent 8 }}{{ end }} {{ if $mounts_elasticsearch_templates.volumes }}{{ toYaml $mounts_elasticsearch_templates.volumes | indent 8 }}{{ end }}
{{- end }} {{- end }}

2
elasticsearch/templates/job-es-cluster-wait.yaml
View File

@ -76,5 +76,5 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
elasticsearch/templates/job-register-snapshot-repository.yaml
View File

@ -91,5 +91,5 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
elasticsearch/templates/pod-helm-tests.yaml
View File

@ -70,5 +70,5 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

4
elasticsearch/templates/statefulset-data.yaml
View File

@ -175,11 +175,11 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
- name: elasticsearch-etc - name: elasticsearch-etc
secret: secret:
secretName: elasticsearch-etc secretName: elasticsearch-etc
defaultMode: 292 defaultMode: 0444
{{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }} {{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }}
{{- if not .Values.storage.data.enabled }} {{- if not .Values.storage.data.enabled }}
- name: storage - name: storage

4
elasticsearch/templates/statefulset-master.yaml
View File

@ -168,11 +168,11 @@ spec:
- name: elasticsearch-bin - name: elasticsearch-bin
configMap: configMap:
name: elasticsearch-bin name: elasticsearch-bin
defaultMode: 365 defaultMode: 0555
- name: elasticsearch-etc - name: elasticsearch-etc
secret: secret:
secretName: elasticsearch-etc secretName: elasticsearch-etc
defaultMode: 292 defaultMode: 0444
{{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }} {{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }}
{{- if not .Values.storage.master.enabled }} {{- if not .Values.storage.master.enabled }}
- name: storage - name: storage

2
etcd/templates/deployment.yaml
View File

@ -70,5 +70,5 @@ spec:
- name: etcd-bin - name: etcd-bin
configMap: configMap:
name: {{ $configMapBinName | quote }} name: {{ $configMapBinName | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
falco/templates/daemonset.yaml
View File

@ -119,7 +119,7 @@ spec:
- name: falco-bin - name: falco-bin
configMap: configMap:
name: falco-bin name: falco-bin
defaultMode: 365 defaultMode: 0555
- name: dshm - name: dshm
emptyDir: emptyDir:
medium: Memory medium: Memory

4
fluentbit/templates/daemonset-fluent-bit.yaml
View File

@ -145,10 +145,10 @@ spec:
- name: fluentbit-bin - name: fluentbit-bin
configMap: configMap:
name: fluentbit-bin name: fluentbit-bin
defaultMode: 365 defaultMode: 0555
- name: fluentbit-etc - name: fluentbit-etc
secret: secret:
secretName: fluentbit-etc secretName: fluentbit-etc
defaultMode: 292 defaultMode: 0444
{{ if $mounts_fluentbit.volumes }}{{ toYaml $mounts_fluentbit.volumes | indent 8 }}{{ end }} {{ if $mounts_fluentbit.volumes }}{{ toYaml $mounts_fluentbit.volumes | indent 8 }}{{ end }}
{{- end }} {{- end }}

6
fluentd/templates/deployment-fluentd.yaml
View File

@ -226,15 +226,15 @@ spec:
- name: {{ printf "%s-%s" $envAll.Release.Name "env-secret" | quote }} - name: {{ printf "%s-%s" $envAll.Release.Name "env-secret" | quote }}
secret: secret:
secretName: {{ printf "%s-%s" $envAll.Release.Name "env-secret" | quote }} secretName: {{ printf "%s-%s" $envAll.Release.Name "env-secret" | quote }}
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}
- name: fluentd-etc - name: fluentd-etc
secret: secret:
secretName: {{ printf "%s-%s" $envAll.Release.Name "fluentd-etc" | quote }} secretName: {{ printf "%s-%s" $envAll.Release.Name "fluentd-etc" | quote }}
defaultMode: 292 defaultMode: 0444
- name: fluentd-bin - name: fluentd-bin
configMap: configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "fluentd-bin" | quote }} name: {{ printf "%s-%s" $envAll.Release.Name "fluentd-bin" | quote }}
defaultMode: 365 defaultMode: 0555
{{ if $mounts_fluentd.volumes }}{{ toYaml $mounts_fluentd.volumes | indent 8 }}{{- end }} {{ if $mounts_fluentd.volumes }}{{ toYaml $mounts_fluentd.volumes | indent 8 }}{{- end }}
{{- end }} {{- end }}

4
gnocchi/templates/cron-job-resources-cleaner.yaml
View File

@ -94,10 +94,10 @@ spec:
- name: gnocchi-etc - name: gnocchi-etc
secret: secret:
secretName: gnocchi-etc secretName: gnocchi-etc
defaultMode: 292 defaultMode: 0444
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
{{ if $mounts_gnocchi_resources_cleaner.volumes }}{{ toYaml $mounts_gnocchi_resources_cleaner.volumes | indent 12 }}{{ end }} {{ if $mounts_gnocchi_resources_cleaner.volumes }}{{ toYaml $mounts_gnocchi_resources_cleaner.volumes | indent 12 }}{{ end }}
{{- end }} {{- end }}

4
gnocchi/templates/daemonset-metricd.yaml
View File

@ -105,11 +105,11 @@ spec:
- name: gnocchi-etc - name: gnocchi-etc
secret: secret:
secretName: gnocchi-etc secretName: gnocchi-etc
defaultMode: 292 defaultMode: 0444
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
- name: etcceph - name: etcceph
emptyDir: {} emptyDir: {}
- name: ceph-etc - name: ceph-etc

4
gnocchi/templates/daemonset-statsd.yaml
View File

@ -111,11 +111,11 @@ spec:
- name: gnocchi-etc - name: gnocchi-etc
secret: secret:
secretName: gnocchi-etc secretName: gnocchi-etc
defaultMode: 292 defaultMode: 0444
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
- name: etcceph - name: etcceph
emptyDir: {} emptyDir: {}
- name: ceph-etc - name: ceph-etc

4
gnocchi/templates/deployment-api.yaml
View File

@ -130,11 +130,11 @@ spec:
- name: gnocchi-etc - name: gnocchi-etc
secret: secret:
secretName: gnocchi-etc secretName: gnocchi-etc
defaultMode: 292 defaultMode: 0444
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
- name: etcceph - name: etcceph
emptyDir: {} emptyDir: {}
- name: ceph-etc - name: ceph-etc

2
gnocchi/templates/job-clean.yaml
View File

@ -89,5 +89,5 @@ spec:
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

4
gnocchi/templates/job-db-init-indexer.yaml
View File

@ -70,11 +70,11 @@ spec:
- name: gnocchi-etc - name: gnocchi-etc
secret: secret:
secretName: gnocchi-etc secretName: gnocchi-etc
defaultMode: 292 defaultMode: 0444
- name: pod-etc-gnocchi - name: pod-etc-gnocchi
emptyDir: {} emptyDir: {}
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

4
gnocchi/templates/job-db-sync.yaml
View File

@ -82,11 +82,11 @@ spec:
- name: gnocchi-etc - name: gnocchi-etc
secret: secret:
secretName: gnocchi-etc secretName: gnocchi-etc
defaultMode: 292 defaultMode: 0444
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
- name: etcceph - name: etcceph
emptyDir: {} emptyDir: {}
- name: ceph-etc - name: ceph-etc

4
gnocchi/templates/job-storage-init.yaml
View File

@ -123,13 +123,13 @@ spec:
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
- name: etcceph - name: etcceph
emptyDir: {} emptyDir: {}
- name: ceph-etc - name: ceph-etc
configMap: configMap:
name: {{ .Values.ceph_client.configmap }} name: {{ .Values.ceph_client.configmap }}
defaultMode: 292 defaultMode: 0444
- name: ceph-keyring - name: ceph-keyring
secret: secret:
secretName: {{ .Values.ceph_client.user_secret_name }} secretName: {{ .Values.ceph_client.user_secret_name }}

4
gnocchi/templates/pod-gnocchi-test.yaml
View File

@ -74,10 +74,10 @@ spec:
- name: gnocchi-etc - name: gnocchi-etc
secret: secret:
secretName: gnocchi-etc secretName: gnocchi-etc
defaultMode: 292 defaultMode: 0444
- name: gnocchi-bin - name: gnocchi-bin
configMap: configMap:
name: gnocchi-bin name: gnocchi-bin
defaultMode: 365 defaultMode: 0555
{{ if $mounts_gnocchi_tests.volumes }}{{ toYaml $mounts_gnocchi_tests.volumes | indent 4 }}{{ end }} {{ if $mounts_gnocchi_tests.volumes }}{{ toYaml $mounts_gnocchi_tests.volumes | indent 4 }}{{ end }}
{{- end }} {{- end }}

6
grafana/templates/deployment.yaml
View File

@ -133,15 +133,15 @@ spec:
- name: grafana-bin - name: grafana-bin
configMap: configMap:
name: grafana-bin name: grafana-bin
defaultMode: 365 defaultMode: 0555
- name: grafana-etc - name: grafana-etc
secret: secret:
secretName: grafana-etc secretName: grafana-etc
defaultMode: 292 defaultMode: 0444
- name: grafana-dashboards - name: grafana-dashboards
configMap: configMap:
name: grafana-dashboards name: grafana-dashboards
defaultMode: 365 defaultMode: 0555
- name: data - name: data
emptyDir: {} emptyDir: {}
{{ if $mounts_grafana.volumes }}{{ toYaml $mounts_grafana.volumes | indent 8 }}{{ end }} {{ if $mounts_grafana.volumes }}{{ toYaml $mounts_grafana.volumes | indent 8 }}{{ end }}

2
grafana/templates/job-add-home-dashboard.yaml
View File

@ -74,5 +74,5 @@ spec:
- name: grafana-bin - name: grafana-bin
configMap: configMap:
name: grafana-bin name: grafana-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
grafana/templates/job-db-init-session.yaml
View File

@ -72,5 +72,5 @@ spec:
- name: grafana-bin - name: grafana-bin
configMap: configMap:
name: grafana-bin name: grafana-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
grafana/templates/job-db-init.yaml
View File

@ -72,5 +72,5 @@ spec:
- name: grafana-bin - name: grafana-bin
configMap: configMap:
name: grafana-bin name: grafana-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
grafana/templates/job-db-session-sync.yaml
View File

@ -67,5 +67,5 @@ spec:
- name: grafana-bin - name: grafana-bin
configMap: configMap:
name: grafana-bin name: grafana-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

4
grafana/templates/job-set-admin-user.yaml
View File

@ -77,9 +77,9 @@ spec:
- name: grafana-bin - name: grafana-bin
configMap: configMap:
name: grafana-bin name: grafana-bin
defaultMode: 365 defaultMode: 0555
- name: grafana-etc - name: grafana-etc
secret: secret:
secretName: grafana-etc secretName: grafana-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

2
grafana/templates/pod-helm-tests.yaml
View File

@ -70,5 +70,5 @@ spec:
- name: grafana-bin - name: grafana-bin
configMap: configMap:
name: grafana-bin name: grafana-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

4
helm-toolkit/templates/manifests/_job-bootstrap.tpl
View File

@ -103,11 +103,11 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
- name: etc-service - name: etc-service
emptyDir: {} emptyDir: {}

6
helm-toolkit/templates/manifests/_job-db-drop-mysql.tpl
View File

@ -118,11 +118,11 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
{{- $local := dict "configMapBinFirst" true -}} {{- $local := dict "configMapBinFirst" true -}}
{{- range $key1, $dbToDrop := $dbsToDrop }} {{- range $key1, $dbToDrop := $dbsToDrop }}
@ -134,7 +134,7 @@ spec:
- name: db-drop-conf - name: db-drop-conf
secret: secret:
secretName: {{ $configMapEtc | quote }} secretName: {{ $configMapEtc | quote }}
defaultMode: 292 defaultMode: 0444
{{- end -}} {{- end -}}
{{- end -}} {{- end -}}
{{- end -}} {{- end -}}

6
helm-toolkit/templates/manifests/_job-db-init-mysql.tpl
View File

@ -117,11 +117,11 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
{{- $local := dict "configMapBinFirst" true -}} {{- $local := dict "configMapBinFirst" true -}}
{{- range $key1, $dbToInit := $dbsToInit }} {{- range $key1, $dbToInit := $dbsToInit }}
@ -133,7 +133,7 @@ spec:
- name: db-init-conf - name: db-init-conf
secret: secret:
secretName: {{ $configMapEtc | quote }} secretName: {{ $configMapEtc | quote }}
defaultMode: 292 defaultMode: 0444
{{- end -}} {{- end -}}
{{- end -}} {{- end -}}
{{- end -}} {{- end -}}

6
helm-toolkit/templates/manifests/_job-db-sync.tpl
View File

@ -97,18 +97,18 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
- name: etc-service - name: etc-service
emptyDir: {} emptyDir: {}
- name: db-sync-conf - name: db-sync-conf
secret: secret:
secretName: {{ $configMapEtc | quote }} secretName: {{ $configMapEtc | quote }}
defaultMode: 292 defaultMode: 0444
{{- if $podVols }} {{- if $podVols }}
{{ $podVols | toYaml | indent 8 }} {{ $podVols | toYaml | indent 8 }}
{{- end }} {{- end }}

4
helm-toolkit/templates/manifests/_job-ks-endpoints.tpl
View File

@ -94,11 +94,11 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
{{- dict "enabled" true "name" $tlsSecret | include "helm-toolkit.snippets.tls_volume" | indent 8 }} {{- dict "enabled" true "name" $tlsSecret | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
{{- end }} {{- end }}

4
helm-toolkit/templates/manifests/_job-ks-service.tpl
View File

@ -88,11 +88,11 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
{{- dict "enabled" true "name" $tlsSecret | include "helm-toolkit.snippets.tls_volume" | indent 8 }} {{- dict "enabled" true "name" $tlsSecret | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
{{- end }} {{- end }}

4
helm-toolkit/templates/manifests/_job-ks-user.yaml.tpl
View File

@ -94,11 +94,11 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
{{- dict "enabled" true "name" $tlsSecret | include "helm-toolkit.snippets.tls_volume" | indent 8 }} {{- dict "enabled" true "name" $tlsSecret | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
{{- end -}} {{- end -}}

4
helm-toolkit/templates/manifests/_job-rabbit-init.yaml.tpl
View File

@ -86,10 +86,10 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
{{- end -}} {{- end -}}

6
helm-toolkit/templates/manifests/_job-s3-bucket.yaml.tpl
View File

@ -103,18 +103,18 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
- name: etcceph - name: etcceph
emptyDir: {} emptyDir: {}
- name: ceph-etc - name: ceph-etc
configMap: configMap:
name: {{ $configMapCeph | quote }} name: {{ $configMapCeph | quote }}
defaultMode: 292 defaultMode: 0444
{{- if empty $envAll.Values.conf.ceph.admin_keyring }} {{- if empty $envAll.Values.conf.ceph.admin_keyring }}
- name: ceph-keyring - name: ceph-keyring
secret: secret:

8
helm-toolkit/templates/manifests/_job-s3-user.yaml.tpl
View File

@ -118,22 +118,22 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
- name: ceph-keyring-sh - name: ceph-keyring-sh
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
- name: etcceph - name: etcceph
emptyDir: {} emptyDir: {}
- name: ceph-etc - name: ceph-etc
configMap: configMap:
name: {{ $configMapCeph | quote }} name: {{ $configMapCeph | quote }}
defaultMode: 292 defaultMode: 0444
{{- if empty $envAll.Values.conf.ceph.admin_keyring }} {{- if empty $envAll.Values.conf.ceph.admin_keyring }}
- name: ceph-keyring - name: ceph-keyring
secret: secret:

4
helm-toolkit/templates/manifests/_job_image_repo_sync.tpl
View File

@ -84,11 +84,11 @@ spec:
{{- if $secretBin }} {{- if $secretBin }}
secret: secret:
secretName: {{ $secretBin | quote }} secretName: {{ $secretBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- else }} {{- else }}
configMap: configMap:
name: {{ $configMapBin | quote }} name: {{ $configMapBin | quote }}
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}
- name: docker-socket - name: docker-socket
hostPath: hostPath:

2
ingress/templates/deployment-ingress.yaml
View File

@ -358,7 +358,7 @@ spec:
- name: ingress-bin - name: ingress-bin
configMap: configMap:
name: ingress-bin name: ingress-bin
defaultMode: 365 defaultMode: 0555
{{- if and .Values.network.host_namespace .Values.network.vip.manage }} {{- if and .Values.network.host_namespace .Values.network.vip.manage }}
- name: host-rootfs - name: host-rootfs
hostPath: hostPath:

4
kafka/templates/job-generate-acl.yaml
View File

@ -64,9 +64,9 @@ spec:
- name: kafka-bin - name: kafka-bin
configMap: configMap:
name: kafka-bin name: kafka-bin
defaultMode: 365 defaultMode: 0555
- name: kafka-etc - name: kafka-etc
secret: secret:
secretName: kafka-etc secretName: kafka-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

4
kafka/templates/pod-helm-test.yaml
View File

@ -66,9 +66,9 @@ spec:
- name: kafka-bin - name: kafka-bin
configMap: configMap:
name: kafka-bin name: kafka-bin
defaultMode: 365 defaultMode: 0555
- name: kafka-etc - name: kafka-etc
secret: secret:
secretName: kafka-etc secretName: kafka-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

4
kafka/templates/statefulset.yaml
View File

@ -168,11 +168,11 @@ spec:
- name: kafka-bin - name: kafka-bin
configMap: configMap:
name: kafka-bin name: kafka-bin
defaultMode: 365 defaultMode: 0555
- name: kafka-etc - name: kafka-etc
secret: secret:
secretName: kafka-etc secretName: kafka-etc
defaultMode: 292 defaultMode: 0444
{{ if $mounts_kafka.volumes }}{{ toYaml $mounts_kafka.volumes | indent 8 }}{{ end }} {{ if $mounts_kafka.volumes }}{{ toYaml $mounts_kafka.volumes | indent 8 }}{{ end }}
{{- if not .Values.storage.enabled }} {{- if not .Values.storage.enabled }}
- name: data - name: data

4
kibana/templates/deployment.yaml
View File

@ -167,9 +167,9 @@ spec:
- name: kibana-bin - name: kibana-bin
configMap: configMap:
name: kibana-bin name: kibana-bin
defaultMode: 365 defaultMode: 0555
- name: kibana-etc - name: kibana-etc
secret: secret:
secretName: kibana-etc secretName: kibana-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

2
kibana/templates/job-flush-kibana-metadata.yaml
View File

@ -96,5 +96,5 @@ spec:
- name: kibana-bin - name: kibana-bin
configMap: configMap:
name: kibana-bin name: kibana-bin
defaultMode: 493 defaultMode: 0755
{{- end }} {{- end }}

2
kibana/templates/job-register-kibana-indexes.yaml
View File

@ -80,5 +80,5 @@ spec:
- name: kibana-bin - name: kibana-bin
configMap: configMap:
name: kibana-bin name: kibana-bin
defaultMode: 493 defaultMode: 0755
{{- end }} {{- end }}

6
kubernetes-keystone-webhook/templates/deployment.yaml
View File

@ -83,13 +83,13 @@ spec:
- name: key-kubernetes-keystone-webhook - name: key-kubernetes-keystone-webhook
secret: secret:
secretName: {{ $envAll.Values.secrets.certificates.api }} secretName: {{ $envAll.Values.secrets.certificates.api }}
defaultMode: 292 defaultMode: 0444
- name: kubernetes-keystone-webhook-etc - name: kubernetes-keystone-webhook-etc
configMap: configMap:
name: kubernetes-keystone-webhook-etc name: kubernetes-keystone-webhook-etc
defaultMode: 292 defaultMode: 0444
- name: kubernetes-keystone-webhook-bin - name: kubernetes-keystone-webhook-bin
configMap: configMap:
name: kubernetes-keystone-webhook-bin name: kubernetes-keystone-webhook-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
kubernetes-keystone-webhook/templates/pod-test.yaml
View File

@ -60,6 +60,6 @@ spec:
- name: kubernetes-keystone-webhook-bin - name: kubernetes-keystone-webhook-bin
configMap: configMap:
name: kubernetes-keystone-webhook-bin name: kubernetes-keystone-webhook-bin
defaultMode: 365 defaultMode: 0555
{{ if $mounts_kubernetes_keystone_webhook_tests.volumes }}{{ toYaml $mounts_kubernetes_keystone_webhook_tests.volumes | indent 4 }}{{ end }} {{ if $mounts_kubernetes_keystone_webhook_tests.volumes }}{{ toYaml $mounts_kubernetes_keystone_webhook_tests.volumes | indent 4 }}{{ end }}
{{- end }} {{- end }}

6
libvirt/templates/daemonset-libvirt.yaml
View File

@ -207,11 +207,11 @@ spec:
- name: libvirt-bin - name: libvirt-bin
configMap: configMap:
name: libvirt-bin name: libvirt-bin
defaultMode: 365 defaultMode: 0555
- name: libvirt-etc - name: libvirt-etc
secret: secret:
secretName: {{ $configMapName }} secretName: {{ $configMapName }}
defaultMode: 292 defaultMode: 0444
{{- if .Values.conf.ceph.enabled }} {{- if .Values.conf.ceph.enabled }}
- name: etcceph - name: etcceph
hostPath: hostPath:
@ -219,7 +219,7 @@ spec:
- name: ceph-etc - name: ceph-etc
configMap: configMap:
name: {{ .Values.ceph_client.configmap }} name: {{ .Values.ceph_client.configmap }}
defaultMode: 292 defaultMode: 0444
{{- if empty .Values.conf.ceph.cinder.keyring }} {{- if empty .Values.conf.ceph.cinder.keyring }}
- name: ceph-keyring - name: ceph-keyring
secret: secret:

4
mariadb/templates/deployment-ingress.yaml
View File

@ -205,9 +205,9 @@ spec:
- name: mariadb-bin - name: mariadb-bin
configMap: configMap:
name: mariadb-bin name: mariadb-bin
defaultMode: 365 defaultMode: 0555
- name: mariadb-ingress-etc - name: mariadb-ingress-etc
configMap: configMap:
name: mariadb-ingress-etc name: mariadb-ingress-etc
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

4
mariadb/templates/pod-test.yaml
View File

@ -67,9 +67,9 @@ spec:
- name: mariadb-bin - name: mariadb-bin
configMap: configMap:
name: mariadb-bin name: mariadb-bin
defaultMode: 365 defaultMode: 0555
- name: mariadb-secrets - name: mariadb-secrets
secret: secret:
secretName: mariadb-secrets secretName: mariadb-secrets
defaultMode: 292 defaultMode: 0444
{{- end }} {{- end }}

6
mariadb/templates/statefulset.yaml
View File

@ -239,15 +239,15 @@ spec:
- name: mariadb-bin - name: mariadb-bin
configMap: configMap:
name: mariadb-bin name: mariadb-bin
defaultMode: 365 defaultMode: 0555
- name: mariadb-etc - name: mariadb-etc
configMap: configMap:
name: mariadb-etc name: mariadb-etc
defaultMode: 292 defaultMode: 0444
- name: mariadb-secrets - name: mariadb-secrets
secret: secret:
secretName: mariadb-secrets secretName: mariadb-secrets
defaultMode: 292 defaultMode: 0444
{{- if not .Values.volume.enabled }} {{- if not .Values.volume.enabled }}
- name: mysql-data - name: mysql-data
{{- if .Values.volume.use_local_path_for_single_pod_cluster.enabled }} {{- if .Values.volume.use_local_path_for_single_pod_cluster.enabled }}

2
memcached/templates/deployment.yaml
View File

@ -86,6 +86,6 @@ spec:
- name: memcached-bin - name: memcached-bin
configMap: configMap:
name: {{ $configMapBinName | quote }} name: {{ $configMapBinName | quote }}
defaultMode: 365 defaultMode: 0555
{{ dict "envAll" $envAll "component" "memcached" "requireSys" true | include "helm-toolkit.snippets.kubernetes_apparmor_volumes" | indent 8 }} {{ dict "envAll" $envAll "component" "memcached" "requireSys" true | include "helm-toolkit.snippets.kubernetes_apparmor_volumes" | indent 8 }}
{{- end }} {{- end }}

2
mongodb/templates/statefulset.yaml
View File

@ -118,7 +118,7 @@ spec:
- name: mongodb-bin - name: mongodb-bin
configMap: configMap:
name: mongodb-bin name: mongodb-bin
defaultMode: 365 defaultMode: 0555
{{- if not .Values.volume.enabled }} {{- if not .Values.volume.enabled }}
- name: mongodb-data - name: mongodb-data
hostPath: hostPath:

4
nagios/templates/deployment.yaml
View File

@ -241,9 +241,9 @@ spec:
- name: nagios-etc - name: nagios-etc
secret: secret:
secretName: nagios-etc secretName: nagios-etc
defaultMode: 292 defaultMode: 0444
- name: nagios-bin - name: nagios-bin
configMap: configMap:
name: nagios-bin name: nagios-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
nagios/templates/pod-helm-tests.yaml
View File

@ -75,5 +75,5 @@ spec:
- name: nagios-bin - name: nagios-bin
configMap: configMap:
name: nagios-bin name: nagios-bin
defaultMode: 365 defaultMode: 0555
{{- end }} {{- end }}

2
openvswitch/templates/daemonset-ovs-db.yaml
View File

@ -108,7 +108,7 @@ spec:
- name: openvswitch-bin - name: openvswitch-bin
configMap: configMap:
name: openvswitch-bin name: openvswitch-bin
defaultMode: 365 defaultMode: 0555
- name: run - name: run
hostPath: hostPath:
path: /run/openvswitch path: /run/openvswitch

2
openvswitch/templates/daemonset-ovs-vswitchd.yaml
View File

@ -153,7 +153,7 @@ It should be handled through lcore and pmd core masks. */}}
- name: openvswitch-bin - name: openvswitch-bin
configMap: configMap:
name: openvswitch-bin name: openvswitch-bin
defaultMode: 365 defaultMode: 0555
- name: run - name: run
hostPath: hostPath:
path: /run path: /run

2
postgresql/templates/pod-test.yaml
View File

@ -72,6 +72,6 @@ spec:
- name: postgresql-bin - name: postgresql-bin
secret: secret:
secretName: postgresql-bin secretName: postgresql-bin
defaultMode: 365 defaultMode: 0555
... ...
{{- end }} {{- end }}

8
postgresql/templates/statefulset.yaml
View File

@ -416,7 +416,7 @@ spec:
- name: postgresql-bin - name: postgresql-bin
secret: secret:
secretName: postgresql-bin secretName: postgresql-bin
defaultMode: 365 defaultMode: 0555
- name: client-certs-temp - name: client-certs-temp
emptyDir: {} emptyDir: {}
- name: server-certs-temp - name: server-certs-temp
@ -428,15 +428,15 @@ spec:
- name: replication-pki - name: replication-pki
secret: secret:
secretName: {{ .Values.secrets.postgresql.replica }} secretName: {{ .Values.secrets.postgresql.replica }}
defaultMode: 416 defaultMode: 0640
- name: postgresql-pki - name: postgresql-pki
secret: secret:
secretName: {{ .Values.secrets.postgresql.server }} secretName: {{ .Values.secrets.postgresql.server }}
defaultMode: 416 defaultMode: 0640
- name: postgresql-etc - name: postgresql-etc
secret: secret:
secretName: postgresql-etc secretName: postgresql-etc
defaultMode: 292 defaultMode: 0444
{{- if not .Values.storage.pvc.enabled }} {{- if not .Values.storage.pvc.enabled }}
- name: postgresql-data - name: postgresql-data
hostPath: hostPath:

Some files were not shown because too many files have changed in this diff Show More