Merge pull request #60 from signadot/release-v0.15.0

Chart changes for v0.15.0

signadot/operator/Chart.yaml

@@ -6,10 +6,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "0.14.1"
+version: "0.15.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.14.1"
+appVersion: "0.15.0"

signadot/operator/templates/agent-deployment.yaml

@@ -48,7 +48,7 @@ spec:
             secretKeyRef:
               key: token
               name: cluster-agent
-        image: {{ with .Values }}{{ with .agent }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/agent:v0.14.1{{- end }}{{- else -}}signadot/agent:v0.14.1{{- end }}{{- else -}}signadot/agent:v0.14.1{{- end }}
+        image: {{ with .Values }}{{ with .agent }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/agent:v0.15.0{{- end }}{{- else -}}signadot/agent:v0.15.0{{- end }}{{- else -}}signadot/agent:v0.15.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .agent }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         livenessProbe:
           httpGet:

signadot/operator/templates/forkedworkloads.signadot.com-customresourcedefinition.yaml

@@ -100,8 +100,8 @@ spec:
                         content as a template. If enabled, variable substitution will
                         be performed, allowing patches to refer to information that
                         will only become available after the operator processes a
-                        sandbox spec, such as the names of SignadotResource plugin
-                        output objects. \n Default: false"
+                        sandbox spec, such as the names of Resource output objects.
+                        \n Default: false"
                       type: boolean
                   type: object
                 type: array
@@ -122,15 +122,15 @@ spec:
               resourceTemplateData:
                 additionalProperties:
                   description: ResourceTemplateData defines the template data related
-                    to a Resource (this applies both to Resources and SignadotResources)
+                    to a Resource
                   properties:
                     name:
                       description: Name is the name of the resource as referred to
                         by the requestor.
                       type: string
                     objectName:
-                      description: ObjectName is the name of the Resource/SignadotResource
-                        object that will be created by the Sandbox controller.
+                      description: ObjectName is the name of the Resource object that
+                        will be created by the Sandbox controller.
                       type: string
                     outputKind:
                       default: Secret

signadot/operator/templates/io-context-server-deployment.yaml

@@ -40,7 +40,7 @@ spec:
         - /app/io-context-server
         - -tls=secretns=signadot
         - -port=8443
-        image: {{ with .Values }}{{ with .ioContextServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-context-server:v0.14.1{{- end }}{{- else -}}signadot/io-context-server:v0.14.1{{- end }}{{- else -}}signadot/io-context-server:v0.14.1{{- end }}
+        image: {{ with .Values }}{{ with .ioContextServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-context-server:v0.15.0{{- end }}{{- else -}}signadot/io-context-server:v0.15.0{{- end }}{{- else -}}signadot/io-context-server:v0.15.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .ioContextServer }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         name: io-context-server
         ports:

signadot/operator/templates/routeserver-deployment.yaml

@@ -36,9 +36,16 @@ spec:
         {{- end }}
     spec:
       containers:
-      - image: {{ with .Values }}{{ with .routeServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-server:v0.14.1{{- end }}{{- else -}}signadot/route-server:v0.14.1{{- end }}{{- else -}}signadot/route-server:v0.14.1{{- end }}
+      - image: {{ with .Values }}{{ with .routeServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-server:v0.15.0{{- end }}{{- else -}}signadot/route-server:v0.15.0{{- end }}{{- else -}}signadot/route-server:v0.15.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .routeServer }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         name: routeserver
         ports:
+        - containerPort: 7777
+          name: grpc
+        - containerPort: 7778
+          name: http-api
         - containerPort: 8080
+          name: http-legacy
+        - containerPort: 9090
+          name: http-metrics
       serviceAccountName: routeserver

signadot/operator/templates/routeserver-metrics-service.yaml

@@ -0,0 +1,28 @@
+# This file is generated. Do not edit.
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    {{- range $key, $val := .Values.commonAnnotations }}
+    {{ $key | quote }}: {{ $val | quote }}
+    {{- end }}
+    {{- range $key, $val := .Values.serviceAnnotations }}
+    {{ $key | quote }}: {{ $val | quote }}
+    {{- end }}
+  labels:
+    app: routeserver
+    {{- range $key, $val := .Values.commonLabels }}
+    {{ $key | quote }}: {{ $val | quote }}
+    {{- end }}
+    {{- range $key, $val := .Values.serviceLabels }}
+    {{ $key | quote }}: {{ $val | quote }}
+    {{- end }}
+  name: routeserver-metrics
+  namespace: signadot
+spec:
+  ports:
+  - name: http-metrics
+    port: 9090
+  selector:
+    app: routeserver
+  type: ClusterIP

signadot/operator/templates/routeserver-service.yaml

@@ -10,6 +10,7 @@ metadata:
     {{ $key | quote }}: {{ $val | quote }}
     {{- end }}
   labels:
+    app: routeserver
     {{- range $key, $val := .Values.commonLabels }}
     {{ $key | quote }}: {{ $val | quote }}
     {{- end }}
@@ -20,6 +21,12 @@ metadata:
   namespace: signadot
 spec:
   ports:
-  - port: 8080
+  - name: grpc
+    port: 7777
+  - name: http-api
+    port: 7778
+  - name: http-legacy
+    port: 8080
   selector:
     app: routeserver
+  type: ClusterIP

signadot/operator/templates/routingconfigs.signadot.com-customresourcedefinition.yaml

@@ -58,6 +58,8 @@ spec:
                       type: string
                     namespace:
                       type: string
+                    sandboxName:
+                      type: string
                   required:
                   - kind
                   - name
@@ -110,6 +112,24 @@ spec:
                   as seen by the controller, along with its routing information
                 items:
                   properties:
+                    baseline:
+                      description: BaselineUID gives the UID of the baseline workload
+                        from which the sandboxed workload is derived
+                      properties:
+                        kind:
+                          type: string
+                        name:
+                          type: string
+                        namespace:
+                          type: string
+                        uid:
+                          type: string
+                      required:
+                      - kind
+                      - name
+                      - namespace
+                      - uid
+                      type: object
                     routes:
                       description: Routes is the list of the configured routes per
                         service mesh (including the signadot sidecar)
@@ -218,12 +238,15 @@ spec:
                           type: string
                         namespace:
                           type: string
+                        sandboxName:
+                          type: string
                       required:
                       - kind
                       - name
                       - namespace
                       type: object
                   required:
+                  - baseline
                   - workload
                   type: object
                 type: array
@@ -271,6 +294,9 @@ spec:
                           - host
                           - port
                           type: object
+                        sandboxName:
+                          description: Sandbox name owner of this route
+                          type: string
                         to:
                           description: To the specified location
                           properties:

signadot/operator/templates/signadot-agent-clusterrole.yaml

@@ -21,10 +21,8 @@ rules:
   - signadotroutes
   - signadotexternalworkloads
   - signadoforkedworkloads
-  - signadotresources
   - resources
   - signadotobjectlifecyclemethods
-  - signadotresourceplugins
   - signadotroutegroups
   - routingconfigs
   - istioroutes

signadot/operator/templates/signadot-controller-manager-deployment.yaml

@@ -60,31 +60,25 @@ spec:
           value: {{ with .Values }}{{ with .ioSidecar }}{{ with .imagePullPolicy }}{{ . }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}
         - name: IO_SIDECAR_IMAGE_PULL_SECRET
           value: {{ with .Values }}{{ with .ioSidecar }}{{ with .imagePullSecret }}{{ . }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}
-        - name: EXECPOD_SIDECAR_IMAGE_PULL_POLICY
-          value: {{ with .Values }}{{ with .execpodSidecar }}{{ with .imagePullPolicy }}{{ . }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}
-        - name: EXECPOD_SIDECAR_IMAGE_PULL_SECRET
-          value: {{ with .Values }}{{ with .execpodSidecar }}{{ with .imagePullSecret }}{{ . }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}
         - name: ISTIO_ENABLED
           value: {{ with .Values }}{{ with .istio }}{{ with .enabled }}{{ toString . | quote}}{{- else -}}"false"{{- end }}{{- else -}}"false"{{- end }}{{- else -}}"false"{{- end }}
         - name: ISTIO_ADDITIONAL_LABELS
           value: {{ with .Values }}{{ with .istio }}{{ with .additionalLabels }}{{ mustToJson . | quote}}{{- else -}}""{{- end }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}
         - name: ISTIO_ADDITIONAL_ANNOTATIONS
           value: {{ with .Values }}{{ with .istio }}{{ with .additionalAnnotations }}{{ mustToJson . | quote}}{{- else -}}""{{- end }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}
         - name: SIDECAR_INIT_IMAGE
-          value: {{ with .Values }}{{ with .routeInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-init:v0.14.1{{- end }}{{- else -}}signadot/route-sidecar-init:v0.14.1{{- end }}{{- else -}}signadot/route-sidecar-init:v0.14.1{{- end }}
+          value: {{ with .Values }}{{ with .routeInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-init:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-init:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-init:v0.15.0{{- end }}
         - name: LEGACY_SIDECAR_INIT_IMAGE
           value: {{ with .Values }}{{ with .routeInit }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}
         - name: ROUTE_SIDECAR_IMAGE
-          value: {{ with .Values }}{{ with .routeSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar:v0.14.1{{- end }}{{- else -}}signadot/route-sidecar:v0.14.1{{- end }}{{- else -}}signadot/route-sidecar:v0.14.1{{- end }}
+          value: {{ with .Values }}{{ with .routeSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar:v0.15.0{{- end }}
         - name: LEGACY_ROUTE_SIDECAR_IMAGE
-          value: {{ with .Values }}{{ with .routeSidecar }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-legacy:v0.14.1{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.14.1{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.14.1{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.14.1{{- end }}
-        - name: EXECPOD_SIDECAR_IMAGE
-          value: {{ with .Values }}{{ with .execpodSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/execpod-sidecar:v0.14.1{{- end }}{{- else -}}signadot/execpod-sidecar:v0.14.1{{- end }}{{- else -}}signadot/execpod-sidecar:v0.14.1{{- end }}
+          value: {{ with .Values }}{{ with .routeSidecar }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-legacy:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.15.0{{- end }}
         - name: IO_INIT_IMAGE
-          value: {{ with .Values }}{{ with .ioInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-init:v0.14.1{{- end }}{{- else -}}signadot/io-init:v0.14.1{{- end }}{{- else -}}signadot/io-init:v0.14.1{{- end }}
+          value: {{ with .Values }}{{ with .ioInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-init:v0.15.0{{- end }}{{- else -}}signadot/io-init:v0.15.0{{- end }}{{- else -}}signadot/io-init:v0.15.0{{- end }}
         - name: IO_SIDECAR_IMAGE
-          value: {{ with .Values }}{{ with .ioSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-sidecar:v0.14.1{{- end }}{{- else -}}signadot/io-sidecar:v0.14.1{{- end }}{{- else -}}signadot/io-sidecar:v0.14.1{{- end }}
-        image: {{ with .Values }}{{ with .operator }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/operator:v0.14.1{{- end }}{{- else -}}signadot/operator:v0.14.1{{- end }}{{- else -}}signadot/operator:v0.14.1{{- end }}
+          value: {{ with .Values }}{{ with .ioSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-sidecar:v0.15.0{{- end }}{{- else -}}signadot/io-sidecar:v0.15.0{{- end }}{{- else -}}signadot/io-sidecar:v0.15.0{{- end }}
+        image: {{ with .Values }}{{ with .operator }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/operator:v0.15.0{{- end }}{{- else -}}signadot/operator:v0.15.0{{- end }}{{- else -}}signadot/operator:v0.15.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .operator }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         livenessProbe:
           httpGet:

signadot/operator/templates/signadot-manager-role-clusterrole.yaml

@@ -190,58 +190,6 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - signadot.com
-  resources:
-  - signadotresourceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - signadot.com
-  resources:
-  - signadotresourceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - signadot.com
-  resources:
-  - signadotresourceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - signadot.com
-  resources:
-  - signadotresources
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - signadot.com
-  resources:
-  - signadotresources/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - signadot.com
-  resources:
-  - signadotresources/status
-  verbs:
-  - get
-  - patch
-  - update
 - apiGroups:
   - signadot.com
   resources: