Adding OpenShift Test Values

Package Merge Request

Package Changes

Adding test values for OpenShift nightly pipeline

Upgrade Notices

N/A

tests/openshift-test-values.yaml

+openshift: true
+
+
+istio:
+  values:
+    profile: "openshift"
+    ingressGateways:
+      public-ingressgateway:
+        k8s:
+          hpaSpec:
+            minReplicas: 3
+            maxReplicas: 5
+  gateways:
+    public:
+      tls:
+        key: "" # Gets added via chart/ingress-certs.yaml
+        cert: "" # Gets added via chart/ingress-certs.yaml
+
+
+monitoring:
+  values:
+    prometheus:
+      prometheusSpec:
+        additionalScrapeConfigs: []
+        podMetadata:
+          annotations:
+            vault.hashicorp.com/agent-inject: "false"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject-token: "true"
+            vault.hashicorp.com/role: "prometheus"
+            vault.hashicorp.com/agent-pre-populate: "false"
+        resources:
+          requests:
+            cpu: 300m
+            memory: 5Gi
+          limits: null
+    kube-state-metrics:
+      resources:
+        requests:
+          cpu: 100m
+          memory: 128Mi
+        limits: null
+    prometheus-node-exporter:
+      resources:
+        requests:
+          cpu: 200m
+          memory: 50Mi
+        limits: null
+    grafana:
+      downloadDashboards:
+        resources:
+          limits: null
+          requests:
+            cpu: 20m
+            memory: 20Mi
+
+grafana:
+  enabled: true
+  git:
+    tag: 7.3.7-bb.0
+
+neuvector:
+  enabled: true
+  values:
+    k3s:
+      enabled: false
+    crio:
+      enabled: true
+      path: /var/run/crio/crio.sock
+    istio:
+      enabled: true
+      hardened:
+        enabled: false
+        tempo:
+          enabled: false
+      console:
+        enabled: false
+    openshift: true
+    bbtests:
+      enabled: true
+      cypress:
+        artifacts: true
+        openshift: true
+ 
+# Addons are toggled based on labels in CI
+  
+  gitlab:
+    enabled: true
+    sso:
+      enabled: false
+      client_id: dev_00eb8904-5b88-4c68-ad67-cec0d2e07aa6_gitlab
+    flux:
+      timeout: 30m
+    values:
+      global:
+        rails:
+          bootstrap:
+            enabled: false
+      gitlab-runner:
+        resources:
+          requests:
+            cpu: 20m
+          limits: {}
+      gitlab:
+        webservice:
+          minReplicas: 1
+          maxReplicas: 1
+          helmTests:
+            enabled: false
+          annotations:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "5432,6379"
+        sidekiq:
+          minReplicas: 1
+          maxReplicas: 1
+          annotations:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "5432,6379"
+        gitlab-shell:
+          minReplicas: 1
+          maxReplicas: 1
+        gitaly:
+          persistence:
+            size: 256Mi
+          resources:
+            ## values raised to help pass CI after default values for gitaly are fixed then can revert to original request.
+            #requests:
+            #  cpu: 50m
+            #limits: {}
+            requests:
+              cpu: 400m
+              memory: 600Mi
+            limits:
+              cpu: 400m
+              memory: 600Mi
+        shared-secrets:
+          resources:
+            requests:
+              cpu: 10m
+            limits: {}
+        migrations:
+          resources:
+            requests:
+              cpu: 10m
+            limits: {}
+        toolbox:
+          persistence:
+            size: 256Mi
+          resources:
+            requests:
+              cpu: 10m
+            limits: {}
+      registry:
+        hpa:
+          minReplicas: 1
+          maxReplicas: 1
+      postgresql:
+        persistence:
+          size: 256Mi
+        metrics:
+          resources:
+            requests:
+              cpu: 10m
+            limits: {}
+      minio:
+        persistence:
+          size: 256Mi
+        resources:
+          requests:
+            cpu: 50m
+          limits: {}
+      redis:
+        master:
+          persistence:
+            size: 256Mi
+        slave:
+          persistence:
+            size: 256Mi
+      bbtests:
+        enabled: true
+        cypress:
+          artifacts: true
+          envs:
+            cypress_url: https://gitlab.bigbang.mil
+        scripts:
+          envs:
+            GITLAB_REPOSITORY: https://gitlab.bigbang.mil
+            GITLAB_ORIGIN: https://testuser:Password123h56a78@gitlab.bigbang.mil
+            GITLAB_REGISTRY: registry.bigbang.mil
+
+  minioOperator:
+    enabled: true # Minio Operator is required for Loki in default core
+    values:
+      console:
+        enabled: true
+      bbtests:
+        enabled: true
+      istio: 
+        enabled: true
+      openshift: true
+
+  minio:
+    enabled: true
+    values:
+      annotations:
+        traffic.sidecar.istio.io/excludeOutboundPorts: "443"
+      tenant:
+        pools:
+        - servers: 3
+          volumesPerServer: 4
+          size: 256Mi
+          resources:
+            requests:
+              cpu: 250m
+              memory: 2Gi
+            limits:
+              cpu: 250m
+              memory: 2Gi
+          securityContext:
+            runAsUser: 1001
+            runAsGroup: 1001
+            fsGroup: 1001
+            runAsNonRoot: true
+          containerSecurityContext:
+            runAsUser: 1001
+            runAsGroup: 1001
+            runAsNonRoot: true
+      istio: 
+        enabled: true
+      openshift: true
+
+      bbtests:
+        # There have been intermittent failures of the tests in the past.   The issue is tracked in the below issue.
+        # https://repo1.dso.mil/big-bang/product/packages/minio/-/issues/7
+        # This issue can be reopened if problems reappear.
+        enabled: true
+        cypress:
+          envs:
+            cypress_url: 'https://minio.bigbang.mil/login'
+        scripts:
+          envs:
+            MINIO_PORT: ''
+            MINIO_HOST: 'https://minio-api.bigbang.mil'
+    istio:
+      enabled: true
+      hardened:
+        enabled: true