Enable yamllint checks

- document-end
- document-start
- empty-lines
- hyphens
- indentation
- key-duplicates
- new-line-at-end-of-file
- new-lines
- octal-values

with corresponding code adjustment.

Change-Id: I92d6aa20df82aa0fe198f8ccd535cfcaf613f43a
This commit is contained in:
Andrii Ostapenko 2020-05-17 15:14:56 -05:00
parent b19c7f21c9
commit 731a6b4cfa
119 changed files with 298 additions and 82 deletions

View File

@ -10,6 +10,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
images:
tags:
# These are minimum versions, older images will very likely not
@ -571,3 +572,4 @@ manifests:
job_calico_settings: true
service_calico_etcd: true
secret_certificates: true
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
deployment:
ceph: true
@ -255,16 +256,16 @@ conf:
mgr: true
pg_autoscaler: true
pool:
#NOTE(portdirect): this drives a simple approximation of
# NOTE(portdirect): this drives a simple approximation of
# https://ceph.com/pgcalc/, the `target.osd` key should be set to match the
# expected number of osds in a cluster, and the `target.pg_per_osd` should be
# set to match the desired number of placement groups on each OSD.
crush:
#NOTE(portdirect): to use RBD devices with Ubuntu 16.04's 4.4.x series
# NOTE(portdirect): to use RBD devices with Ubuntu 16.04's 4.4.x series
# kernel this should be set to `hammer`
tunables: null
target:
#NOTE(portdirect): arbitrarily we set the default number of expected OSD's to 5
# NOTE(portdirect): arbitrarily we set the default number of expected OSD's to 5
# to match the number of nodes in the OSH gate (used only for helm tests).
osd: 5
# This is just for helm tests to proceed the deployment if we have mentioned % of
@ -272,7 +273,7 @@ conf:
required_percent_of_osds: 75
pg_per_osd: 100
protected: true
#NOTE(st053q): target quota should be set to the overall cluster full percentage
# NOTE(st053q): target quota should be set to the overall cluster full percentage
# to be tolerated as a quota (percent full to allow in order to tolerate some
# level of failure)
quota: 100
@ -591,3 +592,4 @@ manifests:
helm_tests: true
cronjob_checkPGs: true
cronjob_defragosds: true
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -24,3 +25,4 @@ bootstrap:
manifests:
job_bootstrap: true
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
deployment:
ceph: true
storage_secrets: true
@ -353,3 +354,4 @@ manifests:
service_mon: true
service_mon_discovery: true
job_storage_admin_keys: true
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -18,3 +19,4 @@ bootstrap:
enabled: true
manifests:
job_bootstrap: true
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
images:
pull_policy: IfNotPresent
tags:
@ -40,10 +41,10 @@ labels:
node_selector_key: ceph-osd
node_selector_value: enabled
#We could deploy ceph cluster now with either ceph-volume or ceph-disk however
#ceph-disk is deprecated from Nautilus.
#Keeping ceph-disk as default since gate scripts are still directory backed
#osds, need to change this after moving the gates to disk backed osd.
# We could deploy ceph cluster now with either ceph-volume or ceph-disk however
# ceph-disk is deprecated from Nautilus.
# Keeping ceph-disk as default since gate scripts are still directory backed
# osds, need to change this after moving the gates to disk backed osd.
deploy:
tool: "ceph-disk"
@ -359,3 +360,4 @@ manifests:
job_post_apply: true
job_image_repo_sync: true
helm_tests: true
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -9,4 +10,5 @@ pod:
init: runtime/default
ceph-osd-test:
init: runtime/default
ceph-cluster-helm-test: runtime/default
ceph-cluster-helm-test: runtime/default
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
deployment:
ceph: true
client_secrets: false
@ -255,8 +256,8 @@ bootstrap:
# if you change provision_storage_class to false
# it is presumed you manage your own storage
# class definition externally
#(kranthikirang):We iterate over each storageclass parameters
#and derive the manifest.
# NOTE(kranthikirang) We iterate over each storageclass parameters
# and derive the manifest.
storageclass:
rbd:
provision_storage_class: true
@ -325,3 +326,4 @@ manifests:
job_namespace_client_key: true
storageclass: true
helm_tests: true
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -11,4 +12,5 @@ pod:
init: runtime/default
ceph-provisioner-test:
init: runtime/default
ceph-provisioner-helm-test: runtime/default
ceph-provisioner-helm-test: runtime/default
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
deployment:
ceph: false
@ -249,24 +250,24 @@ conf:
features:
rgw: true
pool:
#NOTE(portdirect): this drives a simple approximation of
# https://ceph.com/pgcalc/, the `target.osd` key should be set to match the
# expected number of osds in a cluster, and the `target.pg_per_osd` should be
# set to match the desired number of placement groups on each OSD.
# NOTE(portdirect): this drives a simple approximation of
# https://ceph.com/pgcalc/, the `target.osd` key should be set to match the
# expected number of osds in a cluster, and the `target.pg_per_osd` should be
# set to match the desired number of placement groups on each OSD.
crush:
#NOTE(portdirect): to use RBD devices with Ubuntu 16.04's 4.4.x series
# NOTE(portdirect): to use RBD devices with Ubuntu 16.04's 4.4.x series
# kernel this should be set to `hammer`
tunables: null
target:
#NOTE(portdirect): arbitrarily we set the default number of expected OSD's to 5
# NOTE(portdirect): arbitrarily we set the default number of expected OSD's to 5
# to match the number of nodes in the OSH gate.
osd: 5
pg_per_osd: 100
default:
#NOTE(portdirect): this should be 'same_host' for a single node
# NOTE(portdirect): this should be 'same_host' for a single node
# cluster to be in a healthy state
crush_rule: replicated_rule
#NOTE(portdirect): this section describes the pools that will be managed by
# NOTE(portdirect): this section describes the pools that will be managed by
# the ceph pool management job, as it tunes the pgs and crush rule, based on
# the above.
spec:
@ -347,12 +348,12 @@ conf:
percent_total_data: 34.8
rgw:
config:
#NOTE (portdirect): See http://tracker.ceph.com/issues/21226
# NOTE (portdirect): See http://tracker.ceph.com/issues/21226
rgw_keystone_token_cache_size: 0
#NOTE (JCL): See http://tracker.ceph.com/issues/7073
# NOTE (JCL): See http://tracker.ceph.com/issues/7073
rgw_gc_max_objs: 997
#NOTE (JCL): See http://tracker.ceph.com/issues/24937
#NOTE (JCL): See https://tracker.ceph.com/issues/24551
# NOTE (JCL): See http://tracker.ceph.com/issues/24937
# NOTE (JCL): See https://tracker.ceph.com/issues/24551
rgw_dynamic_resharding: false
rgw_num_rados_handles: 4
rgw_override_bucket_index_max_shards: 8
@ -370,7 +371,7 @@ conf:
enabled: false
admin_caps: "users=*;buckets=*;zone=*"
config:
#NOTE (supamatt): Unfortunately we do not conform to S3 compliant names with some of our charts
# NOTE (supamatt): Unfortunately we do not conform to S3 compliant names with some of our charts
rgw_relaxed_s3_bucket_names: true
ceph:
global:
@ -606,3 +607,4 @@ manifests:
service_rgw: true
helm_tests: true
network_policy: false
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -22,8 +23,9 @@ pod:
ceph-rgw-ks-validation: runtime/default
conf:
rgw_s3:
enabled: true
enabled: true
bootstrap:
enabled: true
manifests:
job_bootstrap: true
job_bootstrap: true
...

View File

@ -1,3 +1,4 @@
---
manifests:
network_policy: true
network_policy:
@ -18,3 +19,4 @@ network_policy:
ports:
- protocol: TCP
port: %%%REPLACE_API_PORT%%%
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
images:
@ -113,3 +114,4 @@ manifests:
job_image_repo_sync: true
configmap_bin: true
service: true
...

View File

@ -1,5 +1,7 @@
---
pod:
mandatory_access_control:
type: apparmor
daemonjob-controller:
controller: localhost/docker-default
controller: localhost/docker-default
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
labels:
@ -162,3 +163,4 @@ manifests:
service: true
job_image_repo_sync: true
secret_elasticsearch: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
labels:
@ -263,3 +264,4 @@ manifests:
daemonset: true
job_image_repo_sync: true
secret_elasticsearch: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
labels:
@ -262,3 +263,4 @@ manifests:
deployment: true
job_image_repo_sync: true
secret_elasticsearch: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
labels:
@ -181,3 +182,4 @@ manifests:
daemonset: true
job_image_repo_sync: true
secret_elasticsearch: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
images:
tags:
apache_proxy: docker.io/httpd:2.4
@ -956,3 +957,4 @@ manifests:
service_logging: true
statefulset_data: true
statefulset_master: true
...

View File

@ -1,3 +1,4 @@
---
pod:
env:
client: null
@ -35,4 +36,5 @@ pod:
init: runtime/default
elasticsearch-verify-repositories:
elasticsearch-verify-repositories: runtime/default
init: runtime/default
init: runtime/default
...

View File

@ -1,3 +1,4 @@
---
pod:
replicas:
data: 1
@ -18,3 +19,4 @@ manifests:
job_s3_user: false
job_s3_bucket: false
helm_tests: false
...

View File

@ -11,6 +11,7 @@
# - elasticsearch-gateway-2.remote_host:9301
# - elasticsearch-gateway-3.remote_host:9301
# skip_unavailale: true
---
network:
remote_clustering:
enabled: true
@ -28,3 +29,4 @@ pod:
images:
tags:
elasticsearch: docker.io/openstackhelm/elasticsearch-s3:7_6_2-centos_7
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
images:
tags:
etcd: 'gcr.io/google_containers/etcd-amd64:3.2.24'
@ -111,3 +112,4 @@ manifests:
deployment: true
job_image_repo_sync: true
service: true
...

View File

@ -10,6 +10,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
images:
pull_policy: IfNotPresent
tags:
@ -1366,3 +1367,4 @@ manifests:
configmap_etc: true
configmap_custom_rules: false
configmap_bin: true
...

View File

@ -12,6 +12,7 @@
# https://raw.githubusercontent.com/coreos/flannel/v0.8.0/Documentation/kube-flannel.yml
---
labels:
job:
node_selector_key: openstack-control-plane
@ -82,3 +83,4 @@ manifests:
configmap_kube_flannel_cfg: true
daemonset_kube_flannel_ds: true
job_image_repo_sync: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
labels:
@ -253,3 +254,4 @@ manifests:
configmap_etc: true
daemonset_fluentbit: true
job_image_repo_sync: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
deployment:
@ -453,3 +454,4 @@ manifests:
secret_fluentd_env: true
secret_kafka: false
service_fluentd: true
...

View File

@ -1,6 +1,8 @@
---
pod:
mandatory_access_control:
type: apparmor
fluentd:
fluentd: runtime/default
init: runtime/default
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
labels:
api:
node_selector_key: openstack-control-plane
@ -429,11 +430,11 @@ conf:
provider: uuid
api:
auth_mode: keystone
#NOTE(portdirect): the bind port should not be defined, and is manipulated
# NOTE(portdirect): the bind port should not be defined, and is manipulated
# via the endpoints section.
port: null
statsd:
#NOTE(portdirect): the bind port should not be defined, and is manipulated
# NOTE(portdirect): the bind port should not be defined, and is manipulated
# via the endpoints section.
port: null
metricd:
@ -646,3 +647,4 @@ manifests:
service_api: true
service_ingress_api: true
service_statsd: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
images:
tags:
grafana: docker.io/grafana/grafana:6.2.0
@ -502,3 +503,4 @@ conf:
grafana_net:
url: https://grafana.net
dashboards: {}
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -21,4 +22,5 @@ pod:
init: runtime/default
grafana-test:
init: runtime/default
grafana-selenium-tests: runtime/default
grafana-selenium-tests: runtime/default
...

View File

@ -1,5 +1,6 @@
# NOTE(srwilkers): This overrides file provides a reference for a dashboard for
# the Calico CNI
---
conf:
dashboards:
calico: |-
@ -1356,4 +1357,5 @@ conf:
"timezone": "browser",
"title": "Kubernetes Calico",
"version": 1
}
}
...

View File

@ -1,6 +1,7 @@
# NOTE(srwilkers): This overrides file provides a reference for dashboards for
# the overall state of ceph clusters, ceph osds in those clusters, and the
# status of ceph pools for those clusters
---
conf:
dashboards:
ceph_cluster: |-
@ -3671,4 +3672,5 @@ conf:
"timezone": "browser",
"title": "Ceph - Pools",
"version": 1
}
}
...

View File

@ -1,5 +1,6 @@
# NOTE(srwilkers): This overrides file provides a reference for a dashboard for
# container metrics, specific to each host
---
conf:
dashboards:
containers: |-
@ -2100,4 +2101,5 @@ conf:
"timezone": "browser",
"title": "Container Metrics (cAdvisor)",
"version": 1
}
}
...

View File

@ -1,5 +1,6 @@
# NOTE(srwilkers): This overrides file provides a reference for a dashboard for
# CoreDNS
---
conf:
dashboards:
coredns: |-
@ -1376,4 +1377,5 @@ conf:
"timezone": "browser",
"title": "CoreDNS",
"version": 1
}
}
...

View File

@ -1,5 +1,6 @@
# NOTE(srwilkers): This overrides file provides a reference for a dashboard for
# an Elasticsearch cluster
---
conf:
dashboards:
elasticsearch: |-
@ -3472,4 +3473,5 @@ conf:
"timezone": "browser",
"title": "Elasticsearch",
"version": 1
}
}
...

View File

@ -1,5 +1,6 @@
# This override file provides a reference for dashboards for
# customized OSH Welcome Page
---
conf:
dashboards:
home_dashboard: |-
@ -106,4 +107,5 @@ conf:
}
manifests:
job_add_home_dashboard: true
job_add_home_dashboard: true
...

View File

@ -1,5 +1,6 @@
# NOTE(srwilkers): This overrides file provides a reference for dashboards that
# reflect the overall state of a Kubernetes deployment
---
conf:
dashboards:
kubernetes_capacity_planning: |-
@ -2110,4 +2111,5 @@ conf:
"timezone": "browser",
"title": "Kubernetes Cluster Status",
"version": 1
}
}
...

View File

@ -1,5 +1,6 @@
# NOTE(srwilkers): This overrides file provides a reference for a dashboard for
# nginx
---
conf:
dashboards:
nginx_stats: |-
@ -1461,4 +1462,5 @@ conf:
"title": "NGINX Ingress controller",
"uid": "nginx",
"version": 1
}
}
...

View File

@ -1,5 +1,6 @@
# NOTE(srwilkers): This overrides file provides a reference for a dashboard for
# the status of all nodes in a deployment
---
conf:
dashboards:
nodes: |-
@ -975,4 +976,5 @@ conf:
"timezone": "browser",
"title": "Nodes",
"version": 1
}
}
...

View File

@ -1,6 +1,7 @@
# NOTE(srwilkers): This overrides file provides a reference for dashboards for
# the openstack control plane as a whole, the individual openstack services, and
# rabbitmq
---
conf:
dashboards:
rabbitmq: |-
@ -4159,4 +4160,5 @@ conf:
"timezone": "browser",
"title": "Openstack Service",
"version": 1
}
}
...

View File

@ -1,5 +1,6 @@
# This overrides file provides a raw json file for a dashboard for
# the etcd
---
conf:
dashboards:
persistent_volume: |-
@ -548,4 +549,5 @@ conf:
"timezone": "",
"title": "Persistent Volumes",
"version": 0
}
}
...

View File

@ -1,5 +1,6 @@
# NOTE(srwilkers): This overrides file provides a reference for a dashboard for
# Prometheus
---
conf:
dashboards:
prometheus: |-
@ -3704,4 +3705,5 @@ conf:
"timezone": "browser",
"title": "Prometheus2.0 (v1.0.0 by FUSAKLA)",
"version": 1
}
}
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
deployment:
mode: namespace
type: Deployment
@ -142,7 +143,7 @@ network:
keepalived_router_id: 100
ingress:
annotations:
#NOTE(portdirect): if left blank this is populated from
# NOTE(portdirect): if left blank this is populated from
# .deployment.cluster.class
kubernetes.io/ingress.class: null
nginx.ingress.kubernetes.io/proxy-body-size: "0"
@ -253,13 +254,13 @@ network_policy:
conf:
controller:
#NOTE(portdirect): if left blank this is populated from
# NOTE(portdirect): if left blank this is populated from
# .deployment.cluster.class in cluster mode, or set to
# "nginx" in namespace mode
INGRESS_CLASS: null
ingress:
enable-underscores-in-headers: "true"
#NOTE(portdirect): if left blank this is populated from
# NOTE(portdirect): if left blank this is populated from
# .network.vip.addr when running in host networking
# and .network.vip.manage=true, otherwise it is left as
# an empty string (the default).
@ -286,3 +287,4 @@ manifests:
prometheus:
service_exporter: true
network_policy: false
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -8,3 +9,4 @@ pod:
init: runtime/default
ingress: runtime/default
ingress-vip: runtime/default
...

View File

@ -1,2 +1,4 @@
---
manifests:
network_policy: true
...

View File

@ -3,3 +3,4 @@ images:
tags:
ingress_module_init: "docker.io/openstackhelm/neutron:rocky-opensuse_15"
ingress_routed_vip: "docker.io/openstackhelm/neutron:rocky-opensuse_15"
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
images:
tags:
kafka: docker.io/wurstmeister/kafka:2.12-2.3.0
@ -330,7 +331,7 @@ conf:
# List of topic strings formatted like:
# topic_name:number_of_partitions:replication_factor
# - "mytopic:1:1"
jaas: # Define Authentication Details in this section
jaas: # Define Authentication Details in this section
producers:
# region_a: # Just an ID used to iterate through the dict of producers
# username: region-a-producer
@ -375,3 +376,4 @@ conf:
};
jvm_options:
- -Djava.security.auth.login.config=/opt/kafka/config/jaas.conf
...

View File

@ -10,6 +10,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
labels:
kibana:
node_selector_key: openstack-control-plane
@ -418,3 +419,4 @@ manifests:
service_ingress: true
job_register_kibana_indexes: true
job_flush_kibana_metadata: true
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -11,3 +12,4 @@ pod:
flush-kibana-metadata:
flush-kibana-metadata: runtime/default
init: runtime/default
...

View File

@ -12,6 +12,7 @@
# https://raw.githubusercontent.com/coreos/flannel/v0.8.0/Documentation/kube-flannel.yml
---
labels:
job:
node_selector_key: openstack-control-plane
@ -87,3 +88,4 @@ manifests:
job_image_repo_sync: true
service_kube_dns: true
serviceaccount_kube_dns: true
...

View File

@ -10,6 +10,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
labels:
api:
node_selector_key: openstack-control-plane
@ -544,3 +545,4 @@ manifests:
secret_keystone: true
service_ingress_api: true
service: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
pod:
affinity:
anti:
@ -242,3 +243,4 @@ manifests:
network_policy: false
statefulset: true
service: true
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
release_group: null
labels:
@ -188,3 +189,4 @@ manifests:
daemonset_libvirt: true
job_image_repo_sync: true
network_policy: false
...

View File

@ -1,5 +1,7 @@
---
pod:
mandatory_access_control:
type: apparmor
libvirt-libvirt-default:
libvirt: runtime/default
...

View File

@ -1,2 +1,4 @@
---
manifests:
network_policy: true
...

View File

@ -2,3 +2,4 @@
images:
tags:
libvirt: docker.io/openstackhelm/libvirt:ubuntu_xenial-20190903
...

View File

@ -2,3 +2,4 @@
images:
tags:
libvirt: docker.io/openstackhelm/libvirt:ubuntu_xenial-20190903
...

View File

@ -2,3 +2,4 @@
images:
tags:
libvirt: docker.io/openstackhelm/libvirt:ubuntu_xenial-20190903
...

View File

@ -2,3 +2,4 @@
images:
tags:
libvirt: docker.io/openstackhelm/libvirt:latest-opensuse_15
...

View File

@ -2,3 +2,4 @@
images:
tags:
libvirt: docker.io/openstackhelm/libvirt:ubuntu_xenial-20190903
...

View File

@ -10,6 +10,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
labels:
node_affinity:
node_selector_key: openstack-control-plane
@ -37,3 +38,4 @@ conf:
manifests:
storage_class: true
persistent_volumes: true
...

View File

@ -1,3 +1,4 @@
---
conf:
persistent_volumes:
- name: local-persistent-volume-0
@ -33,3 +34,4 @@ conf:
manifests:
storage_class: true
persistent_volumes: true
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
release_group: null
images:
@ -541,3 +542,4 @@ manifests:
service_error: true
service: true
statefulset: true
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -30,3 +31,4 @@ monitoring:
manifests:
cron_job_mariadb_backup: true
...

View File

@ -1,3 +1,4 @@
---
pod:
replicas:
server: 1
@ -7,3 +8,4 @@ volume:
monitoring:
prometheus:
enabled: false
...

View File

@ -1,3 +1,4 @@
---
manifests:
network_policy: true
network_policy:
@ -86,3 +87,4 @@ network_policy:
port: 80
- protocol: TCP
port: 8080
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
conf:
memcached:
max_connections: 8192
@ -206,3 +207,4 @@ pod:
limits:
memory: "1024Mi"
cpu: "2000m"
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -11,3 +12,4 @@ pod:
monitoring:
prometheus:
enabled: false
...

View File

@ -1,3 +1,4 @@
---
manifests:
network_policy: true
network_policy:
@ -82,3 +83,4 @@ network_policy:
ports:
- protocol: TCP
port: %%%REPLACE_API_PORT%%%
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
images:
@ -109,3 +110,4 @@ manifests:
rbac: true
...

View File

@ -1,5 +1,7 @@
---
pod:
mandatory_access_control:
type: apparmor
metacontroller:
metacontroller: localhost/docker-default
metacontroller: localhost/docker-default
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
pod:
@ -26,7 +27,7 @@ pod:
weight:
default: 10
replicas:
#only 1 replica currently supported
# only 1 replica currently supported
server: 1
resources:
enabled: false
@ -125,3 +126,4 @@ manifests:
secret_db_root_creds: true
service: true
statefulset: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
images:
tags:
apache_proxy: docker.io/httpd:2.4
@ -236,7 +237,7 @@ pod:
termination_grace_period:
nagios:
timeout: 30
#env:
# env:
#
# NOTE(megheisler): This value can be used to hold
# the domain name. Functionality has been added in
@ -1182,3 +1183,4 @@ conf:
use_pending_states=1
use_ssl_authentication=0
query_es_clauses: null
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -8,4 +9,5 @@ pod:
apache-proxy: runtime/default
nagios-test:
init: runtime/default
nagios-helm-tests: runtime/default
nagios-helm-tests: runtime/default
...

View File

@ -1,3 +1,4 @@
---
conf:
nagios:
objects:
@ -91,3 +92,4 @@ conf:
service_description ES_cluster-running-data-node-count
use generic-service
}
...

View File

@ -1,3 +1,4 @@
---
conf:
nagios:
objects:
@ -268,3 +269,4 @@ conf:
service_description Prometheus-exporter_Openstack
use generic-service
}
...

View File

@ -1,3 +1,4 @@
---
conf:
nagios:
objects:
@ -30,3 +31,4 @@ conf:
service_description Postgresql_deadlocks
use generic-service
}
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
limits:
- type: Container
default:
@ -23,3 +24,4 @@ limits:
defaultRequest:
cpu: 0.1
memory: 64Mi
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
pod:
affinity:
anti:
@ -24,7 +25,7 @@ pod:
weight:
default: 10
replicas:
#only 1 replica currently supported
# only 1 replica currently supported
server: 1
resources:
enabled: false
@ -63,7 +64,7 @@ storage:
persistentVolumeClaim:
access_mode: ReadWriteOnce
class_name: general
#NOTE(portdirect): Unless explicity set the PV name will be populated to
# NOTE(portdirect): Unless explicity set the PV name will be populated to
# match "{{ .Release.Name }}".
name: null
size: 10Gi
@ -77,10 +78,10 @@ labels:
node_selector_value: enabled
storageclass:
#NOTE(portdirect): Unless explicity set the provisioner name will be generated
# NOTE(portdirect): Unless explicity set the provisioner name will be generated
# with the format "nfs/{{ .Release.Name }}"
provisioner: null
#NOTE(portdirect): Unless explicity set the PV name will be populated to
# NOTE(portdirect): Unless explicity set the PV name will be populated to
# match "{{ .Release.Name }}".
name: null
@ -133,3 +134,4 @@ manifests:
service: true
storage_class: true
volume_claim: true
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
release_group: null
images:
@ -216,3 +217,4 @@ conf:
# vHost IOMMU feature restricts the vhost memory that a virtio device
# access, available with DPDK v17.11
# vhost_iommu_support: true
...

View File

@ -1,4 +1,5 @@
#NOTE: Enable this with the correct policy
# NOTE: Enable this with the correct policy
---
pod:
mandatory_access_control:
type: apparmor
@ -9,4 +10,5 @@ pod:
openvswitch-db:
openvswitch-db: runtime/default
openvswitch-db-perms: runtime/default
init: runtime/default
init: runtime/default
...

View File

@ -21,3 +21,4 @@ conf:
hugepages_mountpath: /dev/hugepages
vhostuser_socket_dir: vhostuser
socket_memory: 1024
...

View File

@ -21,3 +21,4 @@ conf:
hugepages_mountpath: /dev/hugepages
vhostuser_socket_dir: vhostuser
socket_memory: 1024
...

View File

@ -1,2 +1,4 @@
---
manifests:
network_policy: true
...

View File

@ -3,3 +3,4 @@ images:
tags:
openvswitch_db_server: docker.io/openstackhelm/openvswitch:latest-opensuse_15
openvswitch_vswitchd: docker.io/openstackhelm/openvswitch:latest-opensuse_15
...

View File

@ -12,6 +12,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
---
conf:
# The keys under serviceaccounts define specific serviceaccounts, for
# which this tempalte creates clusterRoleBindigs to bind the serviceaccounts
@ -45,7 +46,7 @@ data:
# Note: you can define as many PSPs here as you need.
#
psp-default: # This will be the `metadata.name` of the PodSecurityPolicy
annotations: {} # Placeholder to add seccomp/apparmor default annotations
annotations: {} # Placeholder to add seccomp/apparmor default annotations
spec:
privileged: true
allowPrivilegeEscalation: true
@ -69,3 +70,4 @@ data:
max: 65536
manifests:
podsecuritypolicy: true
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
release_group: null
pod:
@ -543,3 +544,4 @@ manifests:
job_user_create: true
secret_etc: true
service_exporter: true
...

View File

@ -1,3 +1,4 @@
---
pod:
mandatory_access_control:
type: apparmor
@ -10,4 +11,5 @@ pod:
init: runtime/default
prometheus-postgresql-exporter-create-user:
prometheus-postgresql-exporter-create-user: runtime/default
init: runtime/default
init: runtime/default
...

View File

@ -1,3 +1,4 @@
---
manifests:
network_policy: true
network_policy:
@ -9,3 +10,4 @@ network_policy:
ports:
- protocol: TCP
port: %%%REPLACE_API_PORT%%%
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
images:
tags:
powerdns: docker.io/psitrax/powerdns:4.1.10
@ -200,3 +201,4 @@ manifests:
secret_db: true
service_dns: true
service_api: false
...

View File

@ -15,6 +15,7 @@
# Declare name/value pairs to be passed into your templates.
# name: value
---
images:
tags:
alertmanager: docker.io/prom/alertmanager:v0.11.0
@ -314,3 +315,4 @@ conf:
message_format: html
notify: true
alert_templates: null
...

View File

@ -1,6 +1,8 @@
---
pod:
mandatory_access_control:
type: apparmor
alertmanager:
alertmanager-perms: runtime/default
init: runtime/default
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
images:
tags:
kube_state_metrics: docker.io/bitnami/kube-state-metrics:1.3.1
@ -182,3 +183,4 @@ manifests:
service_controller_manager: true
service_scheduler: true
serviceaccount: true
...

View File

@ -1,6 +1,8 @@
---
pod:
mandatory_access_control:
type: apparmor
kube-state-metrics:
kube-state-metrics: runtime/default
init: runtime/default
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
images:
tags:
node_exporter: docker.io/prom/node-exporter:v0.15.0
@ -157,3 +158,4 @@ conf:
disable:
textfile:
directory: /var/log/node-exporter-vfstats
...

View File

@ -1,6 +1,8 @@
---
pod:
mandatory_access_control:
type: apparmor
node-exporter:
node-exporter: runtime/default
init: runrtime/default
...

View File

@ -14,6 +14,7 @@
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
---
images:
tags:
prometheus_openstack_exporter: docker.io/openstackhelm/prometheus-openstack-exporter:ubuntu_bionic-20191017
@ -218,3 +219,4 @@ manifests:
network_policy: false
secret_keystone: true
service: true
...

View File

@ -1,6 +1,8 @@
---
pod:
mandatory_access_control:
type: apparmor
prometheus-openstack-exporter:
openstack-metrics-exporter: runtime/default
init: runtime/default
...

View File

@ -1,2 +1,4 @@
---
manifests:
network_policy: true
...

Some files were not shown because too many files have changed in this diff Show More