├── stable └── .gitkeep ├── test ├── .gitignore └── Makefile ├── incubator ├── dockercfg │ ├── charts │ │ └── .gitignore │ ├── values.yaml │ ├── requirements.yaml │ ├── Chart.yaml │ ├── templates │ │ ├── NOTES.txt │ │ └── secret.yaml │ └── .helmignore ├── istio │ ├── .helmignore │ ├── _charts │ │ ├── sidecarInjectorWebhook │ │ │ ├── OWNERS │ │ │ ├── templates │ │ │ │ ├── service.yaml │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── clusterrole.yaml │ │ │ │ ├── _helpers.tpl │ │ │ │ └── clusterrolebinding.yaml │ │ │ └── Chart.yaml │ │ ├── galley │ │ │ ├── OWNERS │ │ │ ├── templates │ │ │ │ ├── accesslist.yaml.tpl │ │ │ │ ├── service.yaml │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── configmap.yaml │ │ │ │ ├── _helpers.tpl │ │ │ │ └── clusterrolebinding.yaml │ │ │ └── Chart.yaml │ │ ├── grafana │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── grafana-ports-mtls.yaml │ │ │ │ ├── pvc.yaml │ │ │ │ ├── configmap-custom-resources.yaml │ │ │ │ ├── configmap-dashboards.yaml │ │ │ │ ├── _helpers.tpl │ │ │ │ └── configmap.yaml │ │ │ ├── fix_datasources.sh │ │ │ └── values.yaml │ │ ├── tracing │ │ │ ├── Chart.yaml │ │ │ ├── .helmignore │ │ │ └── templates │ │ │ │ └── _helpers.tpl │ │ ├── certmanager │ │ │ ├── Chart.yaml │ │ │ └── templates │ │ │ │ ├── NOTES.txt │ │ │ │ └── serviceaccount.yaml │ │ ├── prometheus │ │ │ ├── Chart.yaml │ │ │ └── templates │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── clusterrolebindings.yaml │ │ │ │ ├── clusterrole.yaml │ │ │ │ └── _helpers.tpl │ │ ├── servicegraph │ │ │ ├── Chart.yaml │ │ │ ├── .helmignore │ │ │ └── templates │ │ │ │ └── _helpers.tpl │ │ ├── kiali │ │ │ ├── Chart.yaml │ │ │ └── templates │ │ │ │ ├── service.yaml │ │ │ │ ├── configmap.yaml │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── clusterrolebinding.yaml │ │ │ │ └── ingress.yaml │ │ ├── telemetry-gateway │ │ │ └── Chart.yaml │ │ ├── mixer │ │ │ ├── Chart.yaml │ │ │ └── templates │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── clusterrolebinding.yaml │ │ │ │ ├── service.yaml │ │ │ │ └── autoscale.yaml │ │ ├── pilot │ │ │ ├── Chart.yaml │ │ │ └── templates │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── autoscale.yaml │ │ │ │ ├── clusterrolebinding.yaml │ │ │ │ └── service.yaml │ │ ├── ingress │ │ │ ├── Chart.yaml │ │ │ └── templates │ │ │ │ ├── clusterrolebinding.yaml │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── autoscale.yaml │ │ │ │ └── clusterrole.yaml │ │ ├── security │ │ │ ├── Chart.yaml │ │ │ └── templates │ │ │ │ ├── service.yaml │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── enable-mesh-permissive.yaml │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── clusterrolebinding.yaml │ │ │ │ ├── clusterrole.yaml │ │ │ │ └── configmap.yaml │ │ └── gateways │ │ │ ├── Chart.yaml │ │ │ └── templates │ │ │ ├── clusterrolebindings.yaml │ │ │ ├── clusterrole.yaml │ │ │ ├── serviceaccount.yaml │ │ │ └── autoscale.yaml │ ├── Makefile │ ├── templates │ │ └── _labels.tpl │ ├── Chart.yaml │ ├── values-istio.yaml │ ├── values-istio-one-namespace.yaml │ ├── values-istio-one-namespace-auth.yaml │ ├── values-istio-auth.yaml │ ├── values-istio-galley.yaml │ ├── values-istio-auth-galley.yaml │ └── values-istio-demo.yaml ├── .gitignore ├── portal │ ├── README.md │ ├── logo.png │ ├── templates │ │ ├── NOTES.txt │ │ └── dashboard.service.yaml │ ├── Chart.yaml │ ├── requirements.yaml │ └── .helmignore ├── teleport │ ├── .helmignore │ ├── Chart.yaml │ ├── Makefile │ └── templates │ │ ├── config.yaml │ │ ├── serviceaccount.yaml │ │ ├── clusterrolebinding.yaml │ │ └── clusterrole.yaml ├── prometheus │ ├── templates │ │ ├── NOTES.txt │ │ ├── _configmaps.json.tpl │ │ ├── rules.yaml │ │ ├── _helpers.tpl │ │ └── secret.yaml │ ├── Chart.yaml │ └── .helmignore ├── alertmanager │ ├── templates │ │ ├── NOTES.txt │ │ ├── secret.yaml │ │ └── _helpers.tpl │ ├── Chart.yaml │ └── .helmignore ├── monochart │ ├── logo.png │ ├── README.md │ ├── templates │ │ ├── NOTES.txt │ │ ├── prometheusrule.yaml │ │ └── crd.yaml │ ├── requirements.yaml │ ├── Chart.yaml │ └── .helmignore ├── openvpn │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── vpn.internal.service.yaml │ │ ├── letsencrypt.service.yaml │ │ ├── vpn.secret.yaml │ │ ├── vpn.pvc.yaml │ │ ├── vpn.service.yaml │ │ └── terminator.service.yaml ├── apache │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── service.yaml │ │ └── _helpers.tpl ├── postfix │ ├── Chart.yaml │ ├── .helmignore │ ├── templates │ │ ├── service.yaml │ │ └── _helpers.tpl │ └── values.yaml ├── exporter-kube-api │ ├── values.yaml │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── service.yaml │ │ └── _helpers.tpl ├── exporter-kube-etcd │ ├── values.yaml │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── service.yaml │ │ ├── _helpers.tpl │ │ └── servicemonitor.yaml ├── exporter-kubelets │ ├── values.yaml │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ └── _helpers.tpl ├── exporter-kubernetes │ ├── values.yaml │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ └── _helpers.tpl ├── chart-repo │ ├── templates │ │ └── NOTES.txt │ ├── Chart.yaml │ ├── README.md │ ├── requirements.yaml │ └── .helmignore ├── codefresh-service-account │ ├── logo.png │ ├── requirements.yaml │ ├── templates │ │ ├── serviceaccount.yaml │ │ ├── clusterrole.yaml │ │ ├── clusterrolebinding.yaml │ │ └── rolebinding.yaml │ ├── Chart.yaml │ ├── .helmignore │ └── README.md ├── exporter-kube-dns │ ├── values.yaml │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── _helpers.tpl │ │ └── service.yaml ├── oauth2-proxy │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ └── _helpers.tpl ├── vps │ ├── Chart.yaml │ ├── templates │ │ ├── secret.yaml │ │ ├── service.yaml │ │ └── _helpers.tpl │ └── .helmignore ├── bastion │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── _helpers.tpl │ │ ├── pvc.yaml │ │ └── service.yaml ├── exporter-kube-scheduler │ ├── values.yaml │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── _helpers.tpl │ │ ├── service.yaml │ │ └── servicemonitor.yaml ├── nginx-ingress │ ├── Chart.yaml │ ├── requirements.yaml │ ├── .helmignore │ └── templates │ │ ├── configmap.yaml │ │ └── _helpers.tpl ├── varnish │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── service.yaml │ │ └── secret.yaml ├── exporter-kube-controller-manager │ ├── values.yaml │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── _helpers.tpl │ │ └── service.yaml ├── thumbor │ ├── Chart.yaml │ ├── requirements.yaml │ ├── .helmignore │ └── templates │ │ ├── service.yaml │ │ └── persistent-volume-claim.yaml ├── route53-kubernetes │ ├── Chart.yaml │ ├── .helmignore │ ├── values.yaml │ └── templates │ │ └── _helpers.tpl ├── geoip-api │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── service.yaml │ │ └── _helpers.tpl ├── syslog-forwarder │ ├── Chart.yaml │ ├── .helmignore │ ├── templates │ │ └── _helpers.tpl │ └── values.yaml ├── heapster │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ ├── influxdb.service.yaml │ │ ├── heapster.service.yaml │ │ └── influxdb.pvc.yaml ├── prometheus-alerts │ ├── Chart.yaml │ ├── .helmignore │ ├── values.yaml │ └── templates │ │ └── _helpers.tpl ├── nfs-provisioner │ ├── Chart.yaml │ ├── templates │ │ ├── storageclass.yaml │ │ ├── _helpers.tpl │ │ ├── service.yaml │ │ └── pvc.yaml │ ├── values.yaml │ └── .helmignore ├── kube-lego │ ├── Chart.yaml │ ├── templates │ │ ├── NOTES.txt │ │ └── configmap.yaml │ ├── .helmignore │ └── values.yaml ├── teleport-ent-auth │ ├── Chart.yaml │ ├── README.md │ └── templates │ │ ├── serviceaccount.yaml │ │ ├── secret.yaml │ │ ├── clusterrolebinding.yaml │ │ ├── clusterrole.yaml │ │ └── secret-resources.yaml ├── teleport-ent-proxy │ ├── Chart.yaml │ ├── README.md │ ├── .helmignore │ └── templates │ │ ├── serviceaccount.yaml │ │ ├── clusterrole.yaml │ │ ├── secret.yaml │ │ └── clusterrolebinding.yaml ├── fail-whale │ ├── Chart.yaml │ ├── .helmignore │ ├── templates │ │ ├── service.yaml │ │ └── _helpers.tpl │ └── values.yaml ├── helm-serve │ ├── Chart.yaml │ ├── .helmignore │ ├── templates │ │ └── service.yaml │ └── values.yaml ├── kubernetes-dashboard │ ├── Chart.yaml │ ├── .helmignore │ ├── values.yaml │ └── templates │ │ ├── service.yaml │ │ └── _helpers.tpl ├── nginx-default-backend │ ├── Chart.yaml │ ├── .helmignore │ ├── templates │ │ ├── service.yaml │ │ ├── _helpers.tpl │ │ └── poddisruptionbudget.yaml │ └── values.yaml ├── exporter-node │ ├── Chart.yaml │ ├── values.yaml │ ├── .helmignore │ └── templates │ │ ├── _helpers.tpl │ │ ├── service.yaml │ │ └── servicemonitor.yaml ├── service-level-operator │ ├── templates │ │ ├── serviceaccount.yaml │ │ ├── service.yaml │ │ ├── clusterrolebinding.yaml │ │ ├── servicemonitor.yaml │ │ └── clusterrole.yaml │ ├── README.md │ ├── Chart.yaml │ ├── .helmignore │ └── values.yaml ├── exporter-kube-state │ ├── Chart.yaml │ ├── .helmignore │ ├── values.yaml │ └── templates │ │ ├── _helpers.tpl │ │ ├── service.yaml │ │ └── servicemonitor.yaml ├── kube-prometheus │ ├── Chart.yaml │ ├── .helmignore │ └── templates │ │ └── _helpers.tpl ├── fluentd-kubernetes-aws │ ├── templates │ │ ├── serviceaccount.yaml │ │ ├── NOTES.txt │ │ ├── clusterrole.yaml │ │ ├── clusterrolebinding.yaml │ │ └── service.yaml │ ├── .helmignore │ └── Chart.yaml ├── superset │ ├── templates │ │ ├── NOTES.txt │ │ └── secret.yaml │ ├── Chart.yaml │ └── .helmignore ├── prometheus-operator │ ├── Chart.yaml │ └── templates │ │ └── _helpers.tpl ├── grafana │ ├── templates │ │ ├── configmap.yaml │ │ ├── secret.yaml │ │ └── dashboards-configmap.yaml │ └── Chart.yaml ├── jenkins │ ├── .helmignore │ ├── templates │ │ ├── _helpers.tpl │ │ ├── secret.yaml │ │ └── home-pvc.yaml │ └── Chart.yaml ├── fluentd-kubernetes │ ├── templates │ │ ├── NOTES.txt │ │ ├── secret.yaml │ │ ├── serviceaccount.yaml │ │ ├── clusterrole.yaml │ │ ├── servicemonitor.yaml │ │ ├── clusterrolebinding.yaml │ │ └── service.yaml │ ├── .helmignore │ └── Chart.yaml └── github-authorized-keys │ ├── .helmignore │ ├── templates │ ├── etcdcluster.yaml │ └── NOTES.txt │ └── Chart.yaml ├── packages ├── .gitignore └── Makefile ├── index.html ├── .dockerignore ├── atmos.yaml ├── rootfs └── init.sh ├── demo └── sock-shop │ ├── Chart.yaml │ ├── templates │ ├── user-svc.yaml │ ├── payment-svc.yaml │ ├── cart-db-svc.yaml │ ├── catalogue-svc.yaml │ ├── rabbitmq-svc.yaml │ ├── user-db-svc.yaml │ ├── orders-db-svc.yaml │ ├── zipkin-mysql-svc.yaml │ ├── catalogue-db-svc.yaml │ ├── front-end-svc.yaml │ ├── cart-svc.yaml │ ├── zipkin-svc.yaml │ ├── orders-svc.yaml │ ├── shipping-svc.yaml │ ├── queue-master-svc.yaml │ ├── _helpers.tpl │ ├── zipkin-mysql-dep.yaml │ ├── front-end-ingress.yaml │ └── zipkin-dep.yaml │ └── .helmignore ├── .editorconfig ├── .gitignore └── Makefile /stable/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /test/.gitignore: -------------------------------------------------------------------------------- 1 | *.tgz 2 | -------------------------------------------------------------------------------- /incubator/dockercfg/charts/.gitignore: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /incubator/istio/.helmignore: -------------------------------------------------------------------------------- 1 | NOTES.txt 2 | -------------------------------------------------------------------------------- /incubator/.gitignore: -------------------------------------------------------------------------------- 1 | *.tgz 2 | index.yaml 3 | -------------------------------------------------------------------------------- /packages/.gitignore: -------------------------------------------------------------------------------- 1 | *.tgz 2 | index.yaml 3 | -------------------------------------------------------------------------------- /incubator/portal/README.md: -------------------------------------------------------------------------------- 1 | # Portal for kubernets services 2 | -------------------------------------------------------------------------------- /incubator/teleport/.helmignore: -------------------------------------------------------------------------------- 1 | *~ 2 | *.pem 3 | scripts 4 | pki 5 | -------------------------------------------------------------------------------- /index.html: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /incubator/prometheus/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | A new Prometheus instance has been created. 2 | -------------------------------------------------------------------------------- /.dockerignore: -------------------------------------------------------------------------------- 1 | .git 2 | .idea 3 | *.iml 4 | .build-harness 5 | build-harness 6 | tmp/** 7 | -------------------------------------------------------------------------------- /incubator/alertmanager/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | A new Alertmanager instance has been created. 2 | -------------------------------------------------------------------------------- /incubator/istio/_charts/sidecarInjectorWebhook/OWNERS: -------------------------------------------------------------------------------- 1 | approvers: 2 | - ayj 3 | - ostromart 4 | -------------------------------------------------------------------------------- /incubator/portal/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cloudposse/charts/HEAD/incubator/portal/logo.png -------------------------------------------------------------------------------- /incubator/monochart/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cloudposse/charts/HEAD/incubator/monochart/logo.png -------------------------------------------------------------------------------- /incubator/istio/_charts/galley/OWNERS: -------------------------------------------------------------------------------- 1 | approvers: 2 | - cmluciano 3 | - geeknoid 4 | - ozevren 5 | - ayj 6 | -------------------------------------------------------------------------------- /incubator/openvpn/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for OpenVPN 3 | name: openvpn 4 | version: 0.1.1 5 | -------------------------------------------------------------------------------- /atmos.yaml: -------------------------------------------------------------------------------- 1 | import: 2 | - https://raw.githubusercontent.com/cloudposse/.github/refs/heads/main/.github/atmos/github-action.yaml 3 | -------------------------------------------------------------------------------- /incubator/apache/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Apache Helm chart for Kubernetes 3 | name: apache 4 | version: 0.1.3 5 | -------------------------------------------------------------------------------- /incubator/monochart/README.md: -------------------------------------------------------------------------------- 1 | # Monochart 2 | 3 | A declarative helm chart for deploying common types of services on Kubernetes. 4 | -------------------------------------------------------------------------------- /incubator/postfix/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for postfix smtp 3 | name: postfix 4 | version: 0.1.1 5 | -------------------------------------------------------------------------------- /incubator/exporter-kube-api/values.yaml: -------------------------------------------------------------------------------- 1 | # This is a YAML-formatted file. 2 | # Declare variables to be passed into your templates. 3 | -------------------------------------------------------------------------------- /incubator/exporter-kube-etcd/values.yaml: -------------------------------------------------------------------------------- 1 | # This is a YAML-formatted file. 2 | # Declare variables to be passed into your templates. 3 | -------------------------------------------------------------------------------- /incubator/exporter-kubelets/values.yaml: -------------------------------------------------------------------------------- 1 | # This is a YAML-formatted file. 2 | # Declare variables to be passed into your templates. 3 | -------------------------------------------------------------------------------- /incubator/exporter-kubernetes/values.yaml: -------------------------------------------------------------------------------- 1 | # This is a YAML-formatted file. 2 | # Declare variables to be passed into your templates. 3 | -------------------------------------------------------------------------------- /incubator/portal/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Thank you for installing {{ .Chart.Name }}. 2 | 3 | Your release is named {{ .Release.Name }}. 4 | -------------------------------------------------------------------------------- /incubator/chart-repo/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Thank you for installing {{ .Chart.Name }}. 2 | 3 | Your release is named {{ .Release.Name }}. 4 | -------------------------------------------------------------------------------- /incubator/codefresh-service-account/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cloudposse/charts/HEAD/incubator/codefresh-service-account/logo.png -------------------------------------------------------------------------------- /incubator/dockercfg/values.yaml: -------------------------------------------------------------------------------- 1 | image: 2 | pullSecret: 3 | registry: r.cfcr.io 4 | username: example 5 | password: password 6 | -------------------------------------------------------------------------------- /incubator/exporter-kube-dns/values.yaml: -------------------------------------------------------------------------------- 1 | # This is a YAML-formatted file. 2 | # Declare variables to be passed into your templates. 3 | 4 | -------------------------------------------------------------------------------- /incubator/monochart/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Thank you for installing {{ .Chart.Name }}. 2 | 3 | Your release is named {{ .Release.Name }}. 4 | -------------------------------------------------------------------------------- /incubator/oauth2-proxy/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: oauth2-proxy 4 | version: 0.1.4 5 | -------------------------------------------------------------------------------- /incubator/vps/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for a standalone SSH/VPS service 3 | name: vps 4 | version: 0.1.1 5 | -------------------------------------------------------------------------------- /rootfs/init.sh: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | make helm:serve:index \ 3 | && helm serve --address "0.0.0.0:8879" --repo-path /charts/packages 4 | 5 | -------------------------------------------------------------------------------- /demo/sock-shop/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Sock Shop demo by WeaveWorks 3 | name: sock-shop 4 | version: 0.1.0 5 | -------------------------------------------------------------------------------- /incubator/bastion/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart that implements a secure bastion 3 | name: bastion 4 | version: 0.2.0 5 | -------------------------------------------------------------------------------- /incubator/dockercfg/requirements.yaml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: common 3 | version: 0.0.1 4 | repository: https://charts.helm.sh/incubator/ 5 | -------------------------------------------------------------------------------- /incubator/exporter-kube-scheduler/values.yaml: -------------------------------------------------------------------------------- 1 | # This is a YAML-formatted file. 2 | # Declare variables to be passed into your templates. 3 | 4 | -------------------------------------------------------------------------------- /incubator/nginx-ingress/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Nginx Ingress 3 | name: nginx-ingress 4 | version: 0.1.8 5 | -------------------------------------------------------------------------------- /incubator/varnish/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart Varnish running under Kubernetes 3 | name: varnish 4 | version: 0.1.3 5 | -------------------------------------------------------------------------------- /incubator/exporter-kube-controller-manager/values.yaml: -------------------------------------------------------------------------------- 1 | # This is a YAML-formatted file. 2 | # Declare variables to be passed into your templates. 3 | 4 | -------------------------------------------------------------------------------- /incubator/thumbor/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Thumbor+RemoteCV thumbnailing service 3 | name: thumbor 4 | version: 0.3.0 5 | -------------------------------------------------------------------------------- /incubator/chart-repo/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Helm repo (private/public) with protected push gateway 3 | name: chart-repo 4 | version: 0.2.1 5 | -------------------------------------------------------------------------------- /incubator/route53-kubernetes/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Map k8s services to route53 domains 3 | name: route53-kubernetes 4 | version: 0.1.3 5 | -------------------------------------------------------------------------------- /incubator/geoip-api/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes that implements a GeoIP API service 3 | name: geoip-api 4 | version: 0.1.0 5 | -------------------------------------------------------------------------------- /incubator/syslog-forwarder/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart to ship logs to a remote syslog server 3 | name: syslog-forwarder 4 | version: 0.1.0 5 | -------------------------------------------------------------------------------- /incubator/heapster/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for heapster (must be installed to kube-system namespace) 3 | name: heapster 4 | version: 0.1.0 5 | -------------------------------------------------------------------------------- /incubator/prometheus-alerts/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart provide additional alerts for prometheus 3 | name: prometheus-alerts 4 | version: 0.1.0 5 | -------------------------------------------------------------------------------- /incubator/codefresh-service-account/requirements.yaml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: common 3 | version: 1.0.0 4 | repository: https://atlassian.github.io/data-center-helm-charts 5 | -------------------------------------------------------------------------------- /incubator/dockercfg/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | appVersion: "1.0" 3 | description: A Helm chart to deploy a `dockercfg` to a namespace 4 | name: dockercfg 5 | version: 0.1.0 6 | -------------------------------------------------------------------------------- /incubator/nfs-provisioner/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: nfs-provisioner 3 | version: 0.2.2 4 | description: A Chart to enable provisioning of NFS volumes under Kubernetes. 5 | -------------------------------------------------------------------------------- /incubator/portal/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart that provides a Portal with OAuth2 to expose internal cluster services 3 | name: portal 4 | version: 0.2.4 5 | -------------------------------------------------------------------------------- /incubator/thumbor/requirements.yaml: -------------------------------------------------------------------------------- 1 | # requirements.yaml 2 | dependencies: 3 | - name: "remotecv" 4 | version: "0.1.1" 5 | repository: "https://charts.cloudposse.com/incubator" 6 | -------------------------------------------------------------------------------- /.editorconfig: -------------------------------------------------------------------------------- 1 | # Override for Makefile 2 | [{Makefile, makefile, GNUmakefile}] 3 | indent_style = tab 4 | indent_size = 4 5 | 6 | [Makefile.*] 7 | indent_style = tab 8 | indent_size = 4 -------------------------------------------------------------------------------- /incubator/kube-lego/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for kube-Lego (Automatic Signed Certificates for Ingress Services) 3 | name: kube-lego 4 | version: 0.1.2 5 | -------------------------------------------------------------------------------- /incubator/teleport-ent-auth/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | appVersion: "4.0.9" 3 | description: A Helm chart for Teleport Auth service 4 | name: teleport-ent-auth 5 | version: 0.2.0 6 | -------------------------------------------------------------------------------- /incubator/teleport-ent-proxy/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | appVersion: "4.0.9" 3 | description: A Helm chart for Teleport Proxy service 4 | name: teleport-ent-proxy 5 | version: 0.4.0 6 | -------------------------------------------------------------------------------- /incubator/kube-lego/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Kube Lego has been installed to the {{ .Release.Namespace }} as {{ template "fullname" . }}. 2 | 3 | Lego endpoint: {{ template "lego_url" . }} 4 | 5 | -------------------------------------------------------------------------------- /incubator/monochart/requirements.yaml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: dockercfg 3 | version: 0.1.0 4 | repository: https://charts.cloudposse.com/incubator/ 5 | condition: dockercfg.enabled 6 | -------------------------------------------------------------------------------- /incubator/fail-whale/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart that provides a maintenance backend to be used by nginx-ingress controller 3 | name: fail-whale 4 | version: 0.1.1 5 | -------------------------------------------------------------------------------- /incubator/helm-serve/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart that implements the `helm serve` repository server for Helm on Kubernetes 3 | name: helm-serve 4 | version: 0.1.0 5 | -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: grafana 4 | version: 1.1.0 5 | appVersion: 1.1.0 6 | tillerVersion: ">=2.7.2" 7 | -------------------------------------------------------------------------------- /incubator/istio/_charts/tracing/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: tracing 4 | version: 1.1.0 5 | appVersion: 1.5.1 6 | tillerVersion: ">=2.7.2" 7 | -------------------------------------------------------------------------------- /incubator/teleport/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: teleport 3 | version: 0.0.2 4 | description: Teleport Enterprise 5 | keywords: 6 | - Teleport Enterprise 7 | tillerVersion: ">=2.8.0" 8 | -------------------------------------------------------------------------------- /incubator/istio/_charts/certmanager/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: certmanager 4 | version: 1.1.0 5 | appVersion: 0.3.1 6 | tillerVersion: ">=2.7.2" 7 | -------------------------------------------------------------------------------- /incubator/istio/_charts/prometheus/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: prometheus 4 | version: 1.1.0 5 | appVersion: 2.3.1 6 | tillerVersion: ">=2.7.2" 7 | -------------------------------------------------------------------------------- /incubator/kubernetes-dashboard/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart that implements the Kubernetes Dashboard 3 | name: kubernetes-dashboard 4 | version: 0.1.1 5 | deprecated: true 6 | -------------------------------------------------------------------------------- /incubator/nginx-ingress/requirements.yaml: -------------------------------------------------------------------------------- 1 | # requirements.yaml 2 | dependencies: 3 | - name: "nginx-default-backend" 4 | version: "0.2.2" 5 | repository: "https://charts.cloudposse.com/incubator" 6 | -------------------------------------------------------------------------------- /incubator/istio/_charts/servicegraph/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: servicegraph 4 | version: 1.1.0 5 | appVersion: 1.1.0 6 | tillerVersion: ">=2.7.2" 7 | -------------------------------------------------------------------------------- /incubator/nginx-default-backend/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for nginx-default-backend to be used by nginx-ingress controller 3 | name: nginx-default-backend 4 | version: 0.5.0 5 | -------------------------------------------------------------------------------- /incubator/teleport/Makefile: -------------------------------------------------------------------------------- 1 | update: 2 | curl -sSL https://github.com/gravitational/teleport/archive/master.tar.gz -o - | tar --wildcards --strip-components=4 --overwrite -zvx */examples/chart/teleport 3 | -------------------------------------------------------------------------------- /incubator/istio/Makefile: -------------------------------------------------------------------------------- 1 | update: 2 | curl -sSL https://github.com/istio/istio/archive/master.tar.gz -o - | tar --wildcards --strip-components=5 --overwrite -zvx */install/kubernetes/helm/istio 3 | mv charts/ _charts/ 4 | -------------------------------------------------------------------------------- /incubator/istio/_charts/galley/templates/accesslist.yaml.tpl: -------------------------------------------------------------------------------- 1 | {{ define "accesslist.yaml.tpl" }} 2 | allowed: 3 | - spiffe://cluster.local/ns/{{ .Release.Namespace }}/sa/istio-mixer-service-account 4 | {{- end }} 5 | -------------------------------------------------------------------------------- /incubator/chart-repo/README.md: -------------------------------------------------------------------------------- 1 | # Helm repo chart 2 | 3 | **Depricated: Use Geodesic [Master Helmfile](https://github.com/cloudposse/geodesic/blob/master/rootfs/conf/kops/helmfile.yaml) with [Helmfile](https://github.com/roboll/helmfile) instead** -------------------------------------------------------------------------------- /incubator/exporter-kube-api/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: exporter-kube-api 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com -------------------------------------------------------------------------------- /incubator/exporter-kubelets/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: exporter-kubelets 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com -------------------------------------------------------------------------------- /incubator/exporter-node/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: exporter-node 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com 9 | -------------------------------------------------------------------------------- /incubator/exporter-kube-etcd/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: exporter-kube-etcd 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com -------------------------------------------------------------------------------- /incubator/exporter-kubernetes/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: exporter-kubernetes 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com -------------------------------------------------------------------------------- /incubator/service-level-operator/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: {{ include "service-operator.name" . }} 5 | labels: 6 | app: {{ include "service-operator.name" . }} 7 | component: app 8 | -------------------------------------------------------------------------------- /incubator/exporter-kube-dns/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart singleton for kube-state-metrics 3 | name: exporter-kube-dns 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com -------------------------------------------------------------------------------- /incubator/exporter-kube-state/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart singleton for kube-state-metrics 3 | name: exporter-kube-state 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com -------------------------------------------------------------------------------- /incubator/istio/templates/_labels.tpl: -------------------------------------------------------------------------------- 1 | {{- define "common_labels" }} 2 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 3 | release: {{ .Release.Name }} 4 | version: {{ .Chart.Version }} 5 | heritage: {{ .Release.Service }} 6 | {{- end }} -------------------------------------------------------------------------------- /incubator/exporter-kube-controller-manager/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart for Kubernetes 3 | name: exporter-kube-controller-manager 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com -------------------------------------------------------------------------------- /incubator/exporter-kube-scheduler/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A Helm chart singleton for kube-state-metrics 3 | name: exporter-kube-scheduler 4 | version: 0.1.1 5 | deprecated: true 6 | maintainers: 7 | - name: Cloud Posse LLC 8 | email: hello@cloudposse.com -------------------------------------------------------------------------------- /incubator/istio/_charts/kiali/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Kiali is an open source project for service mesh observability, refer to https://github.com/kiali/kiali for detail. 3 | name: kiali 4 | version: 1.1.0 5 | appVersion: 0.6.0 6 | tillerVersion: ">=2.7.2" 7 | -------------------------------------------------------------------------------- /incubator/istio/_charts/certmanager/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | certmanager has been deployed successfully! 2 | 3 | More information on the different types of issuers and how to configure them 4 | can be found in our documentation: 5 | 6 | https://cert-manager.readthedocs.io/en/latest/reference/issuers.html -------------------------------------------------------------------------------- /incubator/istio/_charts/telemetry-gateway/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: telemetry-gateway 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2" 6 | description: Helm chart for configuring a gateway for Istio telemetry addons 7 | icon: https://istio.io/favicons/android-192x192.png 8 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/user-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: user 6 | labels: 7 | name: user 8 | 9 | spec: 10 | ports: 11 | # the port that this service should serve on 12 | - port: 80 13 | targetPort: 80 14 | selector: 15 | name: user 16 | 17 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/payment-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: payment 6 | labels: 7 | name: payment 8 | 9 | spec: 10 | ports: 11 | # the port that this service should serve on 12 | - port: 80 13 | targetPort: 80 14 | selector: 15 | name: payment 16 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/cart-db-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: cart-db 6 | labels: 7 | name: cart-db 8 | 9 | spec: 10 | ports: 11 | # the port that this service should serve on 12 | - port: 27017 13 | targetPort: 27017 14 | selector: 15 | name: cart-db 16 | -------------------------------------------------------------------------------- /incubator/istio/_charts/kiali/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: kiali 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | app: kiali 8 | spec: 9 | ports: 10 | - name: http-kiali 11 | protocol: TCP 12 | port: 20001 13 | selector: 14 | app: kiali 15 | -------------------------------------------------------------------------------- /incubator/prometheus/templates/_configmaps.json.tpl: -------------------------------------------------------------------------------- 1 | { "items": [ 2 | {{- if and .Values.rules.specifiedInValues .Values.rules.value }} 3 | { 4 | "key": "{{ .Release.Namespace }}/prometheus-{{ .Release.Name }}-rules", 5 | "checksum": "0000000000000000000000000000000000000000000000000000000000000000" 6 | } 7 | {{- end }} 8 | ]} -------------------------------------------------------------------------------- /demo/sock-shop/templates/catalogue-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: catalogue 6 | labels: 7 | name: catalogue 8 | 9 | spec: 10 | ports: 11 | # the port that this service should serve on 12 | - port: 80 13 | targetPort: 80 14 | selector: 15 | name: catalogue 16 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/rabbitmq-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: rabbitmq 6 | labels: 7 | name: rabbitmq 8 | 9 | spec: 10 | ports: 11 | # the port that this service should serve on 12 | - port: 5672 13 | targetPort: 5672 14 | selector: 15 | name: rabbitmq 16 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/user-db-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: user-db 6 | labels: 7 | name: user-db 8 | 9 | spec: 10 | ports: 11 | # the port that this service should serve on 12 | - port: 27017 13 | targetPort: 27017 14 | selector: 15 | name: user-db 16 | 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/kiali/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: kiali 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | app: kiali 8 | data: 9 | config.yaml: | 10 | server: 11 | port: 20001 12 | static_content_root_directory: /opt/kiali/console 13 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/orders-db-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: orders-db 6 | labels: 7 | name: orders-db 8 | 9 | spec: 10 | ports: 11 | # the port that this service should serve on 12 | - port: 27017 13 | targetPort: 27017 14 | selector: 15 | name: orders-db 16 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/zipkin-mysql-svc.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: zipkin-mysql 5 | labels: 6 | name: zipkin-mysql 7 | 8 | spec: 9 | ports: 10 | # the port that this service should serve on 11 | - port: 3306 12 | targetPort: 3306 13 | selector: 14 | name: zipkin-mysql 15 | -------------------------------------------------------------------------------- /incubator/istio/_charts/sidecarInjectorWebhook/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: istio-sidecar-injector 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | istio: sidecar-injector 8 | spec: 9 | ports: 10 | - port: 443 11 | selector: 12 | istio: sidecar-injector 13 | -------------------------------------------------------------------------------- /incubator/prometheus/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Prometheus instance created by the CoreOS Prometheus Operator 3 | engine: gotpl 4 | maintainers: 5 | - name: Michael Goodness 6 | email: mgoodness@gmail.com 7 | name: prometheus 8 | sources: 9 | - https://github.com/coreos/prometheus-operator 10 | version: 0.2.1 11 | -------------------------------------------------------------------------------- /incubator/nfs-provisioner/templates/storageclass.yaml: -------------------------------------------------------------------------------- 1 | kind: StorageClass 2 | apiVersion: storage.k8s.io/v1beta1 3 | metadata: 4 | name: {{ .Values.storageClass }} 5 | {{ if .Values.defaultClass }} 6 | label: 7 | storageclass.beta.kubernetes.io/is-default-class: true 8 | {{ end }} 9 | provisioner: {{ .Values.provisionerName }} 10 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/catalogue-db-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: catalogue-db 6 | labels: 7 | name: catalogue-db 8 | 9 | spec: 10 | ports: 11 | # the port that this service should serve on 12 | - port: 3306 13 | targetPort: 3306 14 | selector: 15 | name: catalogue-db 16 | -------------------------------------------------------------------------------- /incubator/dockercfg/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Created docker pull secret named `{{ include "common.fullname" . }}`. 2 | 3 | Refer to the following resources for usage: 4 | - https://github.com/kubernetes/helm/blob/master/docs/charts_tips_and_tricks.md 5 | - https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ 6 | 7 | 8 | -------------------------------------------------------------------------------- /incubator/portal/requirements.yaml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: common 3 | version: 1.0.0 4 | repository: https://atlassian.github.io/data-center-helm-charts 5 | - name: oauth2-proxy 6 | version: 0.1.4 7 | repository: https://charts.cloudposse.com/incubator/ 8 | import-values: 9 | - child: service.http 10 | parent: oauth2 11 | -------------------------------------------------------------------------------- /incubator/vps/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Secret 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | data: 8 | login: {{ .Values.shell.user | b64enc | quote }} 9 | password: {{ .Values.shell.password | default (randAlphaNum 10) | b64enc | quote }} 10 | -------------------------------------------------------------------------------- /incubator/istio/_charts/prometheus/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: prometheus 11 | namespace: {{ .Release.Namespace }} 12 | -------------------------------------------------------------------------------- /incubator/teleport-ent-proxy/README.md: -------------------------------------------------------------------------------- 1 | # teleport-ent-proxy 2 | 3 | teleport-ent-proxy is the [proxy service](https://gravitational.com/teleport/docs/architecture/#teleport-services) 4 | for Teleport enterprise edition. The proxy accepts inbound connections from 5 | the clients and routes them to the appropriate nodes. 6 | The proxy also serves the Web UI. 7 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/front-end-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: front-end 6 | labels: 7 | name: front-end 8 | 9 | spec: 10 | type: NodePort 11 | ports: 12 | - port: 80 13 | targetPort: 8079 14 | nodePort: 30001 15 | selector: 16 | name: front-end 17 | sessionAffinity: "ClientIP" 18 | -------------------------------------------------------------------------------- /incubator/kube-lego/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | data: 8 | # modify this to specify your address 9 | lego.email: {{ .Values.lego.email | quote }} 10 | lego.url: "{{ template "lego_url" . }}" 11 | -------------------------------------------------------------------------------- /incubator/alertmanager/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Alertmanager instance created by the CoreOS Prometheus Operator 3 | engine: gotpl 4 | maintainers: 5 | - name: Michael Goodness 6 | email: mgoodness@gmail.com 7 | name: alertmanager 8 | sources: 9 | - https://github.com/coreos/prometheus-operator 10 | version: 0.2.1 11 | deprecated: true 12 | -------------------------------------------------------------------------------- /incubator/istio/_charts/mixer/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: mixer 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2" 6 | description: Helm chart for mixer deployment 7 | keywords: 8 | - istio 9 | - mixer 10 | sources: 11 | - http://github.com/istio/istio 12 | engine: gotpl 13 | icon: https://istio.io/favicons/android-192x192.png 14 | -------------------------------------------------------------------------------- /incubator/istio/_charts/pilot/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: pilot 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2" 6 | description: Helm chart for pilot deployment 7 | keywords: 8 | - istio 9 | - pilot 10 | sources: 11 | - http://github.com/istio/istio 12 | engine: gotpl 13 | icon: https://istio.io/favicons/android-192x192.png 14 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/cart-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: cart 6 | labels: 7 | name: cart 8 | annotations: 9 | prometheus.io/path: "/prometheus" 10 | 11 | spec: 12 | ports: 13 | # the port that this service should serve on 14 | - port: 80 15 | targetPort: 80 16 | selector: 17 | name: cart 18 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/zipkin-svc.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: zipkin 5 | labels: 6 | name: zipkin 7 | 8 | spec: 9 | type: NodePort 10 | ports: 11 | # the port that this service should serve on 12 | - port: 9411 13 | targetPort: 9411 14 | nodePort: 30002 15 | selector: 16 | name: zipkin 17 | 18 | 19 | -------------------------------------------------------------------------------- /incubator/istio/_charts/galley/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: galley 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2" 6 | description: Helm chart for galley deployment 7 | keywords: 8 | - istio 9 | - galley 10 | sources: 11 | - http://github.com/istio/istio 12 | engine: gotpl 13 | icon: https://istio.io/favicons/android-192x192.png 14 | -------------------------------------------------------------------------------- /incubator/istio/_charts/ingress/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: ingress 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2" 6 | description: Helm chart for ingress deployment 7 | keywords: 8 | - istio 9 | - ingress 10 | sources: 11 | - http://github.com/istio/istio 12 | engine: gotpl 13 | icon: https://istio.io/favicons/android-192x192.png 14 | -------------------------------------------------------------------------------- /incubator/kube-prometheus/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Manifests, dashboards, and alerting rules for end-to-end Kubernetes cluster monitoring. 3 | engine: gotpl 4 | maintainers: 5 | - name: Michael Goodness 6 | email: mgoodness@gmail.com 7 | name: kube-prometheus 8 | sources: 9 | - https://github.com/coreos/kube-prometheus 10 | version: 0.1.0 11 | -------------------------------------------------------------------------------- /incubator/nfs-provisioner/values.yaml: -------------------------------------------------------------------------------- 1 | image: quay.io/kubernetes_incubator/nfs-provisioner 2 | imageTag: v1.0.9 3 | provisionerName: "cluster.local/nfs" 4 | storageClass: local-nfs 5 | defaultClass: false 6 | #serviceIp: 7 | persistence: 8 | enabled: true 9 | storageClass: generic 10 | accessMode: ReadWriteOnce 11 | size: 8Gi 12 | volume: 13 | emptyDir: {} 14 | -------------------------------------------------------------------------------- /incubator/istio/_charts/security/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: security 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2" 6 | description: Helm chart for istio authentication 7 | keywords: 8 | - istio 9 | - security 10 | sources: 11 | - http://github.com/istio/istio 12 | engine: gotpl 13 | icon: https://istio.io/favicons/android-192x192.png 14 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/orders-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: orders 6 | labels: 7 | name: orders 8 | annotations: 9 | prometheus.io/path: "/prometheus" 10 | 11 | spec: 12 | ports: 13 | # the port that this service should serve on 14 | - port: 80 15 | targetPort: 80 16 | selector: 17 | name: orders 18 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/shipping-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: shipping 6 | labels: 7 | name: shipping 8 | annotations: 9 | prometheus.io/path: "/prometheus" 10 | 11 | spec: 12 | ports: 13 | # the port that this service should serve on 14 | - port: 80 15 | targetPort: 80 16 | selector: 17 | name: shipping 18 | 19 | -------------------------------------------------------------------------------- /incubator/teleport/templates/config.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: {{ template "teleport.fullname" . }} 5 | labels: 6 | heritage: {{ .Release.Service }} 7 | release: {{ .Release.Name }} 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 9 | app: {{ .Chart.Name }} 10 | data: 11 | teleport.yaml: | 12 | {{ toYaml .Values.config | indent 4 }} 13 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes-aws/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: {{ template "fluentd_kubernetes.fullname" . }} 5 | labels: 6 | app: {{ template "fluentd_kubernetes.name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 8 | release: {{ .Release.Name }} 9 | heritage: {{ .Release.Service }} 10 | -------------------------------------------------------------------------------- /incubator/istio/_charts/certmanager/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: certmanager 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | app: certmanager 14 | -------------------------------------------------------------------------------- /incubator/superset/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Superset can be accessed via port {{ .Values.service.port }} on the following DNS name from within your cluster: 2 | {{ include "superset.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local 3 | 4 | Initially you can login with username/password: admin/admin. 5 | 6 | {{- if not .Values.persistence.enabled }} 7 | WARNING: Persistence is DISABLED ! 8 | {{- end }} 9 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/queue-master-svc.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: queue-master 6 | labels: 7 | name: queue-master 8 | annotations: 9 | prometheus.io/path: "/prometheus" 10 | 11 | spec: 12 | ports: 13 | # the port that this service should serve on 14 | - port: 80 15 | targetPort: 80 16 | selector: 17 | name: queue-master 18 | -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/templates/grafana-ports-mtls.yaml: -------------------------------------------------------------------------------- 1 | {{ define "grafana-default.yaml.tpl" }} 2 | apiVersion: authentication.istio.io/v1alpha1 3 | kind: Policy 4 | metadata: 5 | name: grafana-ports-mtls-disabled 6 | namespace: {{ .Release.Namespace }} 7 | spec: 8 | targets: 9 | - name: grafana 10 | ports: 11 | - number: {{ .Values.service.externalPort }} 12 | {{- end }} 13 | -------------------------------------------------------------------------------- /incubator/prometheus-operator/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Provides easy monitoring definitions for Kubernetes services, and deployment and management of Prometheus instances. 3 | engine: gotpl 4 | maintainers: 5 | - name: Michael Goodness 6 | email: mgoodness@gmail.com 7 | name: prometheus-operator 8 | sources: 9 | - https://github.com/coreos/prometheus-operator 10 | version: 0.2.0 11 | -------------------------------------------------------------------------------- /incubator/istio/_charts/galley/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: istio-galley 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | istio: galley 8 | spec: 9 | ports: 10 | - port: 443 11 | name: https-validation 12 | - port: 9093 13 | name: http-monitoring 14 | - port: 9901 15 | name: grpc-mcp 16 | selector: 17 | istio: galley 18 | -------------------------------------------------------------------------------- /incubator/teleport/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ template "teleport.serviceAccountName" . }} 6 | labels: 7 | app: {{ template "teleport.name" . }} 8 | chart: {{ template "teleport.chart" . }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | {{- end -}} 12 | -------------------------------------------------------------------------------- /incubator/codefresh-service-account/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: {{ include "common.fullname" . }} 5 | {{- with .Values.annotations }} 6 | annotations: 7 | {{ toYaml . | indent 4 }} 8 | {{- end }} 9 | labels: 10 | {{ include "common.labels.standard" . | indent 4 }} 11 | {{- with .Values.labels }} 12 | {{ toYaml . | indent 4 }} 13 | {{- end }} 14 | -------------------------------------------------------------------------------- /incubator/chart-repo/requirements.yaml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: chartmuseum 3 | repository: https://chartmuseum.github.io/charts 4 | condition: server.enabled, global.server.enabled 5 | version: 2.14.2 6 | alias: server 7 | - name: chartmuseum 8 | repository: https://chartmuseum.github.io/charts 9 | condition: gateway.enabled, global.gateway.enabled 10 | version: 2.14.2 11 | alias: gateway 12 | -------------------------------------------------------------------------------- /incubator/istio/_charts/gateways/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: gateways 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2" 6 | description: Helm chart for deploying Istio gateways 7 | keywords: 8 | - istio 9 | - ingressgateway 10 | - egressgateway 11 | - gateways 12 | sources: 13 | - http://github.com/istio/istio 14 | engine: gotpl 15 | icon: https://istio.io/favicons/android-192x192.png 16 | -------------------------------------------------------------------------------- /incubator/istio/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: istio 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2-0" 6 | description: Helm chart for all istio components 7 | keywords: 8 | - istio 9 | - security 10 | - sidecarInjectorWebhook 11 | - mixer 12 | - pilot 13 | - galley 14 | sources: 15 | - http://github.com/istio/istio 16 | engine: gotpl 17 | icon: https://istio.io/favicons/android-192x192.png 18 | -------------------------------------------------------------------------------- /incubator/istio/_charts/sidecarInjectorWebhook/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: sidecarInjectorWebhook 3 | version: 1.1.0 4 | appVersion: 1.1.0 5 | tillerVersion: ">=2.7.2" 6 | description: Helm chart for sidecar injector webhook deployment 7 | keywords: 8 | - istio 9 | - sidecarInjectorWebhook 10 | sources: 11 | - http://github.com/istio/istio 12 | engine: gotpl 13 | icon: https://istio.io/favicons/android-192x192.png 14 | -------------------------------------------------------------------------------- /incubator/alertmanager/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Secret 3 | metadata: 4 | labels: 5 | alertmanager: {{ .Release.Name }} 6 | app: {{ template "name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | name: alertmanager-{{ .Release.Name }} 11 | data: 12 | alertmanager.yaml: {{ toYaml .Values.config | b64enc | quote }} -------------------------------------------------------------------------------- /incubator/istio/_charts/prometheus/templates/clusterrolebindings.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: prometheus-{{ .Release.Namespace }} 5 | roleRef: 6 | apiGroup: rbac.authorization.k8s.io 7 | kind: ClusterRole 8 | name: prometheus-{{ .Release.Namespace }} 9 | subjects: 10 | - kind: ServiceAccount 11 | name: prometheus 12 | namespace: {{ .Release.Namespace }} 13 | -------------------------------------------------------------------------------- /incubator/superset/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Apache Superset (incubating) is a modern, enterprise-ready business intelligence web application 3 | name: superset 4 | version: 1.2.0 5 | appVersion: "0.35.2" 6 | keywords: 7 | - bi 8 | home: https://github.com/apache/incubator-superset 9 | icon: https://superset.incubator.apache.org/_images/s.png 10 | sources: 11 | - https://github.com/helm/charts/tree/master/stable/superset 12 | -------------------------------------------------------------------------------- /demo/sock-shop/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/apache/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/bastion/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/grafana/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | labels: 5 | app: {{ template "fullname" . }} 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | component: "{{ .Values.server.name }}" 8 | heritage: "{{ .Release.Service }}" 9 | release: "{{ .Release.Name }}" 10 | name: {{ template "server.fullname" . }}-config 11 | data: 12 | {{ toYaml .Values.serverConfigFile | indent 2 }} 13 | -------------------------------------------------------------------------------- /incubator/istio/values-istio.yaml: -------------------------------------------------------------------------------- 1 | # This is used to generate istio.yaml for automated CI/CD test, using v1/alpha1 2 | # or v2/alpha3 with 'gradual migration' (using env variable at inject time). 3 | global: 4 | ## imagePullSecrets for all ServiceAccount. Must be set for any clustser configured with private docker registry. 5 | # imagePullSecrets: 6 | # - name: "private-registry-key" 7 | 8 | # Default is 10s second 9 | refreshInterval: 1s 10 | -------------------------------------------------------------------------------- /incubator/jenkins/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/openvpn/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/postfix/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/thumbor/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/varnish/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/vps/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/alertmanager/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/dockercfg/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-node/values.yaml: -------------------------------------------------------------------------------- 1 | # This is a YAML-formatted file. 2 | # Declare variables to be passed into your templates. 3 | replicaCount: 1 4 | image: 5 | repository: quay.io/prometheus/node-exporter 6 | tag: v0.13.0 7 | pullPolicy: IfNotPresent 8 | service: 9 | type: ClusterIP 10 | externalPort: 9100 11 | resources: 12 | limits: 13 | cpu: 200m 14 | memory: 50Mi 15 | requests: 16 | cpu: 100m 17 | memory: 30Mi 18 | 19 | -------------------------------------------------------------------------------- /incubator/fail-whale/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/geoip-api/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/heapster/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/helm-serve/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/kube-lego/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/monochart/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: A declarative helm chart for deploying common types of services on Kubernetes 3 | name: monochart 4 | version: 0.28.0 5 | appVersion: 0.28.0 6 | home: https://github.com/cloudposse/charts/tree/master/incubator/monochart 7 | icon: https://raw.githubusercontent.com/cloudposse/charts/master/incubator/monochart/logo.png 8 | maintainers: 9 | - name: Cloud Posse 10 | email: hello@cloudposse.com 11 | -------------------------------------------------------------------------------- /incubator/oauth2-proxy/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/prometheus/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/service-level-operator/README.md: -------------------------------------------------------------------------------- 1 | # service-level-operator 2 | 3 | Service level operator abstracts and automates the service level of Kubernetes applications by generation SLI & SLOs to be consumed easily by dashboards and alerts and allow that the SLI/SLO's live with the application flow. 4 | 5 | This is helm chart extends the [spotahome/service-level-operator](https://github.com/spotahome/service-level-operator ) helm chart with cluster role bindings. 6 | -------------------------------------------------------------------------------- /incubator/service-level-operator/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ include "service-operator.name" . }} 5 | labels: 6 | app: {{ include "service-operator.name" . }} 7 | component: app 8 | spec: 9 | ports: 10 | - port: 80 11 | protocol: TCP 12 | name: http 13 | targetPort: http 14 | selector: 15 | app: {{ include "service-operator.name" . }} 16 | component: app 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-api/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-kube-dns/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-kubelets/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-node/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes-aws/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | To verify that Fluentd has started, run: 2 | 3 | kubectl --namespace={{ .Release.Namespace }} get all -l "app={{ template "fluentd_kubernetes.name" . }},release={{ .Release.Name }}" 4 | 5 | THIS APPLICATION CAPTURES ALL CONSOLE OUTPUT AND FORWARDS IT TO configured backend storage. Anything that might be identifying, 6 | including things like IP addresses, container images, and object names will NOT be anonymized. 7 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | To verify that Fluentd has started, run: 2 | 3 | kubectl --namespace={{ .Release.Namespace }} get all -l "app={{ template "fluentd_kubernetes.name" . }},release={{ .Release.Name }}" 4 | 5 | THIS APPLICATION CAPTURES ALL CONSOLE OUTPUT AND FORWARDS IT TO configured backend storage. Anything that might be identifying, 6 | including things like IP addresses, container images, and object names will NOT be anonymized. 7 | -------------------------------------------------------------------------------- /incubator/helm-serve/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | spec: 8 | type: {{ .Values.service.type }} 9 | ports: 10 | - port: {{ .Values.service.externalPort }} 11 | targetPort: 8879 12 | protocol: TCP 13 | name: {{ .Values.service.name }} 14 | selector: 15 | app: {{ template "fullname" . }} 16 | -------------------------------------------------------------------------------- /incubator/kube-prometheus/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/nfs-provisioner/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/nginx-ingress/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/prometheus-alerts/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/service-level-operator/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | kind: ClusterRoleBinding 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | metadata: 4 | name: {{ include "service-operator.name" . }} 5 | subjects: 6 | - kind: ServiceAccount 7 | name: {{ include "service-operator.name" . }} 8 | namespace: monitoring 9 | roleRef: 10 | apiGroup: rbac.authorization.k8s.io 11 | kind: ClusterRole 12 | name: {{ include "service-operator.name" . }} 13 | -------------------------------------------------------------------------------- /incubator/syslog-forwarder/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-kube-etcd/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-kube-state/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-kubernetes/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes-aws/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/github-authorized-keys/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/istio/_charts/ingress/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: istio-ingress-{{ .Release.Namespace }} 5 | roleRef: 6 | apiGroup: rbac.authorization.k8s.io 7 | kind: ClusterRole 8 | name: istio-pilot-{{ .Release.Namespace }} 9 | subjects: 10 | - kind: ServiceAccount 11 | name: istio-ingress-service-account 12 | namespace: {{ .Release.Namespace }} 13 | -------------------------------------------------------------------------------- /incubator/istio/_charts/tracing/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/kubernetes-dashboard/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/nginx-default-backend/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/route53-kubernetes/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/teleport-ent-proxy/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-kube-scheduler/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/geoip-api/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | spec: 8 | type: {{ .Values.service.type }} 9 | ports: 10 | - port: {{ .Values.service.externalPort }} 11 | targetPort: {{ .Values.service.internalPort }} 12 | protocol: TCP 13 | name: geoip-api 14 | selector: 15 | app: {{ template "fullname" . }} 16 | -------------------------------------------------------------------------------- /incubator/istio/_charts/servicegraph/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/exporter-kube-controller-manager/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /incubator/vps/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | spec: 8 | type: {{ .Values.service.type }} 9 | ports: 10 | - port: {{ .Values.service.externalPort }} 11 | targetPort: {{ .Values.service.internalPort }} 12 | protocol: TCP 13 | name: {{ .Values.service.name }} 14 | selector: 15 | app: {{ template "fullname" . }} -------------------------------------------------------------------------------- /incubator/teleport-ent-auth/README.md: -------------------------------------------------------------------------------- 1 | # teleport-ent-auth 2 | 3 | teleport-ent-auth is the [auth service](https://gravitational.com/teleport/docs/architecture/#teleport-services) 4 | for Teleport enterprise edition. This service provides authentication 5 | and authorization service to proxies and nodes. 6 | It is the certificate authority (CA) of a cluster and the storage for 7 | audit logs. It is the only stateful component of a Teleport cluster and 8 | depends on DynamoDB and S3. 9 | -------------------------------------------------------------------------------- /incubator/apache/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | spec: 8 | type: {{ .Values.service.type }} 9 | ports: 10 | - port: {{ .Values.service.externalPort }} 11 | targetPort: {{ .Values.service.internalPort }} 12 | protocol: TCP 13 | name: {{ .Values.service.name }} 14 | selector: 15 | app: {{ template "fullname" . }} 16 | -------------------------------------------------------------------------------- /incubator/fail-whale/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | k8s-addon: ingress-nginx.addons.k8s.io 8 | spec: 9 | type: {{ .Values.service.type }} 10 | ports: 11 | - name: http 12 | targetPort: http 13 | port: {{ .Values.service.externalPort }} 14 | protocol: TCP 15 | selector: 16 | app: {{ template "fullname" . }} 17 | -------------------------------------------------------------------------------- /incubator/postfix/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | spec: 8 | type: {{ .Values.service.type }} 9 | ports: 10 | - port: {{ .Values.service.externalPort }} 11 | targetPort: {{ .Values.service.internalPort }} 12 | protocol: TCP 13 | name: {{ .Values.service.name }} 14 | selector: 15 | app: {{ template "fullname" . }} 16 | -------------------------------------------------------------------------------- /incubator/thumbor/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | spec: 8 | type: {{ .Values.service.type }} 9 | ports: 10 | - port: {{ .Values.service.externalPort }} 11 | targetPort: {{ .Values.service.internalPort }} 12 | protocol: TCP 13 | name: {{ .Values.service.name }} 14 | selector: 15 | app: {{ template "fullname" . }} 16 | -------------------------------------------------------------------------------- /incubator/varnish/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | spec: 8 | type: {{ .Values.service.type }} 9 | ports: 10 | - port: {{ .Values.service.externalPort }} 11 | targetPort: {{ .Values.service.internalPort }} 12 | protocol: TCP 13 | name: {{ .Values.service.name }} 14 | selector: 15 | app: {{ template "fullname" . }} 16 | -------------------------------------------------------------------------------- /incubator/github-authorized-keys/templates/etcdcluster.yaml: -------------------------------------------------------------------------------- 1 | {{ if .Values.etcdEnabled }} 2 | apiVersion: "coreos.com/v1" 3 | kind: "EtcdCluster" 4 | metadata: 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | app: github-authorized-keys 8 | heritage: "{{ .Release.Service }}" 9 | release: "{{ .Release.Name }}" 10 | name: github-authorized-keys-etcd-cluster 11 | spec: 12 | size: {{ .Values.etcdClusterSize }} 13 | version: "v3.1.0-rc.0" 14 | {{end}} 15 | -------------------------------------------------------------------------------- /incubator/varnish/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | {{- if eq .Values.varnish.secret.name "default" }} 2 | apiVersion: v1 3 | kind: Secret 4 | metadata: 5 | name: {{ template "fullname" . }} 6 | labels: 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | data: 9 | {{ if .Values.varnish.secret.default }} 10 | secret: {{ .Values.varnish.secret.default | printf "%v" | b64enc | quote }} 11 | {{ else }} 12 | secret: {{ randAlphaNum 1024 | b64enc | quote }} 13 | {{ end }} 14 | {{ end -}} -------------------------------------------------------------------------------- /incubator/nginx-default-backend/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | k8s-addon: ingress-nginx.addons.k8s.io 8 | spec: 9 | type: {{ .Values.service.type }} 10 | ports: 11 | - name: http 12 | targetPort: http 13 | port: {{ .Values.service.externalPort }} 14 | protocol: TCP 15 | selector: 16 | app: {{ template "fullname" . }} 17 | -------------------------------------------------------------------------------- /incubator/portal/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | # OWNERS file for Kubernetes 23 | OWNERS 24 | -------------------------------------------------------------------------------- /incubator/chart-repo/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | # OWNERS file for Kubernetes 23 | OWNERS 24 | -------------------------------------------------------------------------------- /incubator/codefresh-service-account/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Helm Chart to provision a Service Account for Codefresh 3 | name: codefresh-service-account 4 | version: 0.2.0 5 | appVersion: 0.2.0 6 | home: https://github.com/cloudposse/charts/tree/master/incubator/codefresh-service-account 7 | icon: https://raw.githubusercontent.com/cloudposse/charts/master/incubator/codefresh-service-account/logo.png 8 | maintainers: 9 | - name: Cloud Posse 10 | email: hello@cloudposse.com 11 | -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/fix_datasources.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | THIS_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" 6 | UX=$(uname) 7 | 8 | for db in "${THIS_DIR}"/dashboards/*.json; do 9 | if [[ ${UX} == "Darwin" ]]; then 10 | # shellcheck disable=SC2016 11 | sed -i '' 's/${DS_PROMETHEUS}/Prometheus/g' "$db" 12 | else 13 | # shellcheck disable=SC2016 14 | sed -i 's/${DS_PROMETHEUS}/Prometheus/g' "$db" 15 | fi 16 | done 17 | -------------------------------------------------------------------------------- /incubator/monochart/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | # OWNERS file for Kubernetes 23 | OWNERS 24 | -------------------------------------------------------------------------------- /incubator/service-level-operator/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Service level operator abstracts and automates the service level of Kubernetes applications by generation SLI & SLOs to be consumed easily by dashboards and alerts and allow that the SLI/SLO's live with the application flow. 3 | name: service-level-operator 4 | version: 0.1.0 5 | appVersion: "v0.2.0" 6 | home: https://github.com/spotahome/service-level-operator 7 | sources: 8 | - https://github.com/spotahome/service-level-operator 9 | -------------------------------------------------------------------------------- /incubator/superset/.helmignore: -------------------------------------------------------------------------------- 1 | 2 | # Patterns to ignore when building packages. 3 | # This supports shell glob matching, relative path matching, and 4 | # negation (prefixed with !). Only one pattern per line. 5 | .DS_Store 6 | # Common VCS dirs 7 | .git/ 8 | .gitignore 9 | .bzr/ 10 | .bzrignore 11 | .hg/ 12 | .hgignore 13 | .svn/ 14 | # Common backup files 15 | *.swp 16 | *.bak 17 | *.tmp 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | # OWNERS file for Kubernetes 24 | OWNERS -------------------------------------------------------------------------------- /incubator/istio/_charts/prometheus/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRole 3 | metadata: 4 | name: prometheus-{{ .Release.Namespace }} 5 | rules: 6 | - apiGroups: [""] 7 | resources: 8 | - nodes 9 | - services 10 | - endpoints 11 | - pods 12 | - nodes/proxy 13 | verbs: ["get", "list", "watch"] 14 | - apiGroups: [""] 15 | resources: 16 | - configmaps 17 | verbs: ["get"] 18 | - nonResourceURLs: ["/metrics"] 19 | verbs: ["get"] 20 | -------------------------------------------------------------------------------- /incubator/grafana/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Secret 3 | metadata: 4 | labels: 5 | app: {{ template "fullname" . }} 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | heritage: "{{ .Release.Service }}" 8 | release: "{{ .Release.Name }}" 9 | name: {{ template "server.fullname" . }} 10 | type: Opaque 11 | data: 12 | grafana-admin-password: {{ .Values.server.adminPassword | b64enc | quote }} 13 | grafana-admin-user: {{ .Values.server.adminUser | b64enc | quote }} 14 | -------------------------------------------------------------------------------- /incubator/helm-serve/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for charts-repo-server. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | url: 5 | replicaCount: 1 6 | image: 7 | repository: cloudposse/charts 8 | tag: latest 9 | pullPolicy: Always 10 | service: 11 | name: charts-repo 12 | type: ClusterIP 13 | externalPort: 80 14 | resources: 15 | limits: 16 | cpu: 100m 17 | memory: 128Mi 18 | requests: 19 | cpu: 100m 20 | memory: 128Mi 21 | 22 | -------------------------------------------------------------------------------- /incubator/kube-lego/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for kube-lego. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | replicaCount: 1 5 | debug: false 6 | image: 7 | repository: jetstack/kube-lego 8 | tag: 0.1.5 9 | pullPolicy: IfNotPresent 10 | lego: 11 | email: "" 12 | prod: false 13 | pod: 14 | internalPort: 8080 15 | resources: 16 | limits: 17 | cpu: 100m 18 | memory: 128Mi 19 | requests: 20 | cpu: 100m 21 | memory: 128Mi 22 | 23 | -------------------------------------------------------------------------------- /incubator/codefresh-service-account/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | # OWNERS file for Kubernetes 23 | OWNERS 24 | -------------------------------------------------------------------------------- /incubator/service-level-operator/.helmignore: -------------------------------------------------------------------------------- 1 | 2 | # Patterns to ignore when building packages. 3 | # This supports shell glob matching, relative path matching, and 4 | # negation (prefixed with !). Only one pattern per line. 5 | .DS_Store 6 | # Common VCS dirs 7 | .git/ 8 | .gitignore 9 | .bzr/ 10 | .bzrignore 11 | .hg/ 12 | .hgignore 13 | .svn/ 14 | # Common backup files 15 | *.swp 16 | *.bak 17 | *.tmp 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | # OWNERS file for Kubernetes 24 | OWNERS -------------------------------------------------------------------------------- /incubator/codefresh-service-account/README.md: -------------------------------------------------------------------------------- 1 | # codefresh-service-account 2 | 3 | This chart provisions a [Service Account](https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account) for [Codefresh](https://codefresh.io/) to connect to Kubernetes API server 4 | 5 | ## Connecting Codefresh to Kubernetes 6 | 7 | After installing the chart, follow the instructions in [add kubernetes cluster](https://codefresh.io/docs/docs/deploy-to-kubernetes/add-kubernetes-cluster) to register the cluster with Codefresh 8 | -------------------------------------------------------------------------------- /incubator/grafana/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | name: grafana 3 | version: 0.2.6 4 | description: The leading tool for querying and visualizing time series and metrics. 5 | home: https://grafana.net 6 | icon: https://raw.githubusercontent.com/grafana/grafana/master/public/img/logo_transparent_400x.png 7 | sources: 8 | - https://github.com/grafana/grafana 9 | maintainers: 10 | - name: Ming Hsieh 11 | email: zanhsieh@gmail.com 12 | - name: Cloud Posse LLC 13 | email: hello@cloudposse.com 14 | engine: gotpl 15 | -------------------------------------------------------------------------------- /incubator/heapster/templates/influxdb.service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | labels: 5 | task: monitoring 6 | kubernetes.io/cluster-service: 'true' 7 | kubernetes.io/name: monitoring-influxdb 8 | name: {{ template "influxdb_fullname" . }} 9 | spec: 10 | type: {{ .Values.influxdb.service.type }} 11 | ports: 12 | - name: api 13 | port: {{ .Values.influxdb.service.externalPort }} 14 | targetPort: 8086 15 | selector: 16 | k8s-app: {{ template "influxdb_fullname" . }} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/kiali/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: kiali-service-account 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | app: kiali 14 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 15 | heritage: {{ .Release.Service }} 16 | release: {{ .Release.Name }} 17 | -------------------------------------------------------------------------------- /incubator/monochart/templates/prometheusrule.yaml: -------------------------------------------------------------------------------- 1 | {{- $root := . -}} 2 | {{- range $name, $rules := .Values.prometheusRules }} 3 | --- 4 | apiVersion: monitoring.coreos.com/v1 5 | kind: PrometheusRule 6 | metadata: 7 | name: {{ include "common.fullname" $root }}-{{ $name }} 8 | labels: 9 | {{ include "common.labels.standard" $root | indent 4 }} 10 | {{- if not ( empty $rules.labels) }} 11 | {{ toYaml $rules.labels | indent 4 }} 12 | {{- end }} 13 | spec: 14 | groups: 15 | {{ toYaml $rules.groups | indent 4 }} 16 | {{- end }} -------------------------------------------------------------------------------- /incubator/prometheus-alerts/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for prometheus-alerts. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | labels: 5 | app: prometheus 6 | # In common case prometheus name is release name of chart that install prometheus 7 | prometheus: 8 | 9 | alerts: 10 | cluster_cpu_low: 11 | warning: 40 12 | critical: 20 13 | cluster_memory_low: 14 | warning: 20 15 | critical: 10 16 | pod_restarts: 17 | warning: 5 18 | critical: 10 -------------------------------------------------------------------------------- /incubator/codefresh-service-account/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | kind: ClusterRole 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | metadata: 4 | name: {{ include "common.fullname" . }} 5 | {{- with .Values.annotations }} 6 | annotations: 7 | {{ toYaml . | indent 4 }} 8 | {{- end }} 9 | labels: 10 | {{ include "common.labels.standard" . | indent 4 }} 11 | {{- with .Values.labels }} 12 | {{ toYaml . | indent 4 }} 13 | {{- end }} 14 | rules: 15 | {{- with .Values.clusterrole.rules }} 16 | {{ toYaml . | indent 2 }} 17 | {{- end }} 18 | -------------------------------------------------------------------------------- /incubator/istio/_charts/pilot/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: istio-pilot-service-account 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | app: istio-pilot 14 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 15 | heritage: {{ .Release.Service }} 16 | release: {{ .Release.Name }} 17 | -------------------------------------------------------------------------------- /incubator/grafana/templates/dashboards-configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serverDashboardFiles.specifiedInValues -}} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | labels: 6 | app: {{ template "fullname" . }} 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | component: "{{ .Values.server.name }}" 9 | heritage: "{{ .Release.Service }}" 10 | release: "{{ .Release.Name }}" 11 | name: {{ template "server.fullname" . }}-dashs 12 | data: 13 | {{ toYaml .Values.serverDashboardFiles.value | indent 2 }} 14 | {{- end -}} -------------------------------------------------------------------------------- /incubator/istio/_charts/galley/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: istio-galley-service-account 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | app: istio-galley 14 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 15 | heritage: {{ .Release.Service }} 16 | release: {{ .Release.Name }} 17 | -------------------------------------------------------------------------------- /incubator/kubernetes-dashboard/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for kube-dashboard. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | replicaCount: 1 5 | image: 6 | repository: "gcr.io/google_containers/kubernetes-dashboard-amd64" 7 | tag: "v1.5.0" 8 | pullPolicy: "IfNotPresent" 9 | service: 10 | type: ClusterIP 11 | externalPort: 80 12 | internalPort: 9090 13 | resources: 14 | limits: 15 | cpu: 100m 16 | memory: 50Mi 17 | requests: 18 | cpu: 100m 19 | memory: 50Mi 20 | -------------------------------------------------------------------------------- /incubator/openvpn/templates/vpn.internal.service.yaml: -------------------------------------------------------------------------------- 1 | {{ if .Values.ui.ssl.enabled }} 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: {{ template "fullname_internal" . }} 6 | labels: 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | spec: 9 | type: ClusterIP 10 | ports: 11 | - port: 8085 12 | targetPort: 8085 13 | protocol: TCP 14 | name: api 15 | - port: 8080 16 | targetPort: 8080 17 | protocol: TCP 18 | name: ui 19 | selector: 20 | app: {{ template "fullname" . }} 21 | {{end}} 22 | -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/templates/pvc.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.persist }} 2 | kind: PersistentVolumeClaim 3 | apiVersion: v1 4 | metadata: 5 | name: istio-grafana-pvc 6 | labels: 7 | app: istio-grafana 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | spec: 12 | storageClassName: {{ .Values.storageClassName }} 13 | accessModes: 14 | - ReadWriteOnce 15 | resources: 16 | requests: 17 | storage: 5Gi 18 | {{- end }} 19 | -------------------------------------------------------------------------------- /incubator/route53-kubernetes/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for route53-kubernetes. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | ingress_service_selector: k8s-addon=ingress-nginx.addons.k8s.io,role=entrypoint 5 | dns_record_type: CNAME 6 | dns_record_ttl: 300 7 | 8 | image: 9 | repository: cloudposse/route53-kubernetes 10 | tag: latest 11 | pullPolicy: Always 12 | resources: 13 | limits: 14 | cpu: 100m 15 | memory: 128Mi 16 | requests: 17 | cpu: 100m 18 | memory: 128Mi 19 | -------------------------------------------------------------------------------- /incubator/teleport-ent-auth/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create }} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ template "teleport-auth.serviceAccountName" . }} 6 | labels: 7 | app.kubernetes.io/name: {{ include "teleport-auth.name" . }} 8 | app.kubernetes.io/component: "{{ .Values.name }}" 9 | helm.sh/chart: {{ include "teleport-auth.chart" . }} 10 | app.kubernetes.io/instance: {{ .Release.Name }} 11 | app.kubernetes.io/managed-by: {{ .Release.Service }} 12 | {{- end }} -------------------------------------------------------------------------------- /incubator/istio/_charts/security/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | # we use the normal name here (e.g. 'prometheus') 5 | # as grafana is configured to use this as a data source 6 | name: istio-citadel 7 | namespace: {{ .Release.Namespace }} 8 | labels: 9 | app: istio-citadel 10 | spec: 11 | ports: 12 | - name: grpc-citadel 13 | port: 8060 14 | targetPort: 8060 15 | protocol: TCP 16 | - name: http-monitoring 17 | port: 9093 18 | selector: 19 | istio: citadel 20 | -------------------------------------------------------------------------------- /incubator/exporter-kube-state/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for kube-state-metrics. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | replicaCount: 1 5 | image: 6 | repository: gcr.io/google_containers/kube-state-metrics 7 | tag: v0.3.0 8 | pullPolicy: IfNotPresent 9 | service: 10 | name: nginx 11 | type: ClusterIP 12 | externalPort: 80 13 | internalPort: 8080 14 | resources: 15 | limits: 16 | cpu: 100m 17 | memory: 128Mi 18 | requests: 19 | cpu: 100m 20 | memory: 128Mi 21 | 22 | -------------------------------------------------------------------------------- /incubator/heapster/templates/heapster.service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: "{{ .Chart.Name }}" 5 | labels: 6 | task: "monitoring" 7 | kubernetes.io/cluster-service: 'true' 8 | kubernetes.io/name: "Heapster" 9 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 10 | spec: 11 | type: {{ .Values.heapster.service.type }} 12 | ports: 13 | - port: {{ .Values.heapster.service.externalPort }} 14 | targetPort: {{ .Values.heapster.service.internalPort }} 15 | selector: 16 | k8s-app: "{{ .Chart.Name }}" 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/ingress/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: istio-ingress-service-account 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | app: {{ template "istio.name" . }} 14 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 15 | heritage: {{ .Release.Service }} 16 | release: {{ .Release.Name }} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/mixer/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: istio-mixer-service-account 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | app: {{ template "mixer.name" . }} 14 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 15 | heritage: {{ .Release.Service }} 16 | release: {{ .Release.Name }} 17 | -------------------------------------------------------------------------------- /incubator/prometheus/templates/rules.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.rules.specifiedInValues .Values.rules.value }} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | labels: 6 | app: {{ template "name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | prometheus: {{ .Release.Name }} 10 | release: {{ .Release.Name }} 11 | {{ toYaml .Values.rulesSelector | indent 4 }} 12 | name: prometheus-{{ .Release.Name }}-rules 13 | data: 14 | {{ toYaml .Values.rules.value | indent 2 }} 15 | {{- end }} 16 | -------------------------------------------------------------------------------- /incubator/teleport-ent-proxy/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create }} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ template "teleport-proxy.serviceAccountName" . }} 6 | labels: 7 | app.kubernetes.io/name: {{ include "teleport-proxy.name" . }} 8 | app.kubernetes.io/component: "{{ .Values.name }}" 9 | helm.sh/chart: {{ include "teleport-proxy.chart" . }} 10 | app.kubernetes.io/instance: {{ .Release.Name }} 11 | app.kubernetes.io/managed-by: {{ .Release.Service }} 12 | {{- end }} 13 | -------------------------------------------------------------------------------- /incubator/dockercfg/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | {{- define "imagePullSecret" }} 2 | {{- printf "{\"auths\": {\"%s\": {\"auth\": \"%s\"}}}" .Values.image.pullSecret.registry (printf "%s:%s" .Values.image.pullSecret.username .Values.image.pullSecret.password | b64enc) | b64enc }} 3 | {{- end }} 4 | apiVersion: v1 5 | kind: Secret 6 | metadata: 7 | name: {{ include "common.fullname" . }} 8 | labels: 9 | {{ include "common.labels.standard" . | indent 4 }} 10 | type: kubernetes.io/dockerconfigjson 11 | data: 12 | .dockerconfigjson: {{ template "imagePullSecret" . }} 13 | -------------------------------------------------------------------------------- /incubator/istio/_charts/security/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: istio-citadel-service-account 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | app: {{ template "security.name" . }} 14 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 15 | heritage: {{ .Release.Service }} 16 | release: {{ .Release.Name }} 17 | -------------------------------------------------------------------------------- /incubator/kubernetes-dashboard/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: "{{ .Chart.Name }}" 5 | namespace: "kube-system" 6 | labels: 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | k8s-app: "{{ .Chart.Name }}" 9 | kubernetes.io/cluster-service: "true" 10 | spec: 11 | selector: 12 | k8s-app: "{{ .Chart.Name }}" 13 | type: {{ .Values.service.type }} 14 | ports: 15 | - targetPort: {{ .Values.service.internalPort }} 16 | port: {{ .Values.service.externalPort }} 17 | protocol: TCP 18 | 19 | -------------------------------------------------------------------------------- /incubator/openvpn/templates/letsencrypt.service.yaml: -------------------------------------------------------------------------------- 1 | {{ if .Values.ui.ssl.enabled }} 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: {{ template "fullname_letsencrypt" . }} 6 | labels: 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | spec: 9 | type: {{ .Values.letsencrypt.service.type }} 10 | ports: 11 | - port: {{ .Values.letsencrypt.service.externalPort }} 12 | targetPort: 80 13 | protocol: TCP 14 | name: {{ .Values.letsencrypt.service.name }} 15 | selector: 16 | app: {{ template "fullname_letsencrypt" . }} 17 | {{ end }} -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes-aws/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Collect Kubernetes logs with Fluentd and forward to AWS-hosted Elasticsearch. 3 | icon: https://raw.githubusercontent.com/fluent/fluentd-docs/master/public/logo/Fluentd_square.png 4 | name: fluentd-kubernetes-aws 5 | version: 0.2.1 6 | appVersion: 1.4.2 7 | home: https://www.fluentd.org/ 8 | sources: 9 | - https://hub.docker.com/r/fluent/fluentd-kubernetes-daemonset 10 | - https://github.com/fluent/fluentd-kubernetes-daemonset 11 | maintainers: 12 | - name: cloudposse 13 | email: hello@cloudposse.com 14 | -------------------------------------------------------------------------------- /incubator/istio/_charts/sidecarInjectorWebhook/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | {{- if .Values.global.imagePullSecrets }} 4 | imagePullSecrets: 5 | {{- range .Values.global.imagePullSecrets }} 6 | - name: {{ . }} 7 | {{- end }} 8 | {{- end }} 9 | metadata: 10 | name: istio-sidecar-injector-service-account 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | app: istio-sidecar-injector 14 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 15 | heritage: {{ .Release.Service }} 16 | release: {{ .Release.Name }} 17 | -------------------------------------------------------------------------------- /incubator/jenkins/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 -}} 16 | {{- end -}} -------------------------------------------------------------------------------- /incubator/openvpn/templates/vpn.secret.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Secret 3 | metadata: 4 | name: "{{ template "fullname" . }}" 5 | labels: 6 | app: "{{ template "fullname" . }}" 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | release: "{{ .Release.Name }}" 9 | heritage: "{{ .Release.Service }}" 10 | type: Opaque 11 | data: 12 | duo_ikey: {{ default "" .Values.duo.iKey | trim | b64enc | quote }} 13 | duo_skey: {{ default "" .Values.duo.sKey | trim | b64enc | quote }} 14 | duo_host: {{ default "" .Values.duo.host | trim | b64enc | quote }} 15 | -------------------------------------------------------------------------------- /incubator/fail-whale/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | {{ with .Values.env.secret }} 2 | apiVersion: v1 3 | kind: Secret 4 | metadata: 5 | name: {{ include "fluentd_kubernetes.fullname" $ }} 6 | labels: 7 | app: {{ template "fluentd_kubernetes.name" $ }} 8 | chart: {{ template "fluentd_kubernetes.chart" $ }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | type: Opaque 12 | data: 13 | {{- range $name, $value := . }} 14 | {{- if not (empty $value) }} 15 | {{ $name }}: {{ $value | b64enc }} 16 | {{- end }} 17 | {{- end }} 18 | {{- end }} 19 | -------------------------------------------------------------------------------- /incubator/geoip-api/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/service-level-operator/templates/servicemonitor.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: monitoring.coreos.com/v1 2 | kind: ServiceMonitor 3 | metadata: 4 | name: {{ include "service-operator.name" . }} 5 | labels: 6 | app: {{ include "service-operator.name" . }} 7 | component: app 8 | prometheus: {{ .Values.prometheus }} 9 | spec: 10 | selector: 11 | matchLabels: 12 | app: {{ include "service-operator.name" . }} 13 | component: app 14 | namespaceSelector: 15 | matchNames: 16 | - monitoring 17 | endpoints: 18 | - port: http 19 | interval: 10s 20 | -------------------------------------------------------------------------------- /incubator/teleport-ent-proxy/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: {{ template "teleport-proxy.fullname" . }} 6 | labels: 7 | app: {{ template "teleport-proxy.name" . }} 8 | chart: {{ template "teleport-proxy.chart" . }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | rules: 12 | - apiGroups: 13 | - "" 14 | resources: 15 | - users 16 | - groups 17 | - serviceaccounts 18 | verbs: 19 | - impersonate 20 | {{- end -}} 21 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes-aws/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRole 3 | metadata: 4 | name: {{ template "fluentd_kubernetes.fullname" . }} 5 | labels: 6 | app: {{ template "fluentd_kubernetes.name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 8 | release: {{ .Release.Name }} 9 | heritage: {{ .Release.Service }} 10 | rules: 11 | - apiGroups: 12 | - "" 13 | resources: 14 | - pods 15 | - namespaces 16 | verbs: 17 | - get 18 | - list 19 | - watch 20 | -------------------------------------------------------------------------------- /incubator/nfs-provisioner/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/kiali/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: istio-kiali-admin-role-binding-{{ .Release.Namespace }} 5 | labels: 6 | app: kiali 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | roleRef: 11 | apiGroup: rbac.authorization.k8s.io 12 | kind: ClusterRole 13 | name: kiali 14 | subjects: 15 | - kind: ServiceAccount 16 | name: kiali-service-account 17 | namespace: {{ .Release.Namespace }} 18 | -------------------------------------------------------------------------------- /incubator/nginx-default-backend/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/security/templates/enable-mesh-permissive.yaml: -------------------------------------------------------------------------------- 1 | {{ define "security-permissive.yaml.tpl" }} 2 | # Authentication policy to enable permissive mode for all services (that have sidecar) in the mesh. 3 | apiVersion: "authentication.istio.io/v1alpha1" 4 | kind: "MeshPolicy" 5 | metadata: 6 | name: "default" 7 | labels: 8 | app: istio-security 9 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 10 | release: {{ .Release.Name }} 11 | heritage: {{ .Release.Service }} 12 | spec: 13 | peers: 14 | - mtls: 15 | mode: PERMISSIVE 16 | {{- end }} 17 | -------------------------------------------------------------------------------- /incubator/nginx-default-backend/templates/poddisruptionbudget.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: policy/v1beta1 2 | kind: PodDisruptionBudget 3 | metadata: 4 | labels: 5 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 6 | k8s-addon: ingress-nginx.addons.k8s.io 7 | app: {{ template "fullname" . }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | name: {{ template "fullname" . }} 11 | spec: 12 | selector: 13 | matchLabels: 14 | app: {{ template "fullname" . }} 15 | k8s-addon: ingress-nginx.addons.k8s.io 16 | maxUnavailable: {{ .Values.maxUnavailable }} 17 | -------------------------------------------------------------------------------- /incubator/superset/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Secret 3 | metadata: 4 | name: {{ include "superset.fullname" . }} 5 | labels: 6 | app: {{ include "superset.name" . }} 7 | chart: {{ include "superset.chart" . }} 8 | release: {{ .Release.Name }} 9 | heritage: {{ .Release.Service }} 10 | type: Opaque 11 | data: 12 | init_superset.sh: {{ .Values.initFile | b64enc | quote }} 13 | superset_config.py: {{ .Values.configFile | b64enc | quote }} 14 | {{- range $key, $value := .Values.extraConfigFiles }} 15 | {{ $key }}: {{ $value | b64enc | quote }} 16 | {{- end }} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/galley/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: istio-galley-configuration 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | app: istio-galley 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | istio: mixer 12 | data: 13 | validatingwebhookconfiguration.yaml: |- 14 | {{- include "validatingwebhookconfiguration.yaml.tpl" . | indent 4}} 15 | accesslist.yaml: |- 16 | {{- include "accesslist.yaml.tpl" . | indent 4}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/templates/configmap-custom-resources.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: istio-grafana-custom-resources 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | app: istio-grafana 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | istio: grafana 12 | data: 13 | custom-resources.yaml: |- 14 | {{- include "grafana-default.yaml.tpl" . | indent 4}} 15 | run.sh: |- 16 | {{- include "install-custom-resources.sh.tpl" . | indent 4}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/templates/configmap-dashboards.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: istio-grafana-configuration-dashboards 6 | namespace: {{ .Release.Namespace }} 7 | labels: 8 | app: istio-grafana 9 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 10 | release: {{ .Release.Name }} 11 | heritage: {{ .Release.Service }} 12 | istio: grafana 13 | 14 | data: 15 | {{- $files := .Files }} 16 | {{ range $path, $bytes := .Files.Glob "dashboards/*.json" }} 17 | {{ base $path }}: '{{ $files.Get $path }}' 18 | {{ end }} 19 | -------------------------------------------------------------------------------- /incubator/teleport-ent-proxy/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Secret 3 | metadata: 4 | name: {{ include "teleport-proxy.fullname" . }} 5 | labels: 6 | app.kubernetes.io/name: {{ include "teleport-proxy.name" . }} 7 | app.kubernetes.io/component: "{{ .Values.name }}" 8 | helm.sh/chart: {{ include "teleport-proxy.chart" . }} 9 | app.kubernetes.io/instance: {{ .Release.Name }} 10 | app.kubernetes.io/managed-by: {{ .Release.Service }} 11 | type: Opaque 12 | data: 13 | {{- range $key, $value := .Values.config }} 14 | {{ $key }}: {{ $value | b64enc | quote }} 15 | {{- end }} 16 | -------------------------------------------------------------------------------- /incubator/vps/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/apache/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/bastion/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-api/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | labels: 5 | app: {{ template "name" . }} 6 | component: kube-api 7 | heritage: {{ .Release.Service }} 8 | release: {{ .Release.Name }} 9 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 10 | name: {{ template "fullname" . }} 11 | namespace: kube-system 12 | spec: 13 | clusterIP: None 14 | ports: 15 | - name: https-metrics 16 | port: 443 17 | protocol: TCP 18 | targetPort: 443 19 | selector: 20 | k8s-app: kube-apiserver 21 | type: ClusterIP 22 | -------------------------------------------------------------------------------- /incubator/exporter-kube-etcd/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | labels: 5 | app: {{ template "name" . }} 6 | component: kube-etcd 7 | heritage: {{ .Release.Service }} 8 | release: {{ .Release.Name }} 9 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 10 | name: {{ template "fullname" . }} 11 | namespace: kube-system 12 | spec: 13 | clusterIP: None 14 | ports: 15 | - name: http-metrics 16 | port: 4001 17 | protocol: TCP 18 | targetPort: 4001 19 | selector: 20 | k8s-app: etcd-server 21 | type: ClusterIP 22 | -------------------------------------------------------------------------------- /incubator/istio/_charts/ingress/templates/autoscale.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.autoscaleMin }} 2 | apiVersion: autoscaling/v2beta1 3 | kind: HorizontalPodAutoscaler 4 | metadata: 5 | name: istio-ingress 6 | namespace: {{ .Release.Namespace }} 7 | spec: 8 | maxReplicas: {{ .Values.autoscaleMax }} 9 | minReplicas: {{ .Values.autoscaleMin }} 10 | scaleTargetRef: 11 | apiVersion: apps/v1beta1 12 | kind: Deployment 13 | name: istio-ingress 14 | metrics: 15 | - type: Resource 16 | resource: 17 | name: cpu 18 | targetAverageUtilization: 80 19 | {{ end }} 20 | -------------------------------------------------------------------------------- /incubator/openvpn/templates/vpn.pvc.yaml: -------------------------------------------------------------------------------- 1 | kind: PersistentVolumeClaim 2 | apiVersion: v1 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | app: {{ template "fullname" . }} 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | release: "{{ .Release.Name }}" 9 | heritage: "{{ .Release.Service }}" 10 | annotations: 11 | volume.beta.kubernetes.io/storage-class: {{ .Values.persistence.storageClass }} 12 | spec: 13 | accessModes: 14 | - {{ .Values.persistence.accessMode | quote }} 15 | resources: 16 | requests: 17 | storage: {{ .Values.persistence.size | quote }} -------------------------------------------------------------------------------- /incubator/postfix/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /test/Makefile: -------------------------------------------------------------------------------- 1 | all: monochart 2 | 3 | # Test incubator repo 4 | monochart: HELM_CHART_REPO_URL ?= https://charts.cloudposse.com 5 | monochart: HELM_CHART_VERSION ?= $(shell yq eval .version ../incubator/monochart/Chart.yaml) 6 | monochart: 7 | @echo "Testing for monochart $(HELM_CHART_VERSION)..." 8 | helm repo add test-incubator $(HELM_CHART_REPO_URL)/incubator 9 | helm repo update 10 | helm search repo test-incubator/monochart -l -o table --version $(HELM_CHART_VERSION) | grep -qv "No results found" 11 | helm pull test-incubator/monochart --version $(HELM_CHART_VERSION) 12 | @echo "Success!" 13 | 14 | -------------------------------------------------------------------------------- /incubator/alertmanager/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-node/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/pilot/templates/autoscale.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.autoscaleMin }} 2 | apiVersion: autoscaling/v2beta1 3 | kind: HorizontalPodAutoscaler 4 | metadata: 5 | name: istio-pilot 6 | namespace: {{ $.Release.Namespace }} 7 | spec: 8 | maxReplicas: {{ .Values.autoscaleMax }} 9 | minReplicas: {{ .Values.autoscaleMin }} 10 | scaleTargetRef: 11 | apiVersion: apps/v1beta1 12 | kind: Deployment 13 | name: istio-pilot 14 | metrics: 15 | - type: Resource 16 | resource: 17 | name: cpu 18 | targetAverageUtilization: 55 19 | --- 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /incubator/kube-prometheus/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} -------------------------------------------------------------------------------- /incubator/oauth2-proxy/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/prometheus/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-api/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-dns/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-etcd/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kubelets/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/ingress/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRole 3 | metadata: 4 | labels: 5 | app: {{ template "istio.name" . }} 6 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 7 | heritage: {{ .Release.Service }} 8 | release: {{ .Release.Name }} 9 | name: istio-ingress-{{ .Release.Namespace }} 10 | rules: 11 | - apiGroups: ["extensions"] 12 | resources: ["ingresses"] 13 | verbs: ["get", "watch", "list", "update"] 14 | - apiGroups: [""] 15 | resources: ["configmaps", "pods", "endpoints", "services"] 16 | verbs: ["get", "watch", "list"] 17 | -------------------------------------------------------------------------------- /incubator/prometheus-alerts/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/route53-kubernetes/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/syslog-forwarder/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-scheduler/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-state/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kubernetes/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.enabled }} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ .Values.serviceAccount.name }} 6 | {{- with index .Values.serviceAccount "annotations"}} 7 | annotations: 8 | {{- range $key, $value := . }} 9 | "{{ $key }}": "{{ $value }}" 10 | {{- end }} 11 | {{- end }} 12 | labels: 13 | app: {{ template "fluentd_kubernetes.name" . }} 14 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 15 | release: {{ .Release.Name }} 16 | heritage: {{ .Release.Service }} 17 | {{- end }} 18 | -------------------------------------------------------------------------------- /incubator/istio/_charts/pilot/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: istio-pilot-{{ .Release.Namespace }} 5 | labels: 6 | app: istio-pilot 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | roleRef: 11 | apiGroup: rbac.authorization.k8s.io 12 | kind: ClusterRole 13 | name: istio-pilot-{{ .Release.Namespace }} 14 | subjects: 15 | - kind: ServiceAccount 16 | name: istio-pilot-service-account 17 | namespace: {{ .Release.Namespace }} 18 | -------------------------------------------------------------------------------- /incubator/kubernetes-dashboard/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/prometheus-operator/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-scheduler/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | labels: 5 | app: {{ template "name" . }} 6 | component: kube-scheduler 7 | heritage: {{ .Release.Service }} 8 | release: {{ .Release.Name }} 9 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 10 | name: {{ template "fullname" . }} 11 | namespace: kube-system 12 | spec: 13 | clusterIP: None 14 | ports: 15 | - name: http-metrics 16 | port: 10251 17 | protocol: TCP 18 | targetPort: 10251 19 | selector: 20 | k8s-app: kube-scheduler 21 | type: ClusterIP 22 | 23 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: Kubernetes logs collect and forward with Fluentd. 3 | icon: https://raw.githubusercontent.com/fluent/fluentd-docs/master/public/logo/Fluentd_square.png 4 | name: fluentd-kubernetes 5 | version: 0.4.0 6 | appVersion: 1.8.0 7 | home: https://www.fluentd.org/ 8 | sources: 9 | - https://quay.io/repository/coreos/fluentd-kubernetes 10 | - https://github.com/coreos/fluentd-kubernetes-daemonset 11 | maintainers: 12 | - name: cloudposse 13 | email: hello@cloudposse.com 14 | - name: goruha 15 | email: goruha@gmail.com 16 | - name: 3h4x 17 | email: marcin@cloudposse.com 18 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.enabled }} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: {{ .Values.serviceAccount.name }} 6 | labels: 7 | app: {{ template "fluentd_kubernetes.name" . }} 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | rules: 12 | - apiGroups: 13 | - "" 14 | resources: 15 | - pods 16 | - namespaces 17 | verbs: 18 | - get 19 | - list 20 | - watch 21 | {{- end }} 22 | -------------------------------------------------------------------------------- /incubator/istio/_charts/pilot/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: istio-pilot 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | app: istio-pilot 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | spec: 12 | ports: 13 | - port: 15010 14 | name: grpc-xds # direct 15 | - port: 15011 16 | name: https-xds # mTLS 17 | - port: 8080 18 | name: http-legacy-discovery # direct 19 | - port: 9093 20 | name: http-monitoring 21 | selector: 22 | istio: pilot 23 | -------------------------------------------------------------------------------- /incubator/exporter-kube-controller-manager/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/mixer/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "mixer.name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "mixer.fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-node/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | app: {{ template "name" . }} 7 | component: node-exporter 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 11 | spec: 12 | type: {{ .Values.service.type }} 13 | ports: 14 | - name: metrics 15 | port: {{ .Values.service.externalPort }} 16 | protocol: TCP 17 | selector: 18 | app: {{ template "fullname" . }} 19 | component: node-exporter 20 | release: {{ .Release.Name }} -------------------------------------------------------------------------------- /incubator/istio/_charts/galley/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "galley.name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "galley.fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/gateways/templates/clusterrolebindings.yaml: -------------------------------------------------------------------------------- 1 | {{- range $key, $spec := .Values }} 2 | {{- if and (ne $key "global") (ne $key "enabled") }} 3 | {{- if $spec.enabled }} 4 | apiVersion: rbac.authorization.k8s.io/v1beta1 5 | kind: ClusterRoleBinding 6 | metadata: 7 | name: {{ $key }}-{{ $.Release.Namespace }} 8 | roleRef: 9 | apiGroup: rbac.authorization.k8s.io 10 | kind: ClusterRole 11 | name: {{ $key }}-{{ $.Release.Namespace }} 12 | subjects: 13 | - kind: ServiceAccount 14 | name: {{ $key }}-service-account 15 | namespace: {{ $.Release.Namespace }} 16 | --- 17 | {{- end }} 18 | {{- end }} 19 | {{- end }} 20 | -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "grafana.name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "grafana.fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/tracing/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "zipkin.name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "zipkin.fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-state/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | app: {{ template "name" . }} 7 | component: kube-state 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 11 | spec: 12 | type: {{ .Values.service.type }} 13 | ports: 14 | - port: {{ .Values.service.externalPort }} 15 | targetPort: {{ .Values.service.internalPort }} 16 | protocol: TCP 17 | name: {{ .Values.service.name }} 18 | selector: 19 | app: {{ .Chart.Name }} 20 | -------------------------------------------------------------------------------- /incubator/istio/_charts/security/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "security.name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "security.fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/sidecarInjectorWebhook/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRole 3 | metadata: 4 | name: istio-sidecar-injector-{{ .Release.Namespace }} 5 | labels: 6 | app: istio-sidecar-injector 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | rules: 11 | - apiGroups: [""] 12 | resources: ["configmaps"] 13 | verbs: ["get", "list", "watch"] 14 | - apiGroups: ["admissionregistration.k8s.io"] 15 | resources: ["mutatingwebhookconfigurations"] 16 | verbs: ["get", "list", "watch", "patch"] 17 | -------------------------------------------------------------------------------- /incubator/exporter-kube-controller-manager/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | labels: 5 | app: {{ template "name" . }} 6 | component: kube-controller-manager 7 | heritage: {{ .Release.Service }} 8 | release: {{ .Release.Name }} 9 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 10 | name: {{ template "fullname" . }} 11 | namespace: kube-system 12 | spec: 13 | clusterIP: None 14 | ports: 15 | - name: http-metrics 16 | port: 10252 17 | protocol: TCP 18 | targetPort: 10252 19 | selector: 20 | k8s-app: kube-controller-manager 21 | type: ClusterIP 22 | -------------------------------------------------------------------------------- /incubator/istio/_charts/galley/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: istio-galley-admin-role-binding-{{ .Release.Namespace }} 5 | labels: 6 | app: istio-galley 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | roleRef: 11 | apiGroup: rbac.authorization.k8s.io 12 | kind: ClusterRole 13 | name: istio-galley-{{ .Release.Namespace }} 14 | subjects: 15 | - kind: ServiceAccount 16 | name: istio-galley-service-account 17 | namespace: {{ .Release.Namespace }} 18 | -------------------------------------------------------------------------------- /incubator/istio/_charts/prometheus/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "prometheus.name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "prometheus.fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/templates/servicemonitor.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceMonitor.enabled }} 2 | kind: ServiceMonitor 3 | apiVersion: monitoring.coreos.com/v1 4 | metadata: 5 | name: {{ template "fluentd_kubernetes.fullname" . }} 6 | labels: 7 | app: {{ template "fluentd_kubernetes.name" . }} 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | spec: 12 | endpoints: 13 | - port: metrics 14 | selector: 15 | matchLabels: 16 | app: {{ template "fluentd_kubernetes.name" . }} 17 | release: {{ .Release.Name }} 18 | {{- end }} 19 | -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/values.yaml: -------------------------------------------------------------------------------- 1 | datasources: 2 | datasources.yaml: 3 | apiVersion: 1 4 | datasources: 5 | - name: Prometheus 6 | type: prometheus 7 | orgId: 1 8 | url: http://prometheus:9090 9 | access: proxy 10 | isDefault: true 11 | jsonData: 12 | timeInterval: 5s 13 | editable: true 14 | 15 | dashboardProviders: 16 | dashboardproviders.yaml: 17 | apiVersion: 1 18 | providers: 19 | - name: 'istio' 20 | orgId: 1 21 | folder: 'istio' 22 | type: file 23 | disableDeletion: false 24 | options: 25 | path: /var/lib/grafana/dashboards/istio 26 | -------------------------------------------------------------------------------- /incubator/istio/_charts/security/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: istio-citadel-{{ .Release.Namespace }} 5 | labels: 6 | app: {{ template "security.name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | roleRef: 11 | apiGroup: rbac.authorization.k8s.io 12 | kind: ClusterRole 13 | name: istio-citadel-{{ .Release.Namespace }} 14 | subjects: 15 | - kind: ServiceAccount 16 | name: istio-citadel-service-account 17 | namespace: {{ .Release.Namespace }} 18 | -------------------------------------------------------------------------------- /incubator/istio/_charts/servicegraph/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "servicegraph.name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "servicegraph.fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /incubator/service-level-operator/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRole 3 | metadata: 4 | name: {{ include "service-operator.name" . }} 5 | labels: 6 | app: {{ include "service-operator.name" . }} 7 | component: app 8 | rules: 9 | # Register and check CRDs. 10 | - apiGroups: 11 | - apiextensions.k8s.io 12 | resources: 13 | - customresourcedefinitions 14 | verbs: 15 | - "*" 16 | 17 | # Operator logic. 18 | - apiGroups: 19 | - monitoring.spotahome.com 20 | resources: 21 | - servicelevels 22 | - servicelevels/status 23 | verbs: 24 | - "*" -------------------------------------------------------------------------------- /incubator/teleport-ent-auth/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | ## Config files mounted by the Teleport Auth service 2 | apiVersion: v1 3 | kind: Secret 4 | metadata: 5 | name: {{ include "teleport-auth.fullname" . }} 6 | labels: 7 | app.kubernetes.io/name: {{ include "teleport-auth.name" . }} 8 | app.kubernetes.io/component: "{{ .Values.name }}" 9 | helm.sh/chart: {{ include "teleport-auth.chart" . }} 10 | app.kubernetes.io/instance: {{ .Release.Name }} 11 | app.kubernetes.io/managed-by: {{ .Release.Service }} 12 | type: Opaque 13 | data: 14 | {{- range $key, $value := .Values.config }} 15 | {{ $key }}: {{ $value | b64enc | quote }} 16 | {{- end }} 17 | -------------------------------------------------------------------------------- /incubator/istio/_charts/mixer/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: istio-mixer-admin-role-binding-{{ .Release.Namespace }} 5 | labels: 6 | app: {{ template "mixer.name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | roleRef: 11 | apiGroup: rbac.authorization.k8s.io 12 | kind: ClusterRole 13 | name: istio-mixer-{{ .Release.Namespace }} 14 | subjects: 15 | - kind: ServiceAccount 16 | name: istio-mixer-service-account 17 | namespace: {{ .Release.Namespace }} 18 | -------------------------------------------------------------------------------- /incubator/jenkins/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Secret 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | app: {{ template "fullname" . }} 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | release: "{{ .Release.Name }}" 9 | heritage: "{{ .Release.Service }}" 10 | type: Opaque 11 | data: 12 | {{ if .Values.Master.AdminPassword }} 13 | jenkins-admin-password: {{ .Values.Master.AdminPassword | printf "%v" | b64enc | quote }} 14 | {{ else }} 15 | jenkins-admin-password: {{ randAlphaNum 10 | b64enc | quote }} 16 | {{ end }} 17 | jenkins-admin-user: {{ .Values.Master.AdminUser | b64enc | quote }} 18 | -------------------------------------------------------------------------------- /incubator/istio/_charts/sidecarInjectorWebhook/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "sidecar-injector.name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "sidecar-injector.fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/zipkin-mysql-dep.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: extensions/v1beta1 2 | kind: Deployment 3 | metadata: 4 | name: zipkin-mysql 5 | labels: 6 | name: zipkin-mysql 7 | 8 | spec: 9 | replicas: 1 10 | template: 11 | metadata: 12 | labels: 13 | name: zipkin-mysql 14 | spec: 15 | containers: 16 | - name: zipkin-mysql 17 | image: "{{ .Values.zipkin.db.image.repository }}:{{ .Values.zipkin.db.image.tag }}" 18 | imagePullPolicy: {{ .Values.zipkin.db.image.pullPolicy }} 19 | ports: 20 | - name: mysql 21 | containerPort: 3306 22 | resources: 23 | {{ toYaml .Values.zipkin.db.resources | indent 12 }} -------------------------------------------------------------------------------- /incubator/jenkins/Chart.yaml: -------------------------------------------------------------------------------- 1 | # This Chart was forked from https://github.com/kubernetes/charts/blob/master/stable/jenkins/ 2 | # in order to provide the Cloud Posse flavor of CI/CD for Kubernetes. 3 | # 4 | # It's based largely on the AWESOME WORK of Lachlan Evenson, Vic Iglesias 5 | # 6 | apiVersion: v1 7 | description: A Jenkins Helm chart for Kubernetes 8 | home: https://jenkins.io/ 9 | icon: https://wiki.jenkins-ci.org/download/attachments/2916393/logo.png 10 | maintainers: 11 | - email: hello@cloudposse.com 12 | name: Cloud Posse 13 | name: jenkins 14 | sources: 15 | - https://github.com/cloudposse/jenkins 16 | - https://github.com/cloudposse/jenkins-slave 17 | version: 0.1.2 18 | -------------------------------------------------------------------------------- /incubator/bastion/templates/pvc.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.persistence.enabled }} 2 | --- 3 | kind: PersistentVolumeClaim 4 | apiVersion: v1 5 | metadata: 6 | name: {{ template "fullname" . }} 7 | labels: 8 | app: {{ template "fullname" . }} 9 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 10 | release: "{{ .Release.Name }}" 11 | heritage: "{{ .Release.Service }}" 12 | annotations: 13 | volume.alpha.kubernetes.io/storage-class: {{ .Values.persistence.storageClass | quote }} 14 | spec: 15 | accessModes: 16 | - {{ .Values.persistence.accessMode | quote }} 17 | resources: 18 | requests: 19 | storage: {{ .Values.persistence.size | quote }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /incubator/jenkins/templates/home-pvc.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.Persistence.Enabled }} 2 | --- 3 | kind: PersistentVolumeClaim 4 | apiVersion: v1 5 | metadata: 6 | name: {{ template "fullname" . }} 7 | labels: 8 | app: {{ template "fullname" . }} 9 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 10 | release: "{{ .Release.Name }}" 11 | heritage: "{{ .Release.Service }}" 12 | annotations: 13 | volume.beta.kubernetes.io/storage-class: {{ .Values.Persistence.StorageClass | quote }} 14 | spec: 15 | accessModes: 16 | - {{ .Values.Persistence.AccessMode | quote }} 17 | resources: 18 | requests: 19 | storage: {{ .Values.Persistence.Size | quote }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /incubator/teleport/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: {{ template "teleport.fullname" . }} 6 | labels: 7 | app: {{ template "teleport.name" . }} 8 | chart: {{ template "teleport.chart" . }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | roleRef: 12 | apiGroup: rbac.authorization.k8s.io 13 | kind: ClusterRole 14 | name: {{ template "teleport.fullname" . }} 15 | subjects: 16 | - kind: ServiceAccount 17 | name: {{ template "teleport.serviceAccountName" . }} 18 | namespace: {{ .Release.Namespace }} 19 | {{- end -}} 20 | -------------------------------------------------------------------------------- /packages/Makefile: -------------------------------------------------------------------------------- 1 | HELM ?= helm 2 | CURL ?= curl 3 | HELM_CHART_REPO_URL ?= https://charts.cloudposse.com 4 | 5 | %/index.yaml: $(wildcard */*.tgz) 6 | @$(CURL) --fail -s -q $(HELM_CHART_REPO_URL)/$@ -o /tmp/index.yaml; \ 7 | if [ $$? -eq 0 ]; then \ 8 | echo "## Merging index with $(HELM_CHART_REPO_URL)/$(dir $@)"; \ 9 | $(HELM) repo index $(dir $@) --merge /tmp/index.yaml --url $(HELM_CHART_REPO_URL)/$(dir $@) --debug; \ 10 | else \ 11 | echo "## Generating new index for $(HELM_CHART_REPO_URL)/$(dir $@)"; \ 12 | $(HELM) repo index $(dir $@) --url $(HELM_CHART_REPO_URL)/$(dir $@) --debug; \ 13 | fi; 14 | 15 | incubator/: incubator/index.yaml 16 | 17 | all: incubator/index.yaml 18 | 19 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/front-end-ingress.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.frontend.ingress.enabled }} 2 | --- 3 | apiVersion: extensions/v1beta1 4 | kind: Ingress 5 | metadata: 6 | name: sock-shop 7 | labels: 8 | dns: route53 9 | annotations: 10 | kubernetes.io/tls-acme: "true" 11 | domainName: {{ .Values.frontend.ingress.domain | quote }} 12 | spec: 13 | tls: 14 | - secretName: sock-shop-tls 15 | hosts: 16 | - {{ .Values.frontend.ingress.domain | quote }} 17 | rules: 18 | - host: {{ .Values.frontend.ingress.domain | quote }} 19 | http: 20 | paths: 21 | - path: / 22 | backend: 23 | serviceName: "front-end" 24 | servicePort: 80 25 | {{- end -}} -------------------------------------------------------------------------------- /incubator/istio/_charts/security/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRole 3 | metadata: 4 | name: istio-citadel-{{ .Release.Namespace }} 5 | labels: 6 | app: {{ template "security.name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | rules: 11 | - apiGroups: [""] 12 | resources: ["secrets"] 13 | verbs: ["create", "get", "watch", "list", "update", "delete"] 14 | - apiGroups: [""] 15 | resources: ["serviceaccounts"] 16 | verbs: ["get", "watch", "list"] 17 | - apiGroups: [""] 18 | resources: ["services"] 19 | verbs: ["get", "watch", "list"] 20 | -------------------------------------------------------------------------------- /incubator/codefresh-service-account/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: {{ include "common.fullname" . }} 5 | {{- with .Values.annotations }} 6 | annotations: 7 | {{ toYaml . | indent 4 }} 8 | {{- end }} 9 | labels: 10 | {{ include "common.labels.standard" . | indent 4 }} 11 | {{- with .Values.labels }} 12 | {{ toYaml . | indent 4 }} 13 | {{- end }} 14 | roleRef: 15 | apiGroup: rbac.authorization.k8s.io 16 | kind: ClusterRole 17 | name: {{ include "common.fullname" . }} 18 | subjects: 19 | - kind: ServiceAccount 20 | name: {{ include "common.fullname" . }} 21 | namespace: {{ .Release.Namespace }} 22 | -------------------------------------------------------------------------------- /incubator/istio/_charts/sidecarInjectorWebhook/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: istio-sidecar-injector-admin-role-binding-{{ .Release.Namespace }} 5 | labels: 6 | app: istio-sidecar-injector 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | release: {{ .Release.Name }} 10 | roleRef: 11 | apiGroup: rbac.authorization.k8s.io 12 | kind: ClusterRole 13 | name: istio-sidecar-injector-{{ .Release.Namespace }} 14 | subjects: 15 | - kind: ServiceAccount 16 | name: istio-sidecar-injector-service-account 17 | namespace: {{ .Release.Namespace }} 18 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes-aws/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | kind: ClusterRoleBinding 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | metadata: 4 | name: {{ template "fluentd_kubernetes.fullname" . }} 5 | labels: 6 | app: {{ template "fluentd_kubernetes.name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 8 | release: {{ .Release.Name }} 9 | heritage: {{ .Release.Service }} 10 | roleRef: 11 | kind: ClusterRole 12 | name: {{ template "fluentd_kubernetes.fullname" . }} 13 | apiGroup: rbac.authorization.k8s.io 14 | subjects: 15 | - kind: ServiceAccount 16 | name: {{ template "fluentd_kubernetes.fullname" . }} 17 | namespace: {{ .Release.Namespace }} 18 | -------------------------------------------------------------------------------- /incubator/thumbor/templates/persistent-volume-claim.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.persistence.enabled }} 2 | --- 3 | kind: PersistentVolumeClaim 4 | apiVersion: v1 5 | metadata: 6 | name: {{ template "fullname" . }} 7 | labels: 8 | app: {{ template "fullname" . }} 9 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 10 | release: "{{ .Release.Name }}" 11 | heritage: "{{ .Release.Service }}" 12 | annotations: 13 | volume.alpha.kubernetes.io/storage-class: {{ .Values.persistence.storageClass | quote }} 14 | spec: 15 | accessModes: 16 | - {{ .Values.persistence.accessMode | quote }} 17 | resources: 18 | requests: 19 | storage: {{ .Values.persistence.size | quote }} 20 | {{- end }} 21 | 22 | -------------------------------------------------------------------------------- /incubator/codefresh-service-account/templates/rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | namespace: kube-system 5 | name: {{ include "common.fullname" . }} 6 | {{- with .Values.annotations }} 7 | annotations: 8 | {{ toYaml . | indent 4 }} 9 | {{- end }} 10 | labels: 11 | {{ include "common.labels.standard" . | indent 4 }} 12 | {{- with .Values.labels }} 13 | {{ toYaml . | indent 4 }} 14 | {{- end }} 15 | roleRef: 16 | apiGroup: rbac.authorization.k8s.io 17 | kind: Role 18 | name: {{ include "common.fullname" . }} 19 | subjects: 20 | - kind: ServiceAccount 21 | name: {{ include "common.fullname" . }} 22 | namespace: {{ include "common.fullname" . }} 23 | -------------------------------------------------------------------------------- /incubator/nfs-provisioner/templates/service.yaml: -------------------------------------------------------------------------------- 1 | kind: Service 2 | apiVersion: v1 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | app: {{ template "fullname" . }} 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | release: "{{ .Release.Name }}" 9 | heritage: "{{ .Release.Service }}" 10 | spec: 11 | {{ if .Values.serviceIp }} 12 | clusterIP: {{ .Values.serviceIp }} 13 | {{ end }} 14 | type: ClusterIP 15 | ports: 16 | - name: nfs 17 | port: 2049 18 | - name: mountd 19 | port: 20048 20 | - name: rpcbind 21 | port: 111 22 | - name: rpcbind-udp 23 | port: 111 24 | protocol: UDP 25 | selector: 26 | app: {{ template "fullname" . }} 27 | -------------------------------------------------------------------------------- /incubator/service-level-operator/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for service-operator. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | 5 | replicaCount: 1 6 | 7 | ## Set default image, imageTag, and imagePullPolicy. 8 | image: 9 | repository: quay.io/spotahome/service-level-operator 10 | tag: "v0.2.0" 11 | pullPolicy: "IfNotPresent" 12 | readinessProbe: 13 | httpGet: 14 | path: /healthz/ready 15 | port: http 16 | livenessProbe: 17 | httpGet: 18 | path: /healthz/live 19 | port: http 20 | resources: 21 | limits: 22 | cpu: 220m 23 | memory: 254Mi 24 | requests: 25 | cpu: 120m 26 | memory: 128Mi 27 | prometheus: prometheus-operator-prometheus -------------------------------------------------------------------------------- /incubator/teleport-ent-auth/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: {{ template "teleport-auth.fullname" . }} 6 | labels: 7 | app: {{ template "teleport-auth.name" . }} 8 | chart: {{ template "teleport-auth.chart" . }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | roleRef: 12 | apiGroup: rbac.authorization.k8s.io 13 | kind: ClusterRole 14 | name: {{ template "teleport-auth.fullname" . }} 15 | subjects: 16 | - kind: ServiceAccount 17 | name: {{ template "teleport-auth.serviceAccountName" . }} 18 | namespace: {{ .Release.Namespace }} 19 | {{- end -}} 20 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | .build-harness 2 | 3 | # General files for the project 4 | pkg/* 5 | *.pyc 6 | bin/* 7 | .project 8 | /.bin 9 | /_test/secrets/*.json 10 | 11 | # OSX leaves these everywhere on SMB shares 12 | ._* 13 | 14 | # OSX trash 15 | .DS_Store 16 | 17 | # Files generated by JetBrains IDEs, e.g. IntelliJ IDEA 18 | .idea/ 19 | *.iml 20 | 21 | # Vscode files 22 | .vscode 23 | 24 | # Emacs save files 25 | *~ 26 | \#*\# 27 | .\#* 28 | 29 | # Vim-related files 30 | [._]*.s[a-w][a-z] 31 | [._]s[a-w][a-z] 32 | *.un~ 33 | Session.vim 34 | .netrwhist 35 | 36 | # Chart dependencies 37 | **/charts/*.tgz 38 | 39 | 40 | **/requirements.lock 41 | 42 | **/**/.values.yaml 43 | 44 | build-harness 45 | 46 | **/*/*.lock 47 | 48 | .atmos 49 | -------------------------------------------------------------------------------- /incubator/exporter-kube-dns/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | labels: 5 | app: {{ template "name" . }} 6 | component: kube-dns 7 | heritage: {{ .Release.Service }} 8 | release: {{ .Release.Name }} 9 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 10 | name: {{ template "fullname" . }} 11 | namespace: kube-system 12 | spec: 13 | clusterIP: None 14 | ports: 15 | - name: http-metrics-dnsmasq 16 | port: 10054 17 | protocol: TCP 18 | targetPort: 10054 19 | - name: http-metrics-skydns 20 | port: 10055 21 | protocol: TCP 22 | targetPort: 10055 23 | selector: 24 | k8s-app: kube-dns 25 | type: ClusterIP 26 | -------------------------------------------------------------------------------- /incubator/exporter-node/templates/servicemonitor.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: monitoring.coreos.com/v1alpha1 2 | kind: ServiceMonitor 3 | metadata: 4 | labels: 5 | app: prometheus 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | component: node-exporter 8 | heritage: "{{ .Release.Service }}" 9 | release: "{{ .Release.Name }}" 10 | prometheus: {{ .Release.Name }} 11 | name: {{ template "fullname" . }} 12 | spec: 13 | jobLabel: {{ template "name" . }} 14 | selector: 15 | matchLabels: 16 | app: {{ template "name" . }} 17 | component: node-exporter 18 | namespaceSelector: 19 | matchNames: 20 | - {{ .Release.Namespace | quote }} 21 | endpoints: 22 | - port: metrics 23 | interval: 15s -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.enabled }} 2 | kind: ClusterRoleBinding 3 | apiVersion: rbac.authorization.k8s.io/v1 4 | metadata: 5 | name: {{ .Values.serviceAccount.name }} 6 | labels: 7 | app: {{ template "fluentd_kubernetes.name" . }} 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | roleRef: 12 | kind: ClusterRole 13 | name: {{ .Values.serviceAccount.name }} 14 | apiGroup: rbac.authorization.k8s.io 15 | subjects: 16 | - kind: ServiceAccount 17 | name: {{ .Values.serviceAccount.name }} 18 | namespace: {{ .Release.Namespace }} 19 | {{- end }} 20 | -------------------------------------------------------------------------------- /incubator/istio/_charts/gateways/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- range $key, $spec := .Values }} 2 | {{- if and (ne $key "global") (ne $key "enabled") }} 3 | {{- if $spec.enabled }} 4 | apiVersion: rbac.authorization.k8s.io/v1beta1 5 | kind: ClusterRole 6 | metadata: 7 | labels: 8 | app: {{ template "istio.name" $ }} 9 | chart: {{ $.Chart.Name }}-{{ $.Chart.Version }} 10 | heritage: {{ $.Release.Service }} 11 | release: {{ $.Release.Name }} 12 | name: {{ $key }}-{{ $.Release.Namespace }} 13 | rules: 14 | - apiGroups: ["networking.istio.io"] 15 | resources: ["virtualservices", "destinationrules", "gateways"] 16 | verbs: ["get", "watch", "list", "update"] 17 | --- 18 | {{- end }} 19 | {{- end }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /incubator/teleport-ent-proxy/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: {{ template "teleport-proxy.fullname" . }} 6 | labels: 7 | app: {{ template "teleport-proxy.name" . }} 8 | chart: {{ template "teleport-proxy.chart" . }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | roleRef: 12 | apiGroup: rbac.authorization.k8s.io 13 | kind: ClusterRole 14 | name: {{ template "teleport-proxy.fullname" . }} 15 | subjects: 16 | - kind: ServiceAccount 17 | name: {{ template "teleport-proxy.serviceAccountName" . }} 18 | namespace: {{ .Release.Namespace }} 19 | {{- end -}} 20 | -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- 1 | -include $(shell curl -sSL -o .build-harness "https://cloudposse.tools/build-harness"; echo .build-harness) 2 | build: 3 | docker run -v $(CURDIR)/incubator:/build-harness/incubator -v $(CURDIR)/packages:/build-harness/packages \ 4 | -e HELM_CHART_REPO_URL=https://charts.cloudposse.com/incubator \ 5 | cloudposse/build-harness:1.10.0 -C incubator all 6 | 7 | index: 8 | docker run -v $(CURDIR)/incubator:/build-harness/incubator -v $(CURDIR)/packages:/build-harness/packages \ 9 | -e HELM_CHART_REPO_URL=https://charts.cloudposse.com/incubator \ 10 | cloudposse/build-harness:1.10.0 -C packages all 11 | 12 | all: build index 13 | @exit 0 14 | 15 | readme: 16 | @atmos readme 17 | 18 | readme/build: 19 | @atmos readme 20 | -------------------------------------------------------------------------------- /incubator/postfix/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for postfix. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | replicaCount: 1 5 | env: 6 | # SOME_VAR: SOME_VALUE 7 | image: 8 | repository: "cloudposse/postfix" 9 | tag: "latest" 10 | pullPolicy: Always 11 | smtp: 12 | domain: "cloudposse.local" 13 | password: "secret" 14 | relay: 15 | enabled: "false" 16 | host: 17 | port: 18 | tls: "false" 19 | user: 20 | password: 21 | service: 22 | name: smtp 23 | type: ClusterIP 24 | externalPort: 25 25 | internalPort: 25 26 | resources: 27 | limits: 28 | cpu: 100m 29 | memory: 128Mi 30 | requests: 31 | cpu: 100m 32 | memory: 128Mi 33 | 34 | -------------------------------------------------------------------------------- /incubator/prometheus/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | {{- if and (and .Values.config.specifiedInValues .Values.config.value ) ( not .Values.serviceMonitorSelector ) }} 2 | apiVersion: v1 3 | kind: Secret 4 | metadata: 5 | labels: 6 | app: {{ template "name" . }} 7 | chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 | heritage: {{ .Release.Service }} 9 | prometheus: {{ .Release.Name }} 10 | release: {{ .Release.Name }} 11 | {{ toYaml .Values.serviceMonitorsSelector | indent 4 }} 12 | name: prometheus-{{ .Release.Name }} 13 | data: 14 | configmaps.json: {{ include (print (dir $.Template.Name) "/_configmaps.json.tpl") . | b64enc | quote }} 15 | prometheus.yaml: {{ toYaml .Values.config.value | b64enc | quote }} 16 | {{- end }} 17 | -------------------------------------------------------------------------------- /incubator/openvpn/templates/vpn.service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | dns: route53 8 | annotations: 9 | domainName: {{ .Values.host }} 10 | dnsRecordType: "A" 11 | spec: 12 | type: {{ .Values.openvpn.service.type }} 13 | ports: 14 | - port: {{ template "exposed_port" .}} 15 | targetPort: 1194 16 | protocol: TCP 17 | name: "{{ .Values.openvpn.service.name }}-vpn" 18 | {{ if .Values.ui.ssl.enabled }} 19 | - port: 80 20 | targetPort: 80 21 | protocol: TCP 22 | name: "{{ .Values.openvpn.service.name }}-proxy" 23 | {{end}} 24 | selector: 25 | app: {{ template "fullname" . }} -------------------------------------------------------------------------------- /incubator/exporter-kube-state/templates/servicemonitor.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: monitoring.coreos.com/v1alpha1 2 | kind: ServiceMonitor 3 | metadata: 4 | labels: 5 | app: prometheus 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | component: kube-state 8 | heritage: "{{ .Release.Service }}" 9 | release: "{{ .Release.Name }}" 10 | prometheus: {{ .Release.Name }} 11 | name: {{ template "fullname" . }} 12 | spec: 13 | jobLabel: {{ template "name" . }} 14 | selector: 15 | matchLabels: 16 | app: {{ template "name" . }} 17 | component: kube-state 18 | namespaceSelector: 19 | matchNames: 20 | - {{ .Release.Namespace | quote }} 21 | endpoints: 22 | - port: {{ .Values.service.name }} 23 | interval: 15s -------------------------------------------------------------------------------- /incubator/heapster/templates/influxdb.pvc.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.influxdb.persistence.enabled }} 2 | --- 3 | kind: PersistentVolumeClaim 4 | apiVersion: v1 5 | metadata: 6 | name: {{ template "influxdb_fullname" . }} 7 | labels: 8 | app: {{ template "influxdb_fullname" . }} 9 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 10 | release: "{{ .Release.Name }}" 11 | heritage: "{{ .Release.Service }}" 12 | annotations: 13 | volume.alpha.kubernetes.io/storage-class: {{ .Values.influxdb.persistence.storageClass | quote }} 14 | spec: 15 | accessModes: 16 | - {{ .Values.influxdb.persistence.accessMode | quote }} 17 | resources: 18 | requests: 19 | storage: {{ .Values.influxdb.persistence.size | quote }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /incubator/istio/_charts/security/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: istio-security-custom-resources 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | app: istio-security 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | istio: security 12 | data: 13 | custom-resources.yaml: |- 14 | {{- if .Values.global.mtls.enabled }} 15 | {{- include "security-default.yaml.tpl" . | indent 4}} 16 | {{- else }} 17 | {{- include "security-permissive.yaml.tpl" . | indent 4}} 18 | {{- end }} 19 | run.sh: |- 20 | {{- include "install-custom-resources.sh.tpl" . | indent 4}} 21 | -------------------------------------------------------------------------------- /incubator/openvpn/templates/terminator.service.yaml: -------------------------------------------------------------------------------- 1 | {{ if .Values.ui.ssl.enabled }} 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: {{ template "fullname_terminator" . }} 6 | labels: 7 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 8 | spec: 9 | type: {{ .Values.ssl_terminator.service.type }} 10 | ports: 11 | - port: {{ .Values.ssl_terminator.service.http.externalPort }} 12 | targetPort: 80 13 | protocol: TCP 14 | name: {{ .Values.ssl_terminator.service.http.name }} 15 | - port: {{ .Values.ssl_terminator.service.https.externalPort }} 16 | targetPort: 443 17 | protocol: TCP 18 | name: {{ .Values.ssl_terminator.service.https.name }} 19 | selector: 20 | app: {{ template "fullname_terminator" . }} 21 | {{ end }} -------------------------------------------------------------------------------- /incubator/istio/_charts/gateways/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- range $key, $spec := .Values }} 2 | {{- if and (ne $key "global") (ne $key "enabled") }} 3 | {{- if $spec.enabled }} 4 | apiVersion: v1 5 | kind: ServiceAccount 6 | {{- if $.Values.global.imagePullSecrets }} 7 | imagePullSecrets: 8 | {{- range $.Values.global.imagePullSecrets }} 9 | - name: {{ . }} 10 | {{- end }} 11 | {{- end }} 12 | metadata: 13 | name: {{ $key }}-service-account 14 | namespace: {{ $spec.namespace | default $.Release.Namespace }} 15 | labels: 16 | app: {{ $spec.labels.istio }} 17 | chart: {{ $.Chart.Name }}-{{ $.Chart.Version }} 18 | heritage: {{ $.Release.Service }} 19 | release: {{ $.Release.Name }} 20 | --- 21 | {{- end }} 22 | {{- end }} 23 | {{- end }} 24 | -------------------------------------------------------------------------------- /incubator/nginx-default-backend/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for nginx-default-backend. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | replicaCount: 1 5 | maxUnavailable: 1 6 | image: 7 | repository: nginx 8 | tag: alpine 9 | pullPolicy: IfNotPresent 10 | service: 11 | name: nginx 12 | type: ClusterIP 13 | externalPort: 80 14 | internalPort: 8080 15 | resources: 16 | limits: 17 | cpu: 10m 18 | memory: 20Mi 19 | requests: 20 | cpu: 10m 21 | memory: 20Mi 22 | errors: 23 | configmap: default 24 | default: 25 | email: hello@cloudposse.com 26 | site: http://cloudposse.com 27 | client: 28 | - "404" 29 | server: 30 | - "500" 31 | - "502" 32 | - "503" 33 | - "504" -------------------------------------------------------------------------------- /incubator/istio/_charts/grafana/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: istio-grafana 5 | namespace: {{ .Release.Namespace }} 6 | labels: 7 | app: istio-grafana 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | istio: grafana 12 | data: 13 | {{- if .Values.datasources }} 14 | {{- range $key, $value := .Values.datasources }} 15 | {{ $key }}: | 16 | {{ toYaml $value | indent 4 }} 17 | {{- end -}} 18 | {{- end -}} 19 | 20 | {{- if .Values.dashboardProviders }} 21 | {{- range $key, $value := .Values.dashboardProviders }} 22 | {{ $key }}: | 23 | {{ toYaml $value | indent 4 }} 24 | {{- end -}} 25 | {{- end -}} 26 | -------------------------------------------------------------------------------- /incubator/istio/_charts/mixer/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{ $mixers := list "policy" "telemetry" }} 2 | {{- range $idx, $mname := $mixers }} 3 | apiVersion: v1 4 | kind: Service 5 | metadata: 6 | name: istio-{{ $mname }} 7 | namespace: {{ $.Release.Namespace }} 8 | labels: 9 | chart: {{ $.Chart.Name }}-{{ $.Chart.Version | replace "+" "_" }} 10 | release: {{ $.Release.Name }} 11 | istio: mixer 12 | spec: 13 | ports: 14 | - name: grpc-mixer 15 | port: 9091 16 | - name: grpc-mixer-mtls 17 | port: 15004 18 | - name: http-monitoring 19 | port: 9093 20 | {{- if eq $mname "telemetry" }} 21 | - name: prometheus 22 | port: 42422 23 | {{- end }} 24 | selector: 25 | istio: mixer 26 | istio-mixer-type: {{ $mname }} 27 | --- 28 | {{- end }} 29 | -------------------------------------------------------------------------------- /incubator/syslog-forwarder/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for papertrail. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | image: 5 | repository: "cloudposse/fluentd-remote-syslog" 6 | tag: "latest" 7 | pullPolicy: IfNotPresent 8 | 9 | forward: 10 | containers: true 11 | etcd: true 12 | kubelet: false 13 | kube_proxy: true 14 | kube_apiserver: false 15 | kube_controller_manager: true 16 | kube_scheduler: true 17 | 18 | syslog: 19 | kubernetes: 20 | host: logs2.papertrailapp.com 21 | port: 12345 22 | default: 23 | host: logs2.papertrailapp.com 24 | port: 45678 25 | resources: 26 | limits: 27 | cpu: 100m 28 | memory: 128Mi 29 | requests: 30 | cpu: 100m 31 | memory: 128Mi 32 | 33 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes-aws/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.prometheus.createService }} 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: {{ template "fluentd_kubernetes.fullname" . }}-prometheus 6 | labels: 7 | app: {{ template "fluentd_kubernetes.name" . }}-prometheus 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | 12 | spec: 13 | type: ClusterIP 14 | ports: 15 | - name: prometheus 16 | port: 9224 17 | protocol: TCP 18 | targetPort: {{ index .Values.env "FLUENTD_PROMETHEUS_PORT" | default "24231" }} 19 | selector: 20 | app: {{ template "fluentd_kubernetes.name" . }} 21 | release: {{ .Release.Name }} 22 | {{- end }} 23 | -------------------------------------------------------------------------------- /incubator/istio/_charts/gateways/templates/autoscale.yaml: -------------------------------------------------------------------------------- 1 | {{- range $key, $spec := .Values }} 2 | {{- if and (ne $key "global") (ne $key "enabled") }} 3 | {{- if and $spec.enabled $spec.autoscaleMin }} 4 | apiVersion: autoscaling/v2beta1 5 | kind: HorizontalPodAutoscaler 6 | metadata: 7 | name: {{ $key }} 8 | namespace: {{ $spec.namespace | default $.Release.Namespace }} 9 | spec: 10 | maxReplicas: {{ $spec.autoscaleMax }} 11 | minReplicas: {{ $spec.autoscaleMin }} 12 | scaleTargetRef: 13 | apiVersion: apps/v1beta1 14 | kind: Deployment 15 | name: {{ $key }} 16 | metrics: 17 | - type: Resource 18 | resource: 19 | name: cpu 20 | targetAverageUtilization: 60 21 | --- 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | -------------------------------------------------------------------------------- /incubator/istio/values-istio-one-namespace.yaml: -------------------------------------------------------------------------------- 1 | # This is used to generate istio.yaml used for deprecated CI/CD testing. 2 | global: 3 | # controlPlaneMtls enabled. Will result in delays starting the pods while secrets are 4 | # propagated, not recommended for tests. 5 | controlPlaneSecurityEnabled: false 6 | 7 | mtls: 8 | # Default setting for service-to-service mtls. Can be set explicitly using 9 | # destination rules or service annotations. 10 | enabled: false 11 | 12 | ## imagePullSecrets for all ServiceAccount. Must be set for any clustser configured with private docker registry. 13 | # imagePullSecrets: 14 | # - name: "private-registry-key" 15 | 16 | # Default is 10s second 17 | refreshInterval: 1s 18 | 19 | istiotesting: 20 | oneNameSpace: true 21 | -------------------------------------------------------------------------------- /incubator/teleport/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: {{ template "teleport.fullname" . }} 6 | labels: 7 | app: {{ template "teleport.name" . }} 8 | chart: {{ template "teleport.chart" . }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | rules: 12 | - apiGroups: 13 | - certificates.k8s.io 14 | resources: 15 | - certificatesigningrequests 16 | verbs: 17 | - create 18 | - delete 19 | - get 20 | - list 21 | - watch 22 | - apiGroups: 23 | - certificates.k8s.io 24 | resources: 25 | - certificatesigningrequests/approval 26 | - certificatesigningrequests/status 27 | verbs: 28 | - update 29 | {{- end -}} 30 | -------------------------------------------------------------------------------- /incubator/istio/values-istio-one-namespace-auth.yaml: -------------------------------------------------------------------------------- 1 | # This is used to generate istio.yaml used for deprecated CI/CD testing. 2 | global: 3 | # controlPlaneMtls enabled. Will result in delays starting the pods while secrets are 4 | # propagated, not recommended for tests. 5 | controlPlaneSecurityEnabled: true 6 | 7 | mtls: 8 | # Default setting for service-to-service mtls. Can be set explicitly using 9 | # destination rules or service annotations. 10 | enabled: true 11 | 12 | ## imagePullSecrets for all ServiceAccount. Must be set for any clustser configured with private docker registry. 13 | # imagePullSecrets: 14 | # - name: "private-registry-key" 15 | 16 | # Default is 10s second 17 | refreshInterval: 1s 18 | 19 | istiotesting: 20 | oneNameSpace: true 21 | -------------------------------------------------------------------------------- /incubator/portal/templates/dashboard.service.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: {{ include "common.fullname" . }} 6 | annotations: 7 | {{ toYaml .Values.dashboard.service.annotations | indent 4 }} 8 | labels: 9 | {{ include "common.labels.standard" . | indent 4 }} 10 | {{- if .Values.dashboard.service.annotations }} 11 | annotations: 12 | {{ toYaml .Values.dashboard.service.annotations | indent 4 }} 13 | {{- end }} 14 | spec: 15 | type: ClusterIP 16 | ports: 17 | - port: {{ .Values.dashboard.service.externalPort }} 18 | targetPort: {{ .Values.dashboard.service.internalPort }} 19 | protocol: TCP 20 | name: {{ .Release.Name }} 21 | selector: 22 | app: {{ template "common.name" . }} 23 | release: {{ .Release.Name | quote }} 24 | -------------------------------------------------------------------------------- /incubator/exporter-kube-etcd/templates/servicemonitor.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: monitoring.coreos.com/v1alpha1 2 | kind: ServiceMonitor 3 | metadata: 4 | labels: 5 | app: prometheus 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | component: kube-etcd 8 | heritage: "{{ .Release.Service }}" 9 | release: "{{ .Release.Name }}" 10 | prometheus: {{ .Release.Name }} 11 | name: {{ template "fullname" . }} 12 | spec: 13 | jobLabel: {{ template "fullname" . }} 14 | selector: 15 | matchLabels: 16 | app: {{ template "name" . }} 17 | component: kube-etcd 18 | namespaceSelector: 19 | matchNames: 20 | - "kube-system" 21 | endpoints: 22 | - port: http-metrics 23 | interval: 15s 24 | bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token -------------------------------------------------------------------------------- /incubator/nginx-ingress/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | kind: ConfigMap 2 | apiVersion: v1 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | k8s-addon: ingress-nginx.addons.k8s.io 7 | data: 8 | use-proxy-protocol: {{ .Values.useProxyProtocol | quote }} 9 | custom-http-errors: " 10 | {{- range $index, $element := .Values.customHttpErrors.client -}} 11 | {{ if $index }},{{ end }}{{ $element }} 12 | {{- end -}} 13 | {{- if and ( not ( empty .Values.customHttpErrors.client ) ) ( not ( empty .Values.customHttpErrors.server ) ) -}} 14 | , 15 | {{- end -}} 16 | {{- range $index, $element := .Values.customHttpErrors.server -}} 17 | {{ if $index }},{{ end }}{{ $element }} 18 | {{- end -}} 19 | " 20 | {{ toYaml .Values.configMap.options | indent 2 }} -------------------------------------------------------------------------------- /incubator/github-authorized-keys/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | description: |- 3 | Use GitHub teams to manage system user accounts and authorized_keys. 4 | WARNING: 5 | * We recommend that you install this chart into the `kube-system` namespace. 6 | * There should only be one installation per cluster (other releases will fail because of name conflict) 7 | name: github-authorized-keys 8 | version: 0.2.2 9 | keywords: 10 | - ssh 11 | - github 12 | - pam 13 | - authentication 14 | - authorized_keys 15 | home: http://cloudposse.com 16 | sources: 17 | - https://github.com/cloudposse/github-authorized-keys 18 | - https://github.com/cloudposse/charts/tree/master/incubator/library/github-authorized-keys 19 | maintainers: 20 | - name: Cloud Posse 21 | email: hello@cloudposse.com 22 | engine: gotpl 23 | -------------------------------------------------------------------------------- /demo/sock-shop/templates/zipkin-dep.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: extensions/v1beta1 2 | kind: Deployment 3 | metadata: 4 | name: zipkin 5 | labels: 6 | name: zipkin 7 | 8 | spec: 9 | replicas: {{ .Values.zipkin.app.replicaCount }} 10 | template: 11 | metadata: 12 | labels: 13 | name: zipkin 14 | spec: 15 | containers: 16 | - name: zipkin 17 | image: "{{ .Values.zipkin.app.image.repository }}:{{ .Values.zipkin.app.image.tag }}" 18 | imagePullPolicy: {{ .Values.zipkin.app.image.pullPolicy }} 19 | ports: 20 | - containerPort: 9411 21 | env: 22 | - name: STORAGE_TYPE 23 | value: mysql 24 | - name: MYSQL_HOST 25 | value: zipkin-mysql 26 | resources: 27 | {{ toYaml .Values.zipkin.app.resources | indent 12 }} -------------------------------------------------------------------------------- /incubator/exporter-kube-scheduler/templates/servicemonitor.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: monitoring.coreos.com/v1alpha1 2 | kind: ServiceMonitor 3 | metadata: 4 | labels: 5 | app: prometheus 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 7 | component: kube-scheduler 8 | heritage: "{{ .Release.Service }}" 9 | release: "{{ .Release.Name }}" 10 | prometheus: {{ .Release.Name }} 11 | name: {{ template "fullname" . }} 12 | spec: 13 | jobLabel: {{ template "fullname" . }} 14 | selector: 15 | matchLabels: 16 | app: {{ template "name" . }} 17 | component: kube-scheduler 18 | namespaceSelector: 19 | matchNames: 20 | - "kube-system" 21 | endpoints: 22 | - port: http-metrics 23 | interval: 15s 24 | bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token -------------------------------------------------------------------------------- /incubator/istio/_charts/kiali/templates/ingress.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.ingress.enabled -}} 2 | apiVersion: extensions/v1beta1 3 | kind: Ingress 4 | metadata: 5 | name: kiali 6 | namespace: {{ .Release.Namespace }} 7 | labels: 8 | app: kiali 9 | annotations: 10 | {{- range $key, $value := .Values.ingress.annotations }} 11 | {{ $key }}: {{ $value | quote }} 12 | {{- end }} 13 | spec: 14 | rules: 15 | {{- range $host := .Values.ingress.hosts }} 16 | - host: {{ $host }} 17 | http: 18 | paths: 19 | - path: / 20 | backend: 21 | serviceName: kiali 22 | servicePort: 20001 23 | {{- end -}} 24 | {{- if .Values.ingress.tls }} 25 | tls: 26 | {{ toYaml .Values.ingress.tls | indent 4 }} 27 | {{- end -}} 28 | {{- end -}} 29 | -------------------------------------------------------------------------------- /incubator/istio/_charts/mixer/templates/autoscale.yaml: -------------------------------------------------------------------------------- 1 | {{- range $key, $spec := .Values }} 2 | {{- if or (eq $key "istio-policy") (eq $key "istio-telemetry") }} 3 | {{- if and $spec.autoscaleEnabled $spec.autoscaleMin }} 4 | apiVersion: autoscaling/v2beta1 5 | kind: HorizontalPodAutoscaler 6 | metadata: 7 | name: {{ $key }} 8 | namespace: {{ $.Release.Namespace }} 9 | spec: 10 | maxReplicas: {{ $spec.autoscaleMax }} 11 | minReplicas: {{ $spec.autoscaleMin }} 12 | scaleTargetRef: 13 | apiVersion: apps/v1beta1 14 | kind: Deployment 15 | name: {{ $key }} 16 | metrics: 17 | - type: Resource 18 | resource: 19 | name: cpu 20 | targetAverageUtilization: {{ $spec.cpu.targetAverageUtilization }} 21 | --- 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | -------------------------------------------------------------------------------- /incubator/teleport-ent-auth/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: {{ template "teleport-auth.fullname" . }} 6 | labels: 7 | app: {{ template "teleport-auth.name" . }} 8 | chart: {{ template "teleport-auth.chart" . }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | rules: 12 | - apiGroups: 13 | - certificates.k8s.io 14 | resources: 15 | - certificatesigningrequests 16 | verbs: 17 | - create 18 | - delete 19 | - get 20 | - list 21 | - watch 22 | - apiGroups: 23 | - certificates.k8s.io 24 | resources: 25 | - certificatesigningrequests/approval 26 | - certificatesigningrequests/status 27 | verbs: 28 | - update 29 | {{- end -}} 30 | -------------------------------------------------------------------------------- /incubator/fluentd-kubernetes/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{ if .Values.service.enabled -}} 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: {{ template "fluentd_kubernetes.fullname" . }} 6 | labels: 7 | app: {{ template "fluentd_kubernetes.name" . }} 8 | chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} 9 | release: {{ .Release.Name }} 10 | heritage: {{ .Release.Service }} 11 | spec: 12 | type: {{ .Values.service.type }} 13 | ports: 14 | {{- range $port := .Values.service.ports }} 15 | - name: {{ $port.name }} 16 | port: {{ $port.port }} 17 | targetPort: {{ $port.targetPort }} 18 | protocol: {{ $port.protocol }} 19 | {{- end }} 20 | selector: 21 | app: {{ template "fluentd_kubernetes.name" . }} 22 | release: {{ .Release.Name }} 23 | {{- end }} -------------------------------------------------------------------------------- /incubator/github-authorized-keys/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Github Authorized Keys Installed 2 | 3 | Access to the kubernetes servers is now authorized to GitHub team members in {{if .Values.githubTeam}}{{ .Values.githubTeam }}{{end}}{{if .Values.githubTeamID}}(id: {{ .Values.githubTeamID }}){{end}} of the {{ .Values.githubOrganization }} organization. 4 | 5 | Users are synchronized every {{ default "300" .Values.syncUsersInterval }} seconds. 6 | 7 | !!!!!!!!!!!!!!!!!!!!!!!!!! IMPORTANT !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 8 | | Github Authorized Keys runs a pod on each node as a DaemonSet. | 9 | | There is no way to update release. | 10 | | You have to delete and install release in order to apply changes. | 11 | !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 12 | -------------------------------------------------------------------------------- /incubator/monochart/templates/crd.yaml: -------------------------------------------------------------------------------- 1 | {{- $root := . -}} 2 | {{- $serviceName := include "common.fullname" . -}} 3 | 4 | {{- range $api, $crd := .Values.crd -}} 5 | {{- range $kind, $resources := $crd -}} 6 | {{- range $name, $resource := $resources -}} 7 | 8 | {{- if $resource.enabled }} 9 | --- 10 | apiVersion: {{ $api | quote }} 11 | kind: {{ $kind | quote }} 12 | metadata: 13 | name: {{ include "common.fullname" $root }}-{{ $name }} 14 | {{- with $resource.annotations }} 15 | annotations: 16 | {{ toYaml . | indent 4 }} 17 | {{- end }} 18 | labels: 19 | {{- with $resource.labels }} 20 | {{ toYaml . | indent 4 }} 21 | {{- end }} 22 | {{ include "common.labels.standard" $root | indent 4 }} 23 | spec: 24 | {{ toYaml $resource.spec | indent 2 }} 25 | {{- end }} 26 | 27 | {{- end }} 28 | {{- end }} 29 | {{- end }} 30 | -------------------------------------------------------------------------------- /incubator/istio/values-istio-auth.yaml: -------------------------------------------------------------------------------- 1 | # This is used to generate istio-auth.yaml for automated CI/CD test, using v1/alpha1 2 | # or v2/alpha3 with 'gradual migration' (using env variable at inject time). 3 | global: 4 | # controlPlaneMtls enabled. Will result in delays starting the pods while secrets are 5 | # propagated, not recommended for tests. 6 | controlPlaneSecurityEnabled: true 7 | 8 | mtls: 9 | # Default setting for service-to-service mtls. Can be set explicitly using 10 | # destination rules or service annotations. 11 | enabled: true 12 | 13 | 14 | ## imagePullSecrets for all ServiceAccount. Must be set for any clustser configured with private docker registry. 15 | # imagePullSecrets: 16 | # - name: "private-registry-key" 17 | 18 | # Default is 10s second 19 | refreshInterval: 1s 20 | 21 | -------------------------------------------------------------------------------- /incubator/istio/values-istio-galley.yaml: -------------------------------------------------------------------------------- 1 | # This is used to generate istio.yaml 2 | global: 3 | # controlPlaneMtls enabled. Will result in delays starting the pods while secrets are 4 | # propagated, not recommended for tests. 5 | controlPlaneSecurityEnabled: false 6 | 7 | mtls: 8 | # Default setting for service-to-service mtls. Can be set explicitly using 9 | # destination rules or service annotations. 10 | enabled: false 11 | 12 | ## imagePullSecrets for all ServiceAccount. Must be set for any clustser configured with private docker registry. 13 | # imagePullSecrets: 14 | # - name: "private-registry-key" 15 | 16 | # Default is 10s second 17 | refreshInterval: 1s 18 | 19 | istiotesting: 20 | oneNameSpace: false 21 | 22 | prometheus: 23 | enabled: true 24 | 25 | galley: 26 | enabled: true 27 | -------------------------------------------------------------------------------- /incubator/bastion/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: {{ template "fullname" . }} 5 | labels: 6 | chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}" 7 | {{- with .Values.labels }} 8 | {{- toYaml . | nindent 4 }} 9 | {{- end }} 10 | {{- if .Values.service.labels }} 11 | {{ toYaml .Values.service.labels | indent 4 }} 12 | {{- end }} 13 | {{- if .Values.service.annotations }} 14 | annotations: 15 | {{ toYaml .Values.service.annotations | indent 4 }} 16 | {{- end }} 17 | spec: 18 | type: {{ .Values.service.type }} 19 | ports: 20 | - port: {{ .Values.service.externalPort }} 21 | targetPort: {{ .Values.service.internalPort }} 22 | protocol: TCP 23 | name: {{ .Values.service.name }} 24 | selector: 25 | app: {{ template "fullname" . }} 26 | 27 | -------------------------------------------------------------------------------- /incubator/istio/values-istio-auth-galley.yaml: -------------------------------------------------------------------------------- 1 | # This is used to generate istio.yaml 2 | global: 3 | # controlPlaneMtls enabled. Will result in delays starting the pods while secrets are 4 | # propagated, not recommended for tests. 5 | controlPlaneSecurityEnabled: true 6 | 7 | mtls: 8 | # Default setting for service-to-service mtls. Can be set explicitly using 9 | # destination rules or service annotations. 10 | enabled: true 11 | 12 | ## imagePullSecrets for all ServiceAccount. Must be set for any clustser configured with private docker registry. 13 | # imagePullSecrets: 14 | # - name: "private-registry-key" 15 | 16 | # Default is 10s second 17 | refreshInterval: 1s 18 | 19 | istiotesting: 20 | oneNameSpace: false 21 | 22 | prometheus: 23 | enabled: true 24 | 25 | galley: 26 | enabled: true 27 | -------------------------------------------------------------------------------- /incubator/istio/values-istio-demo.yaml: -------------------------------------------------------------------------------- 1 | # This is used to generate istio.yaml for minimal, demo mode. 2 | # It is shipped with the release, used for bookinfo or quick installation of istio. 3 | # Includes components used in the demo, defaults to alpha3 rules. 4 | 5 | # If running in minikube you may add: 6 | # --set global.nodePort=true 7 | # --set ingressgateway.service.type=NodePort 8 | global: 9 | nodePort: false 10 | 11 | ingress: 12 | # Ingress is used for migration, for alpha3 we expect ingressgateway 13 | enabled: false 14 | 15 | prometheus: 16 | enabled: true 17 | 18 | sidecarInjectorWebhook: 19 | enabled: true 20 | enableNamespacesByDefault: false 21 | 22 | grafana: 23 | enabled: true 24 | 25 | tracing: 26 | enabled: true 27 | 28 | servicegraph: 29 | enabled: true 30 | 31 | galley: 32 | enabled: true 33 | -------------------------------------------------------------------------------- /incubator/fail-whale/values.yaml: -------------------------------------------------------------------------------- 1 | # Default values for nginx-default-backend. 2 | # This is a YAML-formatted file. 3 | # Declare variables to be passed into your templates. 4 | replicaCount: 1 5 | image: 6 | repository: nginx 7 | tag: alpine 8 | pullPolicy: IfNotPresent 9 | service: 10 | name: nginx 11 | type: ClusterIP 12 | externalPort: 80 13 | internalPort: 8080 14 | resources: 15 | limits: 16 | cpu: 10m 17 | memory: 20Mi 18 | requests: 19 | cpu: 10m 20 | memory: 20Mi 21 | errors: 22 | configmap: default 23 | default: 24 | email: hello@cloudposse.com 25 | site: http://cloudposse.com 26 | refresh: 120 27 | content: 28 | title: "We'll be back soon!" 29 | message: "This website is currently undergoing maintenance and will be back online shortly.
Thanks for your patience." 30 | -------------------------------------------------------------------------------- /incubator/teleport-ent-auth/templates/secret-resources.yaml: -------------------------------------------------------------------------------- 1 | ## Secret for bootstrap resource files mounted by the bootstrap container 2 | {{- if .Values.bootstrap.enabled }} 3 | apiVersion: v1 4 | kind: Secret 5 | metadata: 6 | name: {{ include "teleport-auth.fullname" . }}-resources 7 | labels: 8 | app.kubernetes.io/name: {{ include "teleport-auth.name" . }} 9 | app.kubernetes.io/component: "{{ .Values.name }}" 10 | helm.sh/chart: {{ include "teleport-auth.chart" . }} 11 | app.kubernetes.io/instance: {{ .Release.Name }} 12 | app.kubernetes.io/managed-by: {{ .Release.Service }} 13 | type: Opaque 14 | data: 15 | bootstrap-resources.sh: {{ .Values.bootstrap.script | b64enc | quote }} 16 | {{- range $key, $value := .Values.bootstrap.resources }} 17 | {{ $key }}: {{ $value | b64enc | quote }} 18 | {{- end }} 19 | 20 | {{- end }} -------------------------------------------------------------------------------- /incubator/nfs-provisioner/templates/pvc.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.persistence.enabled }} 2 | --- 3 | kind: PersistentVolumeClaim 4 | apiVersion: v1 5 | metadata: 6 | name: {{ template "fullname" . }} 7 | labels: 8 | app: {{ template "fullname" . }} 9 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 10 | release: "{{ .Release.Name }}" 11 | heritage: "{{ .Release.Service }}" 12 | annotations: 13 | spec: 14 | accessModes: 15 | - {{ .Values.persistence.accessMode | quote }} 16 | resources: 17 | requests: 18 | storage: {{ .Values.persistence.size | quote }} 19 | {{- if .Values.persistence.storageClass }} 20 | {{- if (eq "-" .Values.persistence.storageClass) }} 21 | storageClassName: "" 22 | {{- else }} 23 | storageClassName: {{ .Values.persistence.storageClass | quote }} 24 | {{- end }} 25 | {{- end }} 26 | {{- end }} 27 | -------------------------------------------------------------------------------- /incubator/nginx-ingress/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Expand the name of the chart. 4 | */}} 5 | {{- define "name" -}} 6 | {{- default .Chart.Name .Values.nameOverride | trunc 24 -}} 7 | {{- end -}} 8 | 9 | {{/* 10 | Create a default fully qualified app name. 11 | We truncate at 24 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). 12 | */}} 13 | {{- define "fullname" -}} 14 | {{- $name := default .Chart.Name .Values.nameOverride -}} 15 | {{- printf "%s-%s" .Release.Name $name | trunc 24 -}} 16 | {{- end -}} 17 | {{/* 18 | Create a default fully qualified backend name 19 | */}} 20 | {{- define "default-backend" -}} 21 | {{- $name := default .Chart.Name .Values.nameOverride -}} 22 | {{- printf "%s-%s" .Release.Name "nginx-default-backend" | trunc 24 -}} 23 | {{- end -}} 24 | --------------------------------------------------------------------------------