Update generated terranix helm charts

Signed-off-by: magic_rb <magic_rb@redalder.org>
This commit is contained in:
magic_rb 2024-07-13 21:56:18 +02:00
parent 62f4255e6f
commit 301b655a6e
No known key found for this signature in database
GPG key ID: 08D5287CC5DDCA0E
31 changed files with 158 additions and 101 deletions

View file

@ -5,7 +5,7 @@
labels = { labels = {
app = "istiod"; app = "istiod";
istio = "istiod"; istio = "istiod";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
release = "istio-base"; release = "istio-base";
}; };
name = "istiod-default-validator"; name = "istiod-default-validator";
@ -15,7 +15,7 @@
admissionReviewVersions = ["v1beta1" "v1"]; admissionReviewVersions = ["v1beta1" "v1"];
clientConfig = { clientConfig = {
service = { service = {
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
path = "/validate"; path = "/validate";
}; };

View file

@ -6,11 +6,11 @@
app = "istio-reader"; app = "istio-reader";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istio-reader-clusterrole-1-20-2-istio-system"; name = "istio-reader-clusterrole-1-22-0-istio-system";
}; };
rules = [ rules = [
{ {
apiGroups = ["config.istio.io" "security.istio.io" "networking.istio.io" "authentication.istio.io" "rbac.istio.io"]; apiGroups = ["config.istio.io" "security.istio.io" "networking.istio.io" "authentication.istio.io" "rbac.istio.io" "telemetry.istio.io" "extensions.istio.io"];
resources = ["*"]; resources = ["*"];
verbs = ["get" "list" "watch"]; verbs = ["get" "list" "watch"];
} }

View file

@ -6,7 +6,7 @@
app = "istiod"; app = "istiod";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-clusterrole-1-20-2-istio-system"; name = "istiod-clusterrole-1-22-0-istio-system";
}; };
rules = [ rules = [
{ {

View file

@ -6,7 +6,7 @@
app = "istiod"; app = "istiod";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-gateway-controller-1-20-2-istio-system"; name = "istiod-gateway-controller-1-22-0-istio-system";
}; };
rules = [ rules = [
{ {

View file

@ -6,12 +6,12 @@
app = "istio-reader"; app = "istio-reader";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istio-reader-clusterrole-1-20-2-istio-system"; name = "istio-reader-clusterrole-1-22-0-istio-system";
}; };
roleRef = { roleRef = {
apiGroup = "rbac.authorization.k8s.io"; apiGroup = "rbac.authorization.k8s.io";
kind = "ClusterRole"; kind = "ClusterRole";
name = "istio-reader-clusterrole-1-20-2-istio-system"; name = "istio-reader-clusterrole-1-22-0-istio-system";
}; };
subjects = [ subjects = [
{ {

View file

@ -6,17 +6,17 @@
app = "istiod"; app = "istiod";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-clusterrole-1-20-2-istio-system"; name = "istiod-clusterrole-1-22-0-istio-system";
}; };
roleRef = { roleRef = {
apiGroup = "rbac.authorization.k8s.io"; apiGroup = "rbac.authorization.k8s.io";
kind = "ClusterRole"; kind = "ClusterRole";
name = "istiod-clusterrole-1-20-2-istio-system"; name = "istiod-clusterrole-1-22-0-istio-system";
}; };
subjects = [ subjects = [
{ {
kind = "ServiceAccount"; kind = "ServiceAccount";
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
} }
]; ];

View file

@ -6,17 +6,17 @@
app = "istiod"; app = "istiod";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-gateway-controller-1-20-2-istio-system"; name = "istiod-gateway-controller-1-22-0-istio-system";
}; };
roleRef = { roleRef = {
apiGroup = "rbac.authorization.k8s.io"; apiGroup = "rbac.authorization.k8s.io";
kind = "ClusterRole"; kind = "ClusterRole";
name = "istiod-gateway-controller-1-20-2-istio-system"; name = "istiod-gateway-controller-1-22-0-istio-system";
}; };
subjects = [ subjects = [
{ {
kind = "ServiceAccount"; kind = "ServiceAccount";
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
} }
]; ];

View file

@ -5,18 +5,18 @@
labels = { labels = {
app = "sidecar-injector"; app = "sidecar-injector";
"install.operator.istio.io/owning-resource" = "unknown"; "install.operator.istio.io/owning-resource" = "unknown";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
"operator.istio.io/component" = "Pilot"; "operator.istio.io/component" = "Pilot";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istio-sidecar-injector-1-20-2"; name = "istio-sidecar-injector-1-22-0";
}; };
webhooks = [ webhooks = [
{ {
admissionReviewVersions = ["v1beta1" "v1"]; admissionReviewVersions = ["v1beta1" "v1"];
clientConfig = { clientConfig = {
service = { service = {
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
path = "/inject"; path = "/inject";
port = 443; port = 443;
@ -29,7 +29,7 @@
{ {
key = "istio.io/rev"; key = "istio.io/rev";
operator = "In"; operator = "In";
values = ["1-20-2"]; values = ["1-22-0"];
} }
{ {
key = "istio-injection"; key = "istio-injection";
@ -61,7 +61,7 @@
admissionReviewVersions = ["v1beta1" "v1"]; admissionReviewVersions = ["v1beta1" "v1"];
clientConfig = { clientConfig = {
service = { service = {
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
path = "/inject"; path = "/inject";
port = 443; port = 443;
@ -91,7 +91,7 @@
{ {
key = "istio.io/rev"; key = "istio.io/rev";
operator = "In"; operator = "In";
values = ["1-20-2"]; values = ["1-22-0"];
} }
]; ];
}; };

View file

@ -0,0 +1,45 @@
{
apiVersion = "admissionregistration.k8s.io/v1";
kind = "ValidatingWebhookConfiguration";
metadata = {
labels = {
app = "istiod";
istio = "istiod";
"istio.io/rev" = "1-22-0";
release = "istio-istiod";
};
name = "istio-validator-1-22-0-istio-system";
};
webhooks = [
{
admissionReviewVersions = ["v1beta1" "v1"];
clientConfig = {
service = {
name = "istiod-1-22-0";
namespace = "istio-system";
path = "/validate";
};
};
failurePolicy = "Ignore";
name = "rev.validation.istio.io";
objectSelector = {
matchExpressions = [
{
key = "istio.io/rev";
operator = "In";
values = ["1-22-0"];
}
];
};
rules = [
{
apiGroups = ["security.istio.io" "networking.istio.io" "telemetry.istio.io" "extensions.istio.io"];
apiVersions = ["*"];
operations = ["CREATE" "UPDATE"];
resources = ["*"];
}
];
sideEffects = "None";
}
];
}

View file

@ -1,18 +0,0 @@
{
apiVersion = "v1";
data = {
mesh = "defaultConfig:\n discoveryAddress: istiod-1-20-2.istio-system.svc:15012\n tracing:\n zipkin:\n address: zipkin.istio-system:9411\ndefaultProviders:\n metrics:\n - prometheus\nenablePrometheusMerge: true\nrootNamespace: istio-system\ntrustDomain: cluster.local";
meshNetworks = "networks: {}";
};
kind = "ConfigMap";
metadata = {
labels = {
"install.operator.istio.io/owning-resource" = "unknown";
"istio.io/rev" = "1-20-2";
"operator.istio.io/component" = "Pilot";
release = "istio-istiod";
};
name = "istio-1-20-2";
namespace = "istio-system";
};
}

View file

@ -0,0 +1,18 @@
{
apiVersion = "v1";
data = {
mesh = "defaultConfig:\n discoveryAddress: istiod-1-22-0.istio-system.svc:15012\ndefaultProviders:\n metrics:\n - prometheus\nenablePrometheusMerge: true\nrootNamespace: istio-system\ntrustDomain: cluster.local";
meshNetworks = "networks: {}";
};
kind = "ConfigMap";
metadata = {
labels = {
"install.operator.istio.io/owning-resource" = "unknown";
"istio.io/rev" = "1-22-0";
"operator.istio.io/component" = "Pilot";
release = "istio-istiod";
};
name = "istio-1-22-0";
namespace = "istio-system";
};
}

File diff suppressed because one or more lines are too long

View file

@ -6,18 +6,18 @@
app = "istiod"; app = "istiod";
"install.operator.istio.io/owning-resource" = "unknown"; "install.operator.istio.io/owning-resource" = "unknown";
istio = "pilot"; istio = "pilot";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
"operator.istio.io/component" = "Pilot"; "operator.istio.io/component" = "Pilot";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
spec = { spec = {
selector = { selector = {
matchLabels = { matchLabels = {
app = "istiod"; app = "istiod";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
}; };
}; };
strategy = { strategy = {
@ -29,7 +29,6 @@
template = { template = {
metadata = { metadata = {
annotations = { annotations = {
"ambient.istio.io/redirection" = "disabled";
"prometheus.io/port" = "15014"; "prometheus.io/port" = "15014";
"prometheus.io/scrape" = "true"; "prometheus.io/scrape" = "true";
"sidecar.istio.io/inject" = "false"; "sidecar.istio.io/inject" = "false";
@ -38,7 +37,8 @@
app = "istiod"; app = "istiod";
"install.operator.istio.io/owning-resource" = "unknown"; "install.operator.istio.io/owning-resource" = "unknown";
istio = "istiod"; istio = "istiod";
"istio.io/rev" = "1-20-2"; "istio.io/dataplane-mode" = "none";
"istio.io/rev" = "1-22-0";
"operator.istio.io/component" = "Pilot"; "operator.istio.io/component" = "Pilot";
"sidecar.istio.io/inject" = "false"; "sidecar.istio.io/inject" = "false";
}; };
@ -50,11 +50,7 @@
env = [ env = [
{ {
name = "REVISION"; name = "REVISION";
value = "1-20-2"; value = "1-22-0";
}
{
name = "JWT_POLICY";
value = "third-party-jwt";
} }
{ {
name = "PILOT_CERT_PROVIDER"; name = "PILOT_CERT_PROVIDER";
@ -116,7 +112,7 @@
value = "NixOS"; value = "NixOS";
} }
]; ];
image = "docker.io/istio/pilot:1.20.2"; image = "docker.io/istio/pilot:1.22.0";
name = "discovery"; name = "discovery";
ports = [ ports = [
{ {
@ -186,7 +182,13 @@
]; ];
} }
]; ];
serviceAccountName = "istiod-1-20-2"; serviceAccountName = "istiod-1-22-0";
tolerations = [
{
key = "cni.istio.io/not-ready";
operator = "Exists";
}
];
volumes = [ volumes = [
{ {
emptyDir = {medium = "Memory";}; emptyDir = {medium = "Memory";};

View file

@ -5,11 +5,11 @@
labels = { labels = {
app = "istiod"; app = "istiod";
"install.operator.istio.io/owning-resource" = "unknown"; "install.operator.istio.io/owning-resource" = "unknown";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
"operator.istio.io/component" = "Pilot"; "operator.istio.io/component" = "Pilot";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
spec = { spec = {
@ -30,7 +30,7 @@
scaleTargetRef = { scaleTargetRef = {
apiVersion = "apps/v1"; apiVersion = "apps/v1";
kind = "Deployment"; kind = "Deployment";
name = "istiod-1-20-2"; name = "istiod-1-22-0";
}; };
}; };
} }

View file

@ -6,11 +6,11 @@
app = "istiod"; app = "istiod";
"install.operator.istio.io/owning-resource" = "unknown"; "install.operator.istio.io/owning-resource" = "unknown";
istio = "pilot"; istio = "pilot";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
"operator.istio.io/component" = "Pilot"; "operator.istio.io/component" = "Pilot";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
spec = { spec = {
@ -18,7 +18,7 @@
selector = { selector = {
matchLabels = { matchLabels = {
app = "istiod"; app = "istiod";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
}; };
}; };
}; };

View file

@ -6,7 +6,7 @@
app = "istiod"; app = "istiod";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
rules = [ rules = [

View file

@ -6,18 +6,18 @@
app = "istiod"; app = "istiod";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
roleRef = { roleRef = {
apiGroup = "rbac.authorization.k8s.io"; apiGroup = "rbac.authorization.k8s.io";
kind = "Role"; kind = "Role";
name = "istiod-1-20-2"; name = "istiod-1-22-0";
}; };
subjects = [ subjects = [
{ {
kind = "ServiceAccount"; kind = "ServiceAccount";
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
} }
]; ];

View file

@ -6,11 +6,11 @@
app = "istiod"; app = "istiod";
"install.operator.istio.io/owning-resource" = "unknown"; "install.operator.istio.io/owning-resource" = "unknown";
istio = "pilot"; istio = "pilot";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
"operator.istio.io/component" = "Pilot"; "operator.istio.io/component" = "Pilot";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
spec = { spec = {
@ -39,7 +39,7 @@
]; ];
selector = { selector = {
app = "istiod"; app = "istiod";
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-0";
}; };
}; };
} }

View file

@ -6,7 +6,7 @@
app = "istiod"; app = "istiod";
release = "istio-istiod"; release = "istio-istiod";
}; };
name = "istiod-1-20-2"; name = "istiod-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
} }

View file

@ -3,7 +3,7 @@
kind = "ClusterRole"; kind = "ClusterRole";
metadata = { metadata = {
creationTimestamp = null; creationTimestamp = null;
name = "istio-operator-1-20-2"; name = "istio-operator-1-22-0";
}; };
rules = [ rules = [
{ {
@ -31,6 +31,16 @@
resources = ["*"]; resources = ["*"];
verbs = ["*"]; verbs = ["*"];
} }
{
apiGroups = ["telemetry.istio.io"];
resources = ["*"];
verbs = ["*"];
}
{
apiGroups = ["extensions.istio.io"];
resources = ["*"];
verbs = ["*"];
}
{ {
apiGroups = ["admissionregistration.k8s.io"]; apiGroups = ["admissionregistration.k8s.io"];
resources = ["mutatingwebhookconfigurations" "validatingwebhookconfigurations"]; resources = ["mutatingwebhookconfigurations" "validatingwebhookconfigurations"];

View file

@ -1,16 +1,16 @@
{ {
apiVersion = "rbac.authorization.k8s.io/v1"; apiVersion = "rbac.authorization.k8s.io/v1";
kind = "ClusterRoleBinding"; kind = "ClusterRoleBinding";
metadata = {name = "istio-operator-1-20-2";}; metadata = {name = "istio-operator-1-22-0";};
roleRef = { roleRef = {
apiGroup = "rbac.authorization.k8s.io"; apiGroup = "rbac.authorization.k8s.io";
kind = "ClusterRole"; kind = "ClusterRole";
name = "istio-operator-1-20-2"; name = "istio-operator-1-22-0";
}; };
subjects = [ subjects = [
{ {
kind = "ServiceAccount"; kind = "ServiceAccount";
name = "istio-operator-1-20-2"; name = "istio-operator-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
} }
]; ];

View file

@ -2,7 +2,7 @@
apiVersion = "apps/v1"; apiVersion = "apps/v1";
kind = "Deployment"; kind = "Deployment";
metadata = { metadata = {
name = "istio-operator-1-20-2"; name = "istio-operator-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
spec = { spec = {
@ -44,10 +44,10 @@
} }
{ {
name = "REVISION"; name = "REVISION";
value = "1-20-2"; value = "1-22-0";
} }
]; ];
image = "docker.io/istio/operator:1.20.2"; image = "docker.io/istio/operator:1.22.0";
name = "istio-operator"; name = "istio-operator";
resources = { resources = {
limits = { limits = {
@ -68,7 +68,7 @@
}; };
} }
]; ];
serviceAccountName = "istio-operator-1-20-2"; serviceAccountName = "istio-operator-1-22-0";
}; };
}; };
}; };

View file

@ -3,7 +3,7 @@
kind = "Service"; kind = "Service";
metadata = { metadata = {
labels = {name = "istio-operator";}; labels = {name = "istio-operator";};
name = "istio-operator-1-20-2"; name = "istio-operator-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
spec = { spec = {

View file

@ -2,7 +2,7 @@
apiVersion = "v1"; apiVersion = "v1";
kind = "ServiceAccount"; kind = "ServiceAccount";
metadata = { metadata = {
name = "istio-operator-1-20-2"; name = "istio-operator-1-22-0";
namespace = "istio-system"; namespace = "istio-system";
}; };
} }

View file

@ -71,7 +71,7 @@
value = "frr"; value = "frr";
} }
]; ];
image = "quay.io/metallb/speaker:v0.14.3"; image = "nix:0/nix/store/g0fiszhjj1h34g67h6m82cd63z92xh5i-nix-image-metallb-speaker.tar:v0.14.3";
livenessProbe = { livenessProbe = {
failureThreshold = 3; failureThreshold = 3;
httpGet = { httpGet = {
@ -244,7 +244,7 @@
} }
{ {
command = ["/bin/sh" "-c" "cp -f /frr-reloader.sh /etc/frr_reloader/"]; command = ["/bin/sh" "-c" "cp -f /frr-reloader.sh /etc/frr_reloader/"];
image = "quay.io/metallb/speaker:v0.14.3"; image = "nix:0/nix/store/g0fiszhjj1h34g67h6m82cd63z92xh5i-nix-image-metallb-speaker.tar:v0.14.3";
name = "cp-reloader"; name = "cp-reloader";
volumeMounts = [ volumeMounts = [
{ {
@ -255,7 +255,7 @@
} }
{ {
command = ["/bin/sh" "-c" "cp -f /frr-metrics /etc/frr_metrics/"]; command = ["/bin/sh" "-c" "cp -f /frr-metrics /etc/frr_metrics/"];
image = "quay.io/metallb/speaker:v0.14.3"; image = "nix:0/nix/store/g0fiszhjj1h34g67h6m82cd63z92xh5i-nix-image-metallb-speaker.tar:v0.14.3";
name = "cp-metrics"; name = "cp-metrics";
volumeMounts = [ volumeMounts = [
{ {

View file

@ -48,7 +48,7 @@
value = "frr"; value = "frr";
} }
]; ];
image = "quay.io/metallb/controller:v0.14.3"; image = "nix:0/nix/store/5qlcm1xnhmf5sgw6lb65xbywqzky8w8i-nix-image-metallb-controller.tar:v0.14.3";
livenessProbe = { livenessProbe = {
failureThreshold = 3; failureThreshold = 3;
httpGet = { httpGet = {

View file

@ -57,7 +57,7 @@ in {
labels = { labels = {
visibility = "public"; visibility = "public";
# has to be kept in sync with `prepare` profile # has to be kept in sync with `prepare` profile
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-2";
}; };
}; };
}; };

View file

@ -17,7 +17,7 @@ in {
labels = { labels = {
visibility = "public"; visibility = "public";
# has to be kept in sync with `prepare` profile # has to be kept in sync with `prepare` profile
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-2";
}; };
}; };
}; };

View file

@ -36,7 +36,7 @@ in {
# has to be kept in sync with `prepare` profile # has to be kept in sync with `prepare` profile
labels = { labels = {
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-2";
}; };
}; };
}; };
@ -48,7 +48,7 @@ in {
labels = { labels = {
visibility = "public"; visibility = "public";
# has to be kept in sync with `prepare` profile # has to be kept in sync with `prepare` profile
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-2";
}; };
}; };
}; };

View file

@ -37,7 +37,7 @@ in {
# has to be kept in sync with `main` profile # has to be kept in sync with `main` profile
labels = { labels = {
"istio.io/rev" = "1-20-2"; "istio.io/rev" = "1-22-2";
}; };
}; };
}; };