post renderers for core for review

04c03f72 · Thomas Runyon · 39921d2b · 04c03f72 · 04c03f72 · 04c03f72
Commit 04c03f72 authored 4 years ago by Thomas Runyon
--- a/chart/templates/clusterauditor/clusterauditor-helmrelease.yaml
+++ b/chart/templates/clusterauditor/clusterauditor-helmrelease.yaml
@@ -35,7 +35,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.clusterAuditor.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.clusterAuditor.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-cluster-auditor-values
      kind: Secret

--- a/chart/templates/gatekeeper/gatekeeper-helmrelease.yaml
+++ b/chart/templates/gatekeeper/gatekeeper-helmrelease.yaml
@@ -35,7 +35,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.gatekeeper.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.gatekeeper.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-gatekeeper-values
      kind: Secret

--- a/chart/templates/istio/controlplane/istio-controlplane-helmrelease.yaml
+++ b/chart/templates/istio/controlplane/istio-controlplane-helmrelease.yaml
@@ -35,7 +35,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.istio.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.istio.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-istio-values
      kind: Secret

--- a/chart/templates/istio/operator/istio-operator-helmrelease.yaml
+++ b/chart/templates/istio/operator/istio-operator-helmrelease.yaml
@@ -35,7 +35,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.istiooperator.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.istiooperator.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-istio-operator-values
      kind: Secret

--- a/chart/templates/kiali/helmrelease.yaml
+++ b/chart/templates/kiali/helmrelease.yaml
@@ -34,7 +34,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.kiali.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.kiali.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-kiali-values
      kind: Secret

--- a/chart/templates/logging/eck-operator/eck-operator-helmrelease.yaml
+++ b/chart/templates/logging/eck-operator/eck-operator-helmrelease.yaml
@@ -35,7 +35,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.eckoperator.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.eckoperator.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-eck-operator-values
      kind: Secret

--- a/chart/templates/logging/elasticsearch-kibana/ek-helmrelease.yaml
+++ b/chart/templates/logging/elasticsearch-kibana/ek-helmrelease.yaml
@@ -35,7 +35,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.logging.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.logging.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-ek-values
      kind: Secret

--- a/chart/templates/logging/fluentbit/fluentbit-helmrelease.yaml
+++ b/chart/templates/logging/fluentbit/fluentbit-helmrelease.yaml
@@ -34,7 +34,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.fluentbit.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.fluentbit.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-fluentbit-values
      kind: Secret

--- a/chart/templates/monitoring/monitoring-helmrelease.yaml
+++ b/chart/templates/monitoring/monitoring-helmrelease.yaml
@@ -35,7 +35,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.monitoring.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.monitoring.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-monitoring-values
      kind: Secret

--- a/chart/templates/twistlock/twistlock-helmrelease.yaml
+++ b/chart/templates/twistlock/twistlock-helmrelease.yaml
@@ -35,7 +35,10 @@ spec:
    timeout: {{ .rollback.timeout }}
    cleanupOnFail: {{ .rollback.cleanupOnFail }}
  {{- end }}
-
+  {{- if .Values.twistlock.postRenderers }}
+  postRenderers:
+  {{ toYaml .Values.twistlock.postRenderers | nindent 4 }}
+  {{- end }}
  valuesFrom:
    - name: {{ .Release.Name }}-twistlock-values
      kind: Secret

--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -105,6 +105,9 @@ istio:
  # -- Values to passthrough to the istio-controlplane chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git
  values: {}

+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
+
 istiooperator:
  # -- Toggle deployment of Istio Operator.
  enabled: true
@@ -116,6 +119,9 @@ istiooperator:
  # -- Values to passthrough to the istio-operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git
  values: {}

+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
+
 jaeger:
  # -- Toggle deployment of Jaeger.
  enabled: true
@@ -136,6 +142,9 @@ jaeger:
  # -- Values to pass through to Jaeger chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/jaeger.git
  values: {}

+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
+
 kiali:
  # -- Toggle deployment of Kiali.
  enabled: true
@@ -155,6 +164,10 @@ kiali:

  # -- Values to pass through to Kiali chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/kiali
  values: {}
+
+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
+
 # ----------------------------------------------------------------------------------------------------------------------

 # ----------------------------------------------------------------------------------------------------------------------
@@ -170,6 +183,9 @@ clusterAuditor:

  # -- Values to passthrough to the cluster auditor chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git
  values: {}
+
+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
 # ----------------------------------------------------------------------------------------------------------------------

 # ----------------------------------------------------------------------------------------------------------------------
@@ -185,6 +201,9 @@ gatekeeper:

  # -- Values to passthrough to the gatekeeper chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git
  values: {}
+
+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
 # ----------------------------------------------------------------------------------------------------------------------

 # ----------------------------------------------------------------------------------------------------------------------
@@ -219,6 +238,9 @@ logging:
  # -- Values to passthrough to the elasticsearch-kibana chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git
  values: {}

+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
+
 eckoperator:
  # -- Toggle deployment of ECK Operator.
  enabled: true
@@ -236,6 +258,9 @@ fluentbit:
    path: "./chart"
    tag: "0.15.3-bb.1"
  values: {}
+
+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
 # ----------------------------------------------------------------------------------------------------------------------

 # ----------------------------------------------------------------------------------------------------------------------
@@ -280,6 +305,9 @@ monitoring:

  # -- Values to passthrough to the monitoring chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git
  values: {}
+
+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
 # ----------------------------------------------------------------------------------------------------------------------

 # ----------------------------------------------------------------------------------------------------------------------
@@ -296,6 +324,9 @@ twistlock:
  # -- Values to passthrough to the twistlock chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git
  values: {}

+  # -- Post Renderers.  See docs/postrenders.md
+  postRenderers: []
+
 #
 # ----------------------------------------------------------------------------------------------------------------------
 #
@@ -327,6 +358,9 @@ addons:
    # -- Values to passthrough to the argocd chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  authservice:
    # -- Toggle deployment of Authservice.
    # if enabling authservice, a filter needs to be provided by either enabling
@@ -344,6 +378,9 @@ addons:
    # -- Values to passthrough to the authservice chart: https://repo1.dso.mil/platform-one/big-bang/apps/core/authservice.git
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
    # -- Additional authservice chain configurations.
    chains: {}

@@ -360,6 +397,9 @@ addons:
    # -- Values to passthrough to the minio operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio-operator.git
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  minio:
    enabled: false
    git:
@@ -376,6 +416,9 @@ addons:
    # -- Values to passthrough to the minio instance chart: https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  gitlab:
    # -- Toggle deployment of Gitlab.
    enabled: false
@@ -446,6 +489,9 @@ addons:
    # -- Values to passthrough to the gitlab chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/gitlab.git
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  gitlabRunner:
    # -- Toggle deployment of Gitlab Runner.
    enabled: false
@@ -511,6 +557,9 @@ addons:
    # -- Values to passthrough to the sonarqube chart: https://repo1.dso.mil/platform-one/big-bang/apps/developer-tools/sonarqube.git
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  haproxy:
    # -- Toggle deployment of HAProxy.
    enabled: false
@@ -522,6 +571,9 @@ addons:
    # -- Values to passthrough to the haproxy chart: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/haproxy.git
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  anchore:
    # -- Toggle deployment of Anchore.
    enabled: false
@@ -591,6 +643,9 @@ addons:
    # -- Values to passthrough to the anchore chart: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise.git
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  # ----------------------------------------------------------------------------------------------------------------------
  # Mattermost Operator and Instance
  #
@@ -600,9 +655,13 @@ addons:
      repo: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator.git
      path: "./chart"
      tag: "1.13.0-bb.2"
+
    # -- Values to passthrough to the mattermost operator chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost-operator/-/blob/main/chart/values.yaml
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  mattermost:
    # -- Toggle deployment of Mattermost.
    enabled: false
@@ -684,6 +743,9 @@ addons:
    # -- Values to passthrough to the Mattermost chart: https://repo1.dso.mil/platform-one/big-bang/apps/collaboration-tools/mattermost/-/blob/main/chart/values.yaml
    values: {}

+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
+
  velero:
    # -- Toggle deployment of Velero.
    enabled: false
@@ -698,6 +760,9 @@ addons:
      # Requires at least one plugin installed. Current supported values: aws, azure
      plugins: []
      # - aws
+
+    # -- Post Renderers.  See docs/postrenders.md
+    postRenderers: []
  #
  # ----------------------------------------------------------------------------------------------------------------------

--- a/docs/postrenderers.md
+++ b/docs/postrenderers.md
+# Post Renderers
+
+
+[Flux V2](https://toolkit.fluxcd.io/) provides the ability to apply kustomizations on a Helm Release after rendering using a [Post Renderer](https://toolkit.fluxcd.io/components/helm/helmreleases/#post-renderers).  This feature provides significant flexibility to the Helm objects, and allows for adjusting values inside of Helm that are not exposed explicitly as part of the values file.   Each `HelmRelease` is configured with a `postRenderer` pass through:
+
+
+```
+...
+jaeger:
+  postRenderers:
+    - kustomize:
+    # Array of inline strategic merge patch definitions as YAML object.
+    # Note, this is a YAML object and not a string, to avoid syntax
+    # indention errors.
+    patchesStrategicMerge:
+    # Change operator deployment to be a rolling update
+    - kind: Deployment
+      apiVersion: apps/v1
+      metadata:
+        name: jaeger-operator
+      spec:
+        strategy:
+          type: RollingUpdate
+    patchesJson6902:
+    # change priorityClassName
+    - target:
+        version: v1
+        kind: Deployment
+        name: jaeger-operator
+        patch:
+        - op: add
+            path: /spec/template/priorityClassName
+            value: system-cluster-critical
+    images:
+    # update image to a new tag
+    - name: registry1.dso.mil/ironbank/opensource/jaegertracing/jaeger-operator
+      newName: registry1.dso.mil/ironbank/opensource/jaegertracing/jaeger-operator
+      newTag: 1.23.0
+```
\ No newline at end of file