osm.etsi.org Git - osm/devops.git/blob

   1 #######################################################################################
   2 # Copyright ETSI Contributors and Others.
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7 #
   8 #    http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
  13 # implied.
  14 # See the License for the specific language governing permissions and
  15 # limitations under the License.
  16 #######################################################################################
  17
  18 ---
  19 # Source: kiali-server/templates/serviceaccount.yaml
  20 apiVersion: v1
  21 kind: ServiceAccount
  22 metadata:
  23   name: kiali
  24   namespace: istio-system
  25   labels:
  26     helm.sh/chart: kiali-server-1.76.0
  27     app: kiali
  28     app.kubernetes.io/name: kiali
  29     app.kubernetes.io/instance: kiali
  30     version: "v1.76.0"
  31     app.kubernetes.io/version: "v1.76.0"
  32     app.kubernetes.io/managed-by: Helm
  33     app.kubernetes.io/part-of: "kiali"
  34 ...
  35 ---
  36 # Source: kiali-server/templates/configmap.yaml
  37 apiVersion: v1
  38 kind: ConfigMap
  39 metadata:
  40   name: kiali
  41   namespace: istio-system
  42   labels:
  43     helm.sh/chart: kiali-server-1.76.0
  44     app: kiali
  45     app.kubernetes.io/name: kiali
  46     app.kubernetes.io/instance: kiali
  47     version: "v1.76.0"
  48     app.kubernetes.io/version: "v1.76.0"
  49     app.kubernetes.io/managed-by: Helm
  50     app.kubernetes.io/part-of: "kiali"
  51 data:
  52   config.yaml: |
  53     auth:
  54       openid: {}
  55       openshift:
  56         client_id_prefix: kiali
  57       strategy: anonymous
  58     deployment:
  59       accessible_namespaces:
  60       - '**'
  61       additional_service_yaml: {}
  62       affinity:
  63         node: {}
  64         pod: {}
  65         pod_anti: {}
  66       configmap_annotations: {}
  67       custom_secrets: []
  68       host_aliases: []
  69       hpa:
  70         api_version: autoscaling/v2beta2
  71         spec: {}
  72       image_digest: ""
  73       image_name: quay.io/kiali/kiali
  74       image_pull_policy: Always
  75       image_pull_secrets: []
  76       image_version: v1.76
  77       ingress:
  78         additional_labels: {}
  79         class_name: nginx
  80         override_yaml:
  81           metadata: {}
  82       ingress_enabled: false
  83       instance_name: kiali
  84       logger:
  85         log_format: text
  86         log_level: info
  87         sampler_rate: "1"
  88         time_field_format: 2006-01-02T15:04:05Z07:00
  89       namespace: istio-system
  90       node_selector: {}
  91       pod_annotations: {}
  92       pod_labels:
  93         sidecar.istio.io/inject: "false"
  94       priority_class_name: ""
  95       replicas: 1
  96       resources:
  97         limits:
  98           memory: 1Gi
  99         requests:
 100           cpu: 10m
 101           memory: 64Mi
 102       secret_name: kiali
 103       security_context: {}
 104       service_annotations: {}
 105       service_type: ""
 106       tolerations: []
 107       version_label: v1.76.0
 108       view_only_mode: false
 109     external_services:
 110       custom_dashboards:
 111         enabled: true
 112       istio:
 113         root_namespace: istio-system
 114     identity:
 115       cert_file: ""
 116       private_key_file: ""
 117     istio_namespace: istio-system
 118     kiali_feature_flags:
 119       certificates_information_indicators:
 120         enabled: true
 121         secrets:
 122         - cacerts
 123         - istio-ca-secret
 124       clustering:
 125         autodetect_secrets:
 126           enabled: true
 127           label: kiali.io/multiCluster=true
 128         clusters: []
 129       disabled_features: []
 130       validations:
 131         ignore:
 132         - KIA1301
 133     login_token:
 134       signing_key: CHANGEME00000000
 135     server:
 136       metrics_enabled: true
 137       metrics_port: 9090
 138       port: 20001
 139       web_root: /kiali
 140 ...
 141 ---
 142 # Source: kiali-server/templates/role-viewer.yaml
 143 apiVersion: rbac.authorization.k8s.io/v1
 144 kind: ClusterRole
 145 metadata:
 146   name: kiali-viewer
 147   labels:
 148     helm.sh/chart: kiali-server-1.76.0
 149     app: kiali
 150     app.kubernetes.io/name: kiali
 151     app.kubernetes.io/instance: kiali
 152     version: "v1.76.0"
 153     app.kubernetes.io/version: "v1.76.0"
 154     app.kubernetes.io/managed-by: Helm
 155     app.kubernetes.io/part-of: "kiali"
 156 rules:
 157 - apiGroups: [""]
 158   resources:
 159   - configmaps
 160   - endpoints
 161   - pods/log
 162   verbs:
 163   - get
 164   - list
 165   - watch
 166 - apiGroups: [""]
 167   resources:
 168   - namespaces
 169   - pods
 170   - replicationcontrollers
 171   - services
 172   verbs:
 173   - get
 174   - list
 175   - watch
 176 - apiGroups: [""]
 177   resources:
 178   - pods/portforward
 179   verbs:
 180   - create
 181   - post
 182 - apiGroups: ["extensions", "apps"]
 183   resources:
 184   - daemonsets
 185   - deployments
 186   - replicasets
 187   - statefulsets
 188   verbs:
 189   - get
 190   - list
 191   - watch
 192 - apiGroups: ["batch"]
 193   resources:
 194   - cronjobs
 195   - jobs
 196   verbs:
 197   - get
 198   - list
 199   - watch
 200 - apiGroups:
 201   - networking.istio.io
 202   - security.istio.io
 203   - extensions.istio.io
 204   - telemetry.istio.io
 205   - gateway.networking.k8s.io
 206   resources: ["*"]
 207   verbs:
 208   - get
 209   - list
 210   - watch
 211 - apiGroups: ["apps.openshift.io"]
 212   resources:
 213   - deploymentconfigs
 214   verbs:
 215   - get
 216   - list
 217   - watch
 218 - apiGroups: ["project.openshift.io"]
 219   resources:
 220   - projects
 221   verbs:
 222   - get
 223 - apiGroups: ["route.openshift.io"]
 224   resources:
 225   - routes
 226   verbs:
 227   - get
 228 - apiGroups: ["authentication.k8s.io"]
 229   resources:
 230   - tokenreviews
 231   verbs:
 232   - create
 233 ...
 234 ---
 235 # Source: kiali-server/templates/role.yaml
 236 apiVersion: rbac.authorization.k8s.io/v1
 237 kind: ClusterRole
 238 metadata:
 239   name: kiali
 240   labels:
 241     helm.sh/chart: kiali-server-1.76.0
 242     app: kiali
 243     app.kubernetes.io/name: kiali
 244     app.kubernetes.io/instance: kiali
 245     version: "v1.76.0"
 246     app.kubernetes.io/version: "v1.76.0"
 247     app.kubernetes.io/managed-by: Helm
 248     app.kubernetes.io/part-of: "kiali"
 249 rules:
 250 - apiGroups: [""]
 251   resources:
 252   - configmaps
 253   - endpoints
 254   - pods/log
 255   verbs:
 256   - get
 257   - list
 258   - watch
 259 - apiGroups: [""]
 260   resources:
 261   - namespaces
 262   - pods
 263   - replicationcontrollers
 264   - services
 265   verbs:
 266   - get
 267   - list
 268   - watch
 269   - patch
 270 - apiGroups: [""]
 271   resources:
 272   - pods/portforward
 273   verbs:
 274   - create
 275   - post
 276 - apiGroups: ["extensions", "apps"]
 277   resources:
 278   - daemonsets
 279   - deployments
 280   - replicasets
 281   - statefulsets
 282   verbs:
 283   - get
 284   - list
 285   - watch
 286   - patch
 287 - apiGroups: ["batch"]
 288   resources:
 289   - cronjobs
 290   - jobs
 291   verbs:
 292   - get
 293   - list
 294   - watch
 295   - patch
 296 - apiGroups:
 297   - networking.istio.io
 298   - security.istio.io
 299   - extensions.istio.io
 300   - telemetry.istio.io
 301   - gateway.networking.k8s.io
 302   resources: ["*"]
 303   verbs:
 304   - get
 305   - list
 306   - watch
 307   - create
 308   - delete
 309   - patch
 310 - apiGroups: ["apps.openshift.io"]
 311   resources:
 312   - deploymentconfigs
 313   verbs:
 314   - get
 315   - list
 316   - watch
 317   - patch
 318 - apiGroups: ["project.openshift.io"]
 319   resources:
 320   - projects
 321   verbs:
 322   - get
 323 - apiGroups: ["route.openshift.io"]
 324   resources:
 325   - routes
 326   verbs:
 327   - get
 328 - apiGroups: ["authentication.k8s.io"]
 329   resources:
 330   - tokenreviews
 331   verbs:
 332   - create
 333 ...
 334 ---
 335 # Source: kiali-server/templates/rolebinding.yaml
 336 apiVersion: rbac.authorization.k8s.io/v1
 337 kind: ClusterRoleBinding
 338 metadata:
 339   name: kiali
 340   labels:
 341     helm.sh/chart: kiali-server-1.76.0
 342     app: kiali
 343     app.kubernetes.io/name: kiali
 344     app.kubernetes.io/instance: kiali
 345     version: "v1.76.0"
 346     app.kubernetes.io/version: "v1.76.0"
 347     app.kubernetes.io/managed-by: Helm
 348     app.kubernetes.io/part-of: "kiali"
 349 roleRef:
 350   apiGroup: rbac.authorization.k8s.io
 351   kind: ClusterRole
 352   name: kiali
 353 subjects:
 354 - kind: ServiceAccount
 355   name: kiali
 356   namespace: istio-system
 357 ...
 358 ---
 359 # Source: kiali-server/templates/role-controlplane.yaml
 360 apiVersion: rbac.authorization.k8s.io/v1
 361 kind: Role
 362 metadata:
 363   name: kiali-controlplane
 364   namespace: istio-system
 365   labels:
 366     helm.sh/chart: kiali-server-1.76.0
 367     app: kiali
 368     app.kubernetes.io/name: kiali
 369     app.kubernetes.io/instance: kiali
 370     version: "v1.76.0"
 371     app.kubernetes.io/version: "v1.76.0"
 372     app.kubernetes.io/managed-by: Helm
 373     app.kubernetes.io/part-of: "kiali"
 374 rules:
 375 - apiGroups: [""]
 376   resourceNames:
 377   - cacerts
 378   - istio-ca-secret
 379   resources:
 380   - secrets
 381   verbs:
 382   - get
 383   - list
 384   - watch
 385 ...
 386 ---
 387 # Source: kiali-server/templates/rolebinding-controlplane.yaml
 388 apiVersion: rbac.authorization.k8s.io/v1
 389 kind: RoleBinding
 390 metadata:
 391   name: kiali-controlplane
 392   namespace: istio-system
 393   labels:
 394     helm.sh/chart: kiali-server-1.76.0
 395     app: kiali
 396     app.kubernetes.io/name: kiali
 397     app.kubernetes.io/instance: kiali
 398     version: "v1.76.0"
 399     app.kubernetes.io/version: "v1.76.0"
 400     app.kubernetes.io/managed-by: Helm
 401     app.kubernetes.io/part-of: "kiali"
 402 roleRef:
 403   apiGroup: rbac.authorization.k8s.io
 404   kind: Role
 405   name: kiali-controlplane
 406 subjects:
 407 - kind: ServiceAccount
 408   name: kiali
 409   namespace: istio-system
 410 ...
 411 ---
 412 # Source: kiali-server/templates/service.yaml
 413 apiVersion: v1
 414 kind: Service
 415 metadata:
 416   name: kiali
 417   namespace: istio-system
 418   labels:
 419     helm.sh/chart: kiali-server-1.76.0
 420     app: kiali
 421     app.kubernetes.io/name: kiali
 422     app.kubernetes.io/instance: kiali
 423     version: "v1.76.0"
 424     app.kubernetes.io/version: "v1.76.0"
 425     app.kubernetes.io/managed-by: Helm
 426     app.kubernetes.io/part-of: "kiali"
 427   annotations:
 428 spec:
 429   ports:
 430   - name: http
 431     appProtocol: http
 432     protocol: TCP
 433     port: 20001
 434   - name: http-metrics
 435     appProtocol: http
 436     protocol: TCP
 437     port: 9090
 438   selector:
 439     app.kubernetes.io/name: kiali
 440     app.kubernetes.io/instance: kiali
 441 ...
 442 ---
 443 # Source: kiali-server/templates/deployment.yaml
 444 apiVersion: apps/v1
 445 kind: Deployment
 446 metadata:
 447   name: kiali
 448   namespace: istio-system
 449   labels:
 450     helm.sh/chart: kiali-server-1.76.0
 451     app: kiali
 452     app.kubernetes.io/name: kiali
 453     app.kubernetes.io/instance: kiali
 454     version: "v1.76.0"
 455     app.kubernetes.io/version: "v1.76.0"
 456     app.kubernetes.io/managed-by: Helm
 457     app.kubernetes.io/part-of: "kiali"
 458 spec:
 459   replicas: 1
 460   selector:
 461     matchLabels:
 462       app.kubernetes.io/name: kiali
 463       app.kubernetes.io/instance: kiali
 464   strategy:
 465     rollingUpdate:
 466       maxSurge: 1
 467       maxUnavailable: 1
 468     type: RollingUpdate
 469   template:
 470     metadata:
 471       name: kiali
 472       labels:
 473         helm.sh/chart: kiali-server-1.76.0
 474         app: kiali
 475         app.kubernetes.io/name: kiali
 476         app.kubernetes.io/instance: kiali
 477         version: "v1.76.0"
 478         app.kubernetes.io/version: "v1.76.0"
 479         app.kubernetes.io/managed-by: Helm
 480         app.kubernetes.io/part-of: "kiali"
 481         sidecar.istio.io/inject: "false"
 482       annotations:
 483         checksum/config: aebd819b94172ef9b148702b7bb438ac35bd1eb284bbb9b13769d8576374fbda
 484         prometheus.io/scrape: "true"
 485         prometheus.io/port: "9090"
 486         kiali.io/dashboards: go,kiali
 487     spec:
 488       serviceAccountName: kiali
 489       containers:
 490       - image: "quay.io/kiali/kiali:v1.76"
 491         imagePullPolicy: Always
 492         name: kiali
 493         command:
 494         - "/opt/kiali/kiali"
 495         - "-config"
 496         - "/kiali-configuration/config.yaml"
 497         securityContext:
 498           allowPrivilegeEscalation: false
 499           privileged: false
 500           readOnlyRootFilesystem: true
 501           runAsNonRoot: true
 502           capabilities:
 503             drop:
 504             - ALL
 505         ports:
 506         - name: api-port
 507           containerPort: 20001
 508         - name: http-metrics
 509           containerPort: 9090
 510         readinessProbe:
 511           httpGet:
 512             path: /kiali/healthz
 513             port: api-port
 514             scheme: HTTP
 515           initialDelaySeconds: 5
 516           periodSeconds: 30
 517         livenessProbe:
 518           httpGet:
 519             path: /kiali/healthz
 520             port: api-port
 521             scheme: HTTP
 522           initialDelaySeconds: 5
 523           periodSeconds: 30
 524         env:
 525         - name: ACTIVE_NAMESPACE
 526           valueFrom:
 527             fieldRef:
 528               fieldPath: metadata.namespace
 529         - name: LOG_LEVEL
 530           value: "info"
 531         - name: LOG_FORMAT
 532           value: "text"
 533         - name: LOG_TIME_FIELD_FORMAT
 534           value: "2006-01-02T15:04:05Z07:00"
 535         - name: LOG_SAMPLER_RATE
 536           value: "1"
 537         volumeMounts:
 538         - name: kiali-configuration
 539           mountPath: "/kiali-configuration"
 540         - name: kiali-cert
 541           mountPath: "/kiali-cert"
 542         - name: kiali-secret
 543           mountPath: "/kiali-secret"
 544         - name: kiali-cabundle
 545           mountPath: "/kiali-cabundle"
 546         resources:
 547           limits:
 548             memory: 1Gi
 549           requests:
 550             cpu: 10m
 551             memory: 64Mi
 552       volumes:
 553       - name: kiali-configuration
 554         configMap:
 555           name: kiali
 556       - name: kiali-cert
 557         secret:
 558           secretName: istio.kiali-service-account
 559           optional: true
 560       - name: kiali-secret
 561         secret:
 562           secretName: kiali
 563           optional: true
 564       - name: kiali-cabundle
 565         configMap:
 566           name: kiali-cabundle
 567           optional: true
 568 ...