Skip to content

Commit d99d081

Browse files
guicauladaguicaulada
authored
chore(cert-manager): vendor Helm chart 1.9.2 (#1604)
1 parent 22f66b8 commit d99d081

37 files changed

+7279
-0
lines changed

‎cert-manager/chartfile.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,4 +13,7 @@ requires:
1313
- chart: jetstack/cert-manager
1414
version: 1.8.0
1515
directory: '1.8.0'
16+
- chart: jetstack/cert-manager
17+
version: 1.9.2
18+
directory: '1.9.2'
1619
version: 1

‎cert-manager/charts/1.9.2/Chart.yaml‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
annotations:
2+
artifacthub.io/prerelease: "false"
3+
artifacthub.io/signKey: |
4+
fingerprint: 1020CF3C033D4F35BAE1C19E1226061C665DF13E
5+
url: https://cert-manager.io/public-keys/cert-manager-keyring-2021-09-20-1020CF3C033D4F35BAE1C19E1226061C665DF13E.gpg
6+
apiVersion: v1
7+
appVersion: v1.9.2
8+
description: A Helm chart for cert-manager
9+
home: https://github.com/cert-manager/cert-manager
10+
icon: https://raw.githubusercontent.com/cert-manager/cert-manager/d53c0b9270f8cd90d908460d69502694e1838f5f/logo/logo-small.png
11+
keywords:
12+
- cert-manager
13+
- kube-lego
14+
- letsencrypt
15+
- tls
16+
kubeVersion: '>= 1.19.0-0'
17+
maintainers:
18+
- email: cert-manager-maintainers@googlegroups.com
19+
name: cert-manager-maintainers
20+
url: https://cert-manager.io
21+
name: cert-manager
22+
sources:
23+
- https://github.com/cert-manager/cert-manager
24+
version: v1.9.2

‎cert-manager/charts/1.9.2/README.md‎

Lines changed: 219 additions & 0 deletions
Large diffs are not rendered by default.

‎cert-manager/charts/1.9.2/templates/NOTES.txt‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
cert-manager {{ .Chart.AppVersion }} has been deployed successfully!
2+
3+
In order to begin issuing certificates, you will need to set up a ClusterIssuer
4+
or Issuer resource (for example, by creating a 'letsencrypt-staging' issuer).
5+
6+
More information on the different types of issuers and how to configure them
7+
can be found in our documentation:
8+
9+
https://cert-manager.io/docs/configuration/
10+
11+
For information on how to configure cert-manager to automatically provision
12+
Certificates for Ingress resources, take a look at the `ingress-shim`
13+
documentation:
14+
15+
https://cert-manager.io/docs/usage/ingress/

‎cert-manager/charts/1.9.2/templates/_helpers.tpl‎

Lines changed: 171 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,171 @@
1+
{{/* vim: set filetype=mustache: */}}
2+
{{/*
3+
Expand the name of the chart.
4+
*/}}
5+
{{- define "cert-manager.name" -}}
6+
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
7+
{{- end -}}
8+
9+
{{/*
10+
Create a default fully qualified app name.
11+
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
12+
*/}}
13+
{{- define "cert-manager.fullname" -}}
14+
{{- if .Values.fullnameOverride -}}
15+
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
16+
{{- else -}}
17+
{{- $name := default .Chart.Name .Values.nameOverride -}}
18+
{{- if contains $name .Release.Name -}}
19+
{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
20+
{{- else -}}
21+
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
22+
{{- end -}}
23+
{{- end -}}
24+
{{- end -}}
25+
26+
{{/*
27+
Create the name of the service account to use
28+
*/}}
29+
{{- define "cert-manager.serviceAccountName" -}}
30+
{{- if .Values.serviceAccount.create -}}
31+
{{ default (include "cert-manager.fullname" .) .Values.serviceAccount.name }}
32+
{{- else -}}
33+
{{ default "default" .Values.serviceAccount.name }}
34+
{{- end -}}
35+
{{- end -}}
36+
37+
{{/*
38+
Webhook templates
39+
*/}}
40+
41+
{{/*
42+
Expand the name of the chart.
43+
Manually fix the 'app' and 'name' labels to 'webhook' to maintain
44+
compatibility with the v0.9 deployment selector.
45+
*/}}
46+
{{- define "webhook.name" -}}
47+
{{- printf "webhook" -}}
48+
{{- end -}}
49+
50+
{{/*
51+
Create a default fully qualified app name.
52+
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
53+
If release name contains chart name it will be used as a full name.
54+
*/}}
55+
{{- define "webhook.fullname" -}}
56+
{{- $trimmedName := printf "%s" (include "cert-manager.fullname" .) | trunc 55 | trimSuffix "-" -}}
57+
{{- printf "%s-webhook" $trimmedName | trunc 63 | trimSuffix "-" -}}
58+
{{- end -}}
59+
60+
{{- define "webhook.caRef" -}}
61+
{{- template "cert-manager.namespace" }}/{{ template "webhook.fullname" . }}-ca
62+
{{- end -}}
63+
64+
{{/*
65+
Create the name of the service account to use
66+
*/}}
67+
{{- define "webhook.serviceAccountName" -}}
68+
{{- if .Values.webhook.serviceAccount.create -}}
69+
{{ default (include "webhook.fullname" .) .Values.webhook.serviceAccount.name }}
70+
{{- else -}}
71+
{{ default "default" .Values.webhook.serviceAccount.name }}
72+
{{- end -}}
73+
{{- end -}}
74+
75+
{{/*
76+
cainjector templates
77+
*/}}
78+
79+
{{/*
80+
Expand the name of the chart.
81+
Manually fix the 'app' and 'name' labels to 'cainjector' to maintain
82+
compatibility with the v0.9 deployment selector.
83+
*/}}
84+
{{- define "cainjector.name" -}}
85+
{{- printf "cainjector" -}}
86+
{{- end -}}
87+
88+
{{/*
89+
Create a default fully qualified app name.
90+
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
91+
If release name contains chart name it will be used as a full name.
92+
*/}}
93+
{{- define "cainjector.fullname" -}}
94+
{{- $trimmedName := printf "%s" (include "cert-manager.fullname" .) | trunc 52 | trimSuffix "-" -}}
95+
{{- printf "%s-cainjector" $trimmedName | trunc 63 | trimSuffix "-" -}}
96+
{{- end -}}
97+
98+
{{/*
99+
Create the name of the service account to use
100+
*/}}
101+
{{- define "cainjector.serviceAccountName" -}}
102+
{{- if .Values.cainjector.serviceAccount.create -}}
103+
{{ default (include "cainjector.fullname" .) .Values.cainjector.serviceAccount.name }}
104+
{{- else -}}
105+
{{ default "default" .Values.cainjector.serviceAccount.name }}
106+
{{- end -}}
107+
{{- end -}}
108+
109+
{{/*
110+
startupapicheck templates
111+
*/}}
112+
113+
{{/*
114+
Expand the name of the chart.
115+
Manually fix the 'app' and 'name' labels to 'startupapicheck' to maintain
116+
compatibility with the v0.9 deployment selector.
117+
*/}}
118+
{{- define "startupapicheck.name" -}}
119+
{{- printf "startupapicheck" -}}
120+
{{- end -}}
121+
122+
{{/*
123+
Create a default fully qualified app name.
124+
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
125+
If release name contains chart name it will be used as a full name.
126+
*/}}
127+
{{- define "startupapicheck.fullname" -}}
128+
{{- $trimmedName := printf "%s" (include "cert-manager.fullname" .) | trunc 52 | trimSuffix "-" -}}
129+
{{- printf "%s-startupapicheck" $trimmedName | trunc 63 | trimSuffix "-" -}}
130+
{{- end -}}
131+
132+
{{/*
133+
Create the name of the service account to use
134+
*/}}
135+
{{- define "startupapicheck.serviceAccountName" -}}
136+
{{- if .Values.startupapicheck.serviceAccount.create -}}
137+
{{ default (include "startupapicheck.fullname" .) .Values.startupapicheck.serviceAccount.name }}
138+
{{- else -}}
139+
{{ default "default" .Values.startupapicheck.serviceAccount.name }}
140+
{{- end -}}
141+
{{- end -}}
142+
143+
{{/*
144+
Create chart name and version as used by the chart label.
145+
*/}}
146+
{{- define "chartName" -}}
147+
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
148+
{{- end -}}
149+
150+
{{/*
151+
Labels that should be added on each resource
152+
*/}}
153+
{{- define "labels" -}}
154+
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
155+
{{- if eq (default "helm" .Values.creator) "helm" }}
156+
app.kubernetes.io/managed-by: {{ .Release.Service }}
157+
helm.sh/chart: {{ include "chartName" . }}
158+
{{- end -}}
159+
{{- end -}}
160+
161+
{{/*
162+
Namespace for all resources to be installed into
163+
If not defined in values file then the helm release namespace is used
164+
By default this is not set so the helm release namespace will be used
165+
166+
This gets around an problem within helm discussed here
167+
https://github.com/helm/helm/issues/5358
168+
*/}}
169+
{{- define "cert-manager.namespace" -}}
170+
{{ .Values.namespace | default .Release.Namespace }}
171+
{{- end -}}

‎cert-manager/charts/1.9.2/templates/cainjector-deployment.yaml‎

Lines changed: 105 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,105 @@
1+
{{- if .Values.cainjector.enabled }}
2+
apiVersion: apps/v1
3+
kind: Deployment
4+
metadata:
5+
name: {{ include "cainjector.fullname" . }}
6+
namespace: {{ include "cert-manager.namespace" . }}
7+
labels:
8+
app: {{ include "cainjector.name" . }}
9+
app.kubernetes.io/name: {{ include "cainjector.name" . }}
10+
app.kubernetes.io/instance: {{ .Release.Name }}
11+
app.kubernetes.io/component: "cainjector"
12+
{{- include "labels" . | nindent 4 }}
13+
{{- with .Values.cainjector.deploymentAnnotations }}
14+
annotations:
15+
{{- toYaml . | nindent 4 }}
16+
{{- end }}
17+
spec:
18+
replicas: {{ .Values.cainjector.replicaCount }}
19+
selector:
20+
matchLabels:
21+
app.kubernetes.io/name: {{ include "cainjector.name" . }}
22+
app.kubernetes.io/instance: {{ .Release.Name }}
23+
app.kubernetes.io/component: "cainjector"
24+
{{- with .Values.cainjector.strategy }}
25+
strategy:
26+
{{- toYaml . | nindent 4 }}
27+
{{- end }}
28+
template:
29+
metadata:
30+
labels:
31+
app: {{ include "cainjector.name" . }}
32+
app.kubernetes.io/name: {{ include "cainjector.name" . }}
33+
app.kubernetes.io/instance: {{ .Release.Name }}
34+
app.kubernetes.io/component: "cainjector"
35+
{{- include "labels" . | nindent 8 }}
36+
{{- with .Values.cainjector.podLabels }}
37+
{{- toYaml . | nindent 8 }}
38+
{{- end }}
39+
{{- with .Values.cainjector.podAnnotations }}
40+
annotations:
41+
{{- toYaml . | nindent 8 }}
42+
{{- end }}
43+
spec:
44+
serviceAccountName: {{ template "cainjector.serviceAccountName" . }}
45+
{{- if hasKey .Values.cainjector "automountServiceAccountToken" }}
46+
automountServiceAccountToken: {{ .Values.cainjector.automountServiceAccountToken }}
47+
{{- end }}
48+
{{- with .Values.global.priorityClassName }}
49+
priorityClassName: {{ . | quote }}
50+
{{- end }}
51+
{{- with .Values.cainjector.securityContext }}
52+
securityContext:
53+
{{- toYaml . | nindent 8 }}
54+
{{- end }}
55+
containers:
56+
- name: {{ .Chart.Name }}
57+
{{- with .Values.cainjector.image }}
58+
image: "{{- if .registry -}}{{ .registry }}/{{- end -}}{{ .repository }}{{- if (.digest) -}} @{{ .digest }}{{- else -}}:{{ default $.Chart.AppVersion .tag }} {{- end -}}"
59+
{{- end }}
60+
imagePullPolicy: {{ .Values.cainjector.image.pullPolicy }}
61+
args:
62+
{{- if .Values.global.logLevel }}
63+
- --v={{ .Values.global.logLevel }}
64+
{{- end }}
65+
{{- with .Values.global.leaderElection }}
66+
- --leader-election-namespace={{ .namespace }}
67+
{{- if .leaseDuration }}
68+
- --leader-election-lease-duration={{ .leaseDuration }}
69+
{{- end }}
70+
{{- if .renewDeadline }}
71+
- --leader-election-renew-deadline={{ .renewDeadline }}
72+
{{- end }}
73+
{{- if .retryPeriod }}
74+
- --leader-election-retry-period={{ .retryPeriod }}
75+
{{- end }}
76+
{{- end }}
77+
{{- with .Values.cainjector.extraArgs }}
78+
{{- toYaml . | nindent 10 }}
79+
{{- end }}
80+
env:
81+
- name: POD_NAMESPACE
82+
valueFrom:
83+
fieldRef:
84+
fieldPath: metadata.namespace
85+
{{- with .Values.cainjector.containerSecurityContext }}
86+
securityContext:
87+
{{- toYaml . | nindent 12 }}
88+
{{- end }}
89+
{{- with .Values.cainjector.resources }}
90+
resources:
91+
{{- toYaml . | nindent 12 }}
92+
{{- end }}
93+
{{- with .Values.cainjector.nodeSelector }}
94+
nodeSelector:
95+
{{- toYaml . | nindent 8 }}
96+
{{- end }}
97+
{{- with .Values.cainjector.affinity }}
98+
affinity:
99+
{{- toYaml . | nindent 8 }}
100+
{{- end }}
101+
{{- with .Values.cainjector.tolerations }}
102+
tolerations:
103+
{{- toYaml . | nindent 8 }}
104+
{{- end }}
105+
{{- end }}

‎cert-manager/charts/1.9.2/templates/cainjector-psp-clusterrole.yaml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
{{- if .Values.cainjector.enabled }}
2+
{{- if .Values.global.podSecurityPolicy.enabled }}
3+
kind: ClusterRole
4+
apiVersion: rbac.authorization.k8s.io/v1
5+
metadata:
6+
name: {{ template "cainjector.fullname" . }}-psp
7+
labels:
8+
app: {{ include "cainjector.name" . }}
9+
app.kubernetes.io/name: {{ include "cainjector.name" . }}
10+
app.kubernetes.io/instance: {{ .Release.Name }}
11+
app.kubernetes.io/component: "cainjector"
12+
{{- include "labels" . | nindent 4 }}
13+
rules:
14+
- apiGroups: ['policy']
15+
resources: ['podsecuritypolicies']
16+
verbs: ['use']
17+
resourceNames:
18+
- {{ template "cainjector.fullname" . }}
19+
{{- end }}
20+
{{- end }}

‎cert-manager/charts/1.9.2/templates/cainjector-psp-clusterrolebinding.yaml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
{{- if .Values.cainjector.enabled }}
2+
{{- if .Values.global.podSecurityPolicy.enabled }}
3+
apiVersion: rbac.authorization.k8s.io/v1
4+
kind: ClusterRoleBinding
5+
metadata:
6+
name: {{ template "cainjector.fullname" . }}-psp
7+
labels:
8+
app: {{ include "cainjector.name" . }}
9+
app.kubernetes.io/name: {{ include "cainjector.name" . }}
10+
app.kubernetes.io/instance: {{ .Release.Name }}
11+
app.kubernetes.io/component: "cainjector"
12+
{{- include "labels" . | nindent 4 }}
13+
roleRef:
14+
apiGroup: rbac.authorization.k8s.io
15+
kind: ClusterRole
16+
name: {{ template "cainjector.fullname" . }}-psp
17+
subjects:
18+
- kind: ServiceAccount
19+
name: {{ template "cainjector.serviceAccountName" . }}
20+
namespace: {{ include "cert-manager.namespace" . }}
21+
{{- end }}
22+
{{- end }}

0 commit comments

Comments
 (0)