Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Migrate helm charts from opensearch-devops repo (opensearch-project#7)
* Adding a new folder to host Helm related code Signed-off-by: Barani <[email protected]> * Helm Chart for OpenSearch (opensearch-project#4) * Create basic structure of OpenSearch helm chart Signed-off-by: Dhiraj Jain <[email protected]> * Add templates and change values Signed-off-by: Dhiraj Jain <[email protected]> * Change statefulset and configmap to resolve indentation issue Signed-off-by: Dhiraj Jain <[email protected]> * Fix issues in templates Signed-off-by: Dhiraj Jain <[email protected]> * Fix typos in statefulset.yaml * Add multinode deployment feature Signed-off-by: Dhiraj Jain <[email protected]> * Update version to reflect the OpenSearch version * Add explicit security configuration * Update values.yaml * Create placeholder README.md Signed-off-by: Dhiraj Jain <[email protected]> * Minimum masters should be 3 * Add YAML support for config. sysctl vm.mem fix. * Fixing PSP. Adding better sysctl logic. * Adding ref for systctl * PSP False by default * Disable HTTP SSL by default for Demo. * Fix Chart version to sync with OpenSearch Version Signed-off-by: Dhiraj Jain <[email protected]> * Change cluster name and enable SSL by default Signed-off-by: Dhiraj Jain <[email protected]> Co-authored-by: Aaron Layfield <[email protected]> * fix: give networkpolicy objects a unique name (opensearch-project#16) This fixes the problem of installing this chart multiple times in the same namespace and having the network policy name conflict. Signed-off-by: Scott Leggett <[email protected]> * fix: use the stable chart appVersion as image tag by default (opensearch-project#17) Using :latest by default is going to lead to clusters with version skew as pods schedule onto new nodes. So use a stable tag instead. Signed-off-by: Scott Leggett <[email protected]> * OpenSearch Dashboards Helm Chart (opensearch-project#10) * Scaffold OpenSearch Dashboards Helm Chart Signed-off-by: Dhiraj Jain <[email protected]> * Fix error for connection refused Signed-off-by: Dhiraj Jain <[email protected]> * Add RBAC functionality Signed-off-by: Dhiraj Jain <[email protected]> * Add security configurations in the chart Signed-off-by: Dhiraj Jain <[email protected]> * Address issues and comments Signed-off-by: Dhiraj Jain <[email protected]> * Fix templates Signed-off-by: Dhiraj Jain <[email protected]> * Disable SSL by default * Address comments for beautification * Address comments Signed-off-by: Dhiraj Jain <[email protected]> * chore: update demo config section (opensearch-project#24) This snippet doesn't make sense in a kubernetes statefulset. Signed-off-by: Scott Leggett <[email protected]> * added secretMounts to values.yaml w/ example config (opensearch-project#29) Signed-off-by: johannes.reppin <[email protected]> Co-authored-by: johannes.reppin <[email protected]> * Change persistence config to make it more coherent w/ other helm charts (opensearch-project#33) Signed-off-by: johannes.reppin <[email protected]> Co-authored-by: johannes.reppin <[email protected]> * add Volumes and change broken (!) yaml indentation (opensearch-project#31) Signed-off-by: johannes.reppin <[email protected]> Co-authored-by: johannes.reppin <[email protected]> * support for current ingress apiVersion (opensearch-project#47) * Helm Chart Fixes for Env variables and volumes (opensearch-project#35) * Helm Chart Fixes for Env variables and volumes The opensearch-dashboards chart failed to render correctly when utilizing the extraEnvs flag, caused by incorrect indentation. The opensearch chart failed to render when utlizing the secrets for the security config, this was due to them being in the env section. This pull request reqolves both issues, verified via running helm template with the minumal values files included here: ```yaml envFrom: - secretRef: name: kibana-secrets extraEnvs: - name: TENANT_ID valueFrom: secretKeyRef: name: kibana-secrets key: tenantID ``` ```yaml securityConfig: enabled: true configSecret: "security-config" internalUsersSecret: "internal-users-config" rolesMappingSecret: "roles-mapping-config" rolesSecret: "roles-config" ``` Signed-off-by: Harrison Goscenski <[email protected]> * Updating paths in sts to be dynamic Updating the paths specified in the sts for opensearch to utilize .Values.opensearchHome to allow for dynamic paths, with a default of `/usr/share/opensearch` which should be sufficient for most users. Signed-off-by: Harrison Goscenski <[email protected]> * Fixing config path in opensearch-dashboards (opensearch-project#38) * Fixing config path in opensearch-dashboards The manifests rendered by the Helm chart place the user provided config into the incorrect directory. This simply updates that location to the correct path and updates the values.yaml file to use the correct default config file so that the user provided setting override the defaults. Signed-off-by: Harrison Goscenski <[email protected]> * Updating cert paths to opensearch-dashboards Cert paths also need to utilize new filesystem location for opensearch-dashboards config. Signed-off-by: Harrison Goscenski <[email protected]> * Resolves issue with securityConfig path (opensearch-project#41) * Resolves issue with securityConfig path Issue opensearch-project#39 This updates the securityConfig path in values to use the correct value for opensearch. Signed-off-by: Harrison Goscenski <[email protected]> * Fixing bad auto formatting Removing unneeded indentation/newlines. Signed-off-by: Harrison Goscenski <[email protected]> * Fixing missed auto formatting errors Signed-off-by: Harrison Goscenski <[email protected]> * resolve issue about .Values.opensearchHome (opensearch-project#52) refer to this: opensearch-project/opensearch-devops@fe831db#commitcomment-55395428 Error Msg: nil pointer evaluating interface {}.opensearchHome * Fix helm chart can not be deployed without ssl (opensearch-project#56) * Fixing issue exposed by changes in opensearch-project#38 After switching the name of the config file, and removing the shadowing between the default (from the docker container opensearch-dashbaords.yaml) and the default from the helm chart (dashboards.yaml) there is an issue with the certs that are attempting to be used. In order for this to work with the defaults, disabled TLS verification will be needed, and then disabling TLS to remain in line with the defaults. I added a commented out section showing what could potentially be used as TLS config if the user chooses to enable it. Signed-off-by: Harrison Goscenski <[email protected]> * Using conventional yaml formatting for ssl config Moving comments around to follow relevant code and utilizing nested yaml format rather than dot format. Signed-off-by: Harrison Goscenski <[email protected]> * Changing Folder name to Charts * Change deafult configuration for dashboards Signed-off-by: TheAlgo <[email protected]> * Update securityconfig.yaml to remove extra spaces Signed-off-by: TheAlgo <[email protected]> Co-authored-by: Barani <[email protected]> Co-authored-by: Aaron Layfield <[email protected]> Co-authored-by: Scott Leggett <[email protected]> Co-authored-by: Johannes Reppin <[email protected]> Co-authored-by: johannes.reppin <[email protected]> Co-authored-by: paltryeffort <[email protected]> Co-authored-by: hgoscenski-imanage <[email protected]> Co-authored-by: Nagle Zhang <[email protected]>
- Loading branch information