Merge "Enable yamllint checks"

calico/values.yaml

@@ -10,6 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+---
 images:
   tags:
     # These are minimum versions, older images will very likely not
@@ -571,3 +572,4 @@ manifests:
   job_calico_settings: true
   service_calico_etcd: true
   secret_certificates: true
+...

ceph-client/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 deployment:
   ceph: true
 
@@ -255,16 +256,16 @@ conf:
     mgr: true
     pg_autoscaler: true
   pool:
-  #NOTE(portdirect): this drives a simple approximation of
+  # NOTE(portdirect): this drives a simple approximation of
   # https://ceph.com/pgcalc/, the `target.osd` key should be set to match the
   # expected number of osds in a cluster, and the `target.pg_per_osd` should be
   # set to match the desired number of placement groups on each OSD.
     crush:
-      #NOTE(portdirect): to use RBD devices with Ubuntu 16.04's 4.4.x series
+      # NOTE(portdirect): to use RBD devices with Ubuntu 16.04's 4.4.x series
       # kernel this should be set to `hammer`
       tunables: null
     target:
-      #NOTE(portdirect): arbitrarily we set the default number of expected OSD's to 5
+      # NOTE(portdirect): arbitrarily we set the default number of expected OSD's to 5
       # to match the number of nodes in the OSH gate (used only for helm tests).
       osd: 5
       # This is  just for helm tests to proceed the deployment if  we have mentioned % of
@@ -272,7 +273,7 @@ conf:
       required_percent_of_osds: 75
       pg_per_osd: 100
       protected: true
-      #NOTE(st053q): target quota should be set to the overall cluster full percentage
+      # NOTE(st053q): target quota should be set to the overall cluster full percentage
       # to be tolerated as a quota (percent full to allow in order to tolerate some
       # level of failure)
       quota: 100
@@ -591,3 +592,4 @@ manifests:
   helm_tests: true
   cronjob_checkPGs: true
   cronjob_defragosds: true
+...

ceph-client/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -24,3 +25,4 @@ bootstrap:
 manifests:
   job_bootstrap: true
 
+...

ceph-mon/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 deployment:
   ceph: true
   storage_secrets: true
@@ -353,3 +354,4 @@ manifests:
   service_mon: true
   service_mon_discovery: true
   job_storage_admin_keys: true
+...

ceph-mon/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -18,3 +19,4 @@ bootstrap:
   enabled: true
 manifests:
   job_bootstrap: true
+...

ceph-osd/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 images:
   pull_policy: IfNotPresent
   tags:
@@ -40,10 +41,10 @@ labels:
     node_selector_key: ceph-osd
     node_selector_value: enabled
 
-#We could deploy ceph cluster now with either ceph-volume or ceph-disk however
+# We could deploy ceph cluster now with either ceph-volume or ceph-disk however
-#ceph-disk is deprecated from Nautilus.
+# ceph-disk is deprecated from Nautilus.
-#Keeping ceph-disk as default since gate scripts are still directory backed
+# Keeping ceph-disk as default since gate scripts are still directory backed
-#osds, need to change this after moving the gates to disk backed osd.
+# osds, need to change this after moving the gates to disk backed osd.
 deploy:
   tool: "ceph-disk"
 
@@ -359,3 +360,4 @@ manifests:
   job_post_apply: true
   job_image_repo_sync: true
   helm_tests: true
+...

ceph-osd/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -10,3 +11,4 @@ pod:
     ceph-osd-test:
       init: runtime/default
       ceph-cluster-helm-test: runtime/default
+...

ceph-provisioners/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 deployment:
   ceph: true
   client_secrets: false
@@ -255,8 +256,8 @@ bootstrap:
 # if you change provision_storage_class to false
 # it is presumed you manage your own storage
 # class definition externally
-#(kranthikirang):We iterate over each storageclass parameters
+# NOTE(kranthikirang) We iterate over each storageclass parameters
-#and derive the manifest.
+# and derive the manifest.
 storageclass:
   rbd:
     provision_storage_class: true
@@ -325,3 +326,4 @@ manifests:
   job_namespace_client_key: true
   storageclass: true
   helm_tests: true
+...

ceph-provisioners/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -12,3 +13,4 @@ pod:
     ceph-provisioner-test:
       init: runtime/default
       ceph-provisioner-helm-test: runtime/default
+...

ceph-rgw/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 deployment:
   ceph: false
 
@@ -249,24 +250,24 @@ conf:
   features:
     rgw: true
   pool:
-  #NOTE(portdirect): this drives a simple approximation of
+    # NOTE(portdirect): this drives a simple approximation of
-  # https://ceph.com/pgcalc/, the `target.osd` key should be set to match the
+    # https://ceph.com/pgcalc/, the `target.osd` key should be set to match the
-  # expected number of osds in a cluster, and the `target.pg_per_osd` should be
+    # expected number of osds in a cluster, and the `target.pg_per_osd` should be
-  # set to match the desired number of placement groups on each OSD.
+    # set to match the desired number of placement groups on each OSD.
     crush:
-      #NOTE(portdirect): to use RBD devices with Ubuntu 16.04's 4.4.x series
+      # NOTE(portdirect): to use RBD devices with Ubuntu 16.04's 4.4.x series
       # kernel this should be set to `hammer`
       tunables: null
     target:
-      #NOTE(portdirect): arbitrarily we set the default number of expected OSD's to 5
+      # NOTE(portdirect): arbitrarily we set the default number of expected OSD's to 5
       # to match the number of nodes in the OSH gate.
       osd: 5
       pg_per_osd: 100
     default:
-      #NOTE(portdirect): this should be 'same_host' for a single node
+      # NOTE(portdirect): this should be 'same_host' for a single node
       # cluster to be in a healthy state
       crush_rule: replicated_rule
-    #NOTE(portdirect): this section describes the pools that will be managed by
+    # NOTE(portdirect): this section describes the pools that will be managed by
     # the ceph pool management job, as it tunes the pgs and crush rule, based on
     # the above.
     spec:
@@ -347,12 +348,12 @@ conf:
         percent_total_data: 34.8
   rgw:
     config:
-      #NOTE (portdirect): See http://tracker.ceph.com/issues/21226
+      # NOTE (portdirect): See http://tracker.ceph.com/issues/21226
       rgw_keystone_token_cache_size: 0
-      #NOTE (JCL): See http://tracker.ceph.com/issues/7073
+      # NOTE (JCL): See http://tracker.ceph.com/issues/7073
       rgw_gc_max_objs: 997
-      #NOTE (JCL): See http://tracker.ceph.com/issues/24937
+      # NOTE (JCL): See http://tracker.ceph.com/issues/24937
-      #NOTE (JCL): See https://tracker.ceph.com/issues/24551
+      # NOTE (JCL): See https://tracker.ceph.com/issues/24551
       rgw_dynamic_resharding: false
       rgw_num_rados_handles: 4
       rgw_override_bucket_index_max_shards: 8
@@ -370,7 +371,7 @@ conf:
     enabled: false
     admin_caps: "users=*;buckets=*;zone=*"
     config:
-      #NOTE (supamatt): Unfortunately we do not conform to S3 compliant names with some of our charts
+      # NOTE (supamatt): Unfortunately we do not conform to S3 compliant names with some of our charts
       rgw_relaxed_s3_bucket_names: true
   ceph:
     global:
@@ -606,3 +607,4 @@ manifests:
   service_rgw: true
   helm_tests: true
   network_policy: false
+...

ceph-rgw/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -22,8 +23,9 @@ pod:
       ceph-rgw-ks-validation: runtime/default
 conf:
   rgw_s3:
-   enabled: true
+    enabled: true
 bootstrap:
   enabled: true
 manifests:
   job_bootstrap: true
+...

ceph-rgw/values_overrides/netpol.yaml

@@ -1,3 +1,4 @@
+---
 manifests:
   network_policy: true
 network_policy:
@@ -18,3 +19,4 @@ network_policy:
         ports:
           - protocol: TCP
             port: %%%REPLACE_API_PORT%%%
+...

daemonjob-controller/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 images:
@@ -113,3 +114,4 @@ manifests:
   job_image_repo_sync: true
   configmap_bin: true
   service: true
+...

daemonjob-controller/values_overrides/apparmor.yaml

@@ -1,5 +1,7 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
     daemonjob-controller:
       controller: localhost/docker-default
+...

elastic-apm-server/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 labels:
@@ -162,3 +163,4 @@ manifests:
   service: true
   job_image_repo_sync: true
   secret_elasticsearch: true
+...

elastic-filebeat/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 labels:
@@ -263,3 +264,4 @@ manifests:
   daemonset: true
   job_image_repo_sync: true
   secret_elasticsearch: true
+...

elastic-metricbeat/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 labels:
@@ -262,3 +263,4 @@ manifests:
   deployment: true
   job_image_repo_sync: true
   secret_elasticsearch: true
+...

elastic-packetbeat/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 labels:
@@ -181,3 +182,4 @@ manifests:
   daemonset: true
   job_image_repo_sync: true
   secret_elasticsearch: true
+...

elasticsearch/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 images:
   tags:
     apache_proxy: docker.io/httpd:2.4
@@ -956,3 +957,4 @@ manifests:
   service_logging: true
   statefulset_data: true
   statefulset_master: true
+...

elasticsearch/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   env:
     client: null
@@ -36,3 +37,4 @@ pod:
     elasticsearch-verify-repositories:
       elasticsearch-verify-repositories: runtime/default
       init: runtime/default
+...

elasticsearch/values_overrides/local-storage.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   replicas:
     data: 1
@@ -18,3 +19,4 @@ manifests:
   job_s3_user: false
   job_s3_bucket: false
   helm_tests: false
+...

elasticsearch/values_overrides/remote-cluster.yaml

@@ -11,6 +11,7 @@
 #               - elasticsearch-gateway-2.remote_host:9301
 #               - elasticsearch-gateway-3.remote_host:9301
 #             skip_unavailale: true
+---
 network:
   remote_clustering:
     enabled: true
@@ -28,3 +29,4 @@ pod:
 images:
   tags:
     elasticsearch: docker.io/openstackhelm/elasticsearch-s3:7_6_2-centos_7
+...

etcd/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 images:
   tags:
     etcd: 'gcr.io/google_containers/etcd-amd64:3.2.24'
@@ -111,3 +112,4 @@ manifests:
   deployment: true
   job_image_repo_sync: true
   service: true
+...

falco/values.yaml

@@ -10,6 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+---
 images:
   pull_policy: IfNotPresent
   tags:
@@ -1366,3 +1367,4 @@ manifests:
   configmap_etc: true
   configmap_custom_rules: false
   configmap_bin: true
+...

flannel/values.yaml

@@ -12,6 +12,7 @@
 
 # https://raw.githubusercontent.com/coreos/flannel/v0.8.0/Documentation/kube-flannel.yml
 
+---
 labels:
   job:
     node_selector_key: openstack-control-plane
@@ -82,3 +83,4 @@ manifests:
   configmap_kube_flannel_cfg: true
   daemonset_kube_flannel_ds: true
   job_image_repo_sync: true
+...

fluentbit/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 labels:
@@ -253,3 +254,4 @@ manifests:
   configmap_etc: true
   daemonset_fluentbit: true
   job_image_repo_sync: true
+...

fluentd/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 deployment:
@@ -453,3 +454,4 @@ manifests:
   secret_fluentd_env: true
   secret_kafka: false
   service_fluentd: true
+...

fluentd/values_overrides/apparmor.yaml

@@ -1,6 +1,8 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
     fluentd:
       fluentd: runtime/default
       init: runtime/default
+...

gnocchi/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 labels:
   api:
     node_selector_key: openstack-control-plane
@@ -429,11 +430,11 @@ conf:
       provider: uuid
     api:
       auth_mode: keystone
-      #NOTE(portdirect): the bind port should not be defined, and is manipulated
+      # NOTE(portdirect): the bind port should not be defined, and is manipulated
       # via the endpoints section.
       port: null
     statsd:
-      #NOTE(portdirect): the bind port should not be defined, and is manipulated
+      # NOTE(portdirect): the bind port should not be defined, and is manipulated
       # via the endpoints section.
       port: null
     metricd:
@@ -646,3 +647,4 @@ manifests:
   service_api: true
   service_ingress_api: true
   service_statsd: true
+...

grafana/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 images:
   tags:
     grafana: docker.io/grafana/grafana:6.2.0
@@ -502,3 +503,4 @@ conf:
     grafana_net:
       url: https://grafana.net
   dashboards: {}
+...

grafana/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -22,3 +23,4 @@ pod:
     grafana-test:
       init: runtime/default
       grafana-selenium-tests: runtime/default
+...

grafana/values_overrides/calico.yaml

@@ -1,5 +1,6 @@
 # NOTE(srwilkers): This overrides file provides a reference for a dashboard for
 # the Calico CNI
+---
 conf:
   dashboards:
     calico: |-
@@ -1357,3 +1358,4 @@ conf:
         "title": "Kubernetes Calico",
         "version": 1
       }
+...

grafana/values_overrides/ceph.yaml

@@ -1,6 +1,7 @@
 # NOTE(srwilkers): This overrides file provides a reference for dashboards for
 # the overall state of ceph clusters, ceph osds in those clusters, and the
 # status of ceph pools for those clusters
+---
 conf:
   dashboards:
     ceph_cluster: |-
@@ -3672,3 +3673,4 @@ conf:
         "title": "Ceph - Pools",
         "version": 1
       }
+...

grafana/values_overrides/containers.yaml

@@ -1,5 +1,6 @@
 # NOTE(srwilkers): This overrides file provides a reference for a dashboard for
 # container metrics, specific to each host
+---
 conf:
   dashboards:
     containers: |-
@@ -2101,3 +2102,4 @@ conf:
         "title": "Container Metrics (cAdvisor)",
         "version": 1
       }
+...

grafana/values_overrides/coredns.yaml

@@ -1,5 +1,6 @@
 # NOTE(srwilkers): This overrides file provides a reference for a dashboard for
 # CoreDNS
+---
 conf:
   dashboards:
     coredns: |-
@@ -1377,3 +1378,4 @@ conf:
         "title": "CoreDNS",
         "version": 1
       }
+...

grafana/values_overrides/elasticsearch.yaml

@@ -1,5 +1,6 @@
 # NOTE(srwilkers): This overrides file provides a reference for a dashboard for
 # an Elasticsearch cluster
+---
 conf:
   dashboards:
     elasticsearch: |-
@@ -3473,3 +3474,4 @@ conf:
         "title": "Elasticsearch",
         "version": 1
       }
+...

grafana/values_overrides/home_dashboard.yaml

@@ -1,5 +1,6 @@
 # This override file provides a reference for dashboards for
 # customized OSH Welcome Page
+---
 conf:
   dashboards:
     home_dashboard: |-
@@ -107,3 +108,4 @@ conf:
 
 manifests:
   job_add_home_dashboard: true
+...

grafana/values_overrides/kubernetes.yaml

@@ -1,5 +1,6 @@
 # NOTE(srwilkers): This overrides file provides a reference for dashboards that
 # reflect the overall state of a Kubernetes deployment
+---
 conf:
   dashboards:
     kubernetes_capacity_planning: |-
@@ -2111,3 +2112,4 @@ conf:
         "title": "Kubernetes Cluster Status",
         "version": 1
       }
+...

grafana/values_overrides/nginx.yaml

@@ -1,5 +1,6 @@
 # NOTE(srwilkers): This overrides file provides a reference for a dashboard for
 # nginx
+---
 conf:
   dashboards:
     nginx_stats: |-
@@ -1462,3 +1463,4 @@ conf:
         "uid": "nginx",
         "version": 1
       }
+...

grafana/values_overrides/nodes.yaml

@@ -1,5 +1,6 @@
 # NOTE(srwilkers): This overrides file provides a reference for a dashboard for
 # the status of all nodes in a deployment
+---
 conf:
   dashboards:
     nodes: |-
@@ -976,3 +977,4 @@ conf:
         "title": "Nodes",
         "version": 1
       }
+...

grafana/values_overrides/openstack.yaml

@@ -1,6 +1,7 @@
 # NOTE(srwilkers): This overrides file provides a reference for dashboards for
 # the openstack control plane as a whole, the individual openstack services, and
 # rabbitmq
+---
 conf:
   dashboards:
     rabbitmq: |-
@@ -4160,3 +4161,4 @@ conf:
         "title": "Openstack Service",
         "version": 1
       }
+...

grafana/values_overrides/persistentvolume.yaml

@@ -1,5 +1,6 @@
 # This overrides file provides a raw json file for a dashboard for
 # the etcd
+---
 conf:
   dashboards:
     persistent_volume: |-
@@ -549,3 +550,4 @@ conf:
         "title": "Persistent Volumes",
         "version": 0
       }
+...

grafana/values_overrides/prometheus.yaml

@@ -1,5 +1,6 @@
 # NOTE(srwilkers): This overrides file provides a reference for a dashboard for
 # Prometheus
+---
 conf:
   dashboards:
     prometheus: |-
@@ -3705,3 +3706,4 @@ conf:
         "title": "Prometheus2.0 (v1.0.0 by FUSAKLA)",
         "version": 1
       }
+...

ingress/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 deployment:
   mode: namespace
   type: Deployment
@@ -142,7 +143,7 @@ network:
     keepalived_router_id: 100
   ingress:
     annotations:
-      #NOTE(portdirect): if left blank this is populated from
+      # NOTE(portdirect): if left blank this is populated from
       # .deployment.cluster.class
       kubernetes.io/ingress.class: null
       nginx.ingress.kubernetes.io/proxy-body-size: "0"
@@ -253,13 +254,13 @@ network_policy:
 
 conf:
   controller:
-    #NOTE(portdirect): if left blank this is populated from
+    # NOTE(portdirect): if left blank this is populated from
     # .deployment.cluster.class in cluster mode, or set to
     # "nginx" in namespace mode
     INGRESS_CLASS: null
   ingress:
     enable-underscores-in-headers: "true"
-    #NOTE(portdirect): if left blank this is populated from
+    # NOTE(portdirect): if left blank this is populated from
     # .network.vip.addr when running in host networking
     # and .network.vip.manage=true, otherwise it is left as
     # an empty string (the default).
@@ -286,3 +287,4 @@ manifests:
     prometheus:
       service_exporter: true
   network_policy: false
+...

ingress/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -8,3 +9,4 @@ pod:
       init: runtime/default
       ingress: runtime/default
       ingress-vip: runtime/default
+...

ingress/values_overrides/netpol.yaml

@@ -1,2 +1,4 @@
+---
 manifests:
   network_policy: true
+...

ingress/values_overrides/rocky-opensuse_15.yaml

@@ -3,3 +3,4 @@ images:
   tags:
     ingress_module_init: "docker.io/openstackhelm/neutron:rocky-opensuse_15"
     ingress_routed_vip: "docker.io/openstackhelm/neutron:rocky-opensuse_15"
+...

kafka/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 images:
   tags:
     kafka: docker.io/wurstmeister/kafka:2.12-2.3.0
@@ -330,7 +331,7 @@ conf:
       # List of topic strings formatted like:
       # topic_name:number_of_partitions:replication_factor
       # - "mytopic:1:1"
-    jaas: # Define Authentication Details in this section
+    jaas:  # Define Authentication Details in this section
       producers:
         # region_a: # Just an ID used to iterate through the dict of producers
         #   username: region-a-producer
@@ -375,3 +376,4 @@ conf:
         };
     jvm_options:
       - -Djava.security.auth.login.config=/opt/kafka/config/jaas.conf
+...

kibana/values.yaml

@@ -10,6 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+---
 labels:
   kibana:
     node_selector_key: openstack-control-plane
@@ -418,3 +419,4 @@ manifests:
   service_ingress: true
   job_register_kibana_indexes: true
   job_flush_kibana_metadata: true
+...

kibana/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -11,3 +12,4 @@ pod:
     flush-kibana-metadata:
       flush-kibana-metadata: runtime/default
       init: runtime/default
+...

kube-dns/values.yaml

@@ -12,6 +12,7 @@
 
 # https://raw.githubusercontent.com/coreos/flannel/v0.8.0/Documentation/kube-flannel.yml
 
+---
 labels:
   job:
     node_selector_key: openstack-control-plane
@@ -87,3 +88,4 @@ manifests:
   job_image_repo_sync: true
   service_kube_dns: true
   serviceaccount_kube_dns: true
+...

kubernetes-keystone-webhook/values.yaml

@@ -10,6 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+---
 labels:
   api:
     node_selector_key: openstack-control-plane
@@ -544,3 +545,4 @@ manifests:
   secret_keystone: true
   service_ingress_api: true
   service: true
+...

ldap/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 pod:
   affinity:
     anti:
@@ -242,3 +243,4 @@ manifests:
   network_policy: false
   statefulset: true
   service: true
+...

libvirt/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 release_group: null
 
 labels:
@@ -188,3 +189,4 @@ manifests:
   daemonset_libvirt: true
   job_image_repo_sync: true
   network_policy: false
+...

libvirt/values_overrides/apparmor.yaml

@@ -1,5 +1,7 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
     libvirt-libvirt-default:
       libvirt: runtime/default
+...

libvirt/values_overrides/netpol.yaml

@@ -1,2 +1,4 @@
+---
 manifests:
   network_policy: true
+...

libvirt/values_overrides/ocata-ubuntu_xenial.yaml

@@ -2,3 +2,4 @@
 images:
   tags:
     libvirt: docker.io/openstackhelm/libvirt:ubuntu_xenial-20190903
+...

libvirt/values_overrides/pike-ubuntu_xenial.yaml

@@ -2,3 +2,4 @@
 images:
   tags:
     libvirt: docker.io/openstackhelm/libvirt:ubuntu_xenial-20190903
+...

libvirt/values_overrides/queens-ubuntu_xenial.yaml

@@ -2,3 +2,4 @@
 images:
   tags:
     libvirt: docker.io/openstackhelm/libvirt:ubuntu_xenial-20190903
+...

libvirt/values_overrides/rocky-opensuse_15.yaml

@@ -2,3 +2,4 @@
 images:
   tags:
     libvirt: docker.io/openstackhelm/libvirt:latest-opensuse_15
+...

libvirt/values_overrides/rocky-ubuntu_xenial.yaml

@@ -2,3 +2,4 @@
 images:
   tags:
     libvirt: docker.io/openstackhelm/libvirt:ubuntu_xenial-20190903
+...

local-storage/values.yaml

@@ -10,6 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+---
 labels:
   node_affinity:
     node_selector_key: openstack-control-plane
@@ -37,3 +38,4 @@ conf:
 manifests:
   storage_class: true
   persistent_volumes: true
+...

local-storage/values_overrides/local-storage.yaml

@@ -1,3 +1,4 @@
+---
 conf:
   persistent_volumes:
     - name: local-persistent-volume-0
@@ -33,3 +34,4 @@ conf:
 manifests:
   storage_class: true
   persistent_volumes: true
+...

mariadb/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 release_group: null
 
 images:
@@ -541,3 +542,4 @@ manifests:
   service_error: true
   service: true
   statefulset: true
+...

mariadb/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -30,3 +31,4 @@ monitoring:
 
 manifests:
   cron_job_mariadb_backup: true
+...

mariadb/values_overrides/local-storage.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   replicas:
     server: 1
@@ -7,3 +8,4 @@ volume:
 monitoring:
   prometheus:
     enabled: false
+...

mariadb/values_overrides/netpol.yaml

@@ -1,3 +1,4 @@
+---
 manifests:
   network_policy: true
 network_policy:
@@ -86,3 +87,4 @@ network_policy:
           port: 80
         - protocol: TCP
           port: 8080
+...

memcached/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 conf:
   memcached:
     max_connections: 8192
@@ -206,3 +207,4 @@ pod:
         limits:
           memory: "1024Mi"
           cpu: "2000m"
+...

memcached/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -11,3 +12,4 @@ pod:
 monitoring:
   prometheus:
     enabled: false
+...

memcached/values_overrides/netpol.yaml

@@ -1,3 +1,4 @@
+---
 manifests:
   network_policy: true
 network_policy:
@@ -82,3 +83,4 @@ network_policy:
         ports:
           - protocol: TCP
             port: %%%REPLACE_API_PORT%%%
+...

metacontroller/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 images:
@@ -109,3 +110,4 @@ manifests:
   rbac: true
 
 
+...

metacontroller/values_overrides/apparmor.yaml

@@ -1,5 +1,7 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
     metacontroller:
       metacontroller: localhost/docker-default
+...

mongodb/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 pod:
@@ -26,7 +27,7 @@ pod:
       weight:
         default: 10
   replicas:
-    #only 1 replica currently supported
+    # only 1 replica currently supported
     server: 1
   resources:
     enabled: false
@@ -125,3 +126,4 @@ manifests:
   secret_db_root_creds: true
   service: true
   statefulset: true
+...

nagios/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 images:
   tags:
     apache_proxy: docker.io/httpd:2.4
@@ -236,7 +237,7 @@ pod:
     termination_grace_period:
       nagios:
         timeout: 30
-  #env:
+  # env:
   #
   # NOTE(megheisler): This value can be used to hold
   # the domain name. Functionality has been added in
@@ -1182,3 +1183,4 @@ conf:
         use_pending_states=1
         use_ssl_authentication=0
     query_es_clauses: null
+...

nagios/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -9,3 +10,4 @@ pod:
     nagios-test:
       init: runtime/default
       nagios-helm-tests: runtime/default
+...

nagios/values_overrides/elasticsearch-objects.yaml

@@ -1,3 +1,4 @@
+---
 conf:
   nagios:
     objects:
@@ -91,3 +92,4 @@ conf:
             service_description ES_cluster-running-data-node-count
             use generic-service
           }
+...

nagios/values_overrides/openstack-objects.yaml

@@ -1,3 +1,4 @@
+---
 conf:
   nagios:
     objects:
@@ -268,3 +269,4 @@ conf:
             service_description Prometheus-exporter_Openstack
             use generic-service
           }
+...

nagios/values_overrides/postgresql-objects.yaml

@@ -1,3 +1,4 @@
+---
 conf:
   nagios:
     objects:
@@ -30,3 +31,4 @@ conf:
             service_description Postgresql_deadlocks
             use generic-service
           }
+...

namespace-config/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 limits:
   - type: Container
     default:
@@ -23,3 +24,4 @@ limits:
     defaultRequest:
       cpu: 0.1
       memory: 64Mi
+...

nfs-provisioner/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 pod:
   affinity:
     anti:
@@ -24,7 +25,7 @@ pod:
       weight:
         default: 10
   replicas:
-    #only 1 replica currently supported
+    # only 1 replica currently supported
     server: 1
   resources:
     enabled: false
@@ -63,7 +64,7 @@ storage:
   persistentVolumeClaim:
     access_mode: ReadWriteOnce
     class_name: general
-    #NOTE(portdirect): Unless explicity set the PV name will be populated to
+    # NOTE(portdirect): Unless explicity set the PV name will be populated to
     # match "{{ .Release.Name }}".
     name: null
     size: 10Gi
@@ -77,10 +78,10 @@ labels:
     node_selector_value: enabled
 
 storageclass:
-  #NOTE(portdirect): Unless explicity set the provisioner name will be generated
+  # NOTE(portdirect): Unless explicity set the provisioner name will be generated
   # with the format "nfs/{{ .Release.Name }}"
   provisioner: null
-  #NOTE(portdirect): Unless explicity set the PV name will be populated to
+  # NOTE(portdirect): Unless explicity set the PV name will be populated to
   # match "{{ .Release.Name }}".
   name: null
 
@@ -133,3 +134,4 @@ manifests:
   service: true
   storage_class: true
   volume_claim: true
+...

openvswitch/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 release_group: null
 
 images:
@@ -216,3 +217,4 @@ conf:
     #     vHost IOMMU feature restricts the vhost memory that a virtio device
     #     access, available with DPDK v17.11
     # vhost_iommu_support: true
+...

openvswitch/values_overrides/apparmor.yaml

@@ -1,4 +1,5 @@
-#NOTE: Enable this with the correct policy
+# NOTE: Enable this with the correct policy
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -10,3 +11,4 @@ pod:
       openvswitch-db: runtime/default
       openvswitch-db-perms: runtime/default
       init: runtime/default
+...

openvswitch/values_overrides/dpdk-opensuse_15.yaml

@@ -21,3 +21,4 @@ conf:
     hugepages_mountpath: /dev/hugepages
     vhostuser_socket_dir: vhostuser
     socket_memory: 1024
+...

openvswitch/values_overrides/dpdk-ubuntu_bionic.yaml

@@ -21,3 +21,4 @@ conf:
     hugepages_mountpath: /dev/hugepages
     vhostuser_socket_dir: vhostuser
     socket_memory: 1024
+...

openvswitch/values_overrides/netpol.yaml

@@ -1,2 +1,4 @@
+---
 manifests:
   network_policy: true
+...

openvswitch/values_overrides/rocky-opensuse_15.yaml

@@ -3,3 +3,4 @@ images:
   tags:
     openvswitch_db_server: docker.io/openstackhelm/openvswitch:latest-opensuse_15
     openvswitch_vswitchd: docker.io/openstackhelm/openvswitch:latest-opensuse_15
+...

podsecuritypolicy/values.yaml

@@ -12,6 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+---
 conf:
   # The keys under serviceaccounts define specific serviceaccounts, for
   # which this tempalte creates clusterRoleBindigs to bind the serviceaccounts
@@ -45,7 +46,7 @@ data:
   # Note: you can define as many PSPs here as you need.
   #
   psp-default:  # This will be the `metadata.name` of the PodSecurityPolicy
-    annotations: {} # Placeholder to add seccomp/apparmor default annotations
+    annotations: {}  # Placeholder to add seccomp/apparmor default annotations
     spec:
       privileged: true
       allowPrivilegeEscalation: true
@@ -69,3 +70,4 @@ data:
           max: 65536
 manifests:
   podsecuritypolicy: true
+...

postgresql/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 release_group: null
 
 pod:
@@ -543,3 +544,4 @@ manifests:
       job_user_create: true
       secret_etc: true
       service_exporter: true
+...

postgresql/values_overrides/apparmor.yaml

@@ -1,3 +1,4 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
@@ -11,3 +12,4 @@ pod:
     prometheus-postgresql-exporter-create-user:
       prometheus-postgresql-exporter-create-user: runtime/default
       init: runtime/default
+...

postgresql/values_overrides/netpol.yaml

@@ -1,3 +1,4 @@
+---
 manifests:
   network_policy: true
 network_policy:
@@ -9,3 +10,4 @@ network_policy:
         ports:
           - protocol: TCP
             port: %%%REPLACE_API_PORT%%%
+...

powerdns/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 images:
   tags:
     powerdns: docker.io/psitrax/powerdns:4.1.10
@@ -200,3 +201,4 @@ manifests:
   secret_db: true
   service_dns: true
   service_api: false
+...

prometheus-alertmanager/values.yaml

@@ -15,6 +15,7 @@
 # Declare name/value pairs to be passed into your templates.
 # name: value
 
+---
 images:
   tags:
     alertmanager: docker.io/prom/alertmanager:v0.11.0
@@ -314,3 +315,4 @@ conf:
             message_format: html
             notify: true
   alert_templates: null
+...

prometheus-alertmanager/values_overrides/apparmor.yaml

@@ -1,6 +1,8 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
     alertmanager:
       alertmanager-perms: runtime/default
       init: runtime/default
+...

prometheus-kube-state-metrics/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 images:
   tags:
     kube_state_metrics: docker.io/bitnami/kube-state-metrics:1.3.1
@@ -182,3 +183,4 @@ manifests:
   service_controller_manager: true
   service_scheduler: true
   serviceaccount: true
+...

prometheus-kube-state-metrics/values_overrides/apparmor.yaml

@@ -1,6 +1,8 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
     kube-state-metrics:
       kube-state-metrics: runtime/default
       init: runtime/default
+...

prometheus-node-exporter/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 images:
   tags:
     node_exporter: docker.io/prom/node-exporter:v0.15.0
@@ -157,3 +158,4 @@ conf:
     disable:
     textfile:
       directory: /var/log/node-exporter-vfstats
+...

prometheus-node-exporter/values_overrides/apparmor.yaml

@@ -1,6 +1,8 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
     node-exporter:
       node-exporter: runtime/default
       init: runrtime/default
+...

prometheus-openstack-exporter/values.yaml

@@ -14,6 +14,7 @@
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
 
+---
 images:
   tags:
     prometheus_openstack_exporter: docker.io/openstackhelm/prometheus-openstack-exporter:ubuntu_bionic-20191017
@@ -218,3 +219,4 @@ manifests:
   network_policy: false
   secret_keystone: true
   service: true
+...

prometheus-openstack-exporter/values_overrides/apparmor.yaml

@@ -1,6 +1,8 @@
+---
 pod:
   mandatory_access_control:
     type: apparmor
     prometheus-openstack-exporter:
       openstack-metrics-exporter: runtime/default
       init: runtime/default
+...

prometheus-openstack-exporter/values_overrides/netpol.yaml

@@ -1,2 +1,4 @@
+---
 manifests:
   network_policy: true
+...