diff --git a/charts/kubedb-autoscaler/README.md b/charts/kubedb-autoscaler/README.md index fcde998ed..adcb0e95d 100644 --- a/charts/kubedb-autoscaler/README.md +++ b/charts/kubedb-autoscaler/README.md @@ -59,9 +59,9 @@ The following table lists the configurable parameters of the `kubedb-autoscaler` | operator.tag | KubeDB enterprise operator container image tag | "" | | operator.securityContext | Security options this container should run with | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} | | operator.resources | Compute Resources required by this container | {} | -| waitfor.registry | Docker registry used to pull KubeDB enterprise k8s-wait-for image | appscode | -| waitfor.repository | KubeDB enterprise k8s-wait-for container image | k8s-wait-for | -| waitfor.tag | KubeDB enterprise k8s-wait-for container image tag | "v2.0" | +| waitfor.registry | Docker registry used to pull KubeDB enterprise kubectl-nonroot image | appscode | +| waitfor.repository | KubeDB enterprise kubectl-nonroot container image | kubectl-nonroot | +| waitfor.tag | KubeDB enterprise kubectl-nonroot container image tag | "1.31" | | imagePullSecrets | Specify an array of imagePullSecrets. Secrets must be manually created in the namespace.
Example:
`helm template charts/kubedb-autoscaler \`
`--set imagePullSecrets[0].name=sec0 \`
`--set imagePullSecrets[1].name=sec1` | [] | | imagePullPolicy | Container image pull policy | IfNotPresent | | criticalAddon | If true, installs KubeDB operator as critical addon | false | diff --git a/charts/kubedb-autoscaler/templates/deployment.yaml b/charts/kubedb-autoscaler/templates/deployment.yaml index b148361b7..def5fb212 100644 --- a/charts/kubedb-autoscaler/templates/deployment.yaml +++ b/charts/kubedb-autoscaler/templates/deployment.yaml @@ -58,9 +58,11 @@ spec: - name: wait image: {{ include "waitfor.registry" . }}/{{ .Values.waitfor.repository }}:{{ .Values.waitfor.tag }} imagePullPolicy: {{ .Values.imagePullPolicy }} - args: - - "service" - - "-lapp.kubernetes.io/name=kubedb-webhook-server" + command: + - /bin/sh + - -c + - kubectl wait --for=create -n {{ .Release.Namespace }} service -l 'app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m && + kubectl wait --for=condition=kubedb.com/conversion=true -n {{ .Release.Namespace }} pods -l 'app.kubernetes.io/instance={{ .Release.Name }},app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m securityContext: {{- toYaml .Values.operator.securityContext | nindent 10 }} resources: diff --git a/charts/kubedb-autoscaler/values.yaml b/charts/kubedb-autoscaler/values.yaml index 8d4327621..10f487745 100644 --- a/charts/kubedb-autoscaler/values.yaml +++ b/charts/kubedb-autoscaler/values.yaml @@ -48,14 +48,14 @@ operator: # requests: # cpu: 100m # memory: 128Mi -# Docker registry containing k8s-wait-for images +# Docker registry containing kubectl-nonroot images waitfor: - # Docker registry used to pull KubeDB enterprise k8s-wait-for image + # Docker registry used to pull KubeDB enterprise kubectl-nonroot image registry: appscode - # KubeDB enterprise k8s-wait-for container image - repository: k8s-wait-for - # KubeDB enterprise k8s-wait-for container image tag - tag: "v2.0" + # KubeDB enterprise kubectl-nonroot container image + repository: kubectl-nonroot + # KubeDB enterprise kubectl-nonroot container image tag + tag: "1.31" # Specify an array of imagePullSecrets. # Secrets must be manually created in the namespace. diff --git a/charts/kubedb-crd-manager/README.md b/charts/kubedb-crd-manager/README.md index 3a4b866bc..8185c327f 100644 --- a/charts/kubedb-crd-manager/README.md +++ b/charts/kubedb-crd-manager/README.md @@ -65,6 +65,7 @@ The following table lists the configurable parameters of the `kubedb-crd-manager | serviceAccount.create | Specifies whether a service account should be created | true | | serviceAccount.annotations | Annotations to add to the service account | {} | | serviceAccount.name | The name of the service account to use. If not set and create is true, a name is generated using the fullname template | | +| featureGates.Cassandra | | false | | featureGates.ClickHouse | | false | | featureGates.Druid | | false | | featureGates.Elasticsearch | | false | diff --git a/charts/kubedb-crd-manager/values.yaml b/charts/kubedb-crd-manager/values.yaml index 7894722a6..405d0a4bb 100644 --- a/charts/kubedb-crd-manager/values.yaml +++ b/charts/kubedb-crd-manager/values.yaml @@ -69,6 +69,7 @@ serviceAccount: name: featureGates: + Cassandra: false ClickHouse: false Druid: false Elasticsearch: false diff --git a/charts/kubedb-dashboard/README.md b/charts/kubedb-dashboard/README.md index f7ea07fe5..d9ff80754 100644 --- a/charts/kubedb-dashboard/README.md +++ b/charts/kubedb-dashboard/README.md @@ -58,9 +58,9 @@ The following table lists the configurable parameters of the `kubedb-dashboard` | operator.tag | KubeDB dashboard operator container image tag | "" | | operator.securityContext | Security options this container should run with | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} | | operator.resources | Compute Resources required by this container | {} | -| waitfor.registry | Docker registry used to pull KubeDB enterprise k8s-wait-for image | appscode | -| waitfor.repository | KubeDB enterprise k8s-wait-for container image | k8s-wait-for | -| waitfor.tag | KubeDB enterprise k8s-wait-for container image tag | "v2.0" | +| waitfor.registry | Docker registry used to pull KubeDB enterprise kubectl-nonroot image | appscode | +| waitfor.repository | KubeDB enterprise kubectl-nonroot container image | kubectl-nonroot | +| waitfor.tag | KubeDB enterprise kubectl-nonroot container image tag | "1.31" | | imagePullSecrets | Specify an array of imagePullSecrets. Secrets must be manually created in the namespace.
Example:
`helm template charts/kubedb-dashboard \`
`--set imagePullSecrets[0].name=sec0 \`
`--set imagePullSecrets[1].name=sec1` | [] | | imagePullPolicy | Container image pull policy | IfNotPresent | | criticalAddon | If true, installs KubeDB dashboard operator as critical addon | false | diff --git a/charts/kubedb-dashboard/templates/deployment.yaml b/charts/kubedb-dashboard/templates/deployment.yaml index 403c2d2d5..d2c39e2f0 100644 --- a/charts/kubedb-dashboard/templates/deployment.yaml +++ b/charts/kubedb-dashboard/templates/deployment.yaml @@ -37,9 +37,11 @@ spec: - name: wait image: {{ include "waitfor.registry" . }}/{{ .Values.waitfor.repository }}:{{ .Values.waitfor.tag }} imagePullPolicy: {{ .Values.imagePullPolicy }} - args: - - "service" - - "-lapp.kubernetes.io/name=kubedb-webhook-server" + command: + - /bin/sh + - -c + - kubectl wait --for=create -n {{ .Release.Namespace }} service -l 'app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m && + kubectl wait --for=condition=kubedb.com/conversion=true -n {{ .Release.Namespace }} pods -l 'app.kubernetes.io/instance={{ .Release.Name }},app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m securityContext: {{- toYaml .Values.operator.securityContext | nindent 10 }} resources: diff --git a/charts/kubedb-dashboard/values.yaml b/charts/kubedb-dashboard/values.yaml index 08d6dc7f7..8126349eb 100644 --- a/charts/kubedb-dashboard/values.yaml +++ b/charts/kubedb-dashboard/values.yaml @@ -46,14 +46,14 @@ operator: # requests: # cpu: 100m # memory: 128Mi -# Docker registry containing k8s-wait-for images +# Docker registry containing kubectl-nonroot images waitfor: - # Docker registry used to pull KubeDB enterprise k8s-wait-for image + # Docker registry used to pull KubeDB enterprise kubectl-nonroot image registry: appscode - # KubeDB enterprise k8s-wait-for container image - repository: k8s-wait-for - # KubeDB enterprise k8s-wait-for container image tag - tag: "v2.0" + # KubeDB enterprise kubectl-nonroot container image + repository: kubectl-nonroot + # KubeDB enterprise kubectl-nonroot container image tag + tag: "1.31" # Specify an array of imagePullSecrets. # Secrets must be manually created in the namespace. diff --git a/charts/kubedb-ops-manager/README.md b/charts/kubedb-ops-manager/README.md index c9def4976..2c62afe01 100644 --- a/charts/kubedb-ops-manager/README.md +++ b/charts/kubedb-ops-manager/README.md @@ -59,9 +59,9 @@ The following table lists the configurable parameters of the `kubedb-ops-manager | operator.tag | KubeDB ops manager container image tag | "" | | operator.securityContext | Security options this container should run with | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} | | operator.resources | Compute Resources required by this container | {} | -| waitfor.registry | Docker registry used to pull KubeDB enterprise k8s-wait-for image | appscode | -| waitfor.repository | KubeDB enterprise k8s-wait-for container image | k8s-wait-for | -| waitfor.tag | KubeDB enterprise k8s-wait-for container image tag | "v2.0" | +| waitfor.registry | Docker registry used to pull KubeDB enterprise kubectl-nonroot image | appscode | +| waitfor.repository | KubeDB enterprise kubectl-nonroot container image | kubectl-nonroot | +| waitfor.tag | KubeDB enterprise kubectl-nonroot container image tag | "1.31" | | imagePullSecrets | Specify an array of imagePullSecrets. Secrets must be manually created in the namespace.
Example:
`helm template charts/kubedb-ops-manager \`
`--set imagePullSecrets[0].name=sec0 \`
`--set imagePullSecrets[1].name=sec1` | [] | | imagePullPolicy | Container image pull policy | IfNotPresent | | criticalAddon | If true, installs KubeDB operator as critical addon | false | diff --git a/charts/kubedb-ops-manager/templates/deployment.yaml b/charts/kubedb-ops-manager/templates/deployment.yaml index 1330dfefb..cdf754969 100644 --- a/charts/kubedb-ops-manager/templates/deployment.yaml +++ b/charts/kubedb-ops-manager/templates/deployment.yaml @@ -58,9 +58,11 @@ spec: - name: wait image: {{ include "waitfor.registry" . }}/{{ .Values.waitfor.repository }}:{{ .Values.waitfor.tag }} imagePullPolicy: {{ .Values.imagePullPolicy }} - args: - - "service" - - "-lapp.kubernetes.io/name=kubedb-webhook-server" + command: + - /bin/sh + - -c + - kubectl wait --for=create -n {{ .Release.Namespace }} service -l 'app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m && + kubectl wait --for=condition=kubedb.com/conversion=true -n {{ .Release.Namespace }} pods -l 'app.kubernetes.io/instance={{ .Release.Name }},app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m securityContext: {{- toYaml .Values.operator.securityContext | nindent 10 }} resources: diff --git a/charts/kubedb-ops-manager/values.yaml b/charts/kubedb-ops-manager/values.yaml index 3d3746863..4a5b2284a 100644 --- a/charts/kubedb-ops-manager/values.yaml +++ b/charts/kubedb-ops-manager/values.yaml @@ -53,14 +53,14 @@ operator: # requests: # cpu: 100m # memory: 128Mi -# Docker registry containing k8s-wait-for images +# Docker registry containing kubectl-nonroot images waitfor: - # Docker registry used to pull KubeDB enterprise k8s-wait-for image + # Docker registry used to pull KubeDB enterprise kubectl-nonroot image registry: appscode - # KubeDB enterprise k8s-wait-for container image - repository: k8s-wait-for - # KubeDB enterprise k8s-wait-for container image tag - tag: "v2.0" + # KubeDB enterprise kubectl-nonroot container image + repository: kubectl-nonroot + # KubeDB enterprise kubectl-nonroot container image tag + tag: "1.31" # Specify an array of imagePullSecrets. # Secrets must be manually created in the namespace. diff --git a/charts/kubedb-provisioner/README.md b/charts/kubedb-provisioner/README.md index 7c5166562..702697be7 100644 --- a/charts/kubedb-provisioner/README.md +++ b/charts/kubedb-provisioner/README.md @@ -59,9 +59,9 @@ The following table lists the configurable parameters of the `kubedb-provisioner | operator.tag | KubeDB operator container image tag | "" | | operator.securityContext | Security options this container should run with | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} | | operator.resources | Compute Resources required by this container | {} | -| waitfor.registry | Docker registry used to pull KubeDB enterprise k8s-wait-for image | appscode | -| waitfor.repository | KubeDB enterprise k8s-wait-for container image | k8s-wait-for | -| waitfor.tag | KubeDB enterprise k8s-wait-for container image tag | "v2.0" | +| waitfor.registry | Docker registry used to pull KubeDB enterprise kubectl-nonroot image | appscode | +| waitfor.repository | KubeDB enterprise kubectl-nonroot container image | kubectl-nonroot | +| waitfor.tag | KubeDB enterprise kubectl-nonroot container image tag | "1.31" | | imagePullSecrets | Specify an array of imagePullSecrets. Secrets must be manually created in the namespace.
Example:
`helm template charts/kubedb-provisioner \`
`--set imagePullSecrets[0].name=sec0 \`
`--set imagePullSecrets[1].name=sec1` | [] | | imagePullPolicy | Container image pull policy | IfNotPresent | | criticalAddon | If true, installs KubeDB operator as critical addon | false | diff --git a/charts/kubedb-provisioner/templates/deployment.yaml b/charts/kubedb-provisioner/templates/deployment.yaml index a82c28353..018119767 100644 --- a/charts/kubedb-provisioner/templates/deployment.yaml +++ b/charts/kubedb-provisioner/templates/deployment.yaml @@ -58,9 +58,11 @@ spec: - name: wait image: {{ include "waitfor.registry" . }}/{{ .Values.waitfor.repository }}:{{ .Values.waitfor.tag }} imagePullPolicy: {{ .Values.imagePullPolicy }} - args: - - "service" - - "-lapp.kubernetes.io/name=kubedb-webhook-server" + command: + - /bin/sh + - -c + - kubectl wait --for=create -n {{ .Release.Namespace }} service -l 'app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m && + kubectl wait --for=condition=kubedb.com/conversion=true -n {{ .Release.Namespace }} pods -l 'app.kubernetes.io/instance={{ .Release.Name }},app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m securityContext: {{- toYaml .Values.operator.securityContext | nindent 10 }} resources: diff --git a/charts/kubedb-provisioner/values.yaml b/charts/kubedb-provisioner/values.yaml index 77b93b4ad..03b834aea 100644 --- a/charts/kubedb-provisioner/values.yaml +++ b/charts/kubedb-provisioner/values.yaml @@ -53,14 +53,14 @@ operator: # requests: # cpu: 100m # memory: 128Mi -# Docker registry containing k8s-wait-for images +# Docker registry containing kubectl-nonroot images waitfor: - # Docker registry used to pull KubeDB enterprise k8s-wait-for image + # Docker registry used to pull KubeDB enterprise kubectl-nonroot image registry: appscode - # KubeDB enterprise k8s-wait-for container image - repository: k8s-wait-for - # KubeDB enterprise k8s-wait-for container image tag - tag: "v2.0" + # KubeDB enterprise kubectl-nonroot container image + repository: kubectl-nonroot + # KubeDB enterprise kubectl-nonroot container image tag + tag: "1.31" # Specify an array of imagePullSecrets. # Secrets must be manually created in the namespace. diff --git a/charts/kubedb-schema-manager/README.md b/charts/kubedb-schema-manager/README.md index a5d51dcb7..e85344aa1 100644 --- a/charts/kubedb-schema-manager/README.md +++ b/charts/kubedb-schema-manager/README.md @@ -58,9 +58,9 @@ The following table lists the configurable parameters of the `kubedb-schema-mana | operator.tag | KubeDB schema manager container image tag | "" | | operator.securityContext | Security options this container should run with | {"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}} | | operator.resources | Compute Resources required by this container | {} | -| waitfor.registry | Docker registry used to pull KubeDB enterprise k8s-wait-for image | appscode | -| waitfor.repository | KubeDB enterprise k8s-wait-for container image | k8s-wait-for | -| waitfor.tag | KubeDB enterprise k8s-wait-for container image tag | "v2.0" | +| waitfor.registry | Docker registry used to pull KubeDB enterprise kubectl-nonroot image | appscode | +| waitfor.repository | KubeDB enterprise kubectl-nonroot container image | kubectl-nonroot | +| waitfor.tag | KubeDB enterprise kubectl-nonroot container image tag | "1.31" | | imagePullSecrets | Specify an array of imagePullSecrets. Secrets must be manually created in the namespace.
Example:
`helm template charts/kubedb-schema-manager \`
`--set imagePullSecrets[0].name=sec0 \`
`--set imagePullSecrets[1].name=sec1` | [] | | imagePullPolicy | Container image pull policy | IfNotPresent | | criticalAddon | If true, installs KubeDB schema manager as critical addon | false | diff --git a/charts/kubedb-schema-manager/templates/deployment.yaml b/charts/kubedb-schema-manager/templates/deployment.yaml index cb9059a84..09e250e16 100644 --- a/charts/kubedb-schema-manager/templates/deployment.yaml +++ b/charts/kubedb-schema-manager/templates/deployment.yaml @@ -58,9 +58,11 @@ spec: - name: wait image: {{ include "waitfor.registry" . }}/{{ .Values.waitfor.repository }}:{{ .Values.waitfor.tag }} imagePullPolicy: {{ .Values.imagePullPolicy }} - args: - - "service" - - "-lapp.kubernetes.io/name=kubedb-webhook-server" + command: + - /bin/sh + - -c + - kubectl wait --for=create -n {{ .Release.Namespace }} service -l 'app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m && + kubectl wait --for=condition=kubedb.com/conversion=true -n {{ .Release.Namespace }} pods -l 'app.kubernetes.io/instance={{ .Release.Name }},app.kubernetes.io/name=kubedb-webhook-server' --timeout=5m securityContext: {{- toYaml .Values.operator.securityContext | nindent 10 }} resources: diff --git a/charts/kubedb-schema-manager/values.yaml b/charts/kubedb-schema-manager/values.yaml index 6a495244e..ace9bbd50 100644 --- a/charts/kubedb-schema-manager/values.yaml +++ b/charts/kubedb-schema-manager/values.yaml @@ -46,14 +46,14 @@ operator: # requests: # cpu: 100m # memory: 128Mi -# Docker registry containing k8s-wait-for images +# Docker registry containing kubectl-nonroot images waitfor: - # Docker registry used to pull KubeDB enterprise k8s-wait-for image + # Docker registry used to pull KubeDB enterprise kubectl-nonroot image registry: appscode - # KubeDB enterprise k8s-wait-for container image - repository: k8s-wait-for - # KubeDB enterprise k8s-wait-for container image tag - tag: "v2.0" + # KubeDB enterprise kubectl-nonroot container image + repository: kubectl-nonroot + # KubeDB enterprise kubectl-nonroot container image tag + tag: "1.31" # Specify an array of imagePullSecrets. # Secrets must be manually created in the namespace.