openstack/openstack-helm-infra
Code Issues Proposed changes

Merge "Enable key-duplicates and octal-values yamllint checks"

Browse Source
This commit is contained in:
Zuul 2020-06-18 04:49:03 +00:00 committed by Gerrit Code Review
commit 0a35fd827e
119 changed files with 206 additions and 209 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
calico/templates/daemonset-calico-node.yaml
View File

@ -285,15 +285,15 @@ spec:
- name: calico-etc
configMap:
name: calico-etc
defaultMode: 0444
defaultMode: 292
- name: calico-bird
configMap:
name: calico-bird
defaultMode: 0444
defaultMode: 292
- name: calico-bin
configMap:
name: calico-bin
defaultMode: 0555
defaultMode: 365
- name: calico-etcd-secrets
secret:
secretName: calico-etcd-secrets

4
calico/templates/deployment-calico-kube-controllers.yaml
View File

@ -77,8 +77,6 @@ spec:
matchLabels:
k8s-app: calico-kube-controllers
{{ tuple $envAll "calico" "kube-controllers" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 6 }}
strategy:
type: Recreate
{{ tuple $envAll | include "helm-toolkit.snippets.kubernetes_upgrades_deployment" | indent 2 }}
template:
metadata:
@ -174,5 +172,5 @@ spec:
- name: calico-etcd-secrets
secret:
secretName: calico-etcd-secrets
defaultMode: 0400
defaultMode: 256
{{- end }}

2
calico/templates/job-calico-settings.yaml
View File

@ -100,7 +100,7 @@ spec:
- name: calico-bin
configMap:
name: calico-bin
defaultMode: 0555
defaultMode: 365
- name: calico-etcd-secrets
secret:
secretName: calico-etcd-secrets

4
ceph-client/templates/cronjob-checkPGs.yaml
View File

@ -129,11 +129,11 @@ spec:
- name: ceph-client-bin
configMap:
name: ceph-client-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-client-etc
configMap:
name: ceph-client-etc
defaultMode: 0444
defaultMode: 292
- name: ceph-client-admin-keyring
secret:
defaultMode: 420

2
ceph-client/templates/cronjob-defragosds.yaml
View File

@ -106,5 +106,5 @@ spec:
- name: ceph-client-bin
configMap:
name: ceph-client-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
ceph-client/templates/deployment-checkdns.yaml
View File

@ -115,5 +115,5 @@ spec:
- name: ceph-client-bin
configMap:
name: ceph-client-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

4
ceph-client/templates/deployment-mds.yaml
View File

@ -147,11 +147,11 @@ spec:
- name: ceph-client-etc
configMap:
name: ceph-client-etc
defaultMode: 0444
defaultMode: 292
- name: ceph-client-bin
configMap:
name: ceph-client-bin
defaultMode: 0555
defaultMode: 365
- name: pod-var-lib-ceph
emptyDir: {}
- name: ceph-client-admin-keyring

4
ceph-client/templates/deployment-mgr.yaml
View File

@ -184,11 +184,11 @@ spec:
- name: ceph-client-bin
configMap:
name: ceph-client-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-client-etc
configMap:
name: ceph-client-etc
defaultMode: 0444
defaultMode: 292
- name: pod-var-lib-ceph
emptyDir: {}
- name: ceph-client-admin-keyring

4
ceph-client/templates/job-bootstrap.yaml
View File

@ -70,11 +70,11 @@ spec:
- name: ceph-client-bin
configMap:
name: ceph-client-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-client-etc
configMap:
name: ceph-client-etc
defaultMode: 0444
defaultMode: 292
- name: ceph-client-admin-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin }}

4
ceph-client/templates/job-rbd-pool.yaml
View File

@ -89,11 +89,11 @@ spec:
- name: ceph-client-etc
configMap:
name: ceph-client-etc
defaultMode: 0444
defaultMode: 292
- name: ceph-client-bin
configMap:
name: ceph-client-bin
defaultMode: 0555
defaultMode: 365
- name: pod-var-lib-ceph
emptyDir: {}
- name: pod-run

4
ceph-client/templates/pod-helm-tests.yaml
View File

@ -81,12 +81,12 @@ spec:
- name: ceph-client-bin
configMap:
name: ceph-client-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-client-admin-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin }}
- name: ceph-client-etc
configMap:
name: ceph-client-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

4
ceph-mon/templates/daemonset-mon.yaml
View File

@ -243,11 +243,11 @@ spec:
- name: ceph-mon-bin
configMap:
name: ceph-mon-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-mon-etc
configMap:
name: ceph-mon-etc
defaultMode: 0444
defaultMode: 292
- name: pod-var-lib-ceph
hostPath:
path: {{ .Values.conf.storage.mon.directory }}

4
ceph-mon/templates/deployment-moncheck.yaml
View File

@ -114,11 +114,11 @@ spec:
- name: ceph-mon-etc
configMap:
name: ceph-mon-etc
defaultMode: 0444
defaultMode: 292
- name: ceph-mon-bin
configMap:
name: ceph-mon-bin
defaultMode: 0555
defaultMode: 365
- name: pod-var-lib-ceph
emptyDir: {}
- name: ceph-client-admin-keyring

4
ceph-mon/templates/job-bootstrap.yaml
View File

@ -72,11 +72,11 @@ spec:
- name: ceph-mon-bin
configMap:
name: ceph-mon-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-mon-etc
configMap:
name: ceph-mon-etc
defaultMode: 0444
defaultMode: 292
- name: ceph-client-admin-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin }}

4
ceph-mon/templates/job-keyring.yaml
View File

@ -120,10 +120,10 @@ spec:
- name: ceph-mon-bin
configMap:
name: ceph-mon-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-templates
configMap:
name: ceph-templates
defaultMode: 0444
defaultMode: 292
{{- end }}
{{- end }}

4
ceph-mon/templates/job-storage-admin-keys.yaml
View File

@ -117,9 +117,9 @@ spec:
- name: ceph-mon-bin
configMap:
name: ceph-mon-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-templates
configMap:
name: ceph-templates
defaultMode: 0444
defaultMode: 292
{{- end }}

4
ceph-osd/templates/daemonset-osd.yaml
View File

@ -433,11 +433,11 @@ spec:
- name: ceph-osd-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }}
defaultMode: 0555
defaultMode: 365
- name: ceph-osd-etc
configMap:
name: {{ $configMapName }}
defaultMode: 0444
defaultMode: 292
- name: ceph-bootstrap-osd-keyring
secret:
secretName: {{ .Values.secrets.keyrings.osd }}

4
ceph-osd/templates/job-bootstrap.yaml
View File

@ -69,11 +69,11 @@ spec:
- name: ceph-osd-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }}
defaultMode: 0555
defaultMode: 365
- name: ceph-osd-etc
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }}
defaultMode: 0444
defaultMode: 292
- name: ceph-osd-admin-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin }}

4
ceph-osd/templates/job-post-apply.yaml
View File

@ -126,11 +126,11 @@ spec:
- name: ceph-osd-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }}
defaultMode: 0555
defaultMode: 365
- name: ceph-osd-etc
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }}
defaultMode: 0444
defaultMode: 292
- name: ceph-osd-admin-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin }}

4
ceph-osd/templates/pod-helm-tests.yaml
View File

@ -72,12 +72,12 @@ spec:
- name: ceph-osd-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "bin" | quote }}
defaultMode: 0555
defaultMode: 365
- name: ceph-client-admin-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin }}
- name: ceph-osd-etc
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "etc" | quote }}
defaultMode: 0444
defaultMode: 292
{{- end }}

2
ceph-provisioners/templates/deployment-cephfs-provisioner.yaml
View File

@ -197,5 +197,5 @@ spec:
- name: ceph-provisioners-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}

2
ceph-provisioners/templates/deployment-rbd-provisioner.yaml
View File

@ -187,5 +187,5 @@ spec:
- name: ceph-provisioners-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}

4
ceph-provisioners/templates/job-bootstrap.yaml
View File

@ -69,11 +69,11 @@ spec:
- name: ceph-provisioners-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }}
defaultMode: 0555
defaultMode: 365
- name: ceph-etc
configMap:
name: {{ .Values.storageclass.rbd.ceph_configmap_name }}
defaultMode: 0444
defaultMode: 292
- name: ceph-client-admin-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin }}

2
ceph-provisioners/templates/job-cephfs-client-key.yaml
View File

@ -132,5 +132,5 @@ spec:
- name: ceph-provisioners-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin" | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}

2
ceph-provisioners/templates/job-namespace-client-key-cleaner.yaml
View File

@ -97,5 +97,5 @@ spec:
- name: ceph-provisioners-bin-clients
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}

2
ceph-provisioners/templates/job-namespace-client-key.yaml
View File

@ -128,5 +128,5 @@ spec:
- name: ceph-provisioners-bin-clients
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}

2
ceph-provisioners/templates/pod-helm-tests.yaml
View File

@ -107,7 +107,7 @@ spec:
- name: ceph-provisioners-bin-clients
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-prov-bin-clients" | quote }}
defaultMode: 0555
defaultMode: 365
- name: pod-tmp
emptyDir: {}
{{- end }}

4
ceph-rgw/templates/deployment-rgw.yaml
View File

@ -181,11 +181,11 @@ spec:
- name: ceph-rgw-bin
configMap:
name: ceph-rgw-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-rgw-etc
configMap:
name: ceph-rgw-etc
defaultMode: 0444
defaultMode: 292
- name: pod-var-lib-ceph
emptyDir: {}
- name: ceph-bootstrap-rgw-keyring

4
ceph-rgw/templates/job-bootstrap.yaml
View File

@ -118,11 +118,11 @@ spec:
- name: ceph-rgw-bin
configMap:
name: ceph-rgw-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-rgw-etc
configMap:
name: {{ .Values.ceph_client.configmap }}
defaultMode: 0444
defaultMode: 292
- name: ceph-rgw-admin-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin | quote }}

6
ceph-rgw/templates/job-rgw-storage-init.yaml
View File

@ -126,15 +126,15 @@ spec:
- name: ceph-rgw-bin
configMap:
name: ceph-rgw-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-etc
configMap:
name: {{ .Values.ceph_client.configmap }}
defaultMode: 0444
defaultMode: 292
- name: ceph-templates
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "ceph-templates" | quote }}
defaultMode: 0444
defaultMode: 292
- name: ceph-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin | quote }}

4
ceph-rgw/templates/job-s3-admin.yaml
View File

@ -137,11 +137,11 @@ spec:
- name: ceph-rgw-bin
configMap:
name: ceph-rgw-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-rgw-etc
configMap:
name: ceph-rgw-etc
defaultMode: 0444
defaultMode: 292
- name: ceph-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin | quote }}

4
ceph-rgw/templates/pod-helm-tests.yaml
View File

@ -104,12 +104,12 @@ spec:
- name: ceph-rgw-bin
configMap:
name: ceph-rgw-bin
defaultMode: 0555
defaultMode: 365
- name: ceph-keyring
secret:
secretName: {{ .Values.secrets.keyrings.admin | quote }}
- name: ceph-rgw-etc
configMap:
name: ceph-rgw-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

2
daemonjob-controller/templates/deployment.yaml
View File

@ -58,5 +58,5 @@ spec:
- name: hooks
configMap:
name: daemonjob-controller-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
elastic-apm-server/templates/deployment.yaml
View File

@ -122,7 +122,7 @@ spec:
- name: elastic-apm-server-etc
configMap:
name: elastic-apm-server-etc
defaultMode: 0444
defaultMode: 292
- name: data
hostPath:
path: /var/lib/elastic-apm-server

2
elastic-filebeat/templates/daemonset.yaml
View File

@ -157,7 +157,7 @@ spec:
- name: filebeat-etc
configMap:
name: filebeat-etc
defaultMode: 0444
defaultMode: 292
- name: data
hostPath:
path: /var/lib/filebeat

2
elastic-metricbeat/templates/daemonset-node-metrics.yaml
View File

@ -168,7 +168,7 @@ spec:
path: /var/run/docker.sock
- name: metricbeat-etc
configMap:
defaultMode: 0444
defaultMode: 292
name: metricbeat-etc
- name: data
emptyDir: {}

2
elastic-metricbeat/templates/deployment-modules.yaml
View File

@ -154,5 +154,5 @@ spec:
- name: metricbeat-etc
configMap:
name: metricbeat-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

2
elastic-packetbeat/templates/daemonset.yaml
View File

@ -139,7 +139,7 @@ spec:
emptyDir: {}
- name: packetbeat-etc
configMap:
defaultMode: 0444
defaultMode: 292
name: packetbeat-etc
{{ if $mounts_packetbeat.volumes }}{{ toYaml $mounts_packetbeat.volumes | indent 8 }}{{ end }}
{{- end }}

4
elasticsearch/templates/cron-job-curator.yaml
View File

@ -86,9 +86,9 @@ spec:
- name: elastic-curator-bin
configMap:
name: elastic-curator-bin
defaultMode: 0555
defaultMode: 365
- name: elastic-curator-etc
secret:
secretName: elastic-curator-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

2
elasticsearch/templates/cron-job-verify-repositories.yaml
View File

@ -83,5 +83,5 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

4
elasticsearch/templates/deployment-client.yaml
View File

@ -210,11 +210,11 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
- name: elasticsearch-etc
secret:
secretName: elasticsearch-etc
defaultMode: 0444
defaultMode: 292
- name: storage
emptyDir: {}
{{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }}

4
elasticsearch/templates/deployment-gateway.yaml
View File

@ -160,11 +160,11 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
- name: elasticsearch-etc
secret:
secretName: elasticsearch-etc
defaultMode: 0444
defaultMode: 292
- name: storage
emptyDir: {}
{{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }}

4
elasticsearch/templates/job-elasticsearch-template.yaml
View File

@ -85,10 +85,10 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
- name: elasticsearch-templates-etc
secret:
secretName: elasticsearch-templates-etc
defaultMode: 0444
defaultMode: 292
{{ if $mounts_elasticsearch_templates.volumes }}{{ toYaml $mounts_elasticsearch_templates.volumes | indent 8 }}{{ end }}
{{- end }}

2
elasticsearch/templates/job-es-cluster-wait.yaml
View File

@ -76,5 +76,5 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
elasticsearch/templates/job-register-snapshot-repository.yaml
View File

@ -91,5 +91,5 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
elasticsearch/templates/pod-helm-tests.yaml
View File

@ -70,5 +70,5 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

4
elasticsearch/templates/statefulset-data.yaml
View File

@ -175,11 +175,11 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
- name: elasticsearch-etc
secret:
secretName: elasticsearch-etc
defaultMode: 0444
defaultMode: 292
{{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }}
{{- if not .Values.storage.data.enabled }}
- name: storage

4
elasticsearch/templates/statefulset-master.yaml
View File

@ -168,11 +168,11 @@ spec:
- name: elasticsearch-bin
configMap:
name: elasticsearch-bin
defaultMode: 0555
defaultMode: 365
- name: elasticsearch-etc
secret:
secretName: elasticsearch-etc
defaultMode: 0444
defaultMode: 292
{{ if $mounts_elasticsearch.volumes }}{{ toYaml $mounts_elasticsearch.volumes | indent 8 }}{{ end }}
{{- if not .Values.storage.master.enabled }}
- name: storage

2
etcd/templates/deployment.yaml
View File

@ -70,5 +70,5 @@ spec:
- name: etcd-bin
configMap:
name: {{ $configMapBinName | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}

2
falco/templates/daemonset.yaml
View File

@ -119,7 +119,7 @@ spec:
- name: falco-bin
configMap:
name: falco-bin
defaultMode: 0555
defaultMode: 365
- name: dshm
emptyDir:
medium: Memory

4
fluentbit/templates/daemonset-fluent-bit.yaml
View File

@ -145,10 +145,10 @@ spec:
- name: fluentbit-bin
configMap:
name: fluentbit-bin
defaultMode: 0555
defaultMode: 365
- name: fluentbit-etc
secret:
secretName: fluentbit-etc
defaultMode: 0444
defaultMode: 292
{{ if $mounts_fluentbit.volumes }}{{ toYaml $mounts_fluentbit.volumes | indent 8 }}{{ end }}
{{- end }}

6
fluentd/templates/deployment-fluentd.yaml
View File

@ -226,15 +226,15 @@ spec:
- name: {{ printf "%s-%s" $envAll.Release.Name "env-secret" | quote }}
secret:
secretName: {{ printf "%s-%s" $envAll.Release.Name "env-secret" | quote }}
defaultMode: 0444
defaultMode: 292
{{- end }}
- name: fluentd-etc
secret:
secretName: {{ printf "%s-%s" $envAll.Release.Name "fluentd-etc" | quote }}
defaultMode: 0444
defaultMode: 292
- name: fluentd-bin
configMap:
name: {{ printf "%s-%s" $envAll.Release.Name "fluentd-bin" | quote }}
defaultMode: 0555
defaultMode: 365
{{ if $mounts_fluentd.volumes }}{{ toYaml $mounts_fluentd.volumes | indent 8 }}{{- end }}
{{- end }}

4
gnocchi/templates/cron-job-resources-cleaner.yaml
View File

@ -94,10 +94,10 @@ spec:
- name: gnocchi-etc
secret:
secretName: gnocchi-etc
defaultMode: 0444
defaultMode: 292
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
{{ if $mounts_gnocchi_resources_cleaner.volumes }}{{ toYaml $mounts_gnocchi_resources_cleaner.volumes | indent 12 }}{{ end }}
{{- end }}

4
gnocchi/templates/daemonset-metricd.yaml
View File

@ -105,11 +105,11 @@ spec:
- name: gnocchi-etc
secret:
secretName: gnocchi-etc
defaultMode: 0444
defaultMode: 292
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
- name: etcceph
emptyDir: {}
- name: ceph-etc

4
gnocchi/templates/daemonset-statsd.yaml
View File

@ -111,11 +111,11 @@ spec:
- name: gnocchi-etc
secret:
secretName: gnocchi-etc
defaultMode: 0444
defaultMode: 292
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
- name: etcceph
emptyDir: {}
- name: ceph-etc

4
gnocchi/templates/deployment-api.yaml
View File

@ -130,11 +130,11 @@ spec:
- name: gnocchi-etc
secret:
secretName: gnocchi-etc
defaultMode: 0444
defaultMode: 292
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
- name: etcceph
emptyDir: {}
- name: ceph-etc

2
gnocchi/templates/job-clean.yaml
View File

@ -89,5 +89,5 @@ spec:
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

4
gnocchi/templates/job-db-init-indexer.yaml
View File

@ -70,11 +70,11 @@ spec:
- name: gnocchi-etc
secret:
secretName: gnocchi-etc
defaultMode: 0444
defaultMode: 292
- name: pod-etc-gnocchi
emptyDir: {}
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

4
gnocchi/templates/job-db-sync.yaml
View File

@ -82,11 +82,11 @@ spec:
- name: gnocchi-etc
secret:
secretName: gnocchi-etc
defaultMode: 0444
defaultMode: 292
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
- name: etcceph
emptyDir: {}
- name: ceph-etc

4
gnocchi/templates/job-storage-init.yaml
View File

@ -123,13 +123,13 @@ spec:
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
- name: etcceph
emptyDir: {}
- name: ceph-etc
configMap:
name: {{ .Values.ceph_client.configmap }}
defaultMode: 0444
defaultMode: 292
- name: ceph-keyring
secret:
secretName: {{ .Values.ceph_client.user_secret_name }}

4
gnocchi/templates/pod-gnocchi-test.yaml
View File

@ -74,10 +74,10 @@ spec:
- name: gnocchi-etc
secret:
secretName: gnocchi-etc
defaultMode: 0444
defaultMode: 292
- name: gnocchi-bin
configMap:
name: gnocchi-bin
defaultMode: 0555
defaultMode: 365
{{ if $mounts_gnocchi_tests.volumes }}{{ toYaml $mounts_gnocchi_tests.volumes | indent 4 }}{{ end }}
{{- end }}

6
grafana/templates/deployment.yaml
View File

@ -133,15 +133,15 @@ spec:
- name: grafana-bin
configMap:
name: grafana-bin
defaultMode: 0555
defaultMode: 365
- name: grafana-etc
secret:
secretName: grafana-etc
defaultMode: 0444
defaultMode: 292
- name: grafana-dashboards
configMap:
name: grafana-dashboards
defaultMode: 0555
defaultMode: 365
- name: data
emptyDir: {}
{{ if $mounts_grafana.volumes }}{{ toYaml $mounts_grafana.volumes | indent 8 }}{{ end }}

2
grafana/templates/job-add-home-dashboard.yaml
View File

@ -74,5 +74,5 @@ spec:
- name: grafana-bin
configMap:
name: grafana-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
grafana/templates/job-db-init-session.yaml
View File

@ -72,5 +72,5 @@ spec:
- name: grafana-bin
configMap:
name: grafana-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
grafana/templates/job-db-init.yaml
View File

@ -72,5 +72,5 @@ spec:
- name: grafana-bin
configMap:
name: grafana-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
grafana/templates/job-db-session-sync.yaml
View File

@ -67,5 +67,5 @@ spec:
- name: grafana-bin
configMap:
name: grafana-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

4
grafana/templates/job-set-admin-user.yaml
View File

@ -77,9 +77,9 @@ spec:
- name: grafana-bin
configMap:
name: grafana-bin
defaultMode: 0555
defaultMode: 365
- name: grafana-etc
secret:
secretName: grafana-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

2
grafana/templates/pod-helm-tests.yaml
View File

@ -70,5 +70,5 @@ spec:
- name: grafana-bin
configMap:
name: grafana-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

6
helm-toolkit/templates/manifests/_job-bootstrap.tpl
View File

@ -101,18 +101,18 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
- name: etc-service
emptyDir: {}
- name: bootstrap-conf
secret:
secretName: {{ $configMapEtc | quote }}
defaultMode: 0444
defaultMode: 292
{{- if $podVols }}
{{ $podVols | toYaml | indent 8 }}
{{- end }}

6
helm-toolkit/templates/manifests/_job-db-drop-mysql.tpl
View File

@ -118,11 +118,11 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
{{- $local := dict "configMapBinFirst" true -}}
{{- range $key1, $dbToDrop := $dbsToDrop }}
@ -134,7 +134,7 @@ spec:
- name: db-drop-conf
secret:
secretName: {{ $configMapEtc | quote }}
defaultMode: 0444
defaultMode: 292
{{- end -}}
{{- end -}}
{{- end -}}

6
helm-toolkit/templates/manifests/_job-db-init-mysql.tpl
View File

@ -117,11 +117,11 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
{{- $local := dict "configMapBinFirst" true -}}
{{- range $key1, $dbToInit := $dbsToInit }}
@ -133,7 +133,7 @@ spec:
- name: db-init-conf
secret:
secretName: {{ $configMapEtc | quote }}
defaultMode: 0444
defaultMode: 292
{{- end -}}
{{- end -}}
{{- end -}}

6
helm-toolkit/templates/manifests/_job-db-sync.tpl
View File

@ -97,18 +97,18 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
- name: etc-service
emptyDir: {}
- name: db-sync-conf
secret:
secretName: {{ $configMapEtc | quote }}
defaultMode: 0444
defaultMode: 292
{{- if $podVols }}
{{ $podVols | toYaml | indent 8 }}
{{- end }}

4
helm-toolkit/templates/manifests/_job-ks-endpoints.tpl
View File

@ -92,10 +92,10 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
{{- end }}

4
helm-toolkit/templates/manifests/_job-ks-service.tpl
View File

@ -86,10 +86,10 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
{{- end }}

4
helm-toolkit/templates/manifests/_job-ks-user.yaml.tpl
View File

@ -92,10 +92,10 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
{{- end -}}

4
helm-toolkit/templates/manifests/_job-rabbit-init.yaml.tpl
View File

@ -86,10 +86,10 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
{{- end -}}

6
helm-toolkit/templates/manifests/_job-s3-bucket.yaml.tpl
View File

@ -103,18 +103,18 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
- name: etcceph
emptyDir: {}
- name: ceph-etc
configMap:
name: {{ $configMapCeph | quote }}
defaultMode: 0444
defaultMode: 292
{{- if empty $envAll.Values.conf.ceph.admin_keyring }}
- name: ceph-keyring
secret:

8
helm-toolkit/templates/manifests/_job-s3-user.yaml.tpl
View File

@ -118,22 +118,22 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
- name: ceph-keyring-sh
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
- name: etcceph
emptyDir: {}
- name: ceph-etc
configMap:
name: {{ $configMapCeph | quote }}
defaultMode: 0444
defaultMode: 292
{{- if empty $envAll.Values.conf.ceph.admin_keyring }}
- name: ceph-keyring
secret:

4
helm-toolkit/templates/manifests/_job_image_repo_sync.tpl
View File

@ -84,11 +84,11 @@ spec:
{{- if $secretBin }}
secret:
secretName: {{ $secretBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- else }}
configMap:
name: {{ $configMapBin | quote }}
defaultMode: 0555
defaultMode: 365
{{- end }}
- name: docker-socket
hostPath:

2
ingress/templates/deployment-ingress.yaml
View File

@ -358,7 +358,7 @@ spec:
- name: ingress-bin
configMap:
name: ingress-bin
defaultMode: 0555
defaultMode: 365
{{- if and .Values.network.host_namespace .Values.network.vip.manage }}
- name: host-rootfs
hostPath:

4
kafka/templates/job-generate-acl.yaml
View File

@ -64,9 +64,9 @@ spec:
- name: kafka-bin
configMap:
name: kafka-bin
defaultMode: 0555
defaultMode: 365
- name: kafka-etc
secret:
secretName: kafka-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

4
kafka/templates/pod-helm-test.yaml
View File

@ -66,9 +66,9 @@ spec:
- name: kafka-bin
configMap:
name: kafka-bin
defaultMode: 0555
defaultMode: 365
- name: kafka-etc
secret:
secretName: kafka-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

4
kafka/templates/statefulset.yaml
View File

@ -168,11 +168,11 @@ spec:
- name: kafka-bin
configMap:
name: kafka-bin
defaultMode: 0555
defaultMode: 365
- name: kafka-etc
secret:
secretName: kafka-etc
defaultMode: 0444
defaultMode: 292
{{ if $mounts_kafka.volumes }}{{ toYaml $mounts_kafka.volumes | indent 8 }}{{ end }}
{{- if not .Values.storage.enabled }}
- name: data

4
kibana/templates/deployment.yaml
View File

@ -167,9 +167,9 @@ spec:
- name: kibana-bin
configMap:
name: kibana-bin
defaultMode: 0555
defaultMode: 365
- name: kibana-etc
secret:
secretName: kibana-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

2
kibana/templates/job-flush-kibana-metadata.yaml
View File

@ -96,5 +96,5 @@ spec:
- name: kibana-bin
configMap:
name: kibana-bin
defaultMode: 0755
defaultMode: 493
{{- end }}

2
kibana/templates/job-register-kibana-indexes.yaml
View File

@ -80,5 +80,5 @@ spec:
- name: kibana-bin
configMap:
name: kibana-bin
defaultMode: 0755
defaultMode: 493
{{- end }}

6
kubernetes-keystone-webhook/templates/deployment.yaml
View File

@ -83,13 +83,13 @@ spec:
- name: key-kubernetes-keystone-webhook
secret:
secretName: {{ $envAll.Values.secrets.certificates.api }}
defaultMode: 0444
defaultMode: 292
- name: kubernetes-keystone-webhook-etc
configMap:
name: kubernetes-keystone-webhook-etc
defaultMode: 0444
defaultMode: 292
- name: kubernetes-keystone-webhook-bin
configMap:
name: kubernetes-keystone-webhook-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
kubernetes-keystone-webhook/templates/pod-test.yaml
View File

@ -60,6 +60,6 @@ spec:
- name: kubernetes-keystone-webhook-bin
configMap:
name: kubernetes-keystone-webhook-bin
defaultMode: 0555
defaultMode: 365
{{ if $mounts_kubernetes_keystone_webhook_tests.volumes }}{{ toYaml $mounts_kubernetes_keystone_webhook_tests.volumes | indent 4 }}{{ end }}
{{- end }}

6
libvirt/templates/daemonset-libvirt.yaml
View File

@ -207,11 +207,11 @@ spec:
- name: libvirt-bin
configMap:
name: libvirt-bin
defaultMode: 0555
defaultMode: 365
- name: libvirt-etc
secret:
secretName: {{ $configMapName }}
defaultMode: 0444
defaultMode: 292
{{- if .Values.conf.ceph.enabled }}
- name: etcceph
hostPath:
@ -219,7 +219,7 @@ spec:
- name: ceph-etc
configMap:
name: {{ .Values.ceph_client.configmap }}
defaultMode: 0444
defaultMode: 292
{{- if empty .Values.conf.ceph.cinder.keyring }}
- name: ceph-keyring
secret:

4
mariadb/templates/deployment-ingress.yaml
View File

@ -205,9 +205,9 @@ spec:
- name: mariadb-bin
configMap:
name: mariadb-bin
defaultMode: 0555
defaultMode: 365
- name: mariadb-ingress-etc
configMap:
name: mariadb-ingress-etc
defaultMode: 0444
defaultMode: 292
{{- end }}

4
mariadb/templates/pod-test.yaml
View File

@ -67,9 +67,9 @@ spec:
- name: mariadb-bin
configMap:
name: mariadb-bin
defaultMode: 0555
defaultMode: 365
- name: mariadb-secrets
secret:
secretName: mariadb-secrets
defaultMode: 0444
defaultMode: 292
{{- end }}

6
mariadb/templates/statefulset.yaml
View File

@ -239,15 +239,15 @@ spec:
- name: mariadb-bin
configMap:
name: mariadb-bin
defaultMode: 0555
defaultMode: 365
- name: mariadb-etc
configMap:
name: mariadb-etc
defaultMode: 0444
defaultMode: 292
- name: mariadb-secrets
secret:
secretName: mariadb-secrets
defaultMode: 0444
defaultMode: 292
{{- if not .Values.volume.enabled }}
- name: mysql-data
{{- if .Values.volume.use_local_path_for_single_pod_cluster.enabled }}

2
memcached/templates/deployment.yaml
View File

@ -86,6 +86,6 @@ spec:
- name: memcached-bin
configMap:
name: {{ $configMapBinName | quote }}
defaultMode: 0555
defaultMode: 365
{{ dict "envAll" $envAll "component" "memcached" "requireSys" true | include "helm-toolkit.snippets.kubernetes_apparmor_volumes" | indent 8 }}
{{- end }}

2
mongodb/templates/statefulset.yaml
View File

@ -118,7 +118,7 @@ spec:
- name: mongodb-bin
configMap:
name: mongodb-bin
defaultMode: 0555
defaultMode: 365
{{- if not .Values.volume.enabled }}
- name: mongodb-data
hostPath:

4
nagios/templates/deployment.yaml
View File

@ -238,9 +238,9 @@ spec:
- name: nagios-etc
secret:
secretName: nagios-etc
defaultMode: 0444
defaultMode: 292
- name: nagios-bin
configMap:
name: nagios-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
nagios/templates/pod-helm-tests.yaml
View File

@ -75,5 +75,5 @@ spec:
- name: nagios-bin
configMap:
name: nagios-bin
defaultMode: 0555
defaultMode: 365
{{- end }}

2
openvswitch/templates/daemonset-ovs-db.yaml
View File

@ -108,7 +108,7 @@ spec:
- name: openvswitch-bin
configMap:
name: openvswitch-bin
defaultMode: 0555
defaultMode: 365
- name: run
hostPath:
path: /run/openvswitch

2
openvswitch/templates/daemonset-ovs-vswitchd.yaml
View File

@ -153,7 +153,7 @@ It should be handled through lcore and pmd core masks. */}}
- name: openvswitch-bin
configMap:
name: openvswitch-bin
defaultMode: 0555
defaultMode: 365
- name: run
hostPath:
path: /run

2
postgresql/templates/pod-test.yaml
View File

@ -72,6 +72,6 @@ spec:
- name: postgresql-bin
secret:
secretName: postgresql-bin
defaultMode: 0555
defaultMode: 365
...
{{- end }}

8
postgresql/templates/statefulset.yaml
View File

@ -416,7 +416,7 @@ spec:
- name: postgresql-bin
secret:
secretName: postgresql-bin
defaultMode: 0555
defaultMode: 365
- name: client-certs-temp
emptyDir: {}
- name: server-certs-temp
@ -428,15 +428,15 @@ spec:
- name: replication-pki
secret:
secretName: {{ .Values.secrets.postgresql.replica }}
defaultMode: 0640
defaultMode: 416
- name: postgresql-pki
secret:
secretName: {{ .Values.secrets.postgresql.server }}
defaultMode: 0640
defaultMode: 416
- name: postgresql-etc
secret:
secretName: postgresql-etc
defaultMode: 0444
defaultMode: 292
{{- if not .Values.storage.pvc.enabled }}
- name: postgresql-data
hostPath:

Some files were not shown because too many files have changed in this diff Show More